This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UYHxGCv8yQT_NC27aQah-gpMhOo.roa File: UYHxGCv8yQT_NC27aQah-gpMhOo.roa (raw, json) Hash identifier: Zmk3wTc94W10bUZP653OrCA2mOrLapL2gTSWv6ZqHfs= Subject key identifier: 51:81:F1:18:2B:FC:C9:04:FF:34:2D:BB:69:06:A1:FA:0A:4C:84:EA Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797DE77E653D05E2D1C429430F2F4AB5 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UYHxGCv8yQT_NC27aQah-gpMhOo.roa Signing time: Thu 01 Jan 2026 12:17:32 +0000 ROA not before: Thu 01 Jan 2026 12:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33185 IP address blocks: 89.125.4.0/22 maxlen: 22 89.125.12.0/22 maxlen: 22 89.125.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:e7:7e:65:3d:05:e2:d1:c4:29:43:0f:2f:4a:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5181f1182bfcc904ff342dbb6906a1fa0a4c84ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:26:cc:eb:63:23:61:e1:29:53:61:d5:e2:e4: 8e:99:21:c1:e0:92:6f:34:51:62:dc:cc:c0:26:aa: 9f:de:96:e4:84:5b:54:a5:dc:21:cd:f0:2e:70:5f: 28:77:84:c2:fc:91:79:13:1b:7c:6f:64:8d:0e:64: 4a:d5:d6:35:74:5b:cf:ae:f6:53:db:5f:2e:f5:96: 40:f5:20:78:70:89:b1:e8:f7:c2:16:00:2b:30:18: 65:5a:69:ab:0f:7a:b4:d0:fc:5c:5e:b2:1b:97:75: cd:6a:b8:ad:b4:00:4e:75:5b:05:4e:56:98:71:b8: 4a:34:c0:81:22:be:be:3a:97:61:d7:1a:e3:fa:45: 78:b5:69:74:07:fb:2e:49:69:6f:27:f9:ad:85:bf: 07:0e:48:87:09:0e:cb:d1:cf:88:31:ad:d5:65:90: 3c:e1:25:09:fa:15:5e:6a:ae:ea:10:ad:87:75:d8: 04:54:13:d5:f0:15:24:34:f8:8a:d4:1a:5d:8f:75: 56:c1:4a:7e:f0:40:0e:fc:81:78:39:cf:26:6d:a7: e8:9a:45:9a:20:1a:91:b3:33:c0:1e:ad:20:1d:93: 43:f0:ac:d2:bd:aa:85:80:68:b7:87:04:3c:8b:f9: ce:f5:da:d9:8d:08:22:1a:f2:ab:72:bd:05:24:92: a1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:81:F1:18:2B:FC:C9:04:FF:34:2D:BB:69:06:A1:FA:0A:4C:84:EA X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UYHxGCv8yQT_NC27aQah-gpMhOo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.125.4.0/22 89.125.12.0/22 89.125.28.0/22 Signature Algorithm: sha256WithRSAEncryption 73:a4:52:05:d9:ce:2a:d4:9e:1f:cb:60:5d:38:ca:8a:81:6e: 74:99:c0:99:cb:a9:cb:6e:e2:42:94:99:eb:8a:07:dd:92:f2: a7:aa:af:09:bf:31:22:88:a0:4f:bb:5e:e4:82:e7:70:76:ad: 1e:2c:78:ca:ef:c8:f6:77:a3:07:2c:ca:94:99:e2:8c:cb:15: 1b:be:db:03:0c:67:88:21:d0:d6:93:bf:1e:41:fc:f7:01:ce: 61:06:48:5e:f9:85:96:16:51:db:33:82:f4:09:f0:3d:ba:1c: fd:f2:c0:34:43:9f:01:88:37:56:ac:41:06:b2:2c:b9:63:3e: c3:31:a2:54:34:61:3c:73:f9:bc:a3:49:a1:d8:f6:41:89:04: dc:ee:0a:c9:f1:01:67:c8:2b:09:4e:80:e8:2b:e6:c7:2f:96: 49:c8:b4:fc:24:3e:8d:6c:16:ac:d5:1a:2f:12:0f:d9:df:60: 7e:8a:5c:84:ce:13:85:e6:93:b6:35:8a:0d:e5:c6:d1:35:1b: 12:40:f4:40:72:b4:9f:c4:6f:6d:86:ce:27:8e:67:e0:22:35: f8:2a:54:cc:de:02:93:a7:2f:a1:60:e2:0c:b3:32:cb:e8:fc: 62:77:57:ff:7a:2d:ca:f4:1f:5f:c4:40:87:9b:25:a6:86:a0: 6a:71:1f:fe -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5fed+ZT0F4tHEKUMPL0q1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTgxZjExODJiZmNjOTA0ZmYzNDJkYmI2OTA2YTFmYTBhNGM4NGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApybM62MjYeEpU2HV4uSOmSHB4JJv NFFi3MzAJqqf3pbkhFtUpdwhzfAucF8od4TC/JF5Ext8b2SNDmRK1dY1dFvPrvZT 218u9ZZA9SB4cImx6PfCFgArMBhlWmmrD3q00PxcXrIbl3XNarittABOdVsFTlaY cbhKNMCBIr6+Opdh1xrj+kV4tWl0B/suSWlvJ/mthb8HDkiHCQ7L0c+IMa3VZZA8 4SUJ+hVeaq7qEK2HddgEVBPV8BUkNPiK1Bpdj3VWwUp+8EAO/IF4Oc8mbafomkWa IBqRszPAHq0gHZND8KzSvaqFgGi3hwQ8i/nO9drZjQgiGvKrcr0FJJKhdwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFGB8Rgr/MkE/zQtu2kGofoKTITqMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvVVlIeEdDdjh5UVRfTkMyN2FRYWgtZ3BNaE9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCWX0EAwQC WX0MAwQCWX0cMA0GCSqGSIb3DQEBCwUAA4IBAQBzpFIF2c4q1J4fy2BdOMqKgW50 mcCZy6nLbuJClJnrigfdkvKnqq8JvzEiiKBPu17kgudwdq0eLHjK78j2d6MHLMqU meKMyxUbvtsDDGeIIdDWk78eQfz3Ac5hBkhe+YWWFlHbM4L0CfA9uhz98sA0Q58B iDdWrEEGsiy5Yz7DMaJUNGE8c/m8o0mh2PZBiQTc7grJ8QFnyCsJToDoK+bHL5ZJ yLT8JD6NbBas1RovEg/Z32B+ilyEzhOF5pO2NYoN5cbRNRsSQPRAcrSfxG9ths4n jmfgIjX4KlTM3gKTpy+hYOIMszLL6Pxid1f/ei3K9B9fxECHmyWmhqBqcR/+ -----END CERTIFICATE-----Generated at Mon Jan 19 14:39:46 2026 by rpki-client