This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/ucSPBgYBUYo8QSuoI_Y0Icy9e18.roa File: ucSPBgYBUYo8QSuoI_Y0Icy9e18.roa (raw, json) Hash identifier: HWPghkFxbvF44RC0pt0Q9i6IdWhnoDgfcFXVwwuNG8M= Subject key identifier: B9:C4:8F:06:06:01:51:8A:3C:41:2B:A8:23:F6:34:21:CC:BD:7B:5F Certificate issuer: /CN=d999e5d64e44b1733c61737337ce82b4a6943a46 Certificate serial: 019B79100DA64518695C331129193D323CA3 Authority key identifier: D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/ucSPBgYBUYo8QSuoI_Y0Icy9e18.roa Signing time: Thu 01 Jan 2026 10:17:33 +0000 ROA not before: Thu 01 Jan 2026 10:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35760 IP address blocks: 87.101.16.0/20 maxlen: 21 87.101.16.0/21 maxlen: 21 87.101.24.0/21 maxlen: 21 91.196.12.0/23 maxlen: 24 91.196.12.0/24 maxlen: 24 91.196.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:0d:a6:45:18:69:5c:33:11:29:19:3d:32:3c:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d999e5d64e44b1733c61737337ce82b4a6943a46 Validity Not Before: Jan 1 10:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9c48f060601518a3c412ba823f63421ccbd7b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9e:4a:cb:6e:9b:47:66:fe:38:48:17:df:74: 56:b7:fe:70:3d:64:84:fe:78:08:5d:90:66:49:5c: e5:35:f1:68:97:79:f8:ba:d2:4a:9f:a6:db:c3:8d: a8:49:66:ae:d5:d3:94:e3:bf:97:d4:08:e8:35:fd: fd:83:12:1d:00:34:7d:7b:7f:2a:2c:1a:6c:e1:98: 7b:55:b6:d2:db:09:db:ab:56:03:30:b8:80:57:33: 6d:89:b1:e7:de:a3:92:06:bd:a7:05:0e:38:81:d5: ec:43:41:a4:e1:8a:17:ab:31:27:2c:7f:b6:cd:d1: a4:d7:8f:46:c2:80:71:54:f5:92:69:1f:27:f7:cc: 47:70:71:03:6b:b9:e2:f9:06:65:d3:8d:b1:bd:97: 4c:62:31:34:8e:46:50:e6:6e:31:88:69:c0:4c:55: 09:42:1c:6f:81:0a:9d:7c:9f:71:f7:0e:fa:9c:ca: b0:46:63:d1:37:c1:80:6a:20:25:ac:00:a7:4f:55: 55:f4:ba:68:bb:fe:d7:1d:d7:a7:7a:a0:70:c6:d6: 4e:23:f7:40:66:8f:0d:03:eb:d4:eb:a6:bc:3e:e4: 14:5d:b6:a5:e1:96:5a:72:ee:b8:b1:c9:c6:b4:3f: ff:69:7d:2c:00:c2:4c:55:15:87:81:9e:c5:d0:53: e1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C4:8F:06:06:01:51:8A:3C:41:2B:A8:23:F6:34:21:CC:BD:7B:5F X509v3 Authority Key Identifier: keyid:D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/ucSPBgYBUYo8QSuoI_Y0Icy9e18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.101.16.0/20 91.196.12.