This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/UCT9k6BaPPeSMXxJ43Eo6nZzYW0.roa File: UCT9k6BaPPeSMXxJ43Eo6nZzYW0.roa (raw, json) Hash identifier: H/J8BuCj54OjW0xk7YjG+ivFyPL962N+uW8FPOndTZI= Subject key identifier: 50:24:FD:93:A0:5A:3C:F7:92:31:7C:49:E3:71:28:EA:76:73:61:6D Certificate issuer: /CN=079d9053717a16a76c10ae838f5625055be0481f Certificate serial: 019B783556E2AB173C2F1D0DAFC38944B8F3 Authority key identifier: 07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/UCT9k6BaPPeSMXxJ43Eo6nZzYW0.roa Signing time: Thu 01 Jan 2026 06:18:39 +0000 ROA not before: Thu 01 Jan 2026 06:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34984 IP address blocks: 178.18.194.0/24 maxlen: 24 185.93.250.0/24 maxlen: 24 185.93.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:56:e2:ab:17:3c:2f:1d:0d:af:c3:89:44:b8:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=079d9053717a16a76c10ae838f5625055be0481f Validity Not Before: Jan 1 06:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5024fd93a05a3cf792317c49e37128ea7673616d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4f:5a:40:2d:fb:7e:1c:98:0d:fc:4e:7b:0b: 1a:61:8e:36:ea:96:44:79:d7:51:8f:51:c4:93:a4: 3c:88:11:a9:c2:8c:06:c1:5e:61:85:56:7e:b2:3f: 32:25:4a:87:18:d5:80:72:0a:6b:01:e6:b1:af:1f: a8:e9:37:59:86:c2:b1:51:2a:b8:f7:1a:01:e5:14: e1:7d:8d:03:22:7e:14:f2:73:7b:8b:43:b9:0a:fd: 9c:27:3b:f3:90:14:88:0c:e4:63:5a:66:8d:06:bc: 47:03:be:ba:23:6a:be:4c:d8:e8:c0:6c:5d:cd:91: 4d:91:ed:ff:4e:84:9e:cb:43:c9:ba:4d:e1:1e:47: 4e:6a:2b:f4:17:91:40:8c:46:e6:22:f6:d4:a5:1d: ab:66:e1:75:e6:8e:26:8d:b7:86:4c:7a:55:0e:58: 7b:d7:d2:ef:d4:51:3c:7a:64:a1:d3:d2:f2:90:15: 7c:23:db:dc:f6:b2:f0:26:d1:b4:b4:ce:13:ec:f7: 31:8c:95:7b:a6:30:68:2f:8c:4d:d9:d2:96:f0:6d: b2:75:00:ca:80:47:35:35:25:68:11:7a:76:89:e4: a6:d5:13:38:be:6b:09:00:e0:98:93:04:be:8a:45: a6:54:bc:88:ac:2a:a4:6c:90:cd:50:91:6f:a1:cf: 6a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:24:FD:93:A0:5A:3C:F7:92:31:7C:49:E3:71:28:EA:76:73:61:6D X509v3 Authority Key Identifier: keyid:07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/UCT9k6BaPPeSMXxJ43Eo6nZzYW0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.18.194.0/24 185.93.250.0/23 Signature Algorithm: sha256WithRSAEncryption 56:f1:f6:60:69:15:46:7c:03:46:28:41:56:09:86:85:a3:95: 31:70:37:16:fd:0b:60:ab:ba:08:89:ca:42:93:9b:cc:5e:2e: 