This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ucXhS1fbC3vXvrvWvvUzFAdLYZ0.roa File: ucXhS1fbC3vXvrvWvvUzFAdLYZ0.roa (raw, json) Hash identifier: ycOvKMB3ohts+XqPaDLDHscA27O5j7RCXyb5pUBx2qo= Subject key identifier: B9:C5:E1:4B:57:DB:0B:7B:D7:BE:BB:D6:BE:F5:33:14:07:4B:61:9D Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE6071F95127CCBA1486F7173D3D31 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ucXhS1fbC3vXvrvWvvUzFAdLYZ0.roa Signing time: Fri 02 Jan 2026 04:19:15 +0000 ROA not before: Fri 02 Jan 2026 04:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63023 IP address blocks: 87.229.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:60:71:f9:51:27:cc:ba:14:86:f7:17:3d:3d:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9c5e14b57db0b7bd7bebbd6bef53314074b619d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:4c:b3:f7:d4:40:c6:eb:3d:70:21:4f:c6:be: 5c:19:a0:0f:05:91:c1:0a:38:1c:57:43:d9:db:c5: e2:f1:5d:92:3b:5c:78:51:e7:b8:e0:e8:a6:0c:73: 78:d1:8c:8c:36:87:2d:18:1e:ef:4f:aa:2f:b7:5b: d1:45:29:b6:28:5a:f3:95:e4:9e:3f:37:ea:fc:ba: 48:40:8f:41:73:be:56:b3:b0:ee:cb:7a:5d:1d:85: 74:19:0b:44:a9:8a:75:2a:96:e2:d8:6b:3a:a5:16: 13:85:20:1f:ac:ae:da:31:52:26:17:70:65:5a:7f: 72:b1:9a:6d:69:81:63:f4:43:4a:0d:94:96:12:60: 6a:40:b5:63:43:96:5b:eb:91:0b:3b:ef:3c:66:2d: 66:50:b5:4c:30:5d:07:fe:a9:1d:87:2d:d6:59:31: 10:a6:56:1c:2c:f1:99:e8:55:66:df:69:c8:25:28: 70:ee:44:82:de:ad:70:a5:b7:ee:45:af:6b:8e:68: 15:19:5b:1b:12:5c:85:15:8c:5d:c5:75:81:8e:c3: 00:b1:49:b3:fa:73:c0:31:7c:8d:cc:6c:1e:4d:f0: f1:d1:e5:12:06:ff:46:9c:3f:2a:e6:2c:25:38:a0: fd:c1:e6:25:41:53:a9:f1:c5:a2:e0:ef:6b:bc:4a: 5d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C5:E1:4B:57:DB:0B:7B:D7:BE:BB:D6:BE:F5:33:14:07:4B:61:9D X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/ucXhS1fbC3vXvrvWvvUzFAdLYZ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.80.0/24 Signature Algorithm: sha256WithRSAEncryption 30:63:21:fb:69:a2:73:a2:51:92:be:74:6c:5b:30:3d:4a:43: 5b:1e:f6:db:fc:d3:67:c4:2e:4f:5d:c8:29:e3:59:d9:11:59: 82:2b:da:88:99:49:7d:e3:4c:88:99:e3:0d:3d:32:1c:ee:c6: a0:92:7f:5a:76:59:4a:bf:e4:45:b0:5c:c5:3a:9b:af:a2:1c: c0:d4:e1:87:3c:18:0d:37:6c:97:32:10:55:f3:e7:6d:6c:7c: 34:e7:ea:fd:89:91:9f:32:91:e2:7b:7e:3f:7b:79:96:1e:99: 62:78:dc:bc:ad:d7:43:a6:95:9e:48:40:90:5f:2f:c7:9d:1f: 55:47:f1:04:5a:15:32:68:f5:f7:a4:9a:f8:c6:65:24:38:58: 91:52:cc:2c:87:60:ee:1b:ad:f6:4c:70:9e:80:cf:b8:87:8f: dc:60:aa:18:94:a1:1b:7a:7e:2c:50:37:e7:4b:fa:cf:67:9a: da:bf:6e:f8:27:98:49:d5:26:04:21:21:61:ce:15:c5:6e:ec: 68:bd:6a:94:b4:60:92:66:37:41:62:a1:6c:b4:7b:a8:be:58: a7:d7:af:e3:c1:d2:3d:7a:ba:94:73:c8:4b:25:5b:a1:73:c6: be:ae:d1:bf:90:61:2d:d7:1e:9e:7b:d3:c7:11:6e:52:f4:21: 4d:53:a8:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87mBx+VEnzLoUhvcXPT0xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWM1ZTE0YjU3ZGIwYjdiZDdiZWJiZDZiZWY1MzMxNDA3NGI2MTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Uyz99RAxus9cCFPxr5cGaAPBZHB CjgcV0PZ28Xi8V2SO1x4Uee44OimDHN40YyMNoctGB7vT6ovt1vRRSm2KFrzleSe Pzfq/LpIQI9Bc75Ws7Duy3pdHYV0GQtEqYp1Kpbi2Gs6pRYThSAfrK7aMVImF3Bl Wn9ysZptaYFj9ENKDZSWEmBqQLVjQ5Zb65ELO+88Zi1mULVMMF0H/qkdhy3WWTEQ plYcLPGZ6FVm32nIJShw7kSC3q1wpbfuRa9rjmgVGVsbElyFFYxdxXWBjsMAsUmz +nPAMXyNzGweTfDx0eUSBv9GnD8q5iwlOKD9weYlQVOp8cWi4O9rvEpdywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLnF4UtX2wt717671r71MxQHS2GdMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvdWNYaFMxZmJDM3ZYdnJ2V3Z2VXpGQWRMWVowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+VQMA0G CSqGSIb3DQEBCwUAA4IBAQAwYyH7aaJzolGSvnRsWzA9SkNbHvbb/NNnxC5PXcgp 41nZEVmCK9qImUl940yImeMNPTIc7sagkn9adllKv+RFsFzFOpuvohzA1OGHPBgN N2yXMhBV8+dtbHw05+r9iZGfMpHie34/e3mWHplieNy8rddDppWeSECQXy/HnR9V R/EEWhUyaPX3pJr4xmUkOFiRUswsh2DuG632THCegM+4h4/cYKoYlKEben4sUDfn S/rPZ5rav274J5hJ1SYEISFhzhXFbuxovWqUtGCSZjdBYqFstHuovlin16/jwdI9 erqUc8hLJVuhc8a+rtG/kGEt1x6ee9PHEW5S9CFNU6iY -----END CERTIFICATE-----Generated at Mon Jan 19 18:01:33 2026 by rpki-client