This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/UNicrp7c5qmqfUMaaE2imeZSfJ4.roa File: UNicrp7c5qmqfUMaaE2imeZSfJ4.roa (raw, json) Hash identifier: HvQvHtfV7Kicbdq+rxiWhbGQFfs4xQ7iH7hCA9P9w+o= Subject key identifier: 50:D8:9C:AE:9E:DC:E6:A9:AA:7D:43:1A:68:4D:A2:99:E6:52:7C:9E Certificate issuer: /CN=8ef66691ad3a41652f5bd8596230b3ac743d2a2c Certificate serial: 019B775971C7092907CE53220673165F1BD1 Authority key identifier: 8E:F6:66:91:AD:3A:41:65:2F:5B:D8:59:62:30:B3:AC:74:3D:2A:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/UNicrp7c5qmqfUMaaE2imeZSfJ4.roa Signing time: Thu 01 Jan 2026 02:18:29 +0000 ROA not before: Thu 01 Jan 2026 02:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49162 IP address blocks: 31.128.96.0/24 maxlen: 24 31.128.97.0/24 maxlen: 24 31.128.98.0/24 maxlen: 24 31.128.99.0/24 maxlen: 24 31.128.100.0/24 maxlen: 24 31.128.101.0/24 maxlen: 24 31.128.102.0/24 maxlen: 24 31.128.103.0/24 maxlen: 24 31.128.104.0/24 maxlen: 24 31.128.105.0/24 maxlen: 24 31.128.106.0/24 maxlen: 24 31.128.107.0/24 maxlen: 24 31.128.108.0/24 maxlen: 24 31.128.109.0/24 maxlen: 24 31.128.110.0/24 maxlen: 24 31.128.111.0/24 maxlen: 24 91.210.32.0/24 maxlen: 24 91.210.33.0/24 maxlen: 24 91.210.34.0/24 maxlen: 24 91.210.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:71:c7:09:29:07:ce:53:22:06:73:16:5f:1b:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ef66691ad3a41652f5bd8596230b3ac743d2a2c Validity Not Before: Jan 1 02:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50d89cae9edce6a9aa7d431a684da299e6527c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b6:8b:c1:e6:02:14:20:92:f4:b8:2b:bf:b9: a0:11:b0:6e:c0:b8:98:d0:92:34:a3:6c:c8:e4:d6: 32:bb:55:11:0f:70:df:ea:79:6f:c1:d6:43:3f:37: ff:f7:5e:d5:e5:21:d4:17:ee:1a:ce:c5:bf:4f:7d: 0c:53:29:39:f8:f8:09:49:f5:9f:6c:7a:f1:29:df: 11:06:d5:fe:9f:79:9f:fc:3d:5a:3f:ce:ac:63:6e: 7b:15:15:da:c9:32:c4:3c:ad:fb:2e:14:52:8b:fd: 79:a3:13:83:c5:11:05:90:df:c8:98:e6:70:c1:f8: 87:3c:35:4c:2e:ec:d7:81:7b:3f:13:ae:53:e1:1e: 02:e3:f2:fc:01:28:97:19:5f:50:b9:e0:9e:c0:9f: 2c:2a:76:f0:6c:79:6e:1b:3d:3e:f9:40:c7:07:12: fa:a8:cb:f7:c2:67:22:d8:76:91:0f:79:cf:38:d9: 95:a1:38:41:2f:8f:82:fd:7e:21:82:b5:8c:2d:64: 93:fe:36:70:1e:fb:11:28:96:d9:7b:d6:45:ec:85: e8:cb:4a:34:49:d2:15:a3:1b:db:95:ae:3a:b8:46: 5a:6f:31:3a:49:e3:1d:87:10:14:f2:83:29:d7:89: 4d:61:63:cf:ed:4f:74:df:11:3e:27:56:3c:f3:f2: df:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D8:9C:AE:9E:DC:E6:A9:AA:7D:43:1A:68:4D:A2:99:E6:52:7C:9E X509v3 Authority Key Identifier: keyid:8E:F6:66:91:AD:3A:41:65:2F:5B:D8:59:62:30:B3:AC:74:3D:2A:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/UNicrp7c5qmqfUMaaE2imeZSfJ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.128.96.0/20 