This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/UJYmLUubxB3Ru_-Mh2hk0ZAXqvk.roa File: UJYmLUubxB3Ru_-Mh2hk0ZAXqvk.roa (raw, json) Hash identifier: o9sPEzQFIIxibCJFZB3OkCMDh95FZm9NWhB+xHWn8Y8= Subject key identifier: 50:96:26:2D:4B:9B:C4:1D:D1:BB:FF:8C:87:68:64:D1:90:17:AA:F9 Certificate issuer: /CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc Certificate serial: 019B7AC87E0E7234CD0C186915E088107A62 Authority key identifier: 0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/UJYmLUubxB3Ru_-Mh2hk0ZAXqvk.roa Signing time: Thu 01 Jan 2026 18:18:38 +0000 ROA not before: Thu 01 Jan 2026 18:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203081 IP address blocks: 185.145.4.0/22 maxlen: 22 2a07:44c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:7e:0e:72:34:cd:0c:18:69:15:e0:88:10:7a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc Validity Not Before: Jan 1 18:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5096262d4b9bc41dd1bbff8c876864d19017aaf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4d:fa:80:74:b7:0a:06:2a:e2:73:a8:7b:e5: e7:57:4c:6b:7e:32:6b:9e:2b:6f:a3:7d:5d:68:8d: 05:9d:fa:e5:45:b6:68:6e:54:ea:99:30:29:4f:2f: 38:58:e4:99:78:5b:5c:b0:7c:6d:72:32:c1:a9:dc: dd:7c:c9:45:da:48:cc:9c:2d:8a:54:52:93:62:9d: 32:14:62:a6:a9:bf:5f:92:70:57:05:d1:2c:b9:a7: f3:5f:bd:6e:4d:be:a0:56:9f:88:67:eb:48:c4:c2: c3:83:4c:d6:50:c2:e4:6e:f5:55:d3:d6:b0:d8:88: 68:9a:af:a7:9f:90:08:e5:c4:97:4c:58:bc:f6:1f: db:65:69:7a:e6:a0:7e:10:4e:9f:ea:ca:7a:3c:79: 67:f6:fc:5a:5f:4e:34:e2:14:1d:3f:4c:29:91:27: f2:dc:ed:5b:20:09:da:90:0f:49:58:94:c2:40:4b: 8b:3c:a5:08:9e:aa:50:ff:71:4f:a1:8b:42:fb:52: 85:84:4e:67:6d:1f:8c:4b:c5:38:c0:5e:05:f2:08: d2:b3:ce:9a:00:2f:bd:72:9c:25:2c:4f:39:c5:35: 7f:68:99:8b:97:cc:b0:74:07:d9:f9:c5:3e:bb:e7: 16:f2:22:13:f4:f0:3f:49:dd:4d:bc:05:4e:fe:1e: 5e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:96:26:2D:4B:9B:C4:1D:D1:BB:FF:8C:87:68:64:D1:90:17:AA:F9 X509v3 Authority Key Identifier: keyid:0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/UJYmLUubxB3Ru_-Mh2hk0ZAXqvk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.145.4.0/22 IPv6: 2a07:44c0::/29 Signature Algorithm: sha256WithRSAEncryption 9f:6d:f0:ee:d2:20:cd:d5:54:98:ee:6b:4e:65:66:ed:c1:45: 43:7d:61:c8:66:61:75:a6:81:f6:a8:6b:e9:f9:02:c7:54:9a: a3:c3:72:7c:c9:2f:e3:28:16:ae:98:08:bd:24:cb:21:83:72: 