This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/UvogVQiFlOzL1lQpufyLEmyZKjQ.roa File: UvogVQiFlOzL1lQpufyLEmyZKjQ.roa (raw, json) Hash identifier: cIiYR4bOC43Bt+bdDmmyoUYytMbqFO52hP62NEaq3as= Subject key identifier: 52:FA:20:55:08:85:94:EC:CB:D6:54:29:B9:FC:8B:12:6C:99:2A:34 Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55 Certificate serial: 019B79104D4E93861C9C4F83F76569635880 Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/UvogVQiFlOzL1lQpufyLEmyZKjQ.roa Signing time: Thu 01 Jan 2026 10:17:49 +0000 ROA not before: Thu 01 Jan 2026 10:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33951 IP address blocks: 91.193.96.0/22 maxlen: 22 95.175.0.0/19 maxlen: 19 95.175.0.0/24 maxlen: 24 95.175.1.0/24 maxlen: 24 95.175.5.0/24 maxlen: 24 95.175.29.0/24 maxlen: 24 193.239.206.0/23 maxlen: 23 194.63.132.0/22 maxlen: 22 217.11.135.0/24 maxlen: 24 2a04:1200::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:4d:4e:93:86:1c:9c:4f:83:f7:65:69:63:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55 Validity Not Before: Jan 1 10:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52fa2055088594eccbd65429b9fc8b126c992a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cf:eb:38:db:5a:d3:73:ef:b5:ac:fe:da:61: b9:12:05:94:c1:b0:4a:02:43:45:9f:bc:92:19:32: c8:d8:6d:3c:78:6e:90:80:8d:58:e1:02:67:16:59: 30:f8:8e:26:a7:e8:97:1e:91:69:60:b5:84:00:a7: e4:24:fb:8e:0e:c7:ff:b4:cc:bd:d8:e7:2e:b6:81: d9:a8:5e:98:e9:45:54:d8:5e:69:0c:35:2d:17:1f: aa:37:78:fb:a4:35:2a:c9:be:31:3b:d6:a2:38:d8: 62:b5:24:00:56:9d:f4:a8:f3:ce:a3:8b:3c:86:bc: 6d:cb:9f:c9:62:0a:53:5a:a5:41:10:77:67:46:78: a3:6b:6f:41:5e:83:57:2a:d4:dd:c6:05:54:c5:12: 9d:61:78:c9:27:6a:ce:e9:f9:c2:2f:64:12:d8:e2: a1:16:64:23:b5:7b:eb:90:5c:61:fd:2b:07:5f:89: 3c:32:9c:67:62:5e:6d:b7:c2:04:ab:34:6d:ca:46: db:5f:e1:27:12:30:24:b7:cb:de:0e:33:27:64:aa: 49:e4:d2:b8:2d:62:4b:d8:68:c5:fd:26:46:da:0c: 18:f9:e7:41:3b:b2:75:5c:3a:5c:42:9c:43:2f:33: b0:25:bd:97:cf:57:4c:60:5b:1a:25:ec:e9:f7:c9: 7c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FA:20:55:08:85:94:EC:CB:D6:54:29:B9:FC:8B:12:6C:99:2A:34 X509v3 Authority Key Identifier: keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/UvogVQiFlOzL1lQpufyLEmyZKjQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.193.96.0/22 95.175.0.0/19 193.239.206.0/23 194.63.132.0/22 217.11.135.0/24 IPv6: 2a04:1200::/29 Signature Algorithm: