This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/UybLyc41wyq1EFImSu8EZ8F9ePY.roa File: UybLyc41wyq1EFImSu8EZ8F9ePY.roa (raw, json) Hash identifier: uoRuUCd9kxaIGLIP2zdwMd/9Cx50ab0dt0v8YUxq+5M= Subject key identifier: 53:26:CB:C9:CE:35:C3:2A:B5:10:52:26:4A:EF:04:67:C1:7D:78:F6 Certificate issuer: /CN=b87b766968716296e5bba0bce83856ae7165b8b8 Certificate serial: 019BBE7024F6C496D79D4E3D7EDC07FDD65C Authority key identifier: B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/UybLyc41wyq1EFImSu8EZ8F9ePY.roa Signing time: Wed 14 Jan 2026 21:36:18 +0000 ROA not before: Wed 14 Jan 2026 21:36:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 66.245.192.0/19 maxlen: 32 78.141.192.0/18 maxlen: 32 78.141.224.0/19 maxlen: 32 80.240.16.0/20 maxlen: 32 95.179.128.0/17 maxlen: 32 185.92.220.0/22 maxlen: 32 192.248.128.0/18 maxlen: 32 199.247.0.0/19 maxlen: 32 209.250.224.0/19 maxlen: 32 217.69.0.0/20 maxlen: 32 2a05:f480::/29 maxlen: 48 2a05:f480:1000::/38 maxlen: 38 2a05:f480:1400::/38 maxlen: 38 2a05:f480:1800::/38 maxlen: 38 2a05:f480:1c00::/38 maxlen: 38 2a05:f480:2000::/38 maxlen: 38 2a05:f480:2400::/38 maxlen: 38 2a05:f480:2800::/38 maxlen: 38 2a05:f480:2c00::/38 maxlen: 38 2a05:f480:3000::/38 maxlen: 38 2a05:f480:3400::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:be:70:24:f6:c4:96:d7:9d:4e:3d:7e:dc:07:fd:d6:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87b766968716296e5bba0bce83856ae7165b8b8 Validity Not Before: Jan 14 21:36:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5326cbc9ce35c32ab51052264aef0467c17d78f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1d:00:08:ed:d3:cb:b6:44:fa:9c:5c:c1:87: dd:45:27:70:6f:b1:df:4a:51:60:1a:63:7e:23:1a: 0b:98:cf:2b:3b:52:32:29:6b:34:46:7e:52:48:c0: d4:18:40:b0:9d:a1:ac:d2:c6:41:e9:41:09:98:c8: 97:cd:3e:df:f9:05:c4:13:26:d6:f0:5e:d5:4f:b2: 1f:21:21:bd:29:90:1d:21:f1:c6:24:63:d8:5d:42: b5:46:43:46:fc:11:cc:ff:75:ff:8c:ca:85:aa:75: cd:e6:f1:da:85:c3:7c:77:1c:14:25:f5:b0:80:4d: 39:41:8c:1a:07:13:24:0c:cf:57:11:b2:45:34:d7: 86:18:77:e2:95:b0:76:4b:15:12:c8:38:0f:b6:1e: 26:fd:de:88:45:aa:fd:5c:88:e8:c5:31:00:2e:cd: 1b:36:ff:49:ab:b3:6b:6b:a4:05:dd:5e:20:d2:b3: fd:6b:bc:0d:3d:14:f6:87:dd:f6:2d:38:bb:2f:50: 10:22:f5:8a:31:93:4a:07:80:14:bc:de:96:bb:c9: e4:b3:01:1f:29:c7:99:e0:6f:07:ef:28:6e:b7:95: 79:81:c4:3a:9b:9e:62:05:33:b9:ed:7b:8f:7d:50: 75:68:fa:c4:a9:91:a2:43:cd:6e:1d:b7:6f:a7:21: e3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:26:CB:C9:CE:35:C3:2A:B5:10:52:26:4A:EF:04:67:C1:7D:78:F6 X509v3 Authority Key Identifier: keyid:B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/UybLyc41wyq1EFImSu8EZ8F9ePY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.245.192.0/19 78.141.192.0/18 80.240.16.0/20 