This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/ufg8Cy-npLiG4EP7oeE-jAY168k.roa File: ufg8Cy-npLiG4EP7oeE-jAY168k.roa (raw, json) Hash identifier: mWJPH552eZGzUsrCNb54v4U4ffZaIGFDBWjHB1EftzA= Subject key identifier: B9:F8:3C:0B:2F:A7:A4:B8:86:E0:43:FB:A1:E1:3E:8C:06:35:EB:C9 Certificate issuer: /CN=d0ee0389687dbd445de6f9239c1d02c3770cf574 Certificate serial: 019B7BA52A3E70CD3E2817AC7C22DD76C410 Authority key identifier: D0:EE:03:89:68:7D:BD:44:5D:E6:F9:23:9C:1D:02:C3:77:0C:F5:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/ufg8Cy-npLiG4EP7oeE-jAY168k.roa Signing time: Thu 01 Jan 2026 22:19:40 +0000 ROA not before: Thu 01 Jan 2026 22:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198551 IP address blocks: 185.238.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.mft rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:2a:3e:70:cd:3e:28:17:ac:7c:22:dd:76:c4:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0ee0389687dbd445de6f9239c1d02c3770cf574 Validity Not Before: Jan 1 22:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9f83c0b2fa7a4b886e043fba1e13e8c0635ebc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a2:09:5d:0a:c1:c3:fd:6a:1a:2f:ed:7e:52: 13:8c:8b:be:24:66:80:3b:c7:e7:ac:f5:de:bb:37: 54:04:38:1d:75:53:70:e0:86:95:c1:2f:b8:9b:c4: d6:9e:7a:14:a9:b5:d3:66:43:24:22:32:35:61:36: f2:c4:81:24:14:0f:b6:66:2f:b5:cd:55:45:53:f7: e8:b2:c0:5e:1f:a4:b6:c5:1e:85:26:21:04:06:e0: 2b:55:87:be:fb:eb:ff:56:74:cb:a0:ec:21:a1:a4: 07:c9:ac:d2:59:0e:60:23:7f:83:ba:99:c3:41:8c: 9d:4d:3a:66:77:65:b8:12:cf:a8:19:05:7d:19:e2: 84:da:25:be:af:46:d1:fc:fd:e0:04:23:11:c5:f9: 19:bb:94:10:f1:2a:1b:57:37:e4:41:b4:a0:bd:ef: b6:28:a9:05:7c:fa:56:0d:7a:33:a8:da:d9:1f:4c: 4c:af:f2:98:7d:79:72:49:7a:32:cc:f2:53:35:a0: 1a:6e:3f:eb:20:84:e9:07:01:e1:e0:87:ab:c2:3f: 34:9b:f4:0d:56:3d:3a:43:17:80:77:9e:29:6b:7e: 12:2e:3a:26:5d:f4:6b:9d:24:97:ae:6b:3c:89:5f: 5c:02:a2:6d:1b:45:b0:d3:97:34:31:16:01:16:f1: ae:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F8:3C:0B:2F:A7:A4:B8:86:E0:43:FB:A1:E1:3E:8C:06:35:EB:C9 X509v3 Authority Key Identifier: keyid:D0:EE:03:89:68:7D:BD:44:5D:E6:F9:23:9C:1D:02:C3:77:0C:F5:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/ufg8Cy-npLiG4EP7oeE-jAY168k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a11417-6abc-4c0d-8afa-1a29a448d309/1/0O4DiWh9vURd5vkjnB0Cw3cM9XQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.238.36.0/22 Signature Algorithm: sha256WithRSAEncryption 