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:f4:02:71:90:9b:c9:b8:45:77:51:d4:96:ff:4a:ff:0a:f4: 75:0f:ba:6c:46:bc:1b:75:07:cb:72:7b:8d:6d:45:24:0b:95: 94:20:ae:df:71:05:ca:4d:8b:86:d3:13:9b:6b:e3:cc:b0:56: a7:bc:f1:35:6c:12:0f:8f:dc:d2:cf:e6:33:20:d7:fa:84:f7: 54:df:16:7b:ed:05:02:29:f1:74:12:a1:a3:4c:22:fe:a7:1b: 79:8d:bd:f4:fe:ac:f6:41:33:b6:0c:39:09:c9:b3:ff:a2:8b: 30:d2:62:f3:91:aa:14:f4:61:5a:78:a8:de:ff:99:fc:71:a8: 5e:18:16:d5:cc:00:45:ab:2d:ac:51:17:f8:dc:b5:39:16:eb: 59:f2:22:7e:37:49:63:f0:50:8d:6d:9c:20:04:ed:a1:e5:2c: 3e:f7:8d:2d:8c:35:af:74:2d:e6:42:64:14:d2:b9:7a:ad:80: 2f:19:60:4b:ef:9d:b0:2a:56:78:42:47:c1:a4:f8:68:68:16: fb:79:c9:69:86:52:53:04:f8:52:8f:98:b0:02:fd:40:99:b6: c3:25:3b:a7:8d:a9:51:5d:8f:db:1a:3f:99:7b:a8:6d:4e:34: 9c:7d:86:6e:9f:22:fd:df:10:02:d0:bd:d2:21:97:e2:b5:e0: 68:f7:d3:35 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EA2mRRhpXDMRKRk9MjyjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5OTllNWQ2NGU0NGIxNzMzYzYxNzM3MzM3Y2U4MmI0YTY5 NDNhNDYwHhcNMjYwMTAxMTAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWM0OGYwNjA2MDE1MThhM2M0MTJiYTgyM2Y2MzQyMWNjYmQ3YjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm55Ky26bR2b+OEgX33RWt/5wPWSE /ngIXZBmSVzlNfFol3n4utJKn6bbw42oSWau1dOU47+X1AjoNf39gxIdADR9e38q LBps4Zh7VbbS2wnbq1YDMLiAVzNtibHn3qOSBr2nBQ44gdXsQ0Gk4YoXqzEnLH+2 zdGk149GwoBxVPWSaR8n98xHcHEDa7ni+QZl042xvZdMYjE0jkZQ5m4xiGnATFUJ QhxvgQqdfJ9x9w76nMqwRmPRN8GAaiAlrACnT1VV9Lpou/7XHdeneqBwxtZOI/dA Zo8NA+vU66a8PuQUXbal4ZZacu64scnGtD//aX0sAMJMVRWHgZ7F0FPhaQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLnEjwYGAVGKPEErqCP2NCHMvXtfMB8GA1UdIwQY MBaAFNmZ5dZORLFzPGFzczfOgrSmlDpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlpubDFrNUVzWE04WVhOek44NkN0S2FVT2tZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9mMDFmOTktYmMwMS00YjM5LTkzNjIt OWY0N2M3NDEwZDQxLzEvdWNTUEJnWUJVWW84UVN1b0lfWTBJY3k5ZTE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9mMDFmOTktYmMwMS00YjM5LTkzNjItOWY0N2M3NDEwZDQx LzEvMlpubDFrNUVzWE04WVhOek44NkN0S2FVT2tZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEV2UQAwQB W8QMMA0GCSqGSIb3DQEBCwUAA4IBAQAq9AJxkJvJuEV3UdSW/0r/CvR1D7psRrwb dQfLcnuNbUUkC5WUIK7fcQXKTYuG0xOba+PMsFanvPE1bBIPj9zSz+YzINf6hPdU 3xZ77QUCKfF0EqGjTCL+pxt5jb30/qz2QTO2DDkJybP/oosw0mLzkaoU9GFaeKje /5n8caheGBbVzABFqy2sURf43LU5FutZ8iJ+N0lj8FCNbZwgBO2h5Sw+940tjDWv dC3mQmQU0rl6rYAvGWBL752wKlZ4QkfBpPhoaBb7eclphlJTBPhSj5iwAv1AmbbD JTunjalRXY/bGj+Ze6htTjScfYZunyL93xAC0L3SIZfiteBo99M1 -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:09 2026 by rpki-client