This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/u5Z-UKS58TkiLtE3jgGoEP3fjMk.roa File: u5Z-UKS58TkiLtE3jgGoEP3fjMk.roa (raw, json) Hash identifier: dKMTBSri97vDmRtTBlERANRnsrt6qOfB6A2VvhHx3Ew= Subject key identifier: BB:96:7E:50:A4:B9:F1:39:22:2E:D1:37:8E:01:A8:10:FD:DF:8C:C9 Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Certificate serial: 019B7C12C2E0D3A91996F93877C96361DA0D Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/u5Z-UKS58TkiLtE3jgGoEP3fjMk.roa Signing time: Fri 02 Jan 2026 00:19:22 +0000 ROA not before: Fri 02 Jan 2026 00:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205368 IP address blocks: 77.95.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:c2:e0:d3:a9:19:96:f9:38:77:c9:63:61:da:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Validity Not Before: Jan 2 00:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb967e50a4b9f139222ed1378e01a810fddf8cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2a:9f:13:b7:1e:b5:0c:12:9f:60:7c:e8:57: 94:65:35:25:f7:46:27:71:4c:f7:09:68:9a:c0:a5: 3c:1c:7b:1b:a0:21:13:e1:4d:8e:dc:db:9b:d8:e9: f1:26:df:d9:20:b5:73:ca:76:a6:53:cd:f7:9b:a7: 85:47:04:dc:81:1f:38:bc:99:bd:fa:cf:b3:40:86: cd:33:99:f6:cf:57:17:79:74:ea:8a:b5:ca:ac:ce: 0f:c0:e3:a8:18:85:09:97:ae:cd:fa:b5:12:72:8d: 5f:4b:0d:45:83:dc:a4:e0:45:31:4b:35:f3:79:66: a2:86:6a:c7:5e:1f:e2:39:ce:37:95:9a:44:2e:45: 17:f8:31:f5:14:e9:87:7b:29:da:8e:48:f5:59:bd: 0c:9d:67:5e:9c:48:57:4d:ec:36:dc:eb:cd:9e:f5: 57:e3:5d:17:70:7c:74:ff:43:80:96:22:38:25:a5: b4:63:5d:a9:13:cb:dc:48:fa:7c:27:dc:92:ff:e9: c4:5c:05:d7:88:1c:c1:8d:35:21:b4:60:cc:de:89: 48:a7:6f:ae:e1:75:8c:97:72:ca:47:15:51:11:aa: 54:26:b9:95:18:6d:c6:e3:a4:ac:fb:ad:e8:c5:a0: db:ad:a0:d4:64:61:74:3f:56:83:06:1d:0f:79:a2: 45:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:96:7E:50:A4:B9:F1:39:22:2E:D1:37:8E:01:A8:10:FD:DF:8C:C9 X509v3 Authority Key Identifier: keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/u5Z-UKS58TkiLtE3jgGoEP3fjMk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.95.185.0/24 Signature Algorithm: sha256WithRSAEncryption 01:4e:6c:3f:c1:69:46:69:9f:c1:8f:e5:61:f6:4d:61:df:f6: a7:07:36:da:41:54:bb:24:2d:55:90:08:ed:6b:eb:15:43:02: 9c:13:87:a8:97:89:bc:10:12:42:a1:8e:e2:f8:76:0b:b3:0c: d9:8d:e3:12:fa:d1:60:53:4f:32:bb:0b:d8:f4:00:04:83:bc: fa:7d:87:74:51:40:43:97:99:a1:63:e7:68:19:f9:16:5d:4a: b6:f6:c1:90:63:a7:a1:1a:f1:ff:4e:fc:4f:4f:dd:fc:6c:8a: bf:84:22:12:e2:9c:b4:75:28:9f:57:dd:22:a9:51:95:f1:7e: 64:e8:46:1b:6b:dd:a0:f1:5d:fe:ff:7e:1c:20:5d:a2:de:9c: a8:28:73:00:18:ee:2e:11:b9:66:5c:17:29:2f:4c:21:d1:eb: 13:92:bf:e0:61:c5:f2:b4:f2:f1:b7:0f:96:63:cb:30:6c:c1: 08:93:00:c9:ed:08:87:03:89:d8:90:dc:96:f8:42:ff:09:15: 33:bc:2c:b1:80:3e:23:49:c8:a1:ed:7f:b0:40:58:74:4b:f0: db:3c:48:4b:92:04:ab:cc:87:e1:fa:3c:a4:99:55:f1:bf:35: c6:f7:87:bd:40:ad:f6:1f:17:4e:f8:9d:6e:0b:8b:09:21:cb: 74:58:13:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EsLg06kZlvk4d8ljYdoNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh ZTMyOGUwHhcNMjYwMTAyMDAxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjk2N2U1MGE0YjlmMTM5MjIyZWQxMzc4ZTAxYTgxMGZkZGY4Y2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCqfE7cetQwSn2B86FeUZTUl90Yn cUz3CWiawKU8HHsboCET4U2O3Nub2OnxJt/ZILVzynamU833m6eFRwTcgR84vJm9 +s+zQIbNM5n2z1cXeXTqirXKrM4PwOOoGIUJl67N+rUSco1fSw1Fg9yk4EUxSzXz eWaihmrHXh/iOc43lZpELkUX+DH1FOmHeynajkj1Wb0MnWdenEhXTew23OvNnvVX 410XcHx0/0OAliI4JaW0Y12pE8vcSPp8J9yS/+nEXAXXiBzBjTUhtGDM3olIp2+u 4XWMl3LKRxVREapUJrmVGG3G46Ss+63oxaDbraDUZGF0P1aDBh0PeaJF/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLuWflCkufE5Ii7RN44BqBD934zJMB8GA1UdIwQY MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt MzViYTI2N2RlZDNiLzEvdTVaLVVLUzU4VGtpTHRFM2pnR29FUDNmak1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATV+5MA0G CSqGSIb3DQEBCwUAA4IBAQABTmw/wWlGaZ/Bj+Vh9k1h3/anBzbaQVS7JC1VkAjt a+sVQwKcE4eol4m8EBJCoY7i+HYLswzZjeMS+tFgU08yuwvY9AAEg7z6fYd0UUBD l5mhY+doGfkWXUq29sGQY6ehGvH/TvxPT938bIq/hCIS4py0dSifV90iqVGV8X5k 6EYba92g8V3+/34cIF2i3pyoKHMAGO4uEblmXBcpL0wh0esTkr/gYcXytPLxtw+W Y8swbMEIkwDJ7QiHA4nYkNyW+EL/CRUzvCyxgD4jScih7X+wQFh0S/DbPEhLkgSr zIfh+jykmVXxvzXG94e9QK32HxdO+J1uC4sJIct0WBNy -----END CERTIFICATE-----Generated at Sun Jan 25 16:53:48 2026 by rpki-client