This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/UEVvSHR4RXiw4RWetmh_ZCqzc9E.roa File: UEVvSHR4RXiw4RWetmh_ZCqzc9E.roa (raw, json) Hash identifier: bFzxJ++JMPEdKwW88mp2Ckxb5L1ulPilrj2DRxpxsNw= Subject key identifier: 50:45:6F:48:74:78:45:78:B0:E1:15:9E:B6:68:7F:64:2A:B3:73:D1 Certificate issuer: /CN=e6beb677145f64cafbcd7136e81f35a274ae8e8c Certificate serial: 019B7CEE1BB1F937418B7E087A661EB6DF68 Authority key identifier: E6:BE:B6:77:14:5F:64:CA:FB:CD:71:36:E8:1F:35:A2:74:AE:8E:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5r62dxRfZMr7zXE26B81onSujow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/UEVvSHR4RXiw4RWetmh_ZCqzc9E.roa Signing time: Fri 02 Jan 2026 04:18:57 +0000 ROA not before: Fri 02 Jan 2026 04:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16006 IP address blocks: 95.170.224.0/19 maxlen: 24 141.136.48.0/21 maxlen: 24 185.18.64.0/22 maxlen: 24 2a01:9f80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.crl rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.mft rsync://rpki.ripe.net/repository/DEFAULT/5r62dxRfZMr7zXE26B81onSujow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:1b:b1:f9:37:41:8b:7e:08:7a:66:1e:b6:df:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6beb677145f64cafbcd7136e81f35a274ae8e8c Validity Not Before: Jan 2 04:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50456f4874784578b0e1159eb6687f642ab373d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:68:e2:e2:97:ab:a1:3e:41:4b:3f:da:75:2a: db:ec:ea:d9:ac:fc:30:52:81:b8:7d:94:af:4b:87: d2:2d:2b:c9:65:e4:1a:48:9b:23:a5:71:d2:2e:c3: 05:7c:9b:8b:a3:37:e1:f3:01:2a:9e:5f:c4:ca:b6: 52:e8:35:d1:bc:1b:68:6d:b3:73:53:f2:62:a2:f9: ff:99:95:2c:0e:7f:90:d0:6f:8c:27:2f:34:5a:a2: fc:d9:bc:67:5a:ed:01:c9:8a:12:01:76:2d:ba:9f: 7f:dc:b4:17:22:b3:07:44:b5:f8:0d:c8:ca:0d:b6: ac:6e:15:f8:ef:d3:cf:f8:32:bb:12:02:78:93:47: 60:0f:7e:ae:23:60:c5:2f:b5:9e:e6:6d:70:41:66: d1:2a:60:0e:b4:2d:eb:0d:a2:c8:7c:bb:ed:7f:24: cf:8b:14:0b:82:cf:fe:50:5b:f9:7a:6d:3e:b0:e1: ec:c7:92:ca:44:8b:61:b1:1c:42:b3:01:e2:41:69: 37:ea:03:aa:dd:12:fb:b9:89:38:76:5a:44:10:f6: 68:10:20:4b:54:7f:d4:f3:32:c9:1c:01:49:86:3a: b8:c6:1d:fe:77:50:9c:ea:51:e5:73:7a:64:87:3c: ce:6c:9a:09:9c:46:57:56:a8:2d:02:b9:6c:64:97: e8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:45:6F:48:74:78:45:78:B0:E1:15:9E:B6:68:7F:64:2A:B3:73:D1 X509v3 Authority Key Identifier: keyid:E6:BE:B6:77:14:5F:64:CA:FB:CD:71:36:E8:1F:35:A2:74:AE:8E:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5r62dxRfZMr7zXE26B81onSujow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/UEVvSHR4RXiw4RWetmh_ZCqzc9E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b264d-1d0c-44c5-aee7-f132aea6f7a2/1/5r62dxRfZMr7zXE26B81onSujow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.170.224.0/19 