This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/UeXYudS3zz6fGW0cpai4irNYnHA.roa File: UeXYudS3zz6fGW0cpai4irNYnHA.roa (raw, json) Hash identifier: wK4XLLpEyJu7nfTn9oE4RSt+zZmL5a3WpTKNSuWO690= Subject key identifier: 51:E5:D8:B9:D4:B7:CF:3E:9F:19:6D:1C:A5:A8:B8:8A:B3:58:9C:70 Certificate issuer: /CN=8f2ae45c509041a796a968953581f51d45bfce55 Certificate serial: 019B7EA65710995F1924569B4B9548454CCA Authority key identifier: 8F:2A:E4:5C:50:90:41:A7:96:A9:68:95:35:81:F5:1D:45:BF:CE:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/UeXYudS3zz6fGW0cpai4irNYnHA.roa Signing time: Fri 02 Jan 2026 12:19:49 +0000 ROA not before: Fri 02 Jan 2026 12:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42346 IP address blocks: 77.75.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.crl rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:57:10:99:5f:19:24:56:9b:4b:95:48:45:4c:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f2ae45c509041a796a968953581f51d45bfce55 Validity Not Before: Jan 2 12:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51e5d8b9d4b7cf3e9f196d1ca5a8b88ab3589c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4e:3b:a7:d6:74:bc:fe:aa:70:82:09:5e:3f: 98:68:eb:75:1d:ac:95:61:3a:3a:ea:d1:9d:89:ff: 1b:c2:c3:03:44:3a:a2:98:d7:9e:b7:f4:14:c9:4c: f5:85:6b:52:31:a4:64:2f:85:28:77:e2:56:8a:b8: c8:07:f4:90:c2:db:0f:4d:a1:ae:71:ce:e7:26:9f: 9f:98:41:79:98:be:38:02:41:9c:8b:40:64:15:aa: de:27:8c:33:0a:2a:08:f0:49:d1:67:b4:c2:c2:34: 0f:57:92:0c:56:4b:33:b0:5e:2e:b0:71:6e:93:e9: f7:c2:3f:df:0e:d8:6c:c8:55:93:6e:0d:58:05:84: 2e:af:73:60:08:84:92:d9:e1:d7:cf:46:74:c9:44: 6a:d0:3e:24:53:ed:d1:11:22:f3:b8:80:40:85:2c: f9:25:21:06:41:59:51:02:9b:0d:87:9f:22:62:33: 58:d8:e6:1c:b8:31:19:99:a6:14:49:72:e8:5f:88: 39:54:8f:be:3e:1a:02:5b:05:71:12:31:7e:09:f9: be:32:c7:6a:3e:9c:fa:12:12:13:09:ff:db:94:ea: 93:c3:2a:2d:11:4d:a9:77:cc:72:fe:32:ad:9c:2b: 58:b0:a3:4d:ac:99:df:1c:09:7d:e5:25:e3:44:60: c5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E5:D8:B9:D4:B7:CF:3E:9F:19:6D:1C:A5:A8:B8:8A:B3:58:9C:70 X509v3 Authority Key Identifier: keyid:8F:2A:E4:5C:50:90:41:A7:96:A9:68:95:35:81:F5:1D:45:BF:CE:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/UeXYudS3zz6fGW0cpai4irNYnHA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.75.112.0/21 Signature Algorithm: sha256WithRSAEncryption a2:5a:96:a9:2e:df:b6:96:cd:07:63:7a:c1:43:cb:7b:d6:55: 