This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/UFHh3vV19ELev_hBQqmjdsJvdRk.roa File: UFHh3vV19ELev_hBQqmjdsJvdRk.roa (raw, json) Hash identifier: xSmonOfsBVxyyfdFAzmkSxeWMqfBkDOi/XXRvC/iB2o= Subject key identifier: 50:51:E1:DE:F5:75:F4:42:DE:BF:F8:41:42:A9:A3:76:C2:6F:75:19 Certificate issuer: /CN=f19a5d5cb7949ce1bd209dc213993520e02d1085 Certificate serial: 019B7B3634C12139E57E267FF04B4EA56FCA Authority key identifier: F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/UFHh3vV19ELev_hBQqmjdsJvdRk.roa Signing time: Thu 01 Jan 2026 20:18:28 +0000 ROA not before: Thu 01 Jan 2026 20:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61211 IP address blocks: 148.163.184.0/22 maxlen: 24 185.15.28.0/22 maxlen: 24 185.62.72.0/22 maxlen: 24 185.203.16.0/22 maxlen: 24 2a03:bb40::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:34:c1:21:39:e5:7e:26:7f:f0:4b:4e:a5:6f:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f19a5d5cb7949ce1bd209dc213993520e02d1085 Validity Not Before: Jan 1 20:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5051e1def575f442debff84142a9a376c26f7519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d3:ef:5e:6c:85:98:c0:d0:65:1a:54:59:24: 39:39:ac:67:73:c4:ec:ae:14:2e:b5:ca:8e:64:2a: 3e:a7:45:52:09:0c:92:ac:70:44:bf:cb:00:eb:07: 7f:0c:1c:0c:47:2a:fa:79:b9:e3:af:3b:e9:95:a6: a8:ab:9a:0f:b3:db:ea:c9:5f:30:35:70:45:1d:ea: ad:af:b7:b3:6e:ed:6c:ab:44:35:0e:5a:0a:b5:79: ac:c0:5b:8d:99:0b:34:e3:4d:bb:81:a2:ae:9d:de: 96:7b:dc:27:cd:38:a7:38:7b:f6:77:e2:29:05:b1: be:8b:4b:a7:9a:1f:1d:5f:56:14:bc:35:84:59:7d: 9f:85:e6:f0:5c:60:ae:e8:e4:d9:eb:68:34:17:68: 8f:63:3a:b2:2c:58:92:e6:a5:2d:bc:dd:3f:e7:40: 17:cc:24:d3:b6:3c:4b:1c:a1:68:8a:c0:5c:f7:f7: 55:37:dc:c8:2f:13:21:08:fa:21:38:36:b0:c3:14: d9:a2:4d:d4:b2:fa:cd:94:8f:56:93:7e:f5:ec:5b: 41:cc:91:5b:c9:3f:0d:14:90:ae:02:86:fb:92:01: 35:4f:2e:eb:61:39:db:b5:6c:6b:98:3a:77:84:35: 43:87:dc:36:18:70:12:ef:56:22:26:c1:2c:04:f5: 6b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:51:E1:DE:F5:75:F4:42:DE:BF:F8:41:42:A9:A3:76:C2:6F:75:19 X509v3 Authority Key Identifier: keyid:F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/UFHh3vV19ELev_hBQqmjdsJvdRk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.163.184.0/22 185.15.28.0/22 185.62.72.0/22 185.203.16.0/22 IPv6: 2a03:bb40::/32 Signature Algorithm: sha256WithRSAEncryption 69:ac:02:b8:20:e4:d6:bf:a8:94:57:50:a9:f4:9b:5f:04:d5: b8:50:b4:88:b9:31:35:9d:28:d1:17:f2:6f:52:c1:c5:a5:1d: 