This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/Ujf1HQzWin0iYAwrw7fkvXgREuQ.roa File: Ujf1HQzWin0iYAwrw7fkvXgREuQ.roa (raw, json) Hash identifier: f0htKcIDwehLOvh5H4qdrK1WzEMGMziN25syYu4+eGg= Subject key identifier: 52:37:F5:1D:0C:D6:8A:7D:22:60:0C:2B:C3:B7:E4:BD:78:11:12:E4 Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea Certificate serial: 019C33E775AF38E01CB900C9837805A1E2E9 Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/Ujf1HQzWin0iYAwrw7fkvXgREuQ.roa Signing time: Fri 06 Feb 2026 17:02:12 +0000 ROA not before: Fri 06 Feb 2026 17:02:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25693 IP address blocks: 62.3.10.0/24 maxlen: 24 62.106.64.0/24 maxlen: 24 91.242.232.0/24 maxlen: 24 146.19.197.0/24 maxlen: 24 193.9.50.0/24 maxlen: 24 193.163.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:33:e7:75:af:38:e0:1c:b9:00:c9:83:78:05:a1:e2:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea Validity Not Before: Feb 6 17:02:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5237f51d0cd68a7d22600c2bc3b7e4bd781112e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:19:7e:7a:ca:81:47:01:3f:41:32:31:dc:67: 69:51:93:08:fa:e6:26:5b:82:98:ac:8c:2e:f6:5f: aa:56:cf:c0:9a:d2:ac:47:20:17:d1:55:37:fd:6d: 77:0f:51:26:b2:1e:66:ab:eb:68:fc:d9:8f:9a:11: 4f:20:7f:3d:a0:91:52:88:06:14:c7:c8:d0:7f:8d: 3b:bf:8f:63:ff:78:48:c0:96:c2:88:dc:ba:6f:26: 9e:28:a7:78:04:3b:98:42:ef:ad:1f:ca:dc:f5:2d: ff:b9:80:f8:be:ad:a8:c3:4c:df:67:aa:b5:6c:74: 26:1f:d2:3a:b3:6b:b4:43:e4:03:b3:69:df:90:06: d3:21:fb:72:35:2f:c7:7e:17:b7:5a:37:e7:24:8f: f1:f3:60:ec:1b:5d:1a:5c:95:24:9a:ab:e9:b7:7b: 17:44:19:e3:fe:00:59:4e:95:6c:a1:93:57:15:77: 8a:d6:36:bf:6d:52:88:c7:19:42:06:bb:56:01:23: 35:5d:e6:fc:c2:a0:c0:36:c2:94:de:4a:d1:d1:ff: d2:bc:24:c7:72:47:00:c4:dd:d2:26:dd:8e:67:d1: 14:03:08:83:b8:3a:95:1c:a3:49:63:79:18:2f:14: 88:ca:65:d4:dc:fa:76:71:ca:24:be:60:fe:69:b6: 88:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:37:F5:1D:0C:D6:8A:7D:22:60:0C:2B:C3:B7:E4:BD:78:11:12:E4 X509v3 Authority Key Identifier: keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/Ujf1HQzWin0iYAwrw7fkvXgREuQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.3.10.0/24 62.106.64.0/24 91.242.232.0/24 146.19.197.0/24 193.9.50.0/24 193.163.204.0/24 Signature Algorithm: sha256WithRSAEncryption 67:df:d1:cf:53:2e:5e:45:93:a9:19:c7:73:4a:63:21:94:0a: 85:31:76:54:bd:cd:c4:2d:46:05:ce:14:9a:4b:14:8c:bf:fc: c1:99:b6:6f:2a:36:af:84:51:76:77:4b:f3:70:7e:06:6c:79: 93:c5:da:ac:10:26:5c:19:88:08:cc:26:58:bb:14:5e:91:e3: 44:a1:d4:2a:d4:29:d9:7c:fe:c6:9a:47:18:ec:10:df:20:09: 36:96:65:46:17:5b:e4:69:7a:4a:46:e5:b6:3e:bd:92:4a:93: 0d:dd:69:f9:d3:68:c8:36:6a:f7:12:df:bd:e6:95:1a:1a:f8: 6a:4e:08:ce:ac:cd:d6:d3:ba:0a:c2:30:89:78:9f:4c:85:5f: 5e:01:8d:42:ae:b2:b2:2c:a5:32:1d:28:4f:f2:c2:a4:19:06: e3:2c:d2:3e:43:01:1e:f9:b8:aa:68:34:18:73:b1:13:10:3f: 4c:51:1d:79:83:c6:fe:48:92:18:16:6c:05:93:c9:69:a6:44: e4:a1:35:a9:84:bb:c1:02:c6:19:d2:a7:a1:68:02:e0:44:b6: 1d:9e:a2:4f:64:e6:16:49:f6:d1:57:7e:07:d2:5d:d0:a8:fa: 4f:c3:17:0e:52:8f:21:b7:4b:58:ce:22:8d:fc:e0:ee:c8:cb: 96:a2:46:b0 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZwz53WvOOAcuQDJg3gFoeLpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTEyNzcyM2VhMGNmZDA3MjQ3MTNiMjkxNzM0Y2FhMzUz ZTIwZWEwHhcNMjYwMjA2MTcwMjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjM3ZjUxZDBjZDY4YTdkMjI2MDBjMmJjM2I3ZTRiZDc4MTExMmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhl+esqBRwE/QTIx3GdpUZMI+uYm W4KYrIwu9l+qVs/AmtKsRyAX0VU3/W13D1Emsh5mq+to/NmPmhFPIH89oJFSiAYU x8jQf407v49j/3hIwJbCiNy6byaeKKd4BDuYQu+tH8rc9S3/uYD4vq2ow0zfZ6q1 bHQmH9I6s2u0Q+QDs2nfkAbTIftyNS/Hfhe3WjfnJI/x82DsG10aXJUkmqvpt3sX RBnj/gBZTpVsoZNXFXeK1ja/bVKIxxlCBrtWASM1Xeb8wqDANsKU3krR0f/SvCTH ckcAxN3SJt2OZ9EUAwiDuDqVHKNJY3kYLxSIymXU3Pp2ccokvmD+abaIxwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFFI39R0M1op9ImAMK8O35L14ERLkMB8GA1UdIwQY MBaAFFBRJ3I+oM/QckcTspFzTKo1PiDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYt NTU2MDhiNjk0NDU2LzEvVWpmMUhReldpbjBpWUF3cnc3Zmt2WGdSRXVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYtNTU2MDhiNjk0NDU2 LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAPgMKAwQA PmpAAwQAW/LoAwQAkhPFAwQAwQkyAwQAwaPMMA0GCSqGSIb3DQEBCwUAA4IBAQBn 39HPUy5eRZOpGcdzSmMhlAqFMXZUvc3ELUYFzhSaSxSMv/zBmbZvKjavhFF2d0vz cH4GbHmTxdqsECZcGYgIzCZYuxRekeNEodQq1CnZfP7GmkcY7BDfIAk2lmVGF1vk aXpKRuW2Pr2SSpMN3Wn502jINmr3Et+95pUaGvhqTgjOrM3W07oKwjCJeJ9MhV9e AY1CrrKyLKUyHShP8sKkGQbjLNI+QwEe+biqaDQYc7ETED9MUR15g8b+SJIYFmwF k8lppkTkoTWphLvBAsYZ0qehaALgRLYdnqJPZOYWSfbRV34H0l3QqPpPwxcOUo8h t0tYziKN/ODuyMuWokaw -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:10 2026 by rpki-client