This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/UKyAXaXI_RgZmsQiZ2Wkng394Hs.roa File: UKyAXaXI_RgZmsQiZ2Wkng394Hs.roa (raw, json) Hash identifier: cJqApiAQC0vkIOP1XsZGHhIZOCWBHw73NHuSL/144Ig= Subject key identifier: 50:AC:80:5D:A5:C8:FD:18:19:9A:C4:22:67:65:A4:9E:0D:FD:E0:7B Certificate issuer: /CN=72048641d8f7337fcea23ae5332bf6e11a11e22a Certificate serial: 019B797DD9B41185570A983EA32817FFC76C Authority key identifier: 72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/UKyAXaXI_RgZmsQiZ2Wkng394Hs.roa Signing time: Thu 01 Jan 2026 12:17:29 +0000 ROA not before: Thu 01 Jan 2026 12:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33915 IP address blocks: 193.104.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.mft rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:d9:b4:11:85:57:0a:98:3e:a3:28:17:ff:c7:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72048641d8f7337fcea23ae5332bf6e11a11e22a Validity Not Before: Jan 1 12:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50ac805da5c8fd18199ac4226765a49e0dfde07b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e1:ec:44:3b:c3:02:fa:99:81:fb:85:8a:b3: ca:5e:e1:c8:1b:05:c0:44:ac:f3:32:a3:84:ca:07: 13:b3:c0:ea:d2:0a:23:8d:a0:d9:f2:04:11:88:38: d2:61:a2:53:b1:fa:f1:18:4c:2c:3b:e8:7d:f2:82: 02:d0:8e:16:b3:36:48:27:87:26:7b:35:84:05:15: 0d:93:d1:27:6a:cf:60:d6:46:a2:23:e2:09:2f:b3: c8:44:92:cc:1c:2b:53:9e:c8:02:14:a1:e9:0e:61: 03:19:88:a3:4d:88:73:df:91:4d:23:93:f7:8a:ac: 36:3f:27:3f:b1:db:d8:a9:d4:cc:20:cb:95:84:ad: 2c:cd:28:d0:9d:86:62:5d:61:0b:ab:e5:4b:4e:f1: 66:8b:17:b0:54:96:b5:4b:b9:34:83:2f:8b:cc:5b: 16:20:3d:3c:b9:08:09:eb:79:47:61:13:f5:2a:4b: 2c:a2:ad:06:6b:4d:b2:e0:7a:6c:15:3d:df:8b:57: 2d:44:f4:13:ea:50:74:0b:ae:b1:29:c6:52:3b:f5: 52:ea:7a:0b:87:71:5a:cb:9f:16:40:c3:fd:96:0b: e4:0f:fc:17:47:f0:b1:b9:ca:26:fd:fb:b5:81:ed: 39:2a:f0:00:93:5c:6b:ab:92:a7:39:da:41:49:28: 1a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:AC:80:5D:A5:C8:FD:18:19:9A:C4:22:67:65:A4:9E:0D:FD:E0:7B X509v3 Authority Key Identifier: keyid:72:04:86:41:D8:F7:33:7F:CE:A2:3A:E5:33:2B:F6:E1:1A:11:E2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgSGQdj3M3_OojrlMyv24RoR4io.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/UKyAXaXI_RgZmsQiZ2Wkng394Hs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/df3706-f347-4025-a7b3-1c8cd56c6174/1/cgSGQdj3M3_OojrlMyv24RoR4io.