This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/UAXnLzES68Wl5qdOzxjm_8iyOac.roa File: UAXnLzES68Wl5qdOzxjm_8iyOac.roa (raw, json) Hash identifier: MLhu8PYFYxMh38h1w76zCSe8lY0UjKmooXGEym+rYFg= Subject key identifier: 50:05:E7:2F:31:12:EB:C5:A5:E6:A7:4E:CF:18:E6:FF:C8:B2:39:A7 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82CC442A63D6706D215BA72B2782A4 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/UAXnLzES68Wl5qdOzxjm_8iyOac.roa Signing time: Fri 02 Jan 2026 16:20:36 +0000 ROA not before: Fri 02 Jan 2026 16:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206446 IP address blocks: 185.186.66.0/24 maxlen: 24 193.31.29.0/24 maxlen: 24 194.56.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:cc:44:2a:63:d6:70:6d:21:5b:a7:2b:27:82:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5005e72f3112ebc5a5e6a74ecf18e6ffc8b239a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:bd:e0:f5:79:fb:7a:6e:6b:f7:de:0a:9a:7a: b0:2b:fb:38:d2:10:fa:69:63:24:5e:74:74:5c:7d: a3:b5:ce:ab:1e:e2:2f:55:4f:27:32:87:d5:84:19: b4:ca:ea:2b:a3:7b:30:cb:d7:cd:a1:32:f6:8b:6e: 66:d0:c9:65:97:e6:f2:02:42:b9:b6:34:8a:45:36: f1:e3:69:25:a2:06:8a:1d:84:9e:31:36:b5:24:b9: 60:da:cc:dd:dc:2a:0b:0b:72:e7:c3:c6:b1:a0:d3: 00:2a:88:26:73:d7:ff:a0:de:d9:73:31:92:7f:e9: 01:ac:d8:69:1a:3d:6e:0b:b7:7a:63:85:c9:6a:e4: 2f:2a:7c:44:03:03:12:32:2b:bf:b6:10:b0:ac:84: b3:e1:a6:9e:a6:8a:67:a1:46:d2:52:66:be:56:9f: eb:a1:3c:9c:6f:8c:09:de:ef:5c:76:71:fb:f3:8a: e3:ba:63:f7:92:37:fe:17:ed:0a:f7:9d:f2:78:a5: b8:21:3d:12:be:5e:b7:57:32:fb:24:b6:f7:10:ce: 63:12:de:57:91:1f:e4:4d:60:63:d0:08:3b:6b:9d: 8d:72:fb:8b:c0:c5:50:28:d7:bf:24:c6:ee:81:96: 48:96:68:17:18:04:65:f1:61:48:07:df:79:4c:cb: 73:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:05:E7:2F:31:12:EB:C5:A5:E6:A7:4E:CF:18:E6:FF:C8:B2:39:A7 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/UAXnLzES68Wl5qdOzxjm_8iyOac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.186.66.0/24 193.31.29.0/24 194.56.227.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:5c:4b:71:2a:98:a7:02:cd:33:c7:b7:b8:d9:98:9e:65:d9: 8e:9f:5c:ef:60:70:5f:e0:c0:64:50:a8:0b:da:0a:e3:5a:61: b4:2d:b4:ec:2b:a9:03:01:2f:c1:6a:f1:93:3f:27:0c:97:ca: 1d:23:60:a9:42:c4:37:e7:bd:3a:68:12:8f:53:db:99:09:da: 06:cc:9a:26:3c:e2:18:0e:79:0c:4e:07:d7:ca:5e:fa:e9:8d: c9:86:74:c6:05:b9:93:b6:dd:b0:bd:c7:8e:22:75:ed:a8:6a: 02:95:90:b9:9c:72:8c:85:74:00:77:cf:84:a0:e4:df:2f:c0: b7:e1:f9:54:68:72:ff:61:0f:55:e9:e2:0f:18:7a:8c:67:1d: 4f:90:2a:00:a6:76:17:ea:31:cc:6d:c0:88:5b:04:b5:a7:5b: e9:e7:75:30:53:de:0b:28:b6:64:5a:94:aa:05:3e:44:f9:5d: 05:17:a6:a3:e3:26:38:d6:f1:85:98:35:09:ba:bd:24:4e:cb: 0d:a4:ba:af:bb:41:90:7d:00:61:d2:b3:19:77:60:fb:fc:04: 13:fc:f2:eb:42:c6:3d:a2:82:09:e4:81:e6:48:61:b6:f4:3c: f1:40:00:17:7f:18:51:78:7b:5b:d2:bc:bd:9c:4d:ef:d7:15: 03:50:21:7e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/gsxEKmPWcG0hW6crJ4KkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDA1ZTcyZjMxMTJlYmM1YTVlNmE3NGVjZjE4ZTZmZmM4YjIzOWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3b3g9Xn7em5r994KmnqwK/s40hD6 aWMkXnR0XH2jtc6rHuIvVU8nMofVhBm0yuoro3swy9fNoTL2i25m0Mlll+byAkK5 tjSKRTbx42klogaKHYSeMTa1JLlg2szd3CoLC3Lnw8axoNMAKogmc9f/oN7ZczGS f+kBrNhpGj1uC7d6Y4XJauQvKnxEAwMSMiu/thCwrISz4aaepopnoUbSUma+Vp/r oTycb4wJ3u9cdnH784rjumP3kjf+F+0K953yeKW4IT0Svl63VzL7JLb3EM5jEt5X kR/kTWBj0Ag7a52NcvuLwMVQKNe/JMbugZZIlmgXGARl8WFIB995TMtzmwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFAF5y8xEuvFpeanTs8Y5v/IsjmnMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvVUFYbkx6RVM2OFdsNXFkT3p4am1fOGl5T2FjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAubpCAwQA wR8dAwQAwjjjMA0GCSqGSIb3DQEBCwUAA4IBAQB/XEtxKpinAs0zx7e42ZieZdmO n1zvYHBf4MBkUKgL2grjWmG0LbTsK6kDAS/BavGTPycMl8odI2CpQsQ35706aBKP U9uZCdoGzJomPOIYDnkMTgfXyl766Y3JhnTGBbmTtt2wvceOInXtqGoClZC5nHKM hXQAd8+EoOTfL8C34flUaHL/YQ9V6eIPGHqMZx1PkCoApnYX6jHMbcCIWwS1p1vp 53UwU94LKLZkWpSqBT5E+V0FF6aj4yY41vGFmDUJur0kTssNpLqvu0GQfQBh0rMZ d2D7/AQT/PLrQsY9ooIJ5IHmSGG29DzxQAAXfxhReHtb0ry9nE3v1xUDUCF+ -----END CERTIFICATE-----Generated at Tue Jan 20 12:12:20 2026 by rpki-client