This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/UfY9uP-gSFGDl_psdLY21k8D6rE.roa File: UfY9uP-gSFGDl_psdLY21k8D6rE.roa (raw, json) Hash identifier: liAqA+LlTWz2PCuepJi3NtGWRqXh2SEVE/+htWLewMQ= Subject key identifier: 51:F6:3D:B8:FF:A0:48:51:83:97:FA:6C:74:B6:36:D6:4F:03:EA:B1 Certificate issuer: /CN=ba97c15456eb600403ecfbb16c20e08160944f8f Certificate serial: 019B7E37DA7FEB8C0F045B0F7C393CD2FEFF Authority key identifier: BA:97:C1:54:56:EB:60:04:03:EC:FB:B1:6C:20:E0:81:60:94:4F:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/upfBVFbrYAQD7PuxbCDggWCUT48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/UfY9uP-gSFGDl_psdLY21k8D6rE.roa Signing time: Fri 02 Jan 2026 10:19:08 +0000 ROA not before: Fri 02 Jan 2026 10:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9171 IP address blocks: 193.47.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.crl rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.mft rsync://rpki.ripe.net/repository/DEFAULT/upfBVFbrYAQD7PuxbCDggWCUT48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:da:7f:eb:8c:0f:04:5b:0f:7c:39:3c:d2:fe:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba97c15456eb600403ecfbb16c20e08160944f8f Validity Not Before: Jan 2 10:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51f63db8ffa048518397fa6c74b636d64f03eab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9f:c0:9e:ec:d4:bc:2c:13:05:49:0f:c1:d5: d3:ea:f9:47:ac:bd:b5:69:3b:c5:15:5d:8c:cf:10: 0c:35:3a:db:ab:a3:91:c2:56:2d:68:85:62:90:4b: 94:30:16:34:6a:08:71:ce:52:19:ea:4c:db:42:87: 02:46:c7:50:fc:52:99:f0:5d:96:52:f5:d4:f0:bc: 70:c1:5e:e9:ea:f9:37:45:e5:6f:6a:a7:e8:28:7e: eb:13:9e:e0:d5:f9:0d:86:d5:fa:b9:15:9c:7a:39: 6d:d0:cc:23:9d:09:f8:c3:19:48:e1:75:81:d4:4c: 83:c8:79:82:db:a1:a9:ba:d9:ac:66:36:5d:fd:9e: d6:58:8e:b8:e9:8c:ae:25:25:63:f5:84:2b:7c:33: 6c:c2:bb:1b:db:5a:40:58:f5:2e:e6:9a:ed:02:12: 03:86:28:a1:eb:88:b2:5a:1a:6e:e1:a3:db:69:44: 9b:02:6e:a8:62:ea:79:df:bf:a0:f4:38:a8:83:4b: 58:d2:b2:e5:81:8d:b9:33:71:9e:5f:7f:9d:a4:56: aa:06:2d:fa:c1:eb:7a:dc:85:13:f9:7a:16:c5:d4: 65:b6:d7:e7:8d:7d:30:97:e7:3a:03:13:53:ed:18: d7:28:b2:e9:c3:c9:a8:c6:64:d8:26:24:95:d4:65: 56:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F6:3D:B8:FF:A0:48:51:83:97:FA:6C:74:B6:36:D6:4F:03:EA:B1 X509v3 Authority Key Identifier: keyid:BA:97:C1:54:56:EB:60:04:03:EC:FB:B1:6C:20:E0:81:60:94:4F:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/upfBVFbrYAQD7PuxbCDggWCUT48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/UfY9uP-gSFGDl_psdLY21k8D6rE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c46d1e-987d-4f65-b11b-2e2cd6435106/1/upfBVFbrYAQD7PuxbCDggWCUT48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.47.142.0/24 