This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/UAj8pMDVe1e_Bkx0I3cCM4tHXx0.roa File: UAj8pMDVe1e_Bkx0I3cCM4tHXx0.roa (raw, json) Hash identifier: UfnTgECqiB69+vQOPwrym36fQCF1IKiWDwU9p+yi/X4= Subject key identifier: 50:08:FC:A4:C0:D5:7B:57:BF:06:4C:74:23:77:02:33:8B:47:5F:1D Certificate issuer: /CN=55c9620593cc4fca8567c244257861a522f7359d Certificate serial: 019B7BA46019CF25DF3E7D9110AE67BB2EEA Authority key identifier: 55:C9:62:05:93:CC:4F:CA:85:67:C2:44:25:78:61:A5:22:F7:35:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/UAj8pMDVe1e_Bkx0I3cCM4tHXx0.roa Signing time: Thu 01 Jan 2026 22:18:48 +0000 ROA not before: Thu 01 Jan 2026 22:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31477 IP address blocks: 193.164.144.0/24 maxlen: 24 2001:678:750::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:60:19:cf:25:df:3e:7d:91:10:ae:67:bb:2e:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55c9620593cc4fca8567c244257861a522f7359d Validity Not Before: Jan 1 22:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5008fca4c0d57b57bf064c74237702338b475f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:59:4a:9e:49:fc:12:b3:08:ff:c2:a5:ce:09: 76:f2:f9:b0:b0:89:a0:d0:98:7e:9b:ad:5a:a1:c2: 78:25:01:b0:3b:15:ed:67:d8:07:d6:65:d8:3f:df: a6:e7:2e:f2:08:b5:5b:c6:d8:dc:8b:03:fd:47:21: a0:9c:e0:58:23:bd:5d:cd:35:f7:56:10:26:1f:17: 0e:8b:26:79:41:0e:76:03:e7:94:e1:b6:cd:7a:a0: 32:88:f5:b9:3f:ad:97:a3:bb:46:e8:bd:6a:f7:b7: 01:ef:be:e3:25:a8:b1:94:a8:30:37:59:dc:ed:16: 89:1b:08:8c:40:84:45:75:5f:2b:f8:37:e4:7c:27: 59:3e:cb:c1:06:b7:4f:a2:d4:b6:9d:87:8b:15:d8: 3a:42:13:3d:b4:5f:6f:5c:8d:ee:9f:0e:fd:0d:22: 48:ac:9e:10:6c:bf:87:4e:46:e8:17:ca:ae:17:82: c7:eb:90:a6:5a:ff:e1:34:44:d0:6b:dc:43:2b:c6: ec:b1:bb:44:c1:ed:8a:20:71:4a:c9:6e:1b:bd:ef: bf:b1:31:6a:97:bc:12:a5:4c:db:f1:8f:cd:88:2c: de:ae:88:14:32:70:42:dc:91:f5:9c:28:71:a2:3a: e2:19:ae:f0:e2:60:b4:c4:3a:c7:90:7c:f5:c8:ee: 8d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:08:FC:A4:C0:D5:7B:57:BF:06:4C:74:23:77:02:33:8B:47:5F:1D X509v3 Authority Key Identifier: keyid:55:C9:62:05:93:CC:4F:CA:85:67:C2:44:25:78:61:A5:22:F7:35:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/UAj8pMDVe1e_Bkx0I3cCM4tHXx0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.164.144.0/24 IPv6: 2001:678:750::/48 Signature Algorithm: sha256WithRSAEncryption 39:a8:6a:7a:1d:17:c7:2d:b7:8b:ae:48:4c:f6:52:d6:ad:19: bd:f4:61:ec:23:07:89:7d:ea:79:a1:56:61:27:f1:c4:ba:21: 71:67:36:d8:ee:a7:b4:9a:97:20:39:76:15:27:90:87:11:92: 07:50:2b:a0:08:3f:e8:39:19:5d:9a:3a:44:dc:31:3a:ba:70: 1d:08:38:db:d1:72:d5:41:9d:af:b9:95:ac:b5:48:42:48:de: b4:4c:e4:65:b8:42:20:c2:15:94:07:a0:f1:b9:c9:9a:71:0a: 53:a0:90:36:7c:c1:af:a5:62:35:fb:3b:d3:f9:a6:1e:2d:1d: 8a:d2:4a:f9:02:1d:27:bf:aa:9b:75:6b:e6:7b:1b:3b:63:a5: b9:3b:02:2c:d6:aa:3b:dd:c2:cc:4c:7d:76:0c:ca:c3:98:1b: b0:4e:fe:b6:7c:fe:85:ac:a6:ff:44:79:8c:44:08:90:b2:5d: e2:86:b3:d5:50:85:a4:1c:0b:1e:6f:e9:ca:c0:1f:fc:27:00: 1f:e4:18:e6:f1:42:a5:a2:ef:f0:ac:14:f3:b5:01:87:60:3e: a2:c7:05:ae:fe:5d:fe:d3:31:d5:10:da:38:dd:08:4d:93:74: f1:49:35:3b:07:97:35:97:9f:bd:fc:da:6c:b0:f0:48:42:2e: 24:5c:c9:60 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7pGAZzyXfPn2REK5nuy7qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1Yzk2MjA1OTNjYzRmY2E4NTY3YzI0NDI1Nzg2MWE1MjJm NzM1OWQwHhcNMjYwMTAxMjIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDA4ZmNhNGMwZDU3YjU3YmYwNjRjNzQyMzc3MDIzMzhiNDc1ZjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsllKnkn8ErMI/8Klzgl28vmwsImg 0Jh+m61aocJ4JQGwOxXtZ9gH1mXYP9+m5y7yCLVbxtjciwP9RyGgnOBYI71dzTX3 VhAmHxcOiyZ5QQ52A+eU4bbNeqAyiPW5P62Xo7tG6L1q97cB777jJaixlKgwN1nc 7RaJGwiMQIRFdV8r+DfkfCdZPsvBBrdPotS2nYeLFdg6QhM9tF9vXI3unw79DSJI rJ4QbL+HTkboF8quF4LH65CmWv/hNETQa9xDK8bssbtEwe2KIHFKyW4bve+/sTFq l7wSpUzb8Y/NiCzerogUMnBC3JH1nChxojriGa7w4mC0xDrHkHz1yO6NjQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFAI/KTA1XtXvwZMdCN3AjOLR18dMB8GA1UdIwQY MBaAFFXJYgWTzE/KhWfCRCV4YaUi9zWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmNsaUJaUE1UOHFGWjhKRUpYaGhwU0wzTlowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9kZjgwMTctYWY4Yy00Yjc3LTlkYmMt MzVjMDUwMmEwYmI3LzEvVUFqOHBNRFZlMWVfQmt4MEkzY0NNNHRIWHgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9kZjgwMTctYWY4Yy00Yjc3LTlkYmMtMzVjMDUwMmEwYmI3 LzEvVmNsaUJaUE1UOHFGWjhKRUpYaGhwU0wzTlowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwaSQMA8E AgACMAkDBwAgAQZ4B1AwDQYJKoZIhvcNAQELBQADggEBADmoanodF8ctt4uuSEz2 UtatGb30YewjB4l96nmhVmEn8cS6IXFnNtjup7SalyA5dhUnkIcRkgdQK6AIP+g5 GV2aOkTcMTq6cB0IONvRctVBna+5lay1SEJI3rRM5GW4QiDCFZQHoPG5yZpxClOg kDZ8wa+lYjX7O9P5ph4tHYrSSvkCHSe/qpt1a+Z7Gztjpbk7AizWqjvdwsxMfXYM ysOYG7BO/rZ8/oWspv9EeYxECJCyXeKGs9VQhaQcCx5v6crAH/wnAB/kGObxQqWi 7/CsFPO1AYdgPqLHBa7+Xf7TMdUQ2jjdCE2TdPFJNTsHlzWXn7382myw8EhCLiRc yWA= -----END CERTIFICATE-----Generated at Wed Feb 4 09:27:37 2026 by rpki-client