This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/UJWn-wAPft9IixekN55NPYLNamM.roa File: UJWn-wAPft9IixekN55NPYLNamM.roa (raw, json) Hash identifier: pG2rLvElt60tF5xnp9AHmw3BuJ08zKLP8VTkx1BBVh4= Subject key identifier: 50:95:A7:FB:00:0F:7E:DF:48:8B:17:A4:37:9E:4D:3D:82:CD:6A:63 Certificate issuer: /CN=1d61cb4bbee5cdd7eceda7560aa249c6d11f23a9 Certificate serial: 019B77C66CFEBAFE0F1AFC3DC185EB73D4C3 Authority key identifier: 1D:61:CB:4B:BE:E5:CD:D7:EC:ED:A7:56:0A:A2:49:C6:D1:1F:23:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/UJWn-wAPft9IixekN55NPYLNamM.roa Signing time: Thu 01 Jan 2026 04:17:31 +0000 ROA not before: Thu 01 Jan 2026 04:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198142 IP address blocks: 193.150.26.0/24 maxlen: 24 193.150.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.crl rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:6c:fe:ba:fe:0f:1a:fc:3d:c1:85:eb:73:d4:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d61cb4bbee5cdd7eceda7560aa249c6d11f23a9 Validity Not Before: Jan 1 04:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5095a7fb000f7edf488b17a4379e4d3d82cd6a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b2:b3:2e:94:d1:26:16:45:25:83:52:d7:1e: c0:10:33:80:56:c1:e9:ef:c5:40:b9:0b:15:d8:92: 1d:44:c6:8e:37:72:64:93:51:ec:ad:64:49:94:30: c0:d4:0d:c9:eb:7a:08:b5:39:36:ea:4e:e4:28:4a: cc:e8:2c:f7:54:18:27:a5:b9:ef:16:7d:e4:70:f4: 8e:b7:bf:ff:31:d5:20:9d:55:22:c4:bb:f9:11:4f: f3:82:eb:74:75:eb:8f:c6:06:f7:c2:0c:90:27:f7: 7a:be:99:c9:ed:14:f1:8f:5a:b9:c3:14:fa:f3:4b: ff:a0:4a:f4:4a:83:63:61:71:42:bd:50:be:48:80: c6:47:92:c1:a5:9d:96:21:6a:51:4d:f2:07:2e:7f: 90:25:6b:2c:05:a2:a4:e7:d6:80:8a:81:92:d4:20: 4f:d3:9e:98:e0:10:a9:53:66:c4:f7:3e:27:0a:be: 2f:37:0d:38:d9:19:3f:f9:ae:b2:c5:ae:1b:66:d9: 0e:9e:a9:e2:7c:6e:88:d9:4d:95:8f:b2:cb:61:bb: 2a:7c:68:88:c3:13:51:f1:5e:76:65:ce:96:d2:de: 31:c8:2c:54:d1:3a:39:00:cd:20:dd:83:b5:b0:f6: 06:85:7a:ad:62:d8:b0:a9:4d:53:03:36:ab:b5:55: 01:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:95:A7:FB:00:0F:7E:DF:48:8B:17:A4:37:9E:4D:3D:82:CD:6A:63 X509v3 Authority Key Identifier: keyid:1D:61:CB:4B:BE:E5:CD:D7:EC:ED:A7:56:0A:A2:49:C6:D1:1F:23:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/UJWn-wAPft9IixekN55NPYLNamM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.150.26.0/23 Signature Algorithm: sha256WithRSAEncryption 71:2e:e5:37:46:ba:d0:0f:da:77:d7:65:d3:3e:68:df:f2:14: 