This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/UKvSxhXp6UeN9PA2d7zmzONW8dI.roa File: UKvSxhXp6UeN9PA2d7zmzONW8dI.roa (raw, json) Hash identifier: U2Kl3dxAuyKIqhwNvATcE57d94w+8GaKrGRAFwd2pQQ= Subject key identifier: 50:AB:D2:C6:15:E9:E9:47:8D:F4:F0:36:77:BC:E6:CC:E3:56:F1:D2 Certificate issuer: /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d Certificate serial: 019B77591D9F1252B994D91CDE7107919197 Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/UKvSxhXp6UeN9PA2d7zmzONW8dI.roa Signing time: Thu 01 Jan 2026 02:18:07 +0000 ROA not before: Thu 01 Jan 2026 02:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32787 IP address blocks: 185.78.246.0/24 maxlen: 24 185.78.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:1d:9f:12:52:b9:94:d9:1c:de:71:07:91:91:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d Validity Not Before: Jan 1 02:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50abd2c615e9e9478df4f03677bce6cce356f1d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:38:35:52:a2:d7:e7:25:c8:8b:03:52:c2:73: 78:c2:78:76:e6:45:e4:31:8e:cf:a3:e6:a6:24:ff: f0:c0:38:e5:5e:95:9a:09:60:ee:12:48:65:03:55: cd:bd:cb:35:cc:87:d2:17:27:e9:3e:99:7b:99:26: cd:42:83:a9:e5:1f:68:f7:c5:7c:c9:d6:b3:b8:58: 6f:d0:84:16:6a:63:38:93:3e:7d:62:51:86:01:b6: ae:63:c1:4e:eb:2d:03:4c:f4:b1:58:93:9d:55:1f: 0d:3e:b2:df:83:35:8c:39:9e:37:1a:8a:40:58:c1: cc:52:57:3c:d8:69:f3:e2:b3:11:a7:ce:3e:7b:ef: bd:63:a7:d4:6b:67:7d:58:de:9e:7b:2e:66:f2:f0: 8e:66:6f:fd:65:a2:51:d6:b4:ad:20:d0:40:72:17: 9b:35:ee:f4:8f:6e:a4:92:78:f6:fe:99:6b:f2:f7: 08:86:96:7b:8f:a8:ed:08:f0:95:e4:b4:1c:6e:9b: 3a:67:54:be:4f:c6:74:55:e9:e8:1a:7b:f3:b6:4d: 71:b5:8e:3c:2c:29:11:f6:4a:e4:5d:a3:5d:a2:12: 32:36:3b:f9:e6:61:f3:1b:21:9a:9b:93:af:fa:65: 16:d6:6e:ec:17:54:2d:df:16:98:dc:3c:e6:c9:18: c6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:AB:D2:C6:15:E9:E9:47:8D:F4:F0:36:77:BC:E6:CC:E3:56:F1:D2 X509v3 Authority Key Identifier: keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/UKvSxhXp6UeN9PA2d7zmzONW8dI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.78.246.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:0d:4e:a1:6f:46:bf:68:b4:65:5b:b1:5b:66:6e:a5:ff:42: 8e:2c:ed:44:3c:93:79:44:b6:6a:86:af:8d:77:fd:7d:bb:38: f5:ed:0c:02:cd:e0:3a:c8:50:47:8a:dc:5d:ad:b6:19:2b:c4: 48:fb:60:4b:b9:10:b7:7f:11:ea:37:0a:cf:be:b9:3a:9e:bc: 82:0a:14:df:cd:31:e9:a2:39:91:8e:7c:0a:7a:59:da:df:1e: 6d:87:dc:bb:bc:12:f6:d2:fb:5a:ca:41:5b:12:fe:86:6a:4e: 22:90:6a:dd:29:31:9d:88:82:1a:0e:6c:fe:f9:f0:90:ee:b1: 4e:46:e6:e2:7b:f8:e9:c4:9d:b0:fc:85:a8:48:d9:3a:2f:a0: 11:76:17:b5:67:ec:4f:c7:fa:e3:e9:3a:b6:39:4b:40:ac:cc: 7e:78:5b:f4:4a:71:ba:5c:b9:8e:b7:a6:21:fa:5b:f8:89:91: a3:66:d8:77:5c:d3:b1:d9:0c:e6:c5:14:52:52:84:08:37:76: 27:6c:10:ba:8e:0b:18:2d:d0:1e:e0:c5:a4:84:a0:fd:14:22: e3:98:6e:a2:08:21:e6:55:a9:91:ee:39:ad:a9:79:dc:f0:0e: da:55:8f:d9:5d:21:0b:3b:7d:fa:ab:59:32:d0:b8:25:48:8f: 10:c1:12:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WR2fElK5lNkc3nEHkZGXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MGU2MDc3OWYzY2Q0ZDAzZDVlNTA3ODQwZjVmYTJhMzFh NmFiOGQwHhcNMjYwMTAxMDIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGFiZDJjNjE1ZTllOTQ3OGRmNGYwMzY3N2JjZTZjY2UzNTZmMWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzg1UqLX5yXIiwNSwnN4wnh25kXk MY7Po+amJP/wwDjlXpWaCWDuEkhlA1XNvcs1zIfSFyfpPpl7mSbNQoOp5R9o98V8 ydazuFhv0IQWamM4kz59YlGGAbauY8FO6y0DTPSxWJOdVR8NPrLfgzWMOZ43GopA WMHMUlc82Gnz4rMRp84+e++9Y6fUa2d9WN6eey5m8vCOZm/9ZaJR1rStINBAcheb Ne70j26kknj2/plr8vcIhpZ7j6jtCPCV5LQcbps6Z1S+T8Z0VenoGnvztk1xtY48 LCkR9krkXaNdohIyNjv55mHzGyGam5Ov+mUW1m7sF1Qt3xaY3DzmyRjGBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFCr0sYV6elHjfTwNne85szjVvHSMB8GA1UdIwQY MBaAFGcOYHefPNTQPV5QeED1+ioxpquNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnc1Z2Q1ODgxTkE5WGxCNFFQWDZLakdtcTQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9mNTk1MWEtYjBmZi00YTNjLTg4YWUt MzUwMDRhNjcxZWIzLzEvVUt2U3hoWHA2VWVOOVBBMmQ3em16T05XOGRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9mNTk1MWEtYjBmZi00YTNjLTg4YWUtMzUwMDRhNjcxZWIz LzEvWnc1Z2Q1ODgxTkE5WGxCNFFQWDZLakdtcTQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuU72MA0G CSqGSIb3DQEBCwUAA4IBAQBfDU6hb0a/aLRlW7FbZm6l/0KOLO1EPJN5RLZqhq+N d/19uzj17QwCzeA6yFBHitxdrbYZK8RI+2BLuRC3fxHqNwrPvrk6nryCChTfzTHp ojmRjnwKelna3x5th9y7vBL20vtaykFbEv6Gak4ikGrdKTGdiIIaDmz++fCQ7rFO Rubie/jpxJ2w/IWoSNk6L6ARdhe1Z+xPx/rj6Tq2OUtArMx+eFv0SnG6XLmOt6Yh +lv4iZGjZth3XNOx2QzmxRRSUoQIN3YnbBC6jgsYLdAe4MWkhKD9FCLjmG6iCCHm VamR7jmtqXnc8A7aVY/ZXSELO336q1ky0LglSI8QwRIo -----END CERTIFICATE-----Generated at Tue Jan 20 07:57:36 2026 by rpki-client