31:09:97:a4:01:94:30:10:d7:4f:6b:fe:48:ff:ed:1f:06:83: 89:f6:b6:2a:d8:bb:ed:c3:dc:5c:d2:2a:f9:97:bc:4e:f9:33: 5b:aa:3e:41:a0:bd:71:59:37:fc:08:71:70:93:d6:7e:83:da: fe:c5:76:d1:1b:00:fd:64:5e:da:17:03:87:4f:26:65:c0:d3: 03:b9:b1:a0:c4:04:66:f2:ae:eb:e8:a0:11:49:5a:b9:8e:d4: b0:f3:21:92:3d:aa:69:8f:53:15:55:31:f9:72:8b:71:d3:65: 88:aa:13:f4:6e:40:0e:8a:70:ea:3a:38:87:bd:6a:6c:bf:93: 08:07:60:9f:38:c5:2f:af:99:fa:8d:c2:34:dc:36:66:80:6a: 31:1c:28:e9:6f:55:1c:ad:5c:48:39:1e:4a:ca:6a:5e:03:b9: c9:48:4c:84:2c:5e:08:51:36:b9:b3:27:bc:0a:5b:44:fd:36: 3f:37:58:2e:26:b6:72:dc:2c:8c:a1:6e:cc:3f:15:77:a5:0e: 88:21:b1:73 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yH4OcjTNDBhpFeCIEHpiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMWUzZmQ1MDQwYmI5ZmI5MTI2ZTUxMTllNWZmN2MwNzRk YTViYmMwHhcNMjYwMTAxMTgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDk2MjYyZDRiOWJjNDFkZDFiYmZmOGM4NzY4NjRkMTkwMTdhYWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq036gHS3CgYq4nOoe+XnV0xrfjJr nitvo31daI0FnfrlRbZoblTqmTApTy84WOSZeFtcsHxtcjLBqdzdfMlF2kjMnC2K VFKTYp0yFGKmqb9fknBXBdEsuafzX71uTb6gVp+IZ+tIxMLDg0zWUMLkbvVV09aw 2Ihomq+nn5AI5cSXTFi89h/bZWl65qB+EE6f6sp6PHln9vxaX0404hQdP0wpkSfy 3O1bIAnakA9JWJTCQEuLPKUInqpQ/3FPoYtC+1KFhE5nbR+MS8U4wF4F8gjSs86a AC+9cpwlLE85xTV/aJmLl8ywdAfZ+cU+u+cW8iIT9PA/Sd1NvAVO/h5eowIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFCWJi1Lm8Qd0bv/jIdoZNGQF6r5MB8GA1UdIwQY MBaAFA0eP9UEC7n7kSblEZ5f98B02lu8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFI0XzFRUUx1ZnVSSnVVUm5sXzN3SFRhVzd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NDQ1YTktM2Y3Zi00ZjRhLTgwYjgt NWI5MTAxNTcyNzFiLzEvVUpZbUxVdWJ4QjNSdV8tTWgyaGswWkFYcXZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NDQ1YTktM2Y3Zi00ZjRhLTgwYjgtNWI5MTAxNTcyNzFi LzEvRFI0XzFRUUx1ZnVSSnVVUm5sXzN3SFRhVzd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZEEMA0E AgACMAcDBQMqB0TAMA0GCSqGSIb3DQEBCwUAA4IBAQCfbfDu0iDN1VSY7mtOZWbt wUVDfWHIZmF1poH2qGvp+QLHVJqjw3J8yS/jKBaumAi9JMshg3IxCZekAZQwENdP a/5I/+0fBoOJ9rYq2Lvtw9xc0ir5l7xO+TNbqj5BoL1xWTf8CHFwk9Z+g9r+xXbR GwD9ZF7aFwOHTyZlwNMDubGgxARm8q7r6KARSVq5jtSw8yGSPappj1MVVTH5cotx 02WIqhP0bkAOinDqOjiHvWpsv5MIB2CfOMUvr5n6jcI03DZmgGoxHCjpb1UcrVxI OR5KympeA7nJSEyELF4IUTa5sye8CltE/TY/N1guJrZy3CyMoW7MPxV3pQ6IIbFz -----END CERTIFICATE-----Generated at Tue Feb 10 01:07:25 2026 by rpki-client