This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/uPCaDDec9QKPaddyi8Q6i4Q7q7k.roa File: uPCaDDec9QKPaddyi8Q6i4Q7q7k.roa (raw, json) Hash identifier: n+pffEHjG87ngAjTdw3F82UnpSjTNX/RT+SqH5AesLg= Subject key identifier: B8:F0:9A:0C:37:9C:F5:02:8F:69:D7:72:8B:C4:3A:8B:84:3B:AB:B9 Certificate issuer: /CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0 Certificate serial: 019B7CEDB2DF98869F582E84D51E2D213261 Authority key identifier: 2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/uPCaDDec9QKPaddyi8Q6i4Q7q7k.roa Signing time: Fri 02 Jan 2026 04:18:31 +0000 ROA not before: Fri 02 Jan 2026 04:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201703 IP address blocks: 195.62.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.mft rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:b2:df:98:86:9f:58:2e:84:d5:1e:2d:21:32:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ae2bf4ba47d715e53e2eb3d012d3fcbcd1b0ec0 Validity Not Before: Jan 2 04:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8f09a0c379cf5028f69d7728bc43a8b843babb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b7:f0:78:4c:58:a8:58:42:96:4d:cd:9d:36: 47:2c:5b:3a:8d:b6:8f:ae:a1:a4:4c:1e:ca:fc:ff: cd:a2:43:43:cd:b0:0f:07:0a:26:bd:2b:a7:28:fc: 92:9b:b2:fc:3b:db:a5:17:f6:34:57:01:cd:f5:28: 9a:06:3c:17:f1:0f:1b:cd:b2:ea:f4:4b:43:a3:d2: 06:d3:46:eb:34:ef:bb:ce:4a:8d:22:ea:58:60:b0: 3a:66:46:c3:80:20:79:90:7e:03:36:36:0e:b9:4e: d1:26:bf:07:85:87:ee:27:0f:0d:c9:6c:53:40:4a: cc:7e:4f:fb:3b:de:7f:70:c1:3b:db:79:18:1b:9f: 70:36:df:4f:ca:21:5b:88:a0:84:32:96:8a:3a:08: a4:bc:c0:4c:3f:4b:ec:91:b6:ee:9e:7d:cf:d1:52: df:32:48:41:d6:d4:6e:ed:a2:ff:5e:b7:db:2a:12: e1:02:3f:13:31:c3:81:ef:35:84:92:64:55:66:2a: 80:71:b6:2a:54:e1:db:81:6b:4d:f7:99:30:7f:87: b2:6f:89:cb:81:27:4f:e7:80:20:d6:9d:57:de:cc: b0:1d:4b:a6:b9:98:d6:38:45:a2:ee:40:88:25:f0: a0:02:e0:a4:61:ac:db:f6:11:a3:cb:74:3a:74:4d: e1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F0:9A:0C:37:9C:F5:02:8F:69:D7:72:8B:C4:3A:8B:84:3B:AB:B9 X509v3 Authority Key Identifier: keyid:2A:E2:BF:4B:A4:7D:71:5E:53:E2:EB:3D:01:2D:3F:CB:CD:1B:0E:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuK_S6R9cV5T4us9AS0_y80bDsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/uPCaDDec9QKPaddyi8Q6i4Q7q7k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40a276-8515-442c-816e-38eed6df053b/1/KuK_S6R9cV5T4us9AS0_y80bDsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.62.4.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:e7:43:9f:25:81:39:97:3f:e4:3d:2c:be:52:59:a0:5f:4c: d9:68:f9:15:50:44:4a:c7:a5:84:f0:aa:de:29:1a:96:78:33: 95:ee:de:74:d3:44:33:22:76:83:3d:2d:08:12:d5:73:5e:40: 9e:1c:84:a9:db:e0:37:c8:cf:c0:c9:bc:f0:c8:f8:ce:75:ae: 91:d9:e0:e3:54:22:28:f9:c5:97:70:11:83:76:c3:8a:d2:ff: a9:d0:d1:12:01:69:4b:ce:af:c7:f8:0a:7f:2a:a4:05:d5:56: 29:9f:38:25:ec:26:75:81:4a:bc:d3:12:91:bc:a6:54:09:69: 2c:39:5d:98:28:43:5d:25:0b:e9:a1:26:49:3e:ae:5f:a8:ab: f3:9c:29:2b:a9:cc:6e:db:b6:a6:49:20:f9:34:15:0f:02:72: bd:5a:ff:19:15:77:fb:17:da:05:7c:6c:97:8c:e5:a4:59:37: 39:19:f7:db:59:cf:0d:84:e4:4e:66:70:7e:1f:c4:9c:d7:3d: 25:86:6c:cb:be:a8:1e:85:18:bf:5b:3d:10:0e:a0:f2:7b:3b: eb:3c:73:3e:96:93:35:05:0a:7c:c1:61:4f:34:88:d5:4e:76: 9d:d4:37:ae:65:b3:62:61:51:73:f6:ef:2e:7e:cf:66:a3:83: 6e:5d:08:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87bLfmIafWC6E1R4tITJhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhZTJiZjRiYTQ3ZDcxNWU1M2UyZWIzZDAxMmQzZmNiY2Qx YjBlYzAwHhcNMjYwMTAyMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGYwOWEwYzM3OWNmNTAyOGY2OWQ3NzI4YmM0M2E4Yjg0M2JhYmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbfweExYqFhClk3NnTZHLFs6jbaP rqGkTB7K/P/NokNDzbAPBwomvSunKPySm7L8O9ulF/Y0VwHN9SiaBjwX8Q8bzbLq 9EtDo9IG00brNO+7zkqNIupYYLA6ZkbDgCB5kH4DNjYOuU7RJr8HhYfuJw8NyWxT QErMfk/7O95/cME723kYG59wNt9PyiFbiKCEMpaKOgikvMBMP0vskbbunn3P0VLf MkhB1tRu7aL/XrfbKhLhAj8TMcOB7zWEkmRVZiqAcbYqVOHbgWtN95kwf4eyb4nL gSdP54Ag1p1X3sywHUumuZjWOEWi7kCIJfCgAuCkYazb9hGjy3Q6dE3h4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLjwmgw3nPUCj2nXcovEOouEO6u5MB8GA1UdIwQY MBaAFCriv0ukfXFeU+LrPQEtP8vNGw7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3VLX1M2UjljVjVUNHVzOUFTMF95ODBiRHNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80MGEyNzYtODUxNS00NDJjLTgxNmUt MzhlZWQ2ZGYwNTNiLzEvdVBDYUREZWM5UUtQYWRkeWk4UTZpNFE3cTdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy80MGEyNzYtODUxNS00NDJjLTgxNmUtMzhlZWQ2ZGYwNTNi LzEvS3VLX1M2UjljVjVUNHVzOUFTMF95ODBiRHNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwz4EMA0G CSqGSIb3DQEBCwUAA4IBAQCP50OfJYE5lz/kPSy+UlmgX0zZaPkVUERKx6WE8Kre KRqWeDOV7t5000QzInaDPS0IEtVzXkCeHISp2+A3yM/AybzwyPjOda6R2eDjVCIo +cWXcBGDdsOK0v+p0NESAWlLzq/H+Ap/KqQF1VYpnzgl7CZ1gUq80xKRvKZUCWks OV2YKENdJQvpoSZJPq5fqKvznCkrqcxu27amSSD5NBUPAnK9Wv8ZFXf7F9oFfGyX jOWkWTc5GffbWc8NhOROZnB+H8Sc1z0lhmzLvqgehRi/Wz0QDqDyezvrPHM+lpM1 BQp8wWFPNIjVTnad1DeuZbNiYVFz9u8ufs9mo4NuXQjD -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:07 2026 by rpki-client