This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/uz-5eh8ij7CKyL1gCG3agXaZfdI.roa File: uz-5eh8ij7CKyL1gCG3agXaZfdI.roa (raw, json) Hash identifier: MLGYmgTbm9R3gQ6lW9l1/n4SxkT8aKZvJY9FygoVZ1Y= Subject key identifier: BB:3F:B9:7A:1F:22:8F:B0:8A:C8:BD:60:08:6D:DA:81:76:99:7D:D2 Certificate issuer: /CN=85db83a8365a604476f282d24d327ad1ef0fde52 Certificate serial: 019B7D5D39D7550A692CD7E90EA4613B1FCE Authority key identifier: 85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/uz-5eh8ij7CKyL1gCG3agXaZfdI.roa Signing time: Fri 02 Jan 2026 06:20:20 +0000 ROA not before: Fri 02 Jan 2026 06:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44187 IP address blocks: 46.226.232.0/22 maxlen: 24 87.237.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:39:d7:55:0a:69:2c:d7:e9:0e:a4:61:3b:1f:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85db83a8365a604476f282d24d327ad1ef0fde52 Validity Not Before: Jan 2 06:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb3fb97a1f228fb08ac8bd60086dda8176997dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:21:a1:b0:90:67:7f:de:b3:88:ca:ae:7e:b8: 71:ad:7a:10:a1:b5:5d:1a:86:f3:87:57:e9:09:c2: 70:55:9d:e2:4b:d2:8e:7d:06:5e:1a:25:bc:24:d8: e8:eb:90:3d:e2:b6:46:6f:75:8d:de:52:17:be:1f: 7d:ce:25:85:f6:66:50:10:c0:95:29:a8:97:e2:95: 19:d0:21:13:3a:6b:b5:b2:53:b9:4e:1a:3e:eb:2c: 56:e9:7c:cd:28:2f:a2:b7:ff:a9:ed:e0:a0:d5:af: 45:37:cb:f1:f4:c8:91:07:65:8b:91:a5:10:5b:22: 40:1e:bd:d9:94:21:42:06:57:60:36:9f:7d:67:78: 34:dc:a2:95:e3:d5:39:eb:5a:33:cc:23:e9:d1:ca: 52:ff:77:36:d7:14:8c:ae:57:4e:bf:e8:1f:06:51: 32:79:21:ba:c0:5a:f8:52:ed:6f:e8:af:87:ae:b5: 86:a8:25:87:89:42:cf:44:bb:db:c2:57:5a:a0:10: 0a:8b:28:de:b5:ff:92:72:f5:2b:e9:a4:01:0d:e4: 5d:1c:ef:27:be:49:d3:d7:a2:8c:2d:24:5c:31:58: bf:a4:0f:20:25:f2:20:cc:8b:8f:aa:27:2b:42:9e: 54:f0:17:5e:3f:eb:b2:76:8f:43:46:fb:1e:61:ff: 5b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:3F:B9:7A:1F:22:8F:B0:8A:C8:BD:60:08:6D:DA:81:76:99:7D:D2 X509v3 Authority Key Identifier: keyid:85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/uz-5eh8ij7CKyL1gCG3agXaZfdI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.226.232.0/22 87.237.24.0/21 Signature Algorithm: sha256WithRSAEncryption 1b:e4:36:3a:55:dd:d9:a5:18:52:b2:35:c1:2f:4b:8e:d8:c2: 38:11:29:1c:8a:1e:e6:a3:91:54:16:d5:83:06:a7:0e:2c:a9: 5a:9d:54:b3:6c:0b:d7:dd:84:fd:bc:66:1d:97:3c:50:76:88: da:d6:f1:80:f5:ea:dd:54:cc:de:70:85:f9:c2:15:eb:8e:79: 86:91:3f:7b:fb:6b:b0:99:7e:0a:a4:1f:fd:2f:67:68:0c:ab: a2:73:06:f0:3f:6e:b5:c7:83:4a:63:81:cd:35:95:8c:91:4b: a1:d9:a7:58:4d:de:84:6c:97:20:7c:81:09:4b:0f:72:a4:ba: be:ba:c6:bc:31:7d:2c:9a:da:3e:89:2b:a6:85:5f:cf:5b:7d: d7:5f:4d:c9:1d:0e:96:b9:e8:6a:f3:41:3a:28:85:34:b8:f4: 5e:f7:73:43:11:dd:bf:36:9b:99:77:89:46:77:69:1b:d8:ca: a0:9e:64:56:75:4f:ce:4e:34:95:74:61:d5:14:8e:9b:b0:da: 5f:9b:61:f7:37:31:83:4a:73:fb:61:ec:b1:bd:0d:fd:ce:d9: 7a:77:da:cb:83:df:d2:2f:f0:8f:eb:c4:89:fd:bd:da:9b:e5: 58:2b:d0:18:6e:77:6e:04:eb:3e:30:89:81:e2:1e:d2:3a:91: 21:c8:39:d9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XTnXVQppLNfpDqRhOx/OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZGI4M2E4MzY1YTYwNDQ3NmYyODJkMjRkMzI3YWQxZWYw ZmRlNTIwHhcNMjYwMTAyMDYyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjNmYjk3YTFmMjI4ZmIwOGFjOGJkNjAwODZkZGE4MTc2OTk3ZGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyGhsJBnf96ziMqufrhxrXoQobVd Gobzh1fpCcJwVZ3iS9KOfQZeGiW8JNjo65A94rZGb3WN3lIXvh99ziWF9mZQEMCV KaiX4pUZ0CETOmu1slO5Tho+6yxW6XzNKC+it/+p7eCg1a9FN8vx9MiRB2WLkaUQ WyJAHr3ZlCFCBldgNp99Z3g03KKV49U561ozzCPp0cpS/3c21xSMrldOv+gfBlEy eSG6wFr4Uu1v6K+HrrWGqCWHiULPRLvbwldaoBAKiyjetf+ScvUr6aQBDeRdHO8n vknT16KMLSRcMVi/pA8gJfIgzIuPqicrQp5U8BdeP+uydo9DRvseYf9bjQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLs/uXofIo+wisi9YAht2oF2mX3SMB8GA1UdIwQY MBaAFIXbg6g2WmBEdvKC0k0yetHvD95SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yYzhmMDgtZTU5OS00NGYzLWJiYzEt OGNiZWY5MTNlMzQyLzEvdXotNWVoOGlqN0NLeUwxZ0NHM2FnWGFaZmRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8yYzhmMDgtZTU5OS00NGYzLWJiYzEtOGNiZWY5MTNlMzQy LzEvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLuLoAwQD V+0YMA0GCSqGSIb3DQEBCwUAA4IBAQAb5DY6Vd3ZpRhSsjXBL0uO2MI4ESkcih7m o5FUFtWDBqcOLKlanVSzbAvX3YT9vGYdlzxQdoja1vGA9erdVMzecIX5whXrjnmG kT97+2uwmX4KpB/9L2doDKuicwbwP261x4NKY4HNNZWMkUuh2adYTd6EbJcgfIEJ Sw9ypLq+usa8MX0smto+iSumhV/PW33XX03JHQ6Wuehq80E6KIU0uPRe93NDEd2/ NpuZd4lGd2kb2MqgnmRWdU/OTjSVdGHVFI6bsNpfm2H3NzGDSnP7YeyxvQ39ztl6 d9rLg9/SL/CP68SJ/b3am+VYK9AYbnduBOs+MImB4h7SOpEhyDnZ -----END CERTIFICATE-----Generated at Tue Jan 27 02:13:20 2026 by rpki-client