91.210.32.0/22 Signature Algorithm: sha256WithRSAEncryption 76:c7:e2:2d:f8:3a:60:14:a7:be:ed:ab:1e:0e:15:79:5a:e3: 15:ed:ed:33:49:3e:82:49:22:ee:95:5b:7b:4b:a2:4c:66:55: b5:95:95:c9:af:62:dd:0f:20:5e:68:3f:96:e7:92:fe:09:52: 79:e3:d1:0b:d6:7f:ff:7e:e7:78:90:58:20:c5:c0:45:bb:ea: 86:37:d7:bc:66:4b:fc:8d:bf:5f:f5:3a:03:54:d4:c4:9d:bd: 97:30:ad:c1:ae:13:38:55:22:88:9f:d8:21:80:d6:89:9a:5d: ca:1f:ad:cf:22:5f:6b:9e:38:fb:f3:b4:f7:8b:be:0b:66:2d: a0:33:98:27:c8:0a:af:99:59:82:0c:07:36:49:a4:f8:8a:79: 50:f1:44:2a:1f:18:29:b1:4d:1b:fc:2a:ae:83:1a:e9:76:39: 87:7d:cd:34:49:90:d3:40:f9:86:ed:f8:77:54:8a:e0:3a:8f: ff:40:e1:5b:c4:91:dc:95:6a:10:44:70:4c:68:c5:ec:1f:8a: 85:7e:53:8b:2d:80:7c:9e:b8:e7:58:3d:05:32:2d:91:c4:73: 4f:35:ba:f6:ac:8b:84:9b:9f:23:d3:63:e3:b3:34:69:00:8d: 21:7b:41:15:07:f3:87:0c:ca:08:56:fe:f1:50:4d:1c:f7:98: 73:b3:f6:9b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WXHHCSkHzlMiBnMWXxvRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlZjY2NjkxYWQzYTQxNjUyZjViZDg1OTYyMzBiM2FjNzQz ZDJhMmMwHhcNMjYwMTAxMDIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGQ4OWNhZTllZGNlNmE5YWE3ZDQzMWE2ODRkYTI5OWU2NTI3YzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7aLweYCFCCS9Lgrv7mgEbBuwLiY 0JI0o2zI5NYyu1URD3Df6nlvwdZDPzf/917V5SHUF+4azsW/T30MUyk5+PgJSfWf bHrxKd8RBtX+n3mf/D1aP86sY257FRXayTLEPK37LhRSi/15oxODxREFkN/ImOZw wfiHPDVMLuzXgXs/E65T4R4C4/L8ASiXGV9QueCewJ8sKnbwbHluGz0++UDHBxL6 qMv3wmci2HaRD3nPONmVoThBL4+C/X4hgrWMLWST/jZwHvsRKJbZe9ZF7IXoy0o0 SdIVoxvbla46uEZabzE6SeMdhxAU8oMp14lNYWPP7U903xE+J1Y88/LfUwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFDYnK6e3Oapqn1DGmhNopnmUnyeMB8GA1UdIwQY MBaAFI72ZpGtOkFlL1vYWWIws6x0PSosMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanZabWthMDZRV1V2VzloWllqQ3pySFE5S2l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mYzg3ZmEtY2JmYS00ZjNjLTg4ZDMt YmE5MjJiYjFlYmI0LzEvVU5pY3JwN2M1cW1xZlVNYWFFMmltZVpTZko0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9mYzg3ZmEtY2JmYS00ZjNjLTg4ZDMtYmE5MjJiYjFlYmI0 LzEvanZabWthMDZRV1V2VzloWllqQ3pySFE5S2l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEH4BgAwQC W9IgMA0GCSqGSIb3DQEBCwUAA4IBAQB2x+It+DpgFKe+7aseDhV5WuMV7e0zST6C SSLulVt7S6JMZlW1lZXJr2LdDyBeaD+W55L+CVJ549EL1n//fud4kFggxcBFu+qG N9e8Zkv8jb9f9ToDVNTEnb2XMK3BrhM4VSKIn9ghgNaJml3KH63PIl9rnjj787T3 i74LZi2gM5gnyAqvmVmCDAc2SaT4inlQ8UQqHxgpsU0b/CqugxrpdjmHfc00SZDT QPmG7fh3VIrgOo//QOFbxJHclWoQRHBMaMXsH4qFflOLLYB8nrjnWD0FMi2RxHNP Nbr2rIuEm58j02PjszRpAI0he0EVB/OHDMoIVv7xUE0c95hzs/ab -----END CERTIFICATE-----Generated at Mon Jan 26 03:57:04 2026 by rpki-client