17:58:c3:5e:9d:26:b9:fd:4b:db:bd:e9:92:3d:dd:b3:ad:53: 1d:1f:a6:a5:d7:ab:7f:91:f1:18:69:44:75:ed:85:5f:cb:31: a1:0d:7e:a5:87:45:14:57:73:08:55:6c:ae:8b:4d:a2:1f:be: 5a:45:ba:b2:94:49:fb:16:37:ff:e7:71:c1:8f:96:6e:0b:67: f9:b2:d4:fe:99:04:4e:61:69:61:ab:cf:a8:20:78:0a:62:38: 21:09:c1:e4:d1:1c:b4:d6:95:08:61:6e:30:af:cc:ca:5d:44: 3d:18:94:ba:d3:67:d5:78:9c:c2:96:97:7c:20:9c:e2:b7:f6: 2e:90:67:4a:78:bf:f3:c4:ca:7b:1b:96:a7:bf:e7:87:97:3b: 07:d4:b1:1d:f4:40:14:82:09:ee:a4:5d:ad:6c:ed:ce:08:68: 46:dd:57:63:da:c7:06:e8:e2:dc:7d:2c:52:71:01:b7:38:3b: fe:c4:a0:aa:1c:73:9c:77:80:6f:69:17:87:0e:6f:15:b8:fa: 84:c7:d5:86:e7:3f:34:14:85:4a:41:24:52:03:e6:ee:e9:5f: 7b:b5:bd:e9:97:4c:99:65:86:2d:eb:98:c2:80:d2:0c:f7:e5: f9:b2:fa:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xmz+uv4PGvw9wYXrc9TDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNjFjYjRiYmVlNWNkZDdlY2VkYTc1NjBhYTI0OWM2ZDEx ZjIzYTkwHhcNMjYwMTAxMDQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDk1YTdmYjAwMGY3ZWRmNDg4YjE3YTQzNzllNGQzZDgyY2Q2YTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rKzLpTRJhZFJYNS1x7AEDOAVsHp 78VAuQsV2JIdRMaON3Jkk1HsrWRJlDDA1A3J63oItTk26k7kKErM6Cz3VBgnpbnv Fn3kcPSOt7//MdUgnVUixLv5EU/zgut0deuPxgb3wgyQJ/d6vpnJ7RTxj1q5wxT6 80v/oEr0SoNjYXFCvVC+SIDGR5LBpZ2WIWpRTfIHLn+QJWssBaKk59aAioGS1CBP 056Y4BCpU2bE9z4nCr4vNw042Rk/+a6yxa4bZtkOnqnifG6I2U2Vj7LLYbsqfGiI wxNR8V52Zc6W0t4xyCxU0To5AM0g3YO1sPYGhXqtYtiwqU1TAzartVUBOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFCVp/sAD37fSIsXpDeeTT2CzWpjMB8GA1UdIwQY MBaAFB1hy0u+5c3X7O2nVgqiScbRHyOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFdITFM3N2x6ZGZzN2FkV0NxSkp4dEVmSTZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9iMmY1ZjktZDM0YS00N2EzLWJiNTQt MDg3MWZkYjZhNGZhLzEvVUpXbi13QVBmdDlJaXhla041NU5QWUxOYW1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9iMmY1ZjktZDM0YS00N2EzLWJiNTQtMDg3MWZkYjZhNGZh LzEvSFdITFM3N2x6ZGZzN2FkV0NxSkp4dEVmSTZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwZYaMA0G CSqGSIb3DQEBCwUAA4IBAQBxLuU3RrrQD9p312XTPmjf8hQXWMNenSa5/UvbvemS Pd2zrVMdH6al16t/kfEYaUR17YVfyzGhDX6lh0UUV3MIVWyui02iH75aRbqylEn7 Fjf/53HBj5ZuC2f5stT+mQROYWlhq8+oIHgKYjghCcHk0Ry01pUIYW4wr8zKXUQ9 GJS602fVeJzClpd8IJzit/YukGdKeL/zxMp7G5anv+eHlzsH1LEd9EAUggnupF2t bO3OCGhG3Vdj2scG6OLcfSxScQG3ODv+xKCqHHOcd4BvaReHDm8VuPqEx9WG5z80 FIVKQSRSA+bu6V97tb3pl0yZZYYt65jCgNIM9+X5svqm -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:07 2026 by rpki-client