22:82:c2:f3:2b:d8:d4:fb:11:8c:59:06:31:b5:02:55:c6:c6: 7c:ed:be:55:6c:18:e3:67:a0:20:74:69:f6:ee:eb:3e:61:92: 6c:51:ba:8a:f3:e5:90:9d:8b:71:b9:74:5d:fa:b9:dd:a9:68: 92:04:9b:b4:50:3f:c3:c7:f4:72:76:87:40:ee:c5:35:2f:57: c5:d4:97:11:38:a7:24:25:85:43:ae:a3:15:96:64:ad:f9:44: b9:35:2d:14:b2:b6:5f:06:e1:c8:ab:7e:55:15:be:da:87:5b: b2:0c:d9:f6:44:0c:9c:96:5a:7e:ac:9e:54:7e:59:7e:af:c8: 26:de:bb:cb:28:30:e8:ac:e9:44:be:23:c3:69:41:41:dd:c2: d6:fc:c8:98:48:01:81:cc:80:7b:03:a4:cb:c6:7f:b2:f3:4b: 64:36:dc:92:1c:81:c6:fc:9f:33:73:d4:a6:34:ef:95:45:10: fe:d3:f3:77:de:ab:51:b8:22:fd:ad:a1:1d:5d:e0:18:ca:f6: 1a:bd:2d:5e:77:90:c9:58:ae:f7:02:89:1c:0f:fd:75:8b:ad: 86:63:2d:3c:72:51:f6:47:82:8e:7e:b9:ad:7d:ff:98:3d:7b: a5:df:c2:72:8c:dd:4c:ad:ef:4b:0c:10:f3:c6:ac:a1:3d:ea: 42:0e:78:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pSo+cM0+KBesfCLddsQQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwZWUwMzg5Njg3ZGJkNDQ1ZGU2ZjkyMzljMWQwMmMzNzcw Y2Y1NzQwHhcNMjYwMTAxMjIxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWY4M2MwYjJmYTdhNGI4ODZlMDQzZmJhMWUxM2U4YzA2MzVlYmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qIJXQrBw/1qGi/tflITjIu+JGaA O8fnrPXeuzdUBDgddVNw4IaVwS+4m8TWnnoUqbXTZkMkIjI1YTbyxIEkFA+2Zi+1 zVVFU/fossBeH6S2xR6FJiEEBuArVYe+++v/VnTLoOwhoaQHyazSWQ5gI3+DupnD QYydTTpmd2W4Es+oGQV9GeKE2iW+r0bR/P3gBCMRxfkZu5QQ8SobVzfkQbSgve+2 KKkFfPpWDXozqNrZH0xMr/KYfXlySXoyzPJTNaAabj/rIITpBwHh4Ierwj80m/QN Vj06QxeAd54pa34SLjomXfRrnSSXrms8iV9cAqJtG0Ww05c0MRYBFvGufQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLn4PAsvp6S4huBD+6HhPowGNevJMB8GA1UdIwQY MBaAFNDuA4lofb1EXeb5I5wdAsN3DPV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvME80RGlXaDl2VVJkNXZram5CMEN3M2NNOVhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hMTE0MTctNmFiYy00YzBkLThhZmEt MWEyOWE0NDhkMzA5LzEvdWZnOEN5LW5wTGlHNEVQN29lRS1qQVkxNjhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9hMTE0MTctNmFiYy00YzBkLThhZmEtMWEyOWE0NDhkMzA5 LzEvME80RGlXaDl2VVJkNXZram5CMEN3M2NNOVhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCue4kMA0G CSqGSIb3DQEBCwUAA4IBAQAigsLzK9jU+xGMWQYxtQJVxsZ87b5VbBjjZ6AgdGn2 7us+YZJsUbqK8+WQnYtxuXRd+rndqWiSBJu0UD/Dx/RydodA7sU1L1fF1JcROKck JYVDrqMVlmSt+US5NS0UsrZfBuHIq35VFb7ah1uyDNn2RAycllp+rJ5Ufll+r8gm 3rvLKDDorOlEviPDaUFB3cLW/MiYSAGBzIB7A6TLxn+y80tkNtySHIHG/J8zc9Sm NO+VRRD+0/N33qtRuCL9raEdXeAYyvYavS1ed5DJWK73AokcD/11i62GYy08clH2 R4KOfrmtff+YPXul38JyjN1Mre9LDBDzxqyhPepCDngl -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:18 2026 by rpki-client