This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/ul-zUnu2paikTnNwXd2oI1pwrnM.roa File: ul-zUnu2paikTnNwXd2oI1pwrnM.roa (raw, json) Hash identifier: q4CKSlu3nmMvj1Nz7hbm/CkmdA2asS0OfEoxLCdJk/M= Subject key identifier: BA:5F:B3:52:7B:B6:A5:A8:A4:4E:73:70:5D:DD:A8:23:5A:70:AE:73 Certificate issuer: /CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31 Certificate serial: 019B7C7F07E84DF17E90C5F5C0F10FF79CE6 Authority key identifier: 70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/ul-zUnu2paikTnNwXd2oI1pwrnM.roa Signing time: Fri 02 Jan 2026 02:17:38 +0000 ROA not before: Fri 02 Jan 2026 02:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49825 IP address blocks: 193.19.82.0/23 maxlen: 24 194.165.0.0/24 maxlen: 24 194.165.1.0/24 maxlen: 24 195.211.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:07:e8:4d:f1:7e:90:c5:f5:c0:f1:0f:f7:9c:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31 Validity Not Before: Jan 2 02:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba5fb3527bb6a5a8a44e73705ddda8235a70ae73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d6:f0:70:ed:e8:05:59:6a:71:0c:d3:5b:5e: f6:00:74:ec:df:96:8e:9e:2a:1e:a6:3b:d9:de:2b: fa:f4:96:a8:80:ce:0c:f8:56:b0:98:93:2d:1a:7a: bf:0a:ca:24:38:af:85:b0:2d:e9:03:bc:a3:3b:23: f2:49:9d:00:51:b5:90:8d:ea:1f:4f:f5:87:7e:2d: 47:f1:a7:16:14:dd:03:01:24:6b:7c:58:e6:a2:da: c1:09:4f:8c:9e:1e:af:71:98:3b:f4:2f:d8:12:83: e0:9e:f4:43:16:ba:de:83:5c:64:1d:01:3a:c6:10: 67:12:cb:bf:b9:36:54:7d:3c:78:01:6e:c0:29:e6: 10:57:c4:b9:5f:f7:bd:88:7e:03:3b:6e:43:43:be: b9:d4:6a:7f:a7:46:6a:53:20:99:e6:f9:89:2b:39: b2:b7:c9:9e:db:86:8f:c3:fa:99:7c:02:12:46:7b: 95:76:15:f6:c3:c7:ec:fe:3e:8b:5a:66:be:e7:47: 0e:27:16:a8:a1:1b:20:7c:0e:19:3d:39:be:06:97: 0e:f3:c5:22:71:c7:84:ef:a2:2d:0b:54:46:35:7a: 81:95:70:50:24:e8:79:59:d7:47:59:5f:c7:cc:3d: 33:c3:e8:a4:e2:63:96:db:5a:ae:cf:34:a9:07:96: 63:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:5F:B3:52:7B:B6:A5:A8:A4:4E:73:70:5D:DD:A8:23:5A:70:AE:73 X509v3 Authority Key Identifier: keyid:70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/ul-zUnu2paikTnNwXd2oI1pwrnM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.19.82.0/23 194.165.0.0/23 195.211.76.