This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/uG2U8A5c_YazFIY440Pr9nX8jNc.roa File: uG2U8A5c_YazFIY440Pr9nX8jNc.roa (raw, json) Hash identifier: OfRROMf9ocaB/l9WW0MPwoR5osaLIox3gDEvLkHcQls= Subject key identifier: B8:6D:94:F0:0E:5C:FD:86:B3:14:86:38:E3:43:EB:F6:75:FC:8C:D7 Certificate issuer: /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6 Certificate serial: 019B7AC91AE53FB48A3F3BCCEBAFBE2D6649 Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/uG2U8A5c_YazFIY440Pr9nX8jNc.roa Signing time: Thu 01 Jan 2026 18:19:18 +0000 ROA not before: Thu 01 Jan 2026 18:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34946 IP address blocks: 94.126.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:1a:e5:3f:b4:8a:3f:3b:cc:eb:af:be:2d:66:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6 Validity Not Before: Jan 1 18:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b86d94f00e5cfd86b3148638e343ebf675fc8cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d9:ee:0f:5c:f6:4a:8d:0f:6c:bf:5f:e7:1a: 34:37:19:27:84:ff:60:5a:19:09:59:b3:a9:bc:25: 3e:11:b3:7f:cd:1b:c4:53:0a:d3:84:06:56:6b:d8: 74:8c:4f:ef:b4:93:45:d7:4b:01:ca:d0:20:0b:b2: 6e:4b:cb:16:59:3f:3e:c4:9f:be:eb:02:5b:4a:88: a9:27:cf:dc:4a:bd:18:17:b2:6b:3a:60:82:dd:f1: 19:a4:da:64:c4:ca:07:cd:51:cf:d8:5a:eb:5e:67: 8b:24:4b:14:0c:a4:8a:e6:d9:a8:37:83:31:9a:10: a6:4a:26:ba:f6:87:2a:0f:a8:a5:be:7d:dc:07:ef: 53:86:b9:c7:ad:e2:77:81:7e:b7:6a:0a:19:88:6f: 00:0e:08:ad:06:91:9b:f3:30:90:19:42:35:a3:b1: e1:1d:e1:96:0f:30:72:2e:23:16:5d:ce:03:89:23: 31:a5:32:8d:b2:13:8b:5b:0f:ef:94:0d:5a:1b:ae: a6:4a:bc:ef:8c:76:06:e7:30:0a:95:b5:7f:c6:cd: f7:36:db:1b:27:aa:78:eb:77:65:32:7b:5d:0c:12: 89:71:0c:91:10:b9:91:8a:b3:62:53:62:f0:18:31: 34:2d:f6:35:41:91:aa:df:84:f7:c6:e8:e5:a2:9e: d0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:6D:94:F0:0E:5C:FD:86:B3:14:86:38:E3:43:EB:F6:75:FC:8C:D7 X509v3 Authority Key Identifier: keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/uG2U8A5c_YazFIY440Pr9nX8jNc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.126.80.0/21 Signature Algorithm: sha256WithRSAEncryption f6:30:5c:41:53:ed:d0:be:ef:b1:12:46:c1:bb:c8:3c:95:56: 32:c8:17:3c:2e:cc:48:73:9c:9e:ed:16:72:7d:d0:4b:03:59: d4:5d:3f:e9:be:f2:f2:97:68:cf:71:b2:b0:5b:cd:f1:06:1e: b0:b8:19:c5:91:1a:3c:5f:91:7e:46:5f:83:39:7e:9e:16:2e: 5e:76:19:1b:0e:82:67:90:b4:a5:d0:d4:41:b8:15:1a:fd:3a: 41:43:2d:ce:b8:f5:a8:3a:2a:eb:75:b1:2c:c6:df:5a:5d:2d: 54:7b:1a:1f:c0:19:73:27:d9:40:e5:ff:ac:00:d2:e8:aa:dd: cc:6e:38:e9:e4:4d:6c:e1:63:c0:4d:b1:e8:a9:6b:b1:48:c1: dd:70:9c:6a:be:cf:7c:26:92:e9:bc:66:aa:5e:bc:79:54:5e: 15:aa:25:59:c4:dd:32:43:3b:e4:ce:bb:6a:7d:cb:58:1a:db: 84:5c:f5:12:24:29:ed:29:73:09:56:f0:64:d9:b6:a9:d5:92: 30:ff:f3:5b:6e:92:a5:3c:43:57:42:1f:ff:e7:57:2c:c7:2c: 4a:6e:df:01:36:86:0a:2d:6a:de:a3:55:8f:ab:32:b1:e5:89: 52:6d:54:f6:02:89:7b:44:c6:58:be:56:63:40:c8:0b:2a:bd: 5a:9b:1d:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yRrlP7SKPzvM66++LWZJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YWYxOWY0YTYwZGFmMTVlZmI3ZWM0MWZjNTlmNWRhNjU1 OTcyZTYwHhcNMjYwMTAxMTgxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODZkOTRmMDBlNWNmZDg2YjMxNDg2MzhlMzQzZWJmNjc1ZmM4Y2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9nuD1z2So0PbL9f5xo0NxknhP9g WhkJWbOpvCU+EbN/zRvEUwrThAZWa9h0jE/vtJNF10sBytAgC7JuS8sWWT8+xJ++ 6wJbSoipJ8/cSr0YF7JrOmCC3fEZpNpkxMoHzVHP2FrrXmeLJEsUDKSK5tmoN4Mx mhCmSia69ocqD6ilvn3cB+9ThrnHreJ3gX63agoZiG8ADgitBpGb8zCQGUI1o7Hh HeGWDzByLiMWXc4DiSMxpTKNshOLWw/vlA1aG66mSrzvjHYG5zAKlbV/xs33Ntsb J6p463dlMntdDBKJcQyRELmRirNiU2LwGDE0LfY1QZGq34T3xujlop7QZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLhtlPAOXP2GsxSGOOND6/Z1/IzXMB8GA1UdIwQY MBaAFLmvGfSmDa8V77fsQfxZ9dplWXLmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWE4WjlLWU5yeFh2dC14Ql9GbjEybVZaY3VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8xNGY0NmMtMGEzNi00Y2MzLWIwOTEt NzQyNWIxM2Q1Y2Y4LzEvdUcyVThBNWNfWWF6RklZNDQwUHI5blg4ak5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8xNGY0NmMtMGEzNi00Y2MzLWIwOTEtNzQyNWIxM2Q1Y2Y4 LzEvdWE4WjlLWU5yeFh2dC14Ql9GbjEybVZaY3VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXn5QMA0G CSqGSIb3DQEBCwUAA4IBAQD2MFxBU+3Qvu+xEkbBu8g8lVYyyBc8LsxIc5ye7RZy fdBLA1nUXT/pvvLyl2jPcbKwW83xBh6wuBnFkRo8X5F+Rl+DOX6eFi5edhkbDoJn kLSl0NRBuBUa/TpBQy3OuPWoOirrdbEsxt9aXS1UexofwBlzJ9lA5f+sANLoqt3M bjjp5E1s4WPATbHoqWuxSMHdcJxqvs98JpLpvGaqXrx5VF4VqiVZxN0yQzvkzrtq fctYGtuEXPUSJCntKXMJVvBk2bap1ZIw//NbbpKlPENXQh//51csxyxKbt8BNoYK LWreo1WPqzKx5YlSbVT2Aol7RMZYvlZjQMgLKr1amx2n -----END CERTIFICATE-----Generated at Mon Jan 26 00:15:58 2026 by rpki-client