This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/UQO_bq_zMTR7d2_yj4ntgIgycGo.roa File: UQO_bq_zMTR7d2_yj4ntgIgycGo.roa (raw, json) Hash identifier: Iwt/bwulg2bBpcwxY0VprlL/qOT1FNmQum69aNagjds= Subject key identifier: 51:03:BF:6E:AF:F3:31:34:7B:77:6F:F2:8F:89:ED:80:88:32:70:6A Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6B547ECF2BC204997D3EFB49F07A6 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/UQO_bq_zMTR7d2_yj4ntgIgycGo.roa Signing time: Thu 01 Jan 2026 04:17:49 +0000 ROA not before: Thu 01 Jan 2026 04:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397212 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b5:47:ec:f2:bc:20:49:97:d3:ef:b4:9f:07:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5103bf6eaff331347b776ff28f89ed808832706a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3f:4e:b1:1b:75:99:9a:76:da:b9:48:a2:f4: e9:2e:e2:d6:aa:f1:8d:73:ee:d1:c0:eb:d1:2a:c1: 16:c0:5e:12:1f:7b:77:3f:c7:a6:8c:e0:1f:a7:9d: 16:47:9b:ce:19:f2:a0:3d:de:2a:a5:7f:03:e1:e1: 73:b7:34:76:ed:85:94:b1:36:cd:35:04:1d:f0:99: 72:d4:3d:fd:69:b4:66:4c:41:75:a4:d4:b4:1e:67: 50:f7:1a:20:5a:67:f8:9b:bf:65:45:13:b9:24:98: 92:39:69:f4:47:c0:79:dd:45:09:e7:0e:cd:3e:9b: db:87:7a:e6:df:d6:48:3f:95:47:85:3f:68:ba:5a: b8:b9:5a:11:8b:4a:80:05:48:56:ed:61:04:9a:9f: 09:24:b7:5a:21:31:a9:c7:d9:11:20:1d:48:0e:f6: 5c:98:f7:f7:a9:f1:3f:c1:c6:66:52:25:92:e5:f4: 41:49:5d:10:a9:33:fa:ff:5f:0b:b3:f8:69:34:a4: 8f:b8:1c:ec:d3:91:49:06:64:5a:f7:cc:2f:ed:94: fc:13:d6:7a:8b:0c:ba:7c:3a:84:c7:d0:7a:e5:08: cd:a9:fa:44:1a:19:4f:6f:25:fe:cd:16:d5:d6:f8: 67:0e:64:a2:34:fe:9a:94:b4:51:df:ef:ff:d9:8a: 05:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:03:BF:6E:AF:F3:31:34:7B:77:6F:F2:8F:89:ED:80:88:32:70:6A X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/UQO_bq_zMTR7d2_yj4ntgIgycGo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption c5:86:a2:f5:dc:88:3a:3a:1f:2d:1a:0e:a9:89:e1:4d:33:af: fa:c9:11:25:12:8e:7a:47:9f:1e:cc:1b:9a:3d:25:04:9b:b4: c4:46:3a:3e:ce:ba:a5:73:89:06:5f:48:02:ec:44:90:19:e0: f5:eb:1c:87:27:13:b1:8e:20:c3:bc:22:8f:5e:70:f3:0a:e3: 3f:cc:2d:85:0d:6c:69:6a:0d:e3:5f:78:37:72:40:8c:16:47: db:c6:d8:af:4e:dd:94:bd:d1:e7:52:4a:89:27:0d:98:f7:16: 35:e4:c9:94:bd:8c:a7:01:cf:de:cb:2f:ca:b3:56:8f:c6:13: 04:dd:eb:03:6a:73:9c:76:5e:b4:f1:91:6b:c6:f2:01:a5:97: 7c:a7:b4:78:f2:b6:18:c6:49:76:24:5e:66:a7:89:45:84:d6: 7c:4f:60:ca:f2:22:76:81:21:93:27:b9:d3:ce:f5:02:17:c4: 85:e5:2f:91:60:d6:87:5c:7e:cc:f4:c1:37:ca:a8:bd:41:b3: 56:be:01:17:19:db:97:9b:91:f3:68:34:71:8a:cd:15:50:6f: 3c:67:3f:25:ed:92:2d:ae:77:1e:3b:81:d3:4b:c3:86:33:f3: 69:d2:f5:87:d1:b8:4a:c0:0b:68:e9:8b:7b:cd:11:9f:14:44: 76:f9:c7:22 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xrVH7PK8IEmX0++0nwemMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTAzYmY2ZWFmZjMzMTM0N2I3NzZmZjI4Zjg5ZWQ4MDg4MzI3MDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj9OsRt1mZp22rlIovTpLuLWqvGN c+7RwOvRKsEWwF4SH3t3P8emjOAfp50WR5vOGfKgPd4qpX8D4eFztzR27YWUsTbN NQQd8Jly1D39abRmTEF1pNS0HmdQ9xogWmf4m79lRRO5JJiSOWn0R8B53UUJ5w7N Ppvbh3rm39ZIP5VHhT9oulq4uVoRi0qABUhW7WEEmp8JJLdaITGpx9kRIB1IDvZc mPf3qfE/wcZmUiWS5fRBSV0QqTP6/18Ls/hpNKSPuBzs05FJBmRa98wv7ZT8E9Z6 iwy6fDqEx9B65QjNqfpEGhlPbyX+zRbV1vhnDmSiNP6alLRR3+//2YoFxwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFFEDv26v8zE0e3dv8o+J7YCIMnBqMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvVVFPX2JxX3pNVFI3ZDJfeWo0bnRnSWd5Y0dvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAMWGovXciDo6Hy0aDqmJ4U0zr/rJESUS jnpHnx7MG5o9JQSbtMRGOj7OuqVziQZfSALsRJAZ4PXrHIcnE7GOIMO8Io9ecPMK 4z/MLYUNbGlqDeNfeDdyQIwWR9vG2K9O3ZS90edSSoknDZj3FjXkyZS9jKcBz97L L8qzVo/GEwTd6wNqc5x2XrTxkWvG8gGll3yntHjythjGSXYkXmaniUWE1nxPYMry InaBIZMnudPO9QIXxIXlL5Fg1odcfsz0wTfKqL1Bs1a+ARcZ25ebkfNoNHGKzRVQ bzxnPyXtki2udx47gdNLw4Yz82nS9YfRuErAC2jpi3vNEZ8URHb5xyI= -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:38 2026 by rpki-client