This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/UYgTsB_AWRe-h3f4j-4W6LUyf78.roa File: UYgTsB_AWRe-h3f4j-4W6LUyf78.roa (raw, json) Hash identifier: e35osmnyJEI3mgzGIu/B/DJPoy/kpGSI3WH6Yh4tKNA= Subject key identifier: 51:88:13:B0:1F:C0:59:17:BE:87:77:F8:8F:EE:16:E8:B5:32:7F:BF Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA4133001A72256483292FC4577F732 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/UYgTsB_AWRe-h3f4j-4W6LUyf78.roa Signing time: Thu 01 Jan 2026 22:18:28 +0000 ROA not before: Thu 01 Jan 2026 22:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207064 IP address blocks: 185.125.48.0/23 maxlen: 23 185.125.48.0/24 maxlen: 24 185.125.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:13:30:01:a7:22:56:48:32:92:fc:45:77:f7:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=518813b01fc05917be8777f88fee16e8b5327fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4c:f6:bb:bd:53:6b:ea:4b:3f:e3:48:ac:a1: 99:7c:15:c9:47:66:b8:4c:7c:ee:35:16:82:cd:44: e8:db:5b:87:53:a8:b4:92:11:52:b2:80:ef:0c:b9: 99:59:f4:10:68:34:86:ab:0f:62:67:03:b1:0e:7d: 58:a0:50:c1:8e:6c:8f:3e:7b:f3:1d:f3:5e:6c:45: 91:88:15:16:40:3f:f9:21:7c:c8:f7:23:09:91:02: 5c:16:02:c7:bb:46:6c:a9:af:df:75:57:d7:1a:53: 3b:36:b8:34:8c:30:d1:4d:dd:a9:77:0a:8c:3c:63: de:81:ab:ef:af:19:03:61:b9:dd:53:0e:a0:a7:c8: f4:b4:99:51:63:62:33:74:e2:1f:3c:6a:8a:a1:02: ff:18:e3:b0:e6:1a:55:92:4f:2a:10:3b:2c:5f:f9: bd:3f:7b:90:5f:e6:3f:fa:e5:0d:8c:d6:ab:36:38: 68:58:c5:80:e6:4e:bc:74:2e:76:d8:7e:5d:94:70: 35:15:ff:e9:0f:2f:5c:52:40:45:e1:1c:c0:e0:99: a4:c6:8f:a9:b8:c1:4b:ad:97:c2:45:0a:fd:db:e5: be:96:a1:b6:d5:a7:63:b2:a6:21:4e:9a:a6:0f:58: c6:2f:47:79:4f:80:ce:41:cb:e4:9e:99:25:dc:16: 89:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:88:13:B0:1F:C0:59:17:BE:87:77:F8:8F:EE:16:E8:B5:32:7F:BF X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/UYgTsB_AWRe-h3f4j-4W6LUyf78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.125.48.0/23 Signature Algorithm: sha256WithRSAEncryption c0:f5:45:61:49:e2:2d:38:1b:40:d8:28:9b:7f:f4:98:3b:97: 56:74:38:d1:aa:50:6b:39:e2:18:bc:56:78:93:16:f7:4d:74: 84:5d:10:46:43:e0:9e:f9:f7:e3:a7:6c:75:89:59:a7:00:4f: e7:f0:42:88:04:15:8d:a7:07:98:01:d1:c8:5a:81:80:71:e1: 0e:bf:03:f5:17:31:f8:45:cd:a8:60:b7:a7:15:8c:ba:dc:ee: e5:09:85:e6:ff:5c:5d:8c:1d:38:a2:82:48:5b:99:b6:e7:6b: 23:3c:2f:c3:31:ad:06:5f:ba:91:59:35:e0:cc:35:96:f1:cd: 23:31:ea:e1:d6:f5:cc:0f:64:0b:fe:d0:48:56:0d:e9:0c:e2: 2b:77:b1:25:2a:73:48:c6:63:e7:e6:31:27:c3:a8:40:f4:61: 1f:5f:da:f8:49:f0:b3:72:2c:74:1c:df:6b:9c:6d:fb:81:81: da:5d:38:d3:bf:c9:0a:9f:71:16:87:be:eb:c9:48:43:c2:06: af:9f:d2:28:e4:e2:e3:2a:4f:93:30:c2:ca:ad:90:6d:88:75: 86:80:bf:0f:f9:f4:94:2c:c6:c8:79:10:5a:44:b4:84:19:1c: 38:f8:e3:a0:a2:1d:fc:a6:9f:4d:67:4b:0d:9f:9e:52:dd:ab: fc:5e:db:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pBMwAaciVkgykvxFd/cyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTg4MTNiMDFmYzA1OTE3YmU4Nzc3Zjg4ZmVlMTZlOGI1MzI3ZmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Uz2u71Ta+pLP+NIrKGZfBXJR2a4 THzuNRaCzUTo21uHU6i0khFSsoDvDLmZWfQQaDSGqw9iZwOxDn1YoFDBjmyPPnvz HfNebEWRiBUWQD/5IXzI9yMJkQJcFgLHu0Zsqa/fdVfXGlM7Nrg0jDDRTd2pdwqM PGPegavvrxkDYbndUw6gp8j0tJlRY2IzdOIfPGqKoQL/GOOw5hpVkk8qEDssX/m9 P3uQX+Y/+uUNjNarNjhoWMWA5k68dC522H5dlHA1Ff/pDy9cUkBF4RzA4Jmkxo+p uMFLrZfCRQr92+W+lqG21adjsqYhTpqmD1jGL0d5T4DOQcvknpkl3BaJIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFGIE7AfwFkXvod3+I/uFui1Mn+/MB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvVVlnVHNCX0FXUmUtaDNmNGotNFc2TFV5Zjc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuX0wMA0G CSqGSIb3DQEBCwUAA4IBAQDA9UVhSeItOBtA2Cibf/SYO5dWdDjRqlBrOeIYvFZ4 kxb3TXSEXRBGQ+Ce+ffjp2x1iVmnAE/n8EKIBBWNpweYAdHIWoGAceEOvwP1FzH4 Rc2oYLenFYy63O7lCYXm/1xdjB04ooJIW5m252sjPC/DMa0GX7qRWTXgzDWW8c0j Merh1vXMD2QL/tBIVg3pDOIrd7ElKnNIxmPn5jEnw6hA9GEfX9r4SfCzcix0HN9r nG37gYHaXTjTv8kKn3EWh77ryUhDwgavn9Io5OLjKk+TMMLKrZBtiHWGgL8P+fSU LMbIeRBaRLSEGRw4+OOgoh38pp9NZ0sNn55S3av8Xtti -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:53 2026 by rpki-client