141.136.48.0/21 185.18.64.0/22 IPv6: 2a01:9f80::/32 Signature Algorithm: sha256WithRSAEncryption 6c:86:be:0c:aa:52:12:ea:c9:19:83:ff:9a:13:f7:ed:7f:bb: 49:79:a8:b4:ea:46:dd:42:f5:e9:63:53:24:b7:c5:8f:dc:55: 65:fc:ef:c1:43:d6:aa:d5:fa:e6:06:e1:96:90:9d:d8:d8:17: 1b:3e:99:59:2e:0d:4c:6d:e6:cb:f9:b1:38:69:d5:e7:db:8c: 3f:db:a6:bc:6a:ba:14:49:a9:54:75:60:ba:30:0f:de:ee:32: 43:79:ca:84:fa:48:34:61:4b:9d:54:36:dd:c0:ce:f6:ba:cb: 02:23:e0:4c:74:08:59:49:a5:0b:7d:0f:d1:d1:9b:f2:9a:c4: 17:b3:52:36:00:4d:58:ff:ed:46:4c:7d:85:e0:31:ab:40:bf: f5:a5:e1:18:4b:ed:1d:64:96:81:2a:16:f7:4f:0e:ea:9a:dd: e6:f2:0a:0d:7b:78:00:6c:dc:1d:e4:9f:7f:1e:ba:e2:86:f1: e1:9d:87:8d:3b:c3:90:7c:11:28:e4:10:4d:52:1b:4f:84:09: f2:f6:1f:b1:db:dd:2e:d7:21:b4:29:36:42:66:81:62:39:3c: ec:e7:1c:51:32:eb:ba:61:a1:0e:23:97:5a:46:85:2e:f1:f2: 58:d4:6c:e5:06:12:96:4a:ad:95:c9:d0:a7:5c:0f:62:47:be: 4c:b1:9b:91 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt87hux+TdBi34IemYett9oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YmViNjc3MTQ1ZjY0Y2FmYmNkNzEzNmU4MWYzNWEyNzRh ZThlOGMwHhcNMjYwMTAyMDQxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDQ1NmY0ODc0Nzg0NTc4YjBlMTE1OWViNjY4N2Y2NDJhYjM3M2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmji4peroT5BSz/adSrb7OrZrPww UoG4fZSvS4fSLSvJZeQaSJsjpXHSLsMFfJuLozfh8wEqnl/EyrZS6DXRvBtobbNz U/Jiovn/mZUsDn+Q0G+MJy80WqL82bxnWu0ByYoSAXYtup9/3LQXIrMHRLX4DcjK DbasbhX479PP+DK7EgJ4k0dgD36uI2DFL7We5m1wQWbRKmAOtC3rDaLIfLvtfyTP ixQLgs/+UFv5em0+sOHsx5LKRIthsRxCswHiQWk36gOq3RL7uYk4dlpEEPZoECBL VH/U8zLJHAFJhjq4xh3+d1Cc6lHlc3pkhzzObJoJnEZXVqgtArlsZJfoIwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFFBFb0h0eEV4sOEVnrZof2Qqs3PRMB8GA1UdIwQY MBaAFOa+tncUX2TK+81xNugfNaJ0ro6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXI2MmR4UmZaTXI3elhFMjZCODFvblN1am93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8yYjI2NGQtMWQwYy00NGM1LWFlZTct ZjEzMmFlYTZmN2EyLzEvVUVWdlNIUjRSWGl3NFJXZXRtaF9aQ3F6YzlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8yYjI2NGQtMWQwYy00NGM1LWFlZTctZjEzMmFlYTZmN2Ey LzEvNXI2MmR4UmZaTXI3elhFMjZCODFvblN1am93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFX6rgAwQD jYgwAwQCuRJAMA0EAgACMAcDBQAqAZ+AMA0GCSqGSIb3DQEBCwUAA4IBAQBshr4M qlIS6skZg/+aE/ftf7tJeai06kbdQvXpY1Mkt8WP3FVl/O/BQ9aq1frmBuGWkJ3Y 2BcbPplZLg1MbebL+bE4adXn24w/26a8aroUSalUdWC6MA/e7jJDecqE+kg0YUud VDbdwM72ussCI+BMdAhZSaULfQ/R0ZvymsQXs1I2AE1Y/+1GTH2F4DGrQL/1peEY S+0dZJaBKhb3Tw7qmt3m8goNe3gAbNwd5J9/HrrihvHhnYeNO8OQfBEo5BBNUhtP hAny9h+x290u1yG0KTZCZoFiOTzs5xxRMuu6YaEOI5daRoUu8fJY1GzlBhKWSq2V ydCnXA9iR75MsZuR -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:53 2026 by rpki-client