Signature Algorithm: sha256WithRSAEncryption 40:bf:d2:ad:3b:62:d3:07:d4:9b:85:b4:62:27:b9:a9:7d:2e: 94:3b:b7:d9:9c:d1:11:a7:1a:f6:1f:93:62:ad:63:5e:71:81: 40:a5:74:62:c2:cd:65:c1:2e:59:6d:0e:cd:98:c2:e8:c8:de: a6:5b:73:9a:74:90:ad:63:0d:ea:f5:63:b1:45:7e:62:6e:58: 1b:b5:c1:fc:18:21:ab:31:fb:d1:fa:de:4f:02:45:35:f0:a2: 82:95:e9:25:07:0b:91:77:49:8f:18:c1:62:7e:a5:cc:8a:11: 7a:e8:bf:42:5c:de:06:fb:e7:d4:14:10:c5:1d:35:e8:82:5e: 61:25:d5:0a:71:22:d7:69:42:49:1c:fa:71:c0:2e:e6:44:15: e2:63:3a:42:d8:a3:e4:2f:0b:ef:e8:ac:b1:5b:8e:b3:ee:92: d6:84:6e:fe:55:74:f4:dd:82:4a:bf:f8:55:59:90:59:d6:36: fc:57:50:25:f5:2c:fb:e7:0e:63:8e:91:b5:ce:05:f3:42:91: b3:14:71:7e:4a:c5:92:34:a2:69:6c:63:a8:35:e4:94:28:aa: 94:0a:41:30:ae:36:c2:04:84:b5:76:28:06:d4:48:1a:3d:13: ad:c3:13:a3:2f:c2:27:56:c0:8c:a2:6d:1d:56:b1:6e:1f:0a: 46:79:5d:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N9p/64wPBFsPfDk80v7/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOTdjMTU0NTZlYjYwMDQwM2VjZmJiMTZjMjBlMDgxNjA5 NDRmOGYwHhcNMjYwMTAyMTAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWY2M2RiOGZmYTA0ODUxODM5N2ZhNmM3NGI2MzZkNjRmMDNlYWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp/AnuzUvCwTBUkPwdXT6vlHrL21 aTvFFV2MzxAMNTrbq6ORwlYtaIVikEuUMBY0aghxzlIZ6kzbQocCRsdQ/FKZ8F2W UvXU8LxwwV7p6vk3ReVvaqfoKH7rE57g1fkNhtX6uRWcejlt0MwjnQn4wxlI4XWB 1EyDyHmC26GputmsZjZd/Z7WWI646YyuJSVj9YQrfDNswrsb21pAWPUu5prtAhID hiih64iyWhpu4aPbaUSbAm6oYup537+g9Diog0tY0rLlgY25M3GeX3+dpFaqBi36 wet63IUT+XoWxdRlttfnjX0wl+c6AxNT7RjXKLLpw8moxmTYJiSV1GVW0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFH2Pbj/oEhRg5f6bHS2NtZPA+qxMB8GA1UdIwQY MBaAFLqXwVRW62AEA+z7sWwg4IFglE+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXBmQlZGYnJZQVFEN1B1eGJDRGdnV0NVVDQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jNDZkMWUtOTg3ZC00ZjY1LWIxMWIt MmUyY2Q2NDM1MTA2LzEvVWZZOXVQLWdTRkdEbF9wc2RMWTIxazhENnJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9jNDZkMWUtOTg3ZC00ZjY1LWIxMWItMmUyY2Q2NDM1MTA2 LzEvdXBmQlZGYnJZQVFEN1B1eGJDRGdnV0NVVDQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwS+OMA0G CSqGSIb3DQEBCwUAA4IBAQBAv9KtO2LTB9SbhbRiJ7mpfS6UO7fZnNERpxr2H5Ni rWNecYFApXRiws1lwS5ZbQ7NmMLoyN6mW3OadJCtYw3q9WOxRX5iblgbtcH8GCGr MfvR+t5PAkU18KKCleklBwuRd0mPGMFifqXMihF66L9CXN4G++fUFBDFHTXogl5h JdUKcSLXaUJJHPpxwC7mRBXiYzpC2KPkLwvv6KyxW46z7pLWhG7+VXT03YJKv/hV WZBZ1jb8V1Al9Sz75w5jjpG1zgXzQpGzFHF+SsWSNKJpbGOoNeSUKKqUCkEwrjbC BIS1digG1EgaPROtwxOjL8InVsCMom0dVrFuHwpGeV0B -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:36 2026 by rpki-client