This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/UyXm5ATWPwo3EOUnhBfGXzkllu4.roa
File: UyXm5ATWPwo3EOUnhBfGXzkllu4.roa (raw, json)
Hash identifier: zdPdUZoq7nIIRZBqM6+EqVB0rkz+qapJkbp3+Jl8kA0=
Subject key identifier: 53:25:E6:E4:04:D6:3F:0A:37:10:E5:27:84:17:C6:5F:39:25:96:EE
Certificate issuer: /CN=12d9ad5db899e7e7e3cfecf97bc42d38b726279a
Certificate serial: 019BFA505D80E5634979E67BC80F9FBCB75A
Authority key identifier: 12:D9:AD:5D:B8:99:E7:E7:E3:CF:EC:F9:7B:C4:2D:38:B7:26:27:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/UyXm5ATWPwo3EOUnhBfGXzkllu4.roa
Signing time: Mon 26 Jan 2026 12:38:49 +0000
ROA not before: Mon 26 Jan 2026 12:38:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15830
IP address blocks: 193.28.80.0/24 maxlen: 24
193.28.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 15:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fa:50:5d:80:e5:63:49:79:e6:7b:c8:0f:9f:bc:b7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12d9ad5db899e7e7e3cfecf97bc42d38b726279a
Validity
Not Before: Jan 26 12:38:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5325e6e404d63f0a3710e5278417c65f392596ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f6:e6:9c:f6:7e:31:43:0f:01:ca:a6:02:bc:
38:05:a2:38:75:09:ea:9d:aa:72:bb:5b:cb:85:fe:
38:14:b9:98:1c:ae:54:4b:d0:52:83:fb:d8:9d:da:
12:91:ab:4b:3a:ea:3f:97:d1:ef:7f:ff:ff:f9:28:
ef:3e:95:ee:44:53:da:3f:cd:4c:0b:73:b5:dc:ad:
9d:0c:57:54:b3:30:bd:d2:cd:77:aa:c2:35:e7:df:
cd:75:16:4c:be:5d:32:16:67:48:94:01:54:ba:6c:
e6:a9:04:25:ca:e8:fb:80:bf:57:24:f0:7d:73:75:
9c:e9:6c:b3:45:47:76:62:74:98:02:ab:7b:a8:da:
29:83:aa:8d:8e:7a:08:44:2e:75:38:26:1e:b6:bf:
12:d0:55:06:dd:b0:61:d3:43:27:ff:33:ee:61:e2:
b3:b3:8a:30:08:7e:22:4f:87:4b:79:da:e9:e4:0d:
fb:13:0d:76:30:dc:7b:a2:d6:02:89:12:5b:bc:7b:
5a:a7:cf:9f:0a:b2:b0:a5:34:1e:e5:f7:1b:ed:df:
93:88:11:74:a1:c9:69:5e:44:76:34:e5:b3:e7:4a:
be:2f:e4:cc:76:73:e3:ec:1e:2b:c1:ce:b1:be:03:
58:f6:96:03:aa:35:8c:56:94:e2:ed:39:c3:7f:6e:
b1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:25:E6:E4:04:D6:3F:0A:37:10:E5:27:84:17:C6:5F:39:25:96:EE
X509v3 Authority Key Identifier:
keyid:12:D9:AD:5D:B8:99:E7:E7:E3:CF:EC:F9:7B:C4:2D:38:B7:26:27:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/UyXm5ATWPwo3EOUnhBfGXzkllu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.80.0/24
193.28.82.0/24
Signature Algorithm: sha256WithRSAEncryption
65:9b:88:39:67:0b:28:b8:36:12:04:ed:4a:d8:bb:60:2b:a6:
d6:c5:2d:4b:26:aa:8a:5a:0c:10:e8:32:89:1e:15:6b:71:33:
76:90:4b:07:83:0f:ba:a0:40:cd:a8:33:af:fe:f6:da:31:45:
01:95:88:7a:e8:4b:60:34:99:48:c5:8e:bc:a0:5f:e0:fe:11:
21:7a:5c:1c:d6:ec:55:59:64:b6:48:02:b3:13:3a:c7:8d:58:
c7:fd:e8:2c:50:cc:f4:06:91:d1:1a:9b:e5:16:e2:4a:66:7c:
ce:b7:7d:53:f0:67:5c:18:62:14:dd:ab:9b:2b:b6:75:6d:3d:
ee:e5:dc:01:1d:a5:97:e0:a7:d2:f9:16:38:0f:4a:9f:01:23:
a5:3f:36:ea:d5:1e:2c:37:47:0b:61:62:fd:63:c1:1e:50:2b:
3e:38:77:c4:d9:63:85:f4:3c:c9:5b:ae:cf:b6:42:7c:83:02:
61:7d:4d:bf:7c:a6:c6:3c:a9:45:3f:8e:26:bc:03:b2:ee:ef:
41:4e:a3:43:e8:92:c0:3c:9c:e6:28:d2:f7:b2:ed:d4:b7:87:
e6:d7:bc:46:b6:73:1a:d8:cb:58:72:f4:45:a5:91:27:e0:3c:
3d:ae:8a:3f:80:69:11:53:fc:9b:d9:a3:1d:a9:49:91:8b:b3:
11:3c:14:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 01:04:02 2026 by rpki-client