This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/Y45Z-69JdV08zvRND3s3CCHByos.roa File: Y45Z-69JdV08zvRND3s3CCHByos.roa (raw, json) Hash identifier: LSfljHvNNJLgnIY73ywa8BmCbjs0D1+ME8EqFOPNt90= Subject key identifier: 63:8E:59:FB:AF:49:75:5D:3C:CE:F4:4D:0F:7B:37:08:21:C1:CA:8B Certificate issuer: /CN=b9c89cfadd51f4d921bb3d0c55f9313663a71cc4 Certificate serial: 019B78A37DD66719ED16C9D5339FCD6FDBCB Authority key identifier: B9:C8:9C:FA:DD:51:F4:D9:21:BB:3D:0C:55:F9:31:36:63:A7:1C:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/Y45Z-69JdV08zvRND3s3CCHByos.roa Signing time: Thu 01 Jan 2026 08:18:59 +0000 ROA not before: Thu 01 Jan 2026 08:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203687 IP address blocks: 185.167.140.0/22 maxlen: 22 185.167.140.0/23 maxlen: 23 185.167.142.0/23 maxlen: 23 2a0b:6e00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:7d:d6:67:19:ed:16:c9:d5:33:9f:cd:6f:db:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9c89cfadd51f4d921bb3d0c55f9313663a71cc4 Validity Not Before: Jan 1 08:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=638e59fbaf49755d3ccef44d0f7b370821c1ca8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bb:c2:f1:e7:65:7b:47:d4:f0:4e:2b:5a:ad: 0f:16:86:4c:27:3d:93:8f:73:dd:74:65:c5:da:44: 80:5f:ab:61:a0:1c:94:50:05:3b:c3:ea:e4:1b:3b: 1c:50:31:b1:39:7e:28:d5:6f:ee:ae:80:cc:1d:39: 21:84:4f:cf:07:f6:05:61:77:b5:6a:99:4c:b4:4f: fd:f0:47:19:21:52:eb:25:e7:4a:46:cc:aa:19:90: 8d:89:5c:b5:ae:95:5e:bc:e5:6b:50:d9:53:8a:fc: be:14:66:5f:d2:84:bd:21:a5:f8:30:2d:92:85:cc: 1b:73:a1:c5:3b:14:db:63:1c:37:20:75:bb:cf:fc: ff:9c:80:ac:02:7e:9a:32:ef:49:12:cf:b5:63:db: da:ff:15:0e:1a:29:de:56:e6:08:79:32:01:e0:86: 74:e9:18:74:08:7c:b6:57:7c:a5:ef:aa:e1:7a:ab: a6:a7:bf:09:77:ad:39:af:d9:16:39:c7:ef:88:69: 9b:d9:f4:1a:4b:7c:a8:c1:db:9a:a8:21:df:6a:81: 3e:4c:ab:9e:9e:73:c4:95:58:88:15:94:11:41:23: 6f:b3:ba:84:ce:b5:d3:1b:e5:0b:e0:83:ad:3d:ff: 46:97:4e:2d:3d:92:09:52:f7:e8:e5:e9:c0:09:d2: f4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:8E:59:FB:AF:49:75:5D:3C:CE:F4:4D:0F:7B:37:08:21:C1:CA:8B X509v3 Authority Key Identifier: keyid:B9:C8:9C:FA:DD:51:F4:D9:21:BB:3D:0C:55:F9:31:36:63:A7:1C:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/Y45Z-69JdV08zvRND3s3CCHByos.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6e0ed3-eb01-44f7-8d54-39d9e0962440/1/ucic-t1R9Nkhuz0MVfkxNmOnHMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.167.140.0/22 IPv6: 2a0b:6e00::/32 Signature Algorithm: sha256WithRSAEncryption 6c:37:a2:67:c8:e9:c9:1e:31:78:b4:04:b2:e1:a9:49:15:a8: 08:15:e7:b7:80:e0:7e:7b:9f:ea:39:43:50:fc:e4:1c:df:8b: 40:4b:8f:4d:44:45:10:d3:a5:a6:74:53:3c:32:77:23:4d:2c: bb:7e:31:6c:5d:11:68:a7:cc:27:57:1a:11:3c:bd:b5:bb:09: 59:87:99:f7:d1:97:e1:77:5f:8e:d0:f2:88:86:4b:3e:38:c9: 82:f5:5a:c4:59:5f:4a:dc:50:70:43:76:3e:c6:b9:1d:b1:e5: 94:c5:a4:28:bd:ea:d9:71:90:9d:95:0a:43:2d:58:6c:dd:12: 7b:e3:91:4a:21:86:b2:b7:f9:12:82:9a:21:52:7e:90:b0:52: a3:3b:da:7c:0b:44:18:28:50:f4:79:74:08:4e:63:6e:50:67: 2e:5f:82:69:1a:70:25:13:b7:ac:37:71:3e:c8:3d:23:6c:fa: fc:83:f8:b6:43:ca:81:36:f7:9f:96:84:18:02:7d:49:7e:f1: 01:a1:0c:70:68:3c:f8:1d:93:54:d7:be:01:59:de:9c:d7:76: ef:2d:02:b7:0f:ac:93:7d:bd:d0:b6:48:db:a0:5e:51:93:31: a6:da:1d:4a:35:b3:f1:df:38:37:4e:e6:28:90:b6:43:c7:a4