This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/UYxFngClnykqTHTfuXuiS4afmY0.roa File: UYxFngClnykqTHTfuXuiS4afmY0.roa (raw, json) Hash identifier: qhH8eU5uzACUHVTAmy6bDaqx30+kPSiCPRvL6eNWthc= Subject key identifier: 51:8C:45:9E:00:A5:9F:29:2A:4C:74:DF:B9:7B:A2:4B:86:9F:99:8D Certificate issuer: /CN=2f1ac9f094d8318f3088dca68301865f4605e9da Certificate serial: 019B7EA6BC066B61939232BA3E98D4E1AE84 Authority key identifier: 2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/UYxFngClnykqTHTfuXuiS4afmY0.roa Signing time: Fri 02 Jan 2026 12:20:14 +0000 ROA not before: Fri 02 Jan 2026 12:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 88.151.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:bc:06:6b:61:93:92:32:ba:3e:98:d4:e1:ae:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f1ac9f094d8318f3088dca68301865f4605e9da Validity Not Before: Jan 2 12:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=518c459e00a59f292a4c74dfb97ba24b869f998d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6a:66:83:46:a2:f6:bc:d2:ad:88:6c:50:b7: 7e:6d:3c:8c:eb:9c:d4:94:7c:09:eb:82:48:19:4b: 69:22:ab:70:22:f0:16:33:dd:fc:bf:2c:e0:7e:36: e9:34:59:fc:fc:cf:a3:1e:e1:29:bd:71:98:3f:ec: 3c:70:6a:8b:b7:34:d9:e9:c5:68:1c:27:c6:19:81: ae:42:0c:f9:f0:4f:77:59:b1:bb:05:58:18:e1:f1: e2:76:1e:08:05:99:3f:0c:7e:e1:5b:8f:6e:07:a7: 8c:d6:d3:41:8c:02:03:e8:ca:31:36:70:c8:91:88: 8b:2d:46:b4:a5:21:9d:b2:56:9f:d6:a6:82:41:44: 7b:eb:39:a6:e9:56:8d:2a:ba:18:b4:81:d1:e3:d5: 19:09:28:61:ca:a6:29:d2:c5:8b:59:82:6c:3c:b4: 78:55:17:46:01:d9:1b:8c:e5:8e:69:2c:5a:03:34: fb:2c:1d:00:fc:60:ca:82:69:78:80:c1:1a:99:c5: 8d:92:4e:1d:7c:0e:89:76:e2:22:62:2c:e6:e5:42: 92:da:f7:13:eb:e3:dc:dc:cc:75:5c:37:d9:76:37: b6:a3:4a:93:21:55:2c:0a:f4:f3:57:ca:18:85:97: dd:da:d4:34:ce:c6:30:90:bf:98:f2:b0:23:23:f5: cb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:8C:45:9E:00:A5:9F:29:2A:4C:74:DF:B9:7B:A2:4B:86:9F:99:8D X509v3 Authority Key Identifier: keyid:2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/UYxFngClnykqTHTfuXuiS4afmY0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.151.14.0/24 Signature Algorithm: sha256WithRSAEncryption 56:36:14:05:f1:52:95:14:a2:ab:17:2b:c3:33:e7:eb:d9:78: 63:c8:ad:7e:54:d1:ff:9e:8f:91:e3:2a:59:c8:c0:03:d9:4b: fe:3b:4b:7d:e7:0a:0a:d5:b4:4a:c3:ae:40:c8:c2:42:d0:4a: 82:c4:ea:9f:7e:7b:33:fc:95:75:33:27:fa:58:07:4e:91:ad: 99:20:a0:cf:c3:65:c2:79:58:97:69:3a:db:26:19:43:8e:ad: d5:9b:66:3f:b1:eb:9f:17:b0:de:25:6f:eb:3d:2e:53:2a:2b: b6:bd:8a:a8:df:d1:09:5b:0a:a5:78:8c:77:ae:e8:21:da:aa: f7:dd:e9:d9:e4:26:72:d0:ea:e1:ad:e4:d3:09:1b:7e:ee:6a: 2d:a9:2d:f5:dc:95:64:ca:08:f6:86:7b:46:82:36:be:e9:b8: 79:ec:d4:8d:f3:26:e2:56:ca:8d:c7:76:3e:cd:af:5b:aa:7d: ca:22:0f:33:b3:d2:29:fb:15:18:eb:5a:35:9c:6f:1e:78:db: 51:b5:b3:05:13:30:f1:d3:da:80:f5:a6:67:98:a1:6d:4b:a3: 51:bc:5c:7f:b6:08:a2:b2:ed:1e:53:a2:51:9a:b9:7e:c7:f7: 4c:24:8f:4d:0c:db:f3:ff:e1:88:33:bc:e6:c9:3b:4a:4f:1d: 0f:27:43:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+prwGa2GTkjK6PpjU4a6EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMWFjOWYwOTRkODMxOGYzMDg4ZGNhNjgzMDE4NjVmNDYw NWU5ZGEwHhcNMjYwMTAyMTIyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MThjNDU5ZTAwYTU5ZjI5MmE0Yzc0ZGZiOTdiYTI0Yjg2OWY5OThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2pmg0ai9rzSrYhsULd+bTyM65zU lHwJ64JIGUtpIqtwIvAWM938vyzgfjbpNFn8/M+jHuEpvXGYP+w8cGqLtzTZ6cVo HCfGGYGuQgz58E93WbG7BVgY4fHidh4IBZk/DH7hW49uB6eM1tNBjAID6MoxNnDI kYiLLUa0pSGdslaf1qaCQUR76zmm6VaNKroYtIHR49UZCShhyqYp0sWLWYJsPLR4 VRdGAdkbjOWOaSxaAzT7LB0A/GDKgml4gMEamcWNkk4dfA6JduIiYizm5UKS2vcT 6+Pc3Mx1XDfZdje2o0qTIVUsCvTzV8oYhZfd2tQ0zsYwkL+Y8rAjI/XL4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFGMRZ4ApZ8pKkx037l7okuGn5mNMB8GA1UdIwQY MBaAFC8ayfCU2DGPMIjcpoMBhl9GBenaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHhySjhKVFlNWTh3aU55bWd3R0dYMFlGNmRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wNDE5NjgtMTVlYi00Mzg4LTk4NWEt YzIzYzgyOWRiOTM3LzEvVVl4Rm5nQ2xueWtxVEhUZnVYdWlTNGFmbVkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wNDE5NjgtMTVlYi00Mzg4LTk4NWEtYzIzYzgyOWRiOTM3 LzEvTHhySjhKVFlNWTh3aU55bWd3R0dYMFlGNmRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWJcOMA0G CSqGSIb3DQEBCwUAA4IBAQBWNhQF8VKVFKKrFyvDM+fr2XhjyK1+VNH/no+R4ypZ yMAD2Uv+O0t95woK1bRKw65AyMJC0EqCxOqffnsz/JV1Myf6WAdOka2ZIKDPw2XC eViXaTrbJhlDjq3Vm2Y/seufF7DeJW/rPS5TKiu2vYqo39EJWwqleIx3rugh2qr3 3enZ5CZy0OrhreTTCRt+7motqS313JVkygj2hntGgja+6bh57NSN8ybiVsqNx3Y+ za9bqn3KIg8zs9Ip+xUY61o1nG8eeNtRtbMFEzDx09qA9aZnmKFtS6NRvFx/tgii su0eU6JRmrl+x/dMJI9NDNvz/+GIM7zmyTtKTx0PJ0ON -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:20 2026 by rpki-client