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.129.0/24 Signature Algorithm: sha256WithRSAEncryption a3:8d:8d:ff:2e:d9:1b:14:8a:a5:1a:e3:92:f6:95:9c:bf:cc: 94:19:62:21:9b:95:0f:ee:49:5c:2f:93:d8:a6:82:2e:08:59: 8d:79:38:be:0b:11:d7:8d:fc:7c:50:7d:af:3a:29:e1:b9:20: e0:3b:e9:9e:97:a5:a6:75:20:7a:fc:84:99:9e:43:c6:f1:8e: 05:cc:32:47:af:1b:69:45:b6:af:77:08:c4:b9:12:a6:d6:d6: c1:5e:80:49:02:5b:cd:12:90:93:b4:c8:27:d1:10:aa:6b:cc: cd:b3:3c:fc:52:c5:8a:f4:3c:83:2b:56:b9:cb:b8:36:b9:f8: bb:51:20:31:da:a5:e6:b3:35:d8:c3:8f:cd:ee:57:7c:c8:85: 0f:06:af:5b:a3:9b:e5:c3:80:44:b6:c1:37:57:c0:df:7d:fd: e9:76:73:f9:63:89:a6:9e:32:6e:0a:f2:db:53:5a:59:30:e0: ac:bf:36:71:c1:1a:c9:dc:ce:70:bd:60:82:99:8f:17:00:ee: 6d:83:47:38:5e:1b:90:93:62:c1:94:9c:93:5c:1a:7a:98:e8: 75:81:79:f0:c0:80:55:87:b7:74:d4:f7:16:7f:36:86:0e:d8: 19:a5:22:4a:0d:8f:4e:37:e6:53:e1:5c:ea:ea:e5:23:cc:85: ac:25:f8:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fdm0EYVXCpg+oygX/8dsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMDQ4NjQxZDhmNzMzN2ZjZWEyM2FlNTMzMmJmNmUxMWEx MWUyMmEwHhcNMjYwMTAxMTIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGFjODA1ZGE1YzhmZDE4MTk5YWM0MjI2NzY1YTQ5ZTBkZmRlMDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+HsRDvDAvqZgfuFirPKXuHIGwXA RKzzMqOEygcTs8Dq0gojjaDZ8gQRiDjSYaJTsfrxGEwsO+h98oIC0I4WszZIJ4cm ezWEBRUNk9Enas9g1kaiI+IJL7PIRJLMHCtTnsgCFKHpDmEDGYijTYhz35FNI5P3 iqw2Pyc/sdvYqdTMIMuVhK0szSjQnYZiXWELq+VLTvFmixewVJa1S7k0gy+LzFsW ID08uQgJ63lHYRP1Kkssoq0Ga02y4HpsFT3fi1ctRPQT6lB0C66xKcZSO/VS6noL h3Fay58WQMP9lgvkD/wXR/Cxucom/fu1ge05KvAAk1xrq5KnOdpBSSgaGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFCsgF2lyP0YGZrEImdlpJ4N/eB7MB8GA1UdIwQY MBaAFHIEhkHY9zN/zqI65TMr9uEaEeIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2dTR1FkajNNM19Pb2pybE15djI0Um9SNGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9kZjM3MDYtZjM0Ny00MDI1LWE3YjMt MWM4Y2Q1NmM2MTc0LzEvVUt5QVhhWElfUmdabXNRaVoyV2tuZzM5NEhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9kZjM3MDYtZjM0Ny00MDI1LWE3YjMtMWM4Y2Q1NmM2MTc0 LzEvY2dTR1FkajNNM19Pb2pybE15djI0Um9SNGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWiBMA0G CSqGSIb3DQEBCwUAA4IBAQCjjY3/LtkbFIqlGuOS9pWcv8yUGWIhm5UP7klcL5PY poIuCFmNeTi+CxHXjfx8UH2vOinhuSDgO+mel6WmdSB6/ISZnkPG8Y4FzDJHrxtp RbavdwjEuRKm1tbBXoBJAlvNEpCTtMgn0RCqa8zNszz8UsWK9DyDK1a5y7g2ufi7 USAx2qXmszXYw4/N7ld8yIUPBq9bo5vlw4BEtsE3V8Dfff3pdnP5Y4mmnjJuCvLb U1pZMOCsvzZxwRrJ3M5wvWCCmY8XAO5tg0c4XhuQk2LBlJyTXBp6mOh1gXnwwIBV h7d01PcWfzaGDtgZpSJKDY9ON+ZT4Vzq6uUjzIWsJfgL -----END CERTIFICATE-----Generated at Sun Jan 25 23:42:58 2026 by rpki-client