18:99:32:c2:43:07:bc:12:76:b9:87:0d:9b:ce:99:86:c7:bb: 7b:54:ed:ba:b0:c2:8c:b7:b5:c4:40:a0:2b:4a:38:aa:06:34: fd:20:81:b2:88:cc:fb:da:a7:8e:66:72:a0:02:db:52:40:c1: 0b:a6:e1:a7:86:31:db:89:f6:c3:0b:1e:35:ff:bb:3c:2e:5e: c0:29:0a:9f:67:2a:6e:12:9c:10:14:6b:09:3e:a6:d0:54:d4: dd:29:4c:6d:08:8d:f2:d4:32:d0:42:98:a8:c6:56:af:5e:3d: 55:30:d9:f5:f0:df:93:a0:3a:2e:89:64:29:c5:14:a9:ac:06: 0f:54:14:a9:a5:0e:59:7f:2c:34:b3:8e:08:3a:84:be:f4:2f: cc:14:95:4e:7b:ec:10:e4:41:b5:23:dc:d2:d0:c4:34:cb:0d: 20:44:f1:8c:ba:1f:8d:a9:aa:9f:35:2a:68:58:98:18:7c:d4: ca:fb:39:4f:1b:98:40:5a:71:5f:a1:b0:d0:6b:22:13:73:1c: 2d:d3:6e:99:46:05:48:83:ae:d1:66:af:ba:91:a2:cb:be:70: ed:be:ff:67 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NVbiqxc8Lx0Nr8OJRLjzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3OWQ5MDUzNzE3YTE2YTc2YzEwYWU4MzhmNTYyNTA1NWJl MDQ4MWYwHhcNMjYwMTAxMDYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDI0ZmQ5M2EwNWEzY2Y3OTIzMTdjNDllMzcxMjhlYTc2NzM2MTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2E9aQC37fhyYDfxOewsaYY426pZE eddRj1HEk6Q8iBGpwowGwV5hhVZ+sj8yJUqHGNWAcgprAeaxrx+o6TdZhsKxUSq4 9xoB5RThfY0DIn4U8nN7i0O5Cv2cJzvzkBSIDORjWmaNBrxHA766I2q+TNjowGxd zZFNke3/ToSey0PJuk3hHkdOaiv0F5FAjEbmIvbUpR2rZuF15o4mjbeGTHpVDlh7 19Lv1FE8emSh09LykBV8I9vc9rLwJtG0tM4T7PcxjJV7pjBoL4xN2dKW8G2ydQDK gEc1NSVoEXp2ieSm1RM4vmsJAOCYkwS+ikWmVLyIrCqkbJDNUJFvoc9qtwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFAk/ZOgWjz3kjF8SeNxKOp2c2FtMB8GA1UdIwQY MBaAFAedkFNxehanbBCug49WJQVb4EgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjUyUVUzRjZGcWRzRUs2RGoxWWxCVnZnU0I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OGQxNmEtODJlNS00ZjRhLTg3MzAt MjdkMDNlMzkzZmI3LzEvVUNUOWs2QmFQUGVTTVh4SjQzRW82blp6WVcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82OGQxNmEtODJlNS00ZjRhLTg3MzAtMjdkMDNlMzkzZmI3 LzEvQjUyUVUzRjZGcWRzRUs2RGoxWWxCVnZnU0I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAshLCAwQB uV36MA0GCSqGSIb3DQEBCwUAA4IBAQBW8fZgaRVGfANGKEFWCYaFo5UxcDcW/Qtg q7oIicpCk5vMXi4YmTLCQwe8Ena5hw2bzpmGx7t7VO26sMKMt7XEQKArSjiqBjT9 IIGyiMz72qeOZnKgAttSQMELpuGnhjHbifbDCx41/7s8Ll7AKQqfZypuEpwQFGsJ PqbQVNTdKUxtCI3y1DLQQpioxlavXj1VMNn18N+ToDouiWQpxRSprAYPVBSppQ5Z fyw0s44IOoS+9C/MFJVOe+wQ5EG1I9zS0MQ0yw0gRPGMuh+NqaqfNSpoWJgYfNTK +zlPG5hAWnFfobDQayITcxwt026ZRgVIg67RZq+6kaLLvnDtvv9n -----END CERTIFICATE-----Generated at Mon Jan 26 07:57:50 2026 by rpki-client