This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/UY2ZebIm0cAjm1dM5vCNvMrL_uw.roa File: UY2ZebIm0cAjm1dM5vCNvMrL_uw.roa (raw, json) Hash identifier: IslHM2Y+PTrY80vNpz+SCapX87BffUxZttgW9fX45CU= Subject key identifier: 51:8D:99:79:B2:26:D1:C0:23:9B:57:4C:E6:F0:8D:BC:CA:CB:FE:EC Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 019B7C127C644E9DCE5657B4870A3F2E5BF7 Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/UY2ZebIm0cAjm1dM5vCNvMrL_uw.roa Signing time: Fri 02 Jan 2026 00:19:04 +0000 ROA not before: Fri 02 Jan 2026 00:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42397 IP address blocks: 185.232.65.0/24 maxlen: 24 193.29.13.0/24 maxlen: 24 193.29.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:7c:64:4e:9d:ce:56:57:b4:87:0a:3f:2e:5b:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Jan 2 00:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=518d9979b226d1c0239b574ce6f08dbccacbfeec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:81:a7:e2:d5:07:64:c3:78:7d:b6:cb:96:20: 8e:6e:46:dc:c7:22:f9:bf:b4:a7:1b:79:fc:fb:88: 82:ff:ec:94:75:58:89:de:2d:84:70:c6:35:ee:3b: 83:3a:70:bc:de:18:25:9a:b7:83:12:5a:47:96:89: d2:cb:d1:fc:c0:32:3c:e5:ea:0a:e0:60:45:1e:a0: d6:c8:ed:f9:a9:18:f3:cf:6b:28:37:c5:c3:e6:5e: 81:3d:ae:82:6a:05:36:62:a4:74:17:97:fc:0c:38: 93:30:7b:69:33:82:bb:21:73:69:82:62:fc:34:36: 81:b6:0d:39:99:53:a5:9d:8d:57:5d:4e:cb:24:97: 87:f7:41:c8:61:ce:8e:75:22:08:06:7b:25:cc:99: 72:98:62:5e:70:8f:b1:32:5c:ee:c6:75:e2:6f:e4: 11:ff:f1:36:20:00:9b:7b:36:ca:1b:c7:44:22:34: 71:ba:c5:55:88:b8:cd:6b:4c:b2:f0:ca:f2:3f:cb: fe:33:c8:3b:3c:18:bd:fe:5e:ca:22:22:da:31:bc: 65:14:55:e2:a6:b4:04:95:42:54:16:1c:58:4f:59: 6d:ee:15:06:11:6b:a4:0b:74:bb:c4:b6:03:9e:59: 40:25:58:9a:b1:59:5a:6a:e4:6b:c5:45:ec:74:d4: 32:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:8D:99:79:B2:26:D1:C0:23:9B:57:4C:E6:F0:8D:BC:CA:CB:FE:EC X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/UY2ZebIm0cAjm1dM5vCNvMrL_uw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.232.65.0/24 193.29.13.0/24 193.29.15.0/24 Signature Algorithm: sha256WithRSAEncryption 65:5d:0b:e7:17:0c:fa:10:b4:8a:8a:10:fc:34:44:cb:4b:46: dc:35:c5:10:f5:01:9f:74:bb:c2:02:6e:6f:76:1a:e9:99:7e: f4:12:0c:79:d3:73:f0:f0:e1:62:f9:83:5c:1a:86:68:5f:6a: 82:ac:db:4e:94:43:a4:80:73:25:6f:51:8d:c0:f4:8f:95:10: 66:17:9e:94:fb:7d:ed:d2:65:53:c4:64:f2:a5:84:12:29:7a: 8a:c8:05:aa:2e:0e:04:90:44:67:8f:90:92:8f:e5:64:2c:d5: 00:7b:cc:3f:db:71:ec:86:de:dc:9a:3d:22:43:03:21:3f:84: 0c:40:fe:9e:0c:77:2a:64:ec:98:6e:ac:94:96:1e:5e:7f:5a: f6:12:62:1c:57:89:b2:7f:dc:39:ee:67:0e:ea:66:9b:fc:37: 90:ec:75:a9:35:d2:27:9e:54:e5:e7:f5:23:eb:e5:c8:c7:df: e2:30:df:70:34:38:f0:b5:19:aa:f3:24:a0:7a:b8:71:e0:29: dd:59:22:06:6b:41:3d:84:9b:36:f4:04:e6:95:f1:18:99:65: e0:8c:8a:4c:25:df:34:c7:04:94:d7:97:27:37:b9:56:37:68: a2:73:65:6d:2b:dc:2d:45:0b:37:c4:d2:fb:99:66:75:62:e5: db:31:f6:bb -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8EnxkTp3OVle0hwo/Llv3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjYwMTAyMDAxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MThkOTk3OWIyMjZkMWMwMjM5YjU3NGNlNmYwOGRiY2NhY2JmZWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oGn4tUHZMN4fbbLliCObkbcxyL5 v7SnG3n8+4iC/+yUdViJ3i2EcMY17juDOnC83hglmreDElpHlonSy9H8wDI85eoK 4GBFHqDWyO35qRjzz2soN8XD5l6BPa6CagU2YqR0F5f8DDiTMHtpM4K7IXNpgmL8 NDaBtg05mVOlnY1XXU7LJJeH90HIYc6OdSIIBnslzJlymGJecI+xMlzuxnXib+QR //E2IACbezbKG8dEIjRxusVViLjNa0yy8MryP8v+M8g7PBi9/l7KIiLaMbxlFFXi prQElUJUFhxYT1lt7hUGEWukC3S7xLYDnllAJViasVlaauRrxUXsdNQyiwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFGNmXmyJtHAI5tXTObwjbzKy/7sMB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvVVkyWmViSW0wY0FqbTFkTTV2Q052TXJMX3V3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuehBAwQA wR0NAwQAwR0PMA0GCSqGSIb3DQEBCwUAA4IBAQBlXQvnFwz6ELSKihD8NETLS0bc NcUQ9QGfdLvCAm5vdhrpmX70Egx503Pw8OFi+YNcGoZoX2qCrNtOlEOkgHMlb1GN wPSPlRBmF56U+33t0mVTxGTypYQSKXqKyAWqLg4EkERnj5CSj+VkLNUAe8w/23Hs ht7cmj0iQwMhP4QMQP6eDHcqZOyYbqyUlh5ef1r2EmIcV4myf9w57mcO6mab/DeQ 7HWpNdInnlTl5/Uj6+XIx9/iMN9wNDjwtRmq8ySgerhx4CndWSIGa0E9hJs29ATm lfEYmWXgjIpMJd80xwSU15cnN7lWN2iic2VtK9wtRQs3xNL7mWZ1YuXbMfa7 -----END CERTIFICATE-----Generated at Wed Jan 21 16:12:35 2026 by rpki-client