sha256WithRSAEncryption 68:93:90:9b:c9:db:87:78:ce:19:d0:c1:da:6f:b4:8a:93:4f: c0:1b:3f:fa:fc:5c:9e:b7:c4:d0:5f:ca:3d:49:f3:28:f0:4d: f6:65:12:76:59:25:1c:84:60:ac:99:c2:b8:a4:92:eb:a3:0a: 65:32:56:1c:60:6b:f5:44:90:a5:cc:e4:a0:87:f2:ef:cf:0c: 5d:37:8c:b8:4b:16:56:cd:70:cb:8b:fe:b9:63:6a:df:1f:fb: 11:ea:fe:b5:ab:3d:b0:83:ed:c4:60:98:c9:1c:35:58:a2:a6: fc:59:25:21:62:ac:f7:78:26:7e:43:1d:2e:37:61:2b:e4:d1: af:ca:de:b5:0c:5c:a2:01:57:40:05:bc:56:a7:ab:d9:f9:5d: da:16:94:1f:e8:a6:62:97:2c:4d:af:09:f8:a4:07:db:69:ee: 96:4f:b4:a3:bb:26:3a:b4:74:e4:74:38:ec:38:be:5a:c0:5b: 94:41:66:81:dd:ab:79:89:0b:e2:50:e6:04:45:09:f5:e1:f9: 13:b5:96:d9:4c:11:2b:98:b4:ad:80:b6:4b:74:ee:b1:4c:1b: ef:48:f5:79:39:c8:0e:22:4d:2f:f3:42:c5:19:89:bb:e7:70: ec:be:9b:18:49:1d:48:d8:fa:dd:3d:ee:dd:0f:3a:23:89:1f: c4:78:74:cd -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt5EE1Ok4YcnE+D92VpY1iAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMGExMjMxZDFjMjdhNzU0ZTQ2ZWYxMGU5MmE3MzBhZTE1 ZDBmNTUwHhcNMjYwMTAxMTAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmZhMjA1NTA4ODU5NGVjY2JkNjU0MjliOWZjOGIxMjZjOTkyYTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8/rONta03Pvtaz+2mG5EgWUwbBK AkNFn7ySGTLI2G08eG6QgI1Y4QJnFlkw+I4mp+iXHpFpYLWEAKfkJPuODsf/tMy9 2OcutoHZqF6Y6UVU2F5pDDUtFx+qN3j7pDUqyb4xO9aiONhitSQAVp30qPPOo4s8 hrxty5/JYgpTWqVBEHdnRnija29BXoNXKtTdxgVUxRKdYXjJJ2rO6fnCL2QS2OKh FmQjtXvrkFxh/SsHX4k8MpxnYl5tt8IEqzRtykbbX+EnEjAkt8veDjMnZKpJ5NK4 LWJL2GjF/SZG2gwY+edBO7J1XDpcQpxDLzOwJb2Xz1dMYFsaJezp98l8oQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFFL6IFUIhZTsy9ZUKbn8ixJsmSo0MB8GA1UdIwQY MBaAFHAKEjHRwnp1TkbvEOkqcwrhXQ9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgt YWI3OWEzNzg5ZjhmLzEvVXZvZ1ZRaUZsT3pMMWxRcHVmeUxFbXlaS2pRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgtYWI3OWEzNzg5Zjhm LzEvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCW8FgAwQF X68AAwQBwe/OAwQCwj+EAwQA2QuHMA0EAgACMAcDBQMqBBIAMA0GCSqGSIb3DQEB CwUAA4IBAQBok5CbyduHeM4Z0MHab7SKk0/AGz/6/Fyet8TQX8o9SfMo8E32ZRJ2 WSUchGCsmcK4pJLrowplMlYcYGv1RJClzOSgh/LvzwxdN4y4SxZWzXDLi/65Y2rf H/sR6v61qz2wg+3EYJjJHDVYoqb8WSUhYqz3eCZ+Qx0uN2Er5NGvyt61DFyiAVdA BbxWp6vZ+V3aFpQf6KZilyxNrwn4pAfbae6WT7SjuyY6tHTkdDjsOL5awFuUQWaB 3at5iQviUOYERQn14fkTtZbZTBErmLStgLZLdO6xTBvvSPV5OcgOIk0v80LFGYm7 53DsvpsYSR1I2PrdPe7dDzojiR/EeHTN -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:07 2026 by rpki-client