This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/UvLYNIhvwJQmFVsOPpU_BD36ddY.roa File: UvLYNIhvwJQmFVsOPpU_BD36ddY.roa (raw, json) Hash identifier: yXxmCleC93S0pqurn9Uelv8pljT932UA9IhlOEdPEeA= Subject key identifier: 52:F2:D8:34:88:6F:C0:94:26:15:5B:0E:3E:95:3F:04:3D:FA:75:D6 Certificate issuer: /CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f Certificate serial: 019B7F82D6C93575836BDA3FFC546F1A9B8F Authority key identifier: 26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/UvLYNIhvwJQmFVsOPpU_BD36ddY.roa Signing time: Fri 02 Jan 2026 16:20:39 +0000 ROA not before: Fri 02 Jan 2026 16:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39637 IP address blocks: 194.42.122.0/23 maxlen: 24 195.72.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:d6:c9:35:75:83:6b:da:3f:fc:54:6f:1a:9b:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f Validity Not Before: Jan 2 16:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52f2d834886fc09426155b0e3e953f043dfa75d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:40:a9:c4:ae:4b:29:bb:27:ba:21:39:a0:2f: b8:da:2c:94:fe:36:9c:8a:e4:70:8e:0a:dd:9d:65: ee:18:45:c0:12:6f:1d:1e:ee:20:26:76:57:33:63: 18:c2:a1:65:b3:e0:fc:32:25:3c:5c:44:db:cb:88: 1e:74:fb:0b:d4:86:b5:d1:6b:38:72:01:42:4a:1e: 00:40:f7:94:83:6a:8e:28:c8:64:d3:6d:3c:7f:b7: 1f:8a:53:5b:18:c9:df:c7:9e:52:68:49:3b:0b:c1: 32:38:c6:7c:c3:88:e1:af:b8:1b:9c:b6:a3:a4:c6: cf:f4:fa:ef:3c:77:ff:f2:89:95:65:23:1f:55:46: 18:1a:2b:ba:69:75:dc:75:29:1b:ab:84:a5:18:4c: aa:f5:d1:4e:0d:26:5d:cd:62:86:da:6c:2d:3b:f5: d0:6f:e0:7d:31:2f:b9:c6:5c:7f:60:a3:47:61:4b: c5:39:53:9a:ef:15:1b:b0:d3:9d:44:df:38:4f:74: de:01:91:02:73:4b:f6:80:0a:af:c8:c4:6d:17:07: 16:3a:c9:40:d0:27:f3:01:dd:c5:f0:38:56:f7:86: 1f:f9:d2:30:f9:41:bf:db:d7:0b:33:10:0f:f0:81: c9:cc:bc:ef:29:c6:4c:42:c2:1c:9d:76:ed:d8:71: 70:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F2:D8:34:88:6F:C0:94:26:15:5B:0E:3E:95:3F:04:3D:FA:75:D6 X509v3 Authority Key Identifier: keyid:26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/UvLYNIhvwJQmFVsOPpU_BD36ddY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.42.122.0/23 195.72.122.0/23 Signature Algorithm: sha256WithRSAEncryption 22:78:fb:3b:f2:b4:09:59:c4:f5:0b:22:67:d1:e8:b3:06:53: 4b:a4:f0:65:e5:ce:95:cd:81:62:57:c9:68:1b:45:55:42:98: 2e:11:fe:51:46:00:38:37:c2:de:32:23:b7:bb:a6:28:f3:dd: 3c:40:d9:c3:84:ab:aa:a1:1f:b8:55:27:2f:c8:6b:46:eb:99: 1a:28:a6:e7:0c:00:c2:45:85:49:1d:49:45:5a:a1:6b:0e:ad: 6a:95:7c:b5:69:03:95:96:eb:1e:41:68:92:09:fd:9e:34:81: 9a:e0:af:f7:8c:c1:c0:2a:b9:f7:72:b6:e9:d5:24:18:40:0d: ac:b9:be:9a:9b:88:47:cc:e4:c6:e0:8a:4d:63:c3:85:b4:11: 3f:c7:da:11:ad:8b:90:62:b0:7d:c7:e6:60:07:7c:3c:77:9e: 15:91:02:fe:28:64:b0:13:7e:59:3c:3e:a8:b2:13:aa:34:ef: 3a:24:c1:1c:76:6c:12:d2:2b:a1:41:88:27:53:9b:c7:63:45: ea:79:6f:e9:35:b6:0d:1f:64:fb:f5:72:d9:15:d5:31:d2:2b: 07:ca:ff:93:6f:40:ed:ee:36:80:ba:c2:a3:39:0d:b5:0c:25: eb:1f:19:d0:0b:99:66:ce:b1:bf:a9:3e:e3:31:86:1c:78:f7: a1:0b:79:5c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/gtbJNXWDa9o//FRvGpuPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjlkZDJmNGRhODg4YzI3ZDEzMGY5OWU4OGEyZTBjNTkw YWFkMmYwHhcNMjYwMTAyMTYyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmYyZDgzNDg4NmZjMDk0MjYxNTViMGUzZTk1M2YwNDNkZmE3NWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzECpxK5LKbsnuiE5oC+42iyU/jac iuRwjgrdnWXuGEXAEm8dHu4gJnZXM2MYwqFls+D8MiU8XETby4gedPsL1Ia10Ws4 cgFCSh4AQPeUg2qOKMhk0208f7cfilNbGMnfx55SaEk7C8EyOMZ8w4jhr7gbnLaj pMbP9PrvPHf/8omVZSMfVUYYGiu6aXXcdSkbq4SlGEyq9dFODSZdzWKG2mwtO/XQ b+B9MS+5xlx/YKNHYUvFOVOa7xUbsNOdRN84T3TeAZECc0v2gAqvyMRtFwcWOslA 0CfzAd3F8DhW94Yf+dIw+UG/29cLMxAP8IHJzLzvKcZMQsIcnXbt2HFwdQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFLy2DSIb8CUJhVbDj6VPwQ9+nXWMB8GA1UdIwQY MBaAFCZp3S9NqIjCfRMPmeiKLgxZCq0vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1uZEwwMm9pTUo5RXctWjZJb3VERmtLclM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jYWI1ODgtMzJmZC00YTZkLWEwZTIt ZjRkMzBhNzk0M2Y2LzEvVXZMWU5JaHZ3SlFtRlZzT1BwVV9CRDM2ZGRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9jYWI1ODgtMzJmZC00YTZkLWEwZTItZjRkMzBhNzk0M2Y2 LzEvSm1uZEwwMm9pTUo5RXctWjZJb3VERmtLclM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwip6AwQB w0h6MA0GCSqGSIb3DQEBCwUAA4IBAQAiePs78rQJWcT1CyJn0eizBlNLpPBl5c6V zYFiV8loG0VVQpguEf5RRgA4N8LeMiO3u6Yo8908QNnDhKuqoR+4VScvyGtG65ka KKbnDADCRYVJHUlFWqFrDq1qlXy1aQOVluseQWiSCf2eNIGa4K/3jMHAKrn3crbp 1SQYQA2sub6am4hHzOTG4IpNY8OFtBE/x9oRrYuQYrB9x+ZgB3w8d54VkQL+KGSw E35ZPD6oshOqNO86JMEcdmwS0iuhQYgnU5vHY0XqeW/pNbYNH2T79XLZFdUx0isH yv+Tb0Dt7jaAusKjOQ21DCXrHxnQC5lmzrG/qT7jMYYcePehC3lc -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:48 2026 by rpki-client