This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/Ujv5tUYWGeiVs_R4Bl0O6cV6CPU.roa File: Ujv5tUYWGeiVs_R4Bl0O6cV6CPU.roa (raw, json) Hash identifier: T3NFEwCtciElA5xvLnKd1BMF5VD6hCHMxPdJ+yTHW8k= Subject key identifier: 52:3B:F9:B5:46:16:19:E8:95:B3:F4:78:06:5D:0E:E9:C5:7A:08:F5 Certificate issuer: /CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622 Certificate serial: 019B7911486C5C9A0E5300727FF9C82C14A0 Authority key identifier: 9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/Ujv5tUYWGeiVs_R4Bl0O6cV6CPU.roa Signing time: Thu 01 Jan 2026 10:18:54 +0000 ROA not before: Thu 01 Jan 2026 10:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44710 IP address blocks: 31.131.140.0/24 maxlen: 24 31.131.141.0/24 maxlen: 24 91.217.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:48:6c:5c:9a:0e:53:00:72:7f:f9:c8:2c:14:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622 Validity Not Before: Jan 1 10:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=523bf9b5461619e895b3f478065d0ee9c57a08f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:aa:cd:5b:20:c4:fd:ee:72:4f:1f:7d:73:2c: ad:f0:3e:0d:c8:30:e1:64:cb:d5:6a:b4:ac:ac:5e: f0:07:92:74:f8:e3:1f:a8:ed:01:4a:3e:f2:46:13: 10:57:1f:cd:df:d0:56:85:2d:9c:46:9a:e6:ce:ac: 0e:dc:cd:de:78:94:15:06:23:58:01:af:c6:4d:2a: 5b:b9:47:e3:e2:d1:1f:33:91:6f:37:5f:b3:70:73: 53:89:9e:9f:25:b9:85:6d:0c:6d:68:31:fa:ab:88: fe:ac:44:2c:26:f1:5b:a4:d9:1f:3a:72:97:f9:55: 26:49:ff:55:98:9e:08:38:65:e9:e5:70:6f:91:87: c0:ee:84:d8:72:39:4d:70:b0:f2:27:b5:9c:7e:25: ab:1f:bc:fd:aa:2d:e5:40:81:b3:42:39:36:54:a2: 40:8d:c2:0c:f4:94:88:9e:b7:5a:13:a1:4f:dd:28: 85:db:6d:2e:92:67:c1:08:f8:9b:4c:14:0c:f5:a3: f2:85:12:f6:fa:79:f0:04:77:21:7b:e6:ed:8e:8e: c5:ce:e0:b6:54:e6:90:a3:1a:2a:ef:61:6c:0f:cb: a3:07:2a:6d:7a:07:b5:52:e9:82:5c:b1:5a:1a:ee: a3:a7:93:48:39:b1:39:31:e1:b0:e5:6c:0e:9a:07: 14:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:3B:F9:B5:46:16:19:E8:95:B3:F4:78:06:5D:0E:E9:C5:7A:08:F5 X509v3 Authority Key Identifier: keyid:9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/Ujv5tUYWGeiVs_R4Bl0O6cV6CPU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.131.140.0/23 91.217.244.