This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/UfUKm5VRI_4IDkO1oFXvYLTnZWQ.roa File: UfUKm5VRI_4IDkO1oFXvYLTnZWQ.roa (raw, json) Hash identifier: FWPMWaa8EhT3K9Uzqt/ZpfSh1CKxfYK1Ozqf41dv8H8= Subject key identifier: 51:F5:0A:9B:95:51:23:FE:08:0E:43:B5:A0:55:EF:60:B4:E7:65:64 Certificate issuer: /CN=eebe79d147882422ec275417dfd2affa93a02757 Certificate serial: 019B797DEA2E715554E09772507F5EA987AC Authority key identifier: EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/UfUKm5VRI_4IDkO1oFXvYLTnZWQ.roa Signing time: Thu 01 Jan 2026 12:17:33 +0000 ROA not before: Thu 01 Jan 2026 12:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200154 IP address blocks: 95.86.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:ea:2e:71:55:54:e0:97:72:50:7f:5e:a9:87:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebe79d147882422ec275417dfd2affa93a02757 Validity Not Before: Jan 1 12:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51f50a9b955123fe080e43b5a055ef60b4e76564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5c:45:81:42:68:c7:40:75:5b:01:0a:9a:b1: e8:d4:51:b4:0b:bf:d1:0e:12:e6:1b:e0:75:2f:00: 8f:8a:1b:95:3d:16:20:7a:dd:ae:b6:73:fd:36:59: 24:87:41:a1:fa:07:4c:10:db:ac:9a:9b:d0:c5:a9: 00:9b:57:ba:67:22:f6:94:c7:70:1b:bd:f4:32:58: 94:ac:b6:9d:53:30:1d:ac:ea:6c:f6:95:14:b5:e8: 76:1b:a3:0b:4e:cb:32:90:da:00:d5:a8:8d:3e:39: bd:b3:f5:32:8c:c8:5d:df:a3:30:9e:80:64:f9:5a: 0a:c2:bc:18:d3:5a:4a:99:9a:ba:de:62:b2:b5:a4: 5d:37:cb:0a:8c:7c:98:cc:8d:16:5c:51:fa:2f:95: e8:cd:97:c9:7c:59:85:1a:5e:98:49:04:ff:5a:f8: 78:1c:36:e2:65:5a:b4:de:5c:68:fd:38:98:86:3e: 28:19:3a:fc:2e:ae:5d:f3:c5:17:0d:c2:ce:b3:c4: 5b:45:0b:b0:2b:5b:d0:4a:1b:fb:30:ed:8d:01:2e: d0:94:5f:5d:57:da:78:ea:fb:2b:26:33:46:a2:d7: 5e:3b:c2:31:cb:25:a2:eb:4a:e6:93:41:78:b9:90: 79:e8:8f:59:29:a7:8f:bf:6e:cf:1d:2f:41:c7:83: 7c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F5:0A:9B:95:51:23:FE:08:0E:43:B5:A0:55:EF:60:B4:E7:65:64 X509v3 Authority Key Identifier: keyid:EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/UfUKm5VRI_4IDkO1oFXvYLTnZWQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.86.136.0/24 Signature Algorithm: sha256WithRSAEncryption 04:ae:53:1c:98:aa:8a:79:4b:70:66:16:09:1f:31:72:77:03: 99:20:c3:29:1d:70:cb:2f:8c:32:ae:67:a5:e4:7b:87:ed:0d: 59:94:bc:92:da:8c:77:1d:08:e3:ad:28:4a:2e:79:ba:e3:3e: 9b:6e:25:1e:93:4c:71:12:18:4b:31:50:72:2b:63:83:c8:31: bd:f1:bc:60:c5:06:5d:bc:1a:34:79:b1:2e:2e:b1:4e:6a:6f: 6f:92:75:58:e0:4d:3b:6c:ef:4b:ba:6b:2b:f8:0a:f4:48:61: ab:70:49:5a:1d:ba:48:4b:ce:74:05:d8:73:6f:d1:4d:59:1a: 35:5e:d7:ea:2e:39:84:0e:49:64:c5:cd:4a:85:6d:35:b9:eb: c3:10:92:bf:ab:c6:fc:13:34:43:66:c0:b6:7f:fb:c1:6d:ed: eb:64:1e:bb:e6:5b:b8:28:dc:0a:53:20:88:13:56:c2:43:1e: 83:46:9c:36:39:ac:cb:81:a2:a7:78:67:ce:0e:f4:7e:84:87: a8:65:fc:a2:b3:f4:09:76:5e:32:7e:76:18:c4:14:99:35:90: 6b:30:f4:c3:19:f8:02:74:1e:2e:db:d6:a5:6b:cc:42:ce:06: f6:30:b6:14:08:85:62:70:08:86:58:0c:e9:e3:00:71:08:ce: 27:40:ff:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5feoucVVU4JdyUH9eqYesMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmU3OWQxNDc4ODI0MjJlYzI3NTQxN2RmZDJhZmZhOTNh MDI3NTcwHhcNMjYwMTAxMTIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWY1MGE5Yjk1NTEyM2ZlMDgwZTQzYjVhMDU1ZWY2MGI0ZTc2NTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFxFgUJox0B1WwEKmrHo1FG0C7/R DhLmG+B1LwCPihuVPRYget2utnP9Nlkkh0Gh+gdMENusmpvQxakAm1e6ZyL2lMdw G730MliUrLadUzAdrOps9pUUteh2G6MLTssykNoA1aiNPjm9s/UyjMhd36MwnoBk +VoKwrwY01pKmZq63mKytaRdN8sKjHyYzI0WXFH6L5XozZfJfFmFGl6YSQT/Wvh4 HDbiZVq03lxo/TiYhj4oGTr8Lq5d88UXDcLOs8RbRQuwK1vQShv7MO2NAS7QlF9d V9p46vsrJjNGotdeO8IxyyWi60rmk0F4uZB56I9ZKaePv27PHS9Bx4N8DQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFH1CpuVUSP+CA5DtaBV72C052VkMB8GA1UdIwQY MBaAFO6+edFHiCQi7CdUF9/Sr/qToCdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3I1NTBVZUlKQ0xzSjFRWDM5S3YtcE9nSjFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jNDRiN2YtNWJjZC00ZWU3LTg3MTIt Mzg4MjNjMTQ0OWFmLzEvVWZVS201VlJJXzRJRGtPMW9GWHZZTFRuWldRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9jNDRiN2YtNWJjZC00ZWU3LTg3MTItMzg4MjNjMTQ0OWFm LzEvN3I1NTBVZUlKQ0xzSjFRWDM5S3YtcE9nSjFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX1aIMA0G CSqGSIb3DQEBCwUAA4IBAQAErlMcmKqKeUtwZhYJHzFydwOZIMMpHXDLL4wyrmel 5HuH7Q1ZlLyS2ox3HQjjrShKLnm64z6bbiUek0xxEhhLMVByK2ODyDG98bxgxQZd vBo0ebEuLrFOam9vknVY4E07bO9Lumsr+Ar0SGGrcElaHbpIS850Bdhzb9FNWRo1 XtfqLjmEDklkxc1KhW01uevDEJK/q8b8EzRDZsC2f/vBbe3rZB675lu4KNwKUyCI E1bCQx6DRpw2OazLgaKneGfODvR+hIeoZfyis/QJdl4yfnYYxBSZNZBrMPTDGfgC dB4u29ala8xCzgb2MLYUCIVicAiGWAzp4wBxCM4nQP8u -----END CERTIFICATE-----Generated at Mon Jan 26 09:24:22 2026 by rpki-client