87:36:d9:fc:e0:f1:ac:7f:f3:99:1d:de:fe:1d:6a:5d:b5:60: 5b:c8:a8:41:76:8a:54:b1:7d:13:c3:7a:58:0a:7b:cb:71:03: 0c:3e:da:80:24:4c:ed:44:a7:f0:41:8f:cc:65:db:46:54:18: 36:bc:3c:a4:99:01:65:df:65:e4:49:cb:99:f1:d5:04:d3:10: f6:fc:3b:8f:12:87:bf:ef:ec:32:a2:33:d9:27:f1:2b:c7:d1: 61:2b:38:5b:6c:bb:7b:da:a1:de:80:16:a9:c5:9a:6d:65:ce: d0:d3:af:be:e6:29:78:2f:bc:01:86:13:c4:8e:ff:ba:5c:7c: 15:4a:3c:d0:5f:9e:46:3f:fb:45:fd:3c:8b:45:75:8a:48:36: c8:a0:92:b8:bc:c4:40:d8:75:18:db:30:a7:ee:26:a8:09:3b: c8:d4:d2:08:6e:cb:f5:24:0c:1e:b5:88:53:99:97:62:7e:cf: 24:eb:18:7f:9d:a6:0a:3c:81:12:32:27:c1:6e:6e:82:d0:7f: 24:3f:f0:6b:9d:b1:71:ea:31:92:f8:9f:7d:d3:47:50:04:1e: a2:2a:ab:2f -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt7NjTBITnlfiZ/8EtOpW/KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxOWE1ZDVjYjc5NDljZTFiZDIwOWRjMjEzOTkzNTIwZTAy ZDEwODUwHhcNMjYwMTAxMjAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDUxZTFkZWY1NzVmNDQyZGViZmY4NDE0MmE5YTM3NmMyNmY3NTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NPvXmyFmMDQZRpUWSQ5Oaxnc8Ts rhQutcqOZCo+p0VSCQySrHBEv8sA6wd/DBwMRyr6ebnjrzvplaaoq5oPs9vqyV8w NXBFHeqtr7ezbu1sq0Q1DloKtXmswFuNmQs04027gaKund6We9wnzTinOHv2d+Ip BbG+i0unmh8dX1YUvDWEWX2fhebwXGCu6OTZ62g0F2iPYzqyLFiS5qUtvN0/50AX zCTTtjxLHKFoisBc9/dVN9zILxMhCPohODawwxTZok3UsvrNlI9Wk3717FtBzJFb yT8NFJCuAob7kgE1Ty7rYTnbtWxrmDp3hDVDh9w2GHAS71YiJsEsBPVriwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFFBR4d71dfRC3r/4QUKpo3bCb3UZMB8GA1UdIwQY MBaAFPGaXVy3lJzhvSCdwhOZNSDgLRCFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFpwZFhMZVVuT0c5SUozQ0U1azFJT0F0RUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zMDliZmQtY2JlNy00MTQ0LWE2MzAt MmY4MGEwYTAyMDZhLzEvVUZIaDN2VjE5RUxldl9oQlFxbWpkc0p2ZFJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8zMDliZmQtY2JlNy00MTQ0LWE2MzAtMmY4MGEwYTAyMDZh LzEvOFpwZFhMZVVuT0c5SUozQ0U1azFJT0F0RUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQClKO4AwQC uQ8cAwQCuT5IAwQCucsQMA0EAgACMAcDBQAqA7tAMA0GCSqGSIb3DQEBCwUAA4IB AQBprAK4IOTWv6iUV1Cp9JtfBNW4ULSIuTE1nSjRF/JvUsHFpR2HNtn84PGsf/OZ Hd7+HWpdtWBbyKhBdopUsX0Tw3pYCnvLcQMMPtqAJEztRKfwQY/MZdtGVBg2vDyk mQFl32XkScuZ8dUE0xD2/DuPEoe/7+wyojPZJ/Erx9FhKzhbbLt72qHegBapxZpt Zc7Q06++5il4L7wBhhPEjv+6XHwVSjzQX55GP/tF/TyLRXWKSDbIoJK4vMRA2HUY 2zCn7iaoCTvI1NIIbsv1JAwetYhTmZdifs8k6xh/naYKPIESMifBbm6C0H8kP/Br nbFx6jGS+J9900dQBB6iKqsv -----END CERTIFICATE-----Generated at Mon Feb 9 22:23:47 2026 by rpki-client