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:de:d3:63:b8:38:cc:22:4e:d2:3c:b4:cd:f4:05:a9:3f:36: 74:05:52:ca:f0:36:f1:89:4f:29:42:6d:44:9a:89:3c:06:32: ad:cd:7e:c9:b2:9e:e4:11:5b:ce:cc:56:23:e7:0d:fe:19:ba: 1d:9d:ae:10:55:6d:3c:75:f6:5f:03:25:12:b5:19:37:f9:9d: 39:2f:0b:d1:df:fb:08:fb:0a:17:e4:99:e4:c9:43:7c:ff:b6: 73:ed:80:71:d1:7d:2b:d8:1d:43:53:30:e8:54:80:6e:28:50: f2:74:b1:ad:e6:65:54:05:7a:8f:fb:55:ed:87:6b:bf:36:2c: a2:68:a7:10:fc:e1:22:84:6a:5a:5f:b3:7e:90:ae:4c:8e:54: 90:d4:9e:7e:4e:a7:19:8f:09:3b:fa:48:69:cc:0b:a1:68:c3: f2:f7:c8:ff:80:32:39:fb:27:a5:e3:fa:42:8f:46:af:f8:03: 44:f6:29:51:b3:01:48:d1:82:32:9a:65:fe:a7:c4:b3:9d:0d: 05:18:f4:bd:9e:bb:74:48:35:51:87:f5:3f:b5:41:21:68:90: f7:8c:ae:14:ff:83:d9:5f:cf:40:aa:d4:5f:c9:20:7a:07:96: 8d:ac:1b:7c:9a:64:46:4b:ba:02:fc:35:92:13:80:57:c3:9d: 29:96:07:90 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8fwfoTfF+kMX1wPEP95zmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwOWViNmVhYWE0OWRkNmI0ODNlMDRiMTQzNGU0ZGFjNzll ZDlkMzEwHhcNMjYwMTAyMDIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTVmYjM1MjdiYjZhNWE4YTQ0ZTczNzA1ZGRkYTgyMzVhNzBhZTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9bwcO3oBVlqcQzTW172AHTs35aO nioepjvZ3iv69JaogM4M+FawmJMtGnq/CsokOK+FsC3pA7yjOyPySZ0AUbWQjeof T/WHfi1H8acWFN0DASRrfFjmotrBCU+Mnh6vcZg79C/YEoPgnvRDFrreg1xkHQE6 xhBnEsu/uTZUfTx4AW7AKeYQV8S5X/e9iH4DO25DQ7651Gp/p0ZqUyCZ5vmJKzmy t8me24aPw/qZfAISRnuVdhX2w8fs/j6LWma+50cOJxaooRsgfA4ZPTm+BpcO88Ui cceE76ItC1RGNXqBlXBQJOh5WddHWV/HzD0zw+ik4mOW21quzzSpB5ZjJQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLpfs1J7tqWopE5zcF3dqCNacK5zMB8GA1UdIwQY MBaAFHCetuqqSd1rSD4EsUNOTax57Z0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0o2MjZxcEozV3RJUGdTeFEwNU5ySG50blRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy80YmViZTctM2Y4ZS00OTQ5LTg5ODAt OWY2ZmEwZTFhNWE1LzEvdWwtelVudTJwYWlrVG5Od1hkMm9JMXB3cm5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy80YmViZTctM2Y4ZS00OTQ5LTg5ODAtOWY2ZmEwZTFhNWE1 LzEvY0o2MjZxcEozV3RJUGdTeFEwNU5ySG50blRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBwRNSAwQB wqUAAwQCw9NMMA0GCSqGSIb3DQEBCwUAA4IBAQB93tNjuDjMIk7SPLTN9AWpPzZ0 BVLK8DbxiU8pQm1Emok8BjKtzX7Jsp7kEVvOzFYj5w3+Gbodna4QVW08dfZfAyUS tRk3+Z05LwvR3/sI+woX5JnkyUN8/7Zz7YBx0X0r2B1DUzDoVIBuKFDydLGt5mVU BXqP+1Xth2u/NiyiaKcQ/OEihGpaX7N+kK5MjlSQ1J5+TqcZjwk7+khpzAuhaMPy 98j/gDI5+yel4/pCj0av+ANE9ilRswFI0YIymmX+p8SznQ0FGPS9nrt0SDVRh/U/ tUEhaJD3jK4U/4PZX89AqtRfySB6B5aNrBt8mmRGS7oC/DWSE4BXw50plgeQ -----END CERTIFICATE-----Generated at Tue Feb 10 08:39:15 2026 by rpki-client