This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UPZHyVdasO2KSJiKLaXEu853mic.roa File: UPZHyVdasO2KSJiKLaXEu853mic.roa (raw, json) Hash identifier: RX16s3WPDgb0RPQ3OfMaImheHn1ekIn7l9K3Bwt3m90= Subject key identifier: 50:F6:47:C9:57:5A:B0:ED:8A:48:98:8A:2D:A5:C4:BB:CE:77:9A:27 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84AF769773B5F8C2BCDACBC3440D45 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UPZHyVdasO2KSJiKLaXEu853mic.roa Signing time: Fri 02 Jan 2026 16:22:40 +0000 ROA not before: Fri 02 Jan 2026 16:22:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212336 IP address blocks: 31.57.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:af:76:97:73:b5:f8:c2:bc:da:cb:c3:44:0d:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50f647c9575ab0ed8a48988a2da5c4bbce779a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:95:de:99:f0:ab:6f:cc:67:bf:23:18:ab:e6: d6:aa:ae:5f:02:66:69:c7:df:c0:b9:50:7e:a6:fe: 74:7e:e1:a1:0a:d5:d5:51:f0:4c:1a:4e:4b:21:12: bc:e1:65:f0:e2:30:18:f9:6d:2d:fa:24:77:96:bd: 68:63:65:b9:bb:33:89:aa:7f:5a:48:6a:0a:e7:02: 79:bf:40:ad:42:07:b9:71:82:e2:77:5d:bc:c0:73: 40:22:22:e0:a6:f6:2b:86:24:52:37:87:b5:c2:a8: 2d:6c:62:f4:1c:a8:3a:3b:c0:54:76:72:ed:77:cc: 9c:76:ab:03:fd:9b:6a:a8:fc:ae:a1:58:a5:77:02: b3:4b:aa:36:a6:9e:05:d1:c8:bc:da:4f:2a:07:a8: d9:28:a6:1a:93:2c:70:7b:2f:ce:74:05:80:00:51: 9c:bc:0a:23:f9:17:ec:f8:0a:75:f2:b4:02:26:35: 3e:81:16:bc:b6:8b:ad:85:d2:45:e8:d6:6f:f9:b3: dc:2b:9f:6b:d8:1f:1b:26:a2:12:f0:b2:8d:72:3b: e5:4f:b4:9d:93:67:0d:0d:f8:2a:f9:14:86:6c:13: bf:45:6a:ba:17:e5:7a:f3:62:ae:88:67:74:e0:66: d7:9a:80:c5:b7:54:27:48:71:f2:69:9a:73:0e:9f: 03:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F6:47:C9:57:5A:B0:ED:8A:48:98:8A:2D:A5:C4:BB:CE:77:9A:27 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/UPZHyVdasO2KSJiKLaXEu853mic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.172.0/24 Signature Algorithm: sha256WithRSAEncryption 06:e6:c5:ac:73:8a:e8:d5:b3:78:54:00:1d:d2:df:81:4d:da: dc:b1:f5:03:2d:40:99:c7:ec:5c:c5:77:cd:ae:52:a4:28:39: df:ad:34:b3:2d:1f:ba:12:c9:98:53:e4:d6:a3:e7:3e:4c:41: 16:44:47:98:b9:8f:d3:41:c4:5c:f4:87:80:86:d4:28:ad:9a: cd:90:be:4a:3c:66:91:93:af:9b:cc:5d:08:8c:5f:b8:15:3e: e3:c9:fb:bb:7a:b0:d0:96:6c:db:6d:23:49:74:fe:84:45:03: 0f:3d:65:69:dc:d1:fe:86:9c:98:7a:0f:c5:4d:d7:6e:f6:58: d7:83:b5:53:71:fa:f0:76:0d:5e:d7:0f:e1:13:04:94:10:b8: 5c:96:e3:0d:80:dd:0f:f2:f9:a9:90:0c:52:c6:49:0d:2c:06: 51:a2:a1:f0:93:b3:86:f8:9f:40:d2:58:63:7c:98:0b:69:ba: 17:27:f9:a5:92:f6:9c:4f:9d:73:b3:cd:6d:79:3a:13:88:01: 98:db:dd:96:09:37:1e:12:56:8e:3d:b7:13:bd:fe:6d:ec:4d: 6c:63:7f:61:32:4f:e5:a7:a6:39:ea:63:3f:b2:1f:ac:22:04: df:95:b0:4f:4b:91:b4:2c:30:5c:e6:22:fa:9f:91:c1:bb:02: 86:7f:37:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hK92l3O1+MK82svDRA1FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGY2NDdjOTU3NWFiMGVkOGE0ODk4OGEyZGE1YzRiYmNlNzc5YTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pXemfCrb8xnvyMYq+bWqq5fAmZp x9/AuVB+pv50fuGhCtXVUfBMGk5LIRK84WXw4jAY+W0t+iR3lr1oY2W5uzOJqn9a SGoK5wJ5v0CtQge5cYLid128wHNAIiLgpvYrhiRSN4e1wqgtbGL0HKg6O8BUdnLt d8ycdqsD/ZtqqPyuoVildwKzS6o2pp4F0ci82k8qB6jZKKYakyxwey/OdAWAAFGc vAoj+Rfs+Ap18rQCJjU+gRa8touthdJF6NZv+bPcK59r2B8bJqIS8LKNcjvlT7Sd k2cNDfgq+RSGbBO/RWq6F+V682KuiGd04GbXmoDFt1QnSHHyaZpzDp8D7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFD2R8lXWrDtikiYii2lxLvOd5onMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvVVBaSHlWZGFzTzJLU0ppS0xhWEV1ODUzbWljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzmsMA0G CSqGSIb3DQEBCwUAA4IBAQAG5sWsc4ro1bN4VAAd0t+BTdrcsfUDLUCZx+xcxXfN rlKkKDnfrTSzLR+6EsmYU+TWo+c+TEEWREeYuY/TQcRc9IeAhtQorZrNkL5KPGaR k6+bzF0IjF+4FT7jyfu7erDQlmzbbSNJdP6ERQMPPWVp3NH+hpyYeg/FTddu9ljX g7VTcfrwdg1e1w/hEwSUELhcluMNgN0P8vmpkAxSxkkNLAZRoqHwk7OG+J9A0lhj fJgLaboXJ/mlkvacT51zs81teToTiAGY292WCTceElaOPbcTvf5t7E1sY39hMk/l p6Y56mM/sh+sIgTflbBPS5G0LDBc5iL6n5HBuwKGfzcl -----END CERTIFICATE-----Generated at Mon Jan 5 14:32:54 2026 by rpki-client