83:13:fb:10:56:5a:b8:9d:6b:de:2f:be:2c:68:a1:78:0d:af: 5c:2b:42:54:b7:98:22:aa:ed:19:08:c3:88:e1:2e:69:f9:69: d9:07:fa:05:cf:5c:ff:6e:83:79:00:2f:95:bd:a3:ca:d6:9c: 40:32:aa:b3:ca:c6:b4:4c:48:95:1e:16:96:8a:ec:ec:2f:68: cf:c8:0b:2a:ab:3b:76:a7:71:02:6a:a8:c8:5b:aa:79:5a:e8: 03:57:86:9a:2d:5c:9a:ca:6f:18:4b:e7:d3:9d:a0:91:d1:fe: 69:af:47:37:4c:5a:66:51:fc:19:32:c8:5d:5d:d8:79:8b:7b: 59:48:45:04:d2:b6:3f:61:7a:32:81:4d:89:6b:26:70:aa:4c: 7b:6d:93:9a:49:ae:bd:7f:42:3e:32:9d:17:c1:67:08:d8:97: fc:03:69:00:02:27:88:0d:49:d1:a0:c1:66:39:74:a2:6c:83: 25:84:90:13:ac:c5:67:99:11:90:42:27:4f:6b:11:89:2d:5e: 11:b8:ce:e8:38:18:5b:79:bf:c5:67:63:4a:d4:94:1f:09:24: 36:50:21:1e:b4:2a:90:1c:86:10:a4:74:5a:ce:5f:91:ac:ad: 0a:b8:a3:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+plcQmV8ZJFabS5VIRUzKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMmFlNDVjNTA5MDQxYTc5NmE5Njg5NTM1ODFmNTFkNDVi ZmNlNTUwHhcNMjYwMTAyMTIxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWU1ZDhiOWQ0YjdjZjNlOWYxOTZkMWNhNWE4Yjg4YWIzNTg5YzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE47p9Z0vP6qcIIJXj+YaOt1HayV YTo66tGdif8bwsMDRDqimNeet/QUyUz1hWtSMaRkL4Uod+JWirjIB/SQwtsPTaGu cc7nJp+fmEF5mL44AkGci0BkFareJ4wzCioI8EnRZ7TCwjQPV5IMVkszsF4usHFu k+n3wj/fDthsyFWTbg1YBYQur3NgCISS2eHXz0Z0yURq0D4kU+3RESLzuIBAhSz5 JSEGQVlRApsNh58iYjNY2OYcuDEZmaYUSXLoX4g5VI++PhoCWwVxEjF+Cfm+Msdq Ppz6EhITCf/blOqTwyotEU2pd8xy/jKtnCtYsKNNrJnfHAl95SXjRGDFrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFHl2LnUt88+nxltHKWouIqzWJxwMB8GA1UdIwQY MBaAFI8q5FxQkEGnlqlolTWB9R1Fv85VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanlya1hGQ1FRYWVXcVdpVk5ZSDFIVVdfemxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85MzkwMWEtMDQzYi00OWM4LWFkMzct YWM3ZjIxYjZiNzRkLzEvVWVYWXVkUzN6ejZmR1cwY3BhaTRpck5ZbkhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni85MzkwMWEtMDQzYi00OWM4LWFkMzctYWM3ZjIxYjZiNzRk LzEvanlya1hGQ1FRYWVXcVdpVk5ZSDFIVVdfemxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTUtwMA0G CSqGSIb3DQEBCwUAA4IBAQCiWpapLt+2ls0HY3rBQ8t71lWDE/sQVlq4nWveL74s aKF4Da9cK0JUt5giqu0ZCMOI4S5p+WnZB/oFz1z/boN5AC+VvaPK1pxAMqqzysa0 TEiVHhaWiuzsL2jPyAsqqzt2p3ECaqjIW6p5WugDV4aaLVyaym8YS+fTnaCR0f5p r0c3TFpmUfwZMshdXdh5i3tZSEUE0rY/YXoygU2JayZwqkx7bZOaSa69f0I+Mp0X wWcI2Jf8A2kAAieIDUnRoMFmOXSibIMlhJATrMVnmRGQQidPaxGJLV4RuM7oOBhb eb/FZ2NK1JQfCSQ2UCEetCqQHIYQpHRazl+RrK0KuKPH -----END CERTIFICATE-----Generated at Wed Jan 21 10:29:18 2026 by rpki-client