95.179.128.0/17 185.92.220.0/22 192.248.128.0/18 199.247.0.0/19 209.250.224.0/19 217.69.0.0/20 IPv6: 2a05:f480::/29 Signature Algorithm: sha256WithRSAEncryption 03:4a:82:e1:f0:80:dc:8c:df:48:64:f0:0e:d5:7d:de:19:09: 0f:ab:62:82:bc:dc:f9:2e:08:cd:1b:af:49:34:01:d5:da:e2: 40:4e:eb:57:63:b5:9f:10:1e:c5:b6:db:47:fe:03:c7:9a:34: df:1f:6e:2e:bb:5d:fc:e4:4c:d9:ee:2d:34:bd:ef:3f:81:8e: fd:c0:fe:20:4b:23:d5:e0:03:19:3e:7b:f2:39:c2:06:fb:8c: 2b:87:46:87:9b:f1:c9:3a:1b:73:40:5a:eb:17:e3:2f:60:9d: ba:75:07:b3:27:cf:8d:68:ec:36:f3:30:50:32:cc:5a:91:53: 9f:19:e1:7a:41:94:b6:97:f7:bd:1c:6d:0f:1f:7b:e9:8f:a7: 1c:e9:dd:bf:24:a0:51:fa:0d:3a:c4:2b:0a:a6:2f:f8:2d:6c: 63:db:54:20:e8:96:88:7a:cd:13:79:1d:3d:a4:a1:6a:c1:56: 3c:21:27:5d:18:73:78:d5:fa:f8:89:2c:72:7d:31:fb:b9:f0: 62:bb:17:38:25:24:e5:ae:d7:76:72:0f:ae:f1:2d:f3:2f:22: 7f:a3:30:d4:d8:6b:37:e7:04:83:50:72:3d:e5:db:29:fa:06: 12:ab:08:f2:1c:45:42:57:a1:7f:61:07:c8:20:1a:bf:8f:4e: 4e:51:94:23 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgISAZu+cCT2xJbXnU49ftwH/dZcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4N2I3NjY5Njg3MTYyOTZlNWJiYTBiY2U4Mzg1NmFlNzE2 NWI4YjgwHhcNMjYwMTE0MjEzNjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzI2Y2JjOWNlMzVjMzJhYjUxMDUyMjY0YWVmMDQ2N2MxN2Q3OGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR0ACO3Ty7ZE+pxcwYfdRSdwb7Hf SlFgGmN+IxoLmM8rO1IyKWs0Rn5SSMDUGECwnaGs0sZB6UEJmMiXzT7f+QXEEybW 8F7VT7IfISG9KZAdIfHGJGPYXUK1RkNG/BHM/3X/jMqFqnXN5vHahcN8dxwUJfWw gE05QYwaBxMkDM9XEbJFNNeGGHfilbB2SxUSyDgPth4m/d6IRar9XIjoxTEALs0b Nv9Jq7Nra6QF3V4g0rP9a7wNPRT2h932LTi7L1AQIvWKMZNKB4AUvN6Wu8nkswEf KceZ4G8H7yhut5V5gcQ6m55iBTO57XuPfVB1aPrEqZGiQ81uHbdvpyHjDwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFFMmy8nONcMqtRBSJkrvBGfBfXj2MB8GA1UdIwQY MBaAFLh7dmlocWKW5bugvOg4Vq5xZbi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUh0MmFXaHhZcGJsdTZDODZEaFdybkZsdUxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9hM2VkZTYtYmMzMS00ZDAwLTkyNWMt M2Q2MTJmMzI0OTk2LzEvVXliTHljNDF3eXExRUZJbVN1OEVaOEY5ZVBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9hM2VkZTYtYmMzMS00ZDAwLTkyNWMtM2Q2MTJmMzI0OTk2 LzEvdUh0MmFXaHhZcGJsdTZDODZEaFdybkZsdUxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQFQvXAAwQG To3AAwQEUPAQAwQHX7OAAwQCuVzcAwQGwPiAAwQFx/cAAwQF0frgAwQE2UUAMA0E AgACMAcDBQMqBfSAMA0GCSqGSIb3DQEBCwUAA4IBAQADSoLh8IDcjN9IZPAO1X3e GQkPq2KCvNz5LgjNG69JNAHV2uJATutXY7WfEB7FtttH/gPHmjTfH24uu1385EzZ 7i00ve8/gY79wP4gSyPV4AMZPnvyOcIG+4wrh0aHm/HJOhtzQFrrF+MvYJ26dQez J8+NaOw28zBQMsxakVOfGeF6QZS2l/e9HG0PH3vpj6cc6d2/JKBR+g06xCsKpi/4 LWxj21Qg6JaIes0TeR09pKFqwVY8ISddGHN41fr4iSxyfTH7ufBiuxc4JSTlrtd2 cg+u8S3zLyJ/ozDU2Gs35wSDUHI95dsp+gYSqwjyHEVCV6F/YQfIIBq/j05OUZQj -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:21 2026 by rpki-client