This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/UIXymbU01AcELRK4XQgaDZSENDk.roa File: UIXymbU01AcELRK4XQgaDZSENDk.roa (raw, json) Hash identifier: XHkCVd4jVL4ur9JpM+WZI6Fqyp3dAyt/v/b4jYj6KaE= Subject key identifier: 50:85:F2:99:B5:34:D4:07:04:2D:12:B8:5D:08:1A:0D:94:84:34:39 Certificate issuer: /CN=b9b0d33432eca77c054e8fa8707248da4e47db0b Certificate serial: 019B7AC7C37A2597CB1BF621E45D55124D5B Authority key identifier: B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/UIXymbU01AcELRK4XQgaDZSENDk.roa Signing time: Thu 01 Jan 2026 18:17:50 +0000 ROA not before: Thu 01 Jan 2026 18:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15517 IP address blocks: 62.65.128.0/19 maxlen: 19 62.65.137.0/24 maxlen: 24 94.78.0.0/18 maxlen: 18 2a01:330::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:c3:7a:25:97:cb:1b:f6:21:e4:5d:55:12:4d:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b0d33432eca77c054e8fa8707248da4e47db0b Validity Not Before: Jan 1 18:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5085f299b534d407042d12b85d081a0d94843439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fc:df:d5:2f:09:cc:7e:00:c1:39:62:df:69: 71:72:de:6b:92:83:fe:67:7a:ba:cb:c4:1b:a6:8f: 92:26:61:93:fe:5f:01:2e:bb:0a:9f:4e:fd:ea:b2: 75:0a:81:2c:58:00:bd:36:8d:f5:fa:62:76:92:87: cb:60:6b:b5:24:02:d8:d4:f7:c3:ae:a7:d8:6b:9f: d2:26:ec:69:25:89:65:0f:78:56:a2:7c:7b:d4:d6: 1d:e8:88:86:b5:c6:03:ce:9c:a6:c6:59:da:3d:40: c5:7e:6a:43:3b:04:dd:0f:83:bd:45:0f:32:0f:c5: f6:eb:4d:99:d8:2a:14:83:a2:d5:ee:ec:d0:11:0d: 9d:d1:c2:03:c1:2c:0f:ea:0d:b7:f9:bb:12:b6:26: 2d:e0:6d:25:4e:ab:ca:2e:0d:3a:b2:0b:62:a1:e2: a1:49:44:df:45:ec:92:a2:1b:14:b4:5f:b2:f6:fc: 6b:e6:46:59:d4:88:c8:11:dc:5b:4e:1c:d4:a8:92: 0f:c0:5a:c2:b7:f8:48:3b:d1:b8:4a:9c:d6:93:a8: 98:5c:15:7b:e9:37:ec:36:30:b7:c6:06:37:b8:7d: 5a:86:c2:01:fd:de:98:51:33:dd:53:b6:ad:97:33: d0:af:97:c0:42:6c:01:7a:9c:6b:f3:11:93:1b:b2: 58:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:85:F2:99:B5:34:D4:07:04:2D:12:B8:5D:08:1A:0D:94:84:34:39 X509v3 Authority Key Identifier: keyid:B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/UIXymbU01AcELRK4XQgaDZSENDk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.65.128.0/19 94.78.0.0/18 IPv6: 2a01:330::/32 Signature Algorithm: sha256WithRSAEncryption 9f:ca:0f:78:46:80:aa:74:01:da:33:07:32:50:6c:85:fb:98: 6d:4d:ae:70:75:01:53:d8:88:2b:ba:ec:33:70:67:81:5c:64: cd:76:8d:ef:1d:20:5d:81:21:6a:6c:af:ce:23:19:a8:47:9d: 87:79:0c:20:f4:fb:64:1b:45:35:cf:95:68:c4:03:22:5f:44: 40:d5:9c:a1:7b:be:b9:12:4a:69:24:c6:77:87:37:80:76:2c: 6f:03:c9:38:d9:d5:54:c1:bf:19:18:53:02:72:3b:bb:7f:2d: 5d:ef:bb:e9:d7:68:c6:aa:40:3c:47:6c:ca:87:e0:9d:80:c0: 80:18:61:4e:55:23:7e:51:ca:5b:19:8c:bb:22:cc:3b:7e:e6: 23:ca:00:fd:ea:f4:47:14:b8:47:fc:39:6f:c3:cb:c6:4c:63: ee:d4:7e:27:61:1b:ab:83:f9:ea:21:c3:ef:59:84:65:a9:e4: 69:53:2c:5c:27:f6:36:88:e0:b4:e9:04:a2:d1:93:44:ca:4e: 14:b0:b9:d6:2b:87:f2:2c:32:a7:85:88:7c:8d:2b:fb:85:f8: 77:77:f6:04:b8:67:eb:88:3e:d5:e7:a6:3d:f8:8f:5e:af:b8: 4f:59:47:69:bc:9e:3f:d7:f4:8a:7d:91:cc:9e:d6:5a:81:9d: 44:6d:b3:23 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6x8N6JZfLG/Yh5F1VEk1bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YjBkMzM0MzJlY2E3N2MwNTRlOGZhODcwNzI0OGRhNGU0 N2RiMGIwHhcNMjYwMTAxMTgxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDg1ZjI5OWI1MzRkNDA3MDQyZDEyYjg1ZDA4MWEwZDk0ODQzNDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfzf1S8JzH4AwTli32lxct5rkoP+ Z3q6y8Qbpo+SJmGT/l8BLrsKn0796rJ1CoEsWAC9No31+mJ2kofLYGu1JALY1PfD rqfYa5/SJuxpJYllD3hWonx71NYd6IiGtcYDzpymxlnaPUDFfmpDOwTdD4O9RQ8y D8X2602Z2CoUg6LV7uzQEQ2d0cIDwSwP6g23+bsStiYt4G0lTqvKLg06sgtioeKh SUTfReySohsUtF+y9vxr5kZZ1IjIEdxbThzUqJIPwFrCt/hIO9G4SpzWk6iYXBV7 6TfsNjC3xgY3uH1ahsIB/d6YUTPdU7atlzPQr5fAQmwBepxr8xGTG7JYNwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFCF8pm1NNQHBC0SuF0IGg2UhDQ5MB8GA1UdIwQY MBaAFLmw0zQy7Kd8BU6PqHBySNpOR9sLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWJEVE5ETHNwM3dGVG8tb2NISkkyazVIMndzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iNDMxY2EtNTI3NS00MmI1LThkNTQt ZDE5NmY5MjkxNzMyLzEvVUlYeW1iVTAxQWNFTFJLNFhRZ2FEWlNFTkRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9iNDMxY2EtNTI3NS00MmI1LThkNTQtZDE5NmY5MjkxNzMy LzEvdWJEVE5ETHNwM3dGVG8tb2NISkkyazVIMndzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFPkGAAwQG Xk4AMA0EAgACMAcDBQAqAQMwMA0GCSqGSIb3DQEBCwUAA4IBAQCfyg94RoCqdAHa MwcyUGyF+5htTa5wdQFT2IgruuwzcGeBXGTNdo3vHSBdgSFqbK/OIxmoR52HeQwg 9PtkG0U1z5VoxAMiX0RA1Zyhe765EkppJMZ3hzeAdixvA8k42dVUwb8ZGFMCcju7 fy1d77vp12jGqkA8R2zKh+CdgMCAGGFOVSN+UcpbGYy7Isw7fuYjygD96vRHFLhH /Dlvw8vGTGPu1H4nYRurg/nqIcPvWYRlqeRpUyxcJ/Y2iOC06QSi0ZNEyk4UsLnW K4fyLDKnhYh8jSv7hfh3d/YEuGfriD7V56Y9+I9er7hPWUdpvJ4/1/SKfZHMntZa gZ1EbbMj -----END CERTIFICATE-----Generated at Sun Jan 25 16:11:26 2026 by rpki-client