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:ed:94:73:5c:84:d7:a1:05:6f:0d:f2:db:dc:e5:0b:69:07: 65:fe:ac:bd:26:fe:c3:09:5d:48:7e:f5:41:f3:48:fa:6c:2e: 3d:c3:2d:82:f3:61:b4:fc:7f:c6:75:c0:d8:bf:b2:57:e9:24: b8:10:e1:4d:96:2d:31:83:61:da:dc:95:45:c2:64:70:94:b8: 82:92:a7:0e:9f:0d:51:4d:02:2c:dd:74:3d:8e:0a:9c:40:a1: 05:a4:7a:e9:d6:73:ce:f0:94:90:ef:53:71:5f:ab:2b:bf:e2: 7e:2a:0a:9d:43:e7:9a:6d:51:33:de:f9:e2:cf:0d:de:48:f4: c2:51:31:2e:d9:be:9a:a7:b4:92:04:48:8f:94:c5:47:14:87: f5:e7:d3:c0:26:cc:f7:c0:b5:34:0d:9c:e4:6d:7d:75:5a:1c: 41:40:72:fc:1f:43:46:11:14:bc:0b:6d:6d:5b:fc:10:df:c8: 15:ee:2c:57:73:c0:b0:60:a8:ea:4b:55:5b:69:ee:18:92:c7: fa:06:05:fb:4e:f2:82:47:da:b1:08:e2:c0:be:00:00:09:55: 58:91:06:2b:f0:79:88:e6:90:66:e6:23:d9:6d:47:6e:13:f6: ad:25:e2:00:d8:6f:85:0b:84:b9:ea:75:52:f7:a8:e7:1a:dc: b9:91:a2:30 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EUhsXJoOUwByf/nILBSgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOGNkN2Q2YTQxMDU3NTBiZjg5NzVhN2QwYjk2Nzk0YzFl ZmU2MjIwHhcNMjYwMTAxMTAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjNiZjliNTQ2MTYxOWU4OTViM2Y0NzgwNjVkMGVlOWM1N2EwOGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqrNWyDE/e5yTx99cyyt8D4NyDDh ZMvVarSsrF7wB5J0+OMfqO0BSj7yRhMQVx/N39BWhS2cRprmzqwO3M3eeJQVBiNY Aa/GTSpbuUfj4tEfM5FvN1+zcHNTiZ6fJbmFbQxtaDH6q4j+rEQsJvFbpNkfOnKX +VUmSf9VmJ4IOGXp5XBvkYfA7oTYcjlNcLDyJ7WcfiWrH7z9qi3lQIGzQjk2VKJA jcIM9JSInrdaE6FP3SiF220ukmfBCPibTBQM9aPyhRL2+nnwBHche+btjo7FzuC2 VOaQoxoq72FsD8ujByptege1UumCXLFaGu6jp5NIObE5MeGw5WwOmgcUNwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFI7+bVGFhnolbP0eAZdDunFegj1MB8GA1UdIwQY MBaAFJ6M19akEFdQv4l1p9C5Z5TB7+YiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbm96WDFxUVFWMUNfaVhXbjBMbG5sTUh2NWlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84NWM2YmQtNmE2OC00ZDExLWI5Y2Qt OGMyZGY1YTVjNmQ3LzEvVWp2NXRVWVdHZWlWc19SNEJsME82Y1Y2Q1BVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi84NWM2YmQtNmE2OC00ZDExLWI5Y2QtOGMyZGY1YTVjNmQ3 LzEvbm96WDFxUVFWMUNfaVhXbjBMbG5sTUh2NWlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBH4OMAwQA W9n0MA0GCSqGSIb3DQEBCwUAA4IBAQAN7ZRzXITXoQVvDfLb3OULaQdl/qy9Jv7D CV1IfvVB80j6bC49wy2C82G0/H/GdcDYv7JX6SS4EOFNli0xg2Ha3JVFwmRwlLiC kqcOnw1RTQIs3XQ9jgqcQKEFpHrp1nPO8JSQ71NxX6srv+J+KgqdQ+eabVEz3vni zw3eSPTCUTEu2b6ap7SSBEiPlMVHFIf159PAJsz3wLU0DZzkbX11WhxBQHL8H0NG ERS8C21tW/wQ38gV7ixXc8CwYKjqS1Vbae4Yksf6BgX7TvKCR9qxCOLAvgAACVVY kQYr8HmI5pBm5iPZbUduE/atJeIA2G+FC4S56nVS96jnGty5kaIw -----END CERTIFICATE-----Generated at Tue Jan 20 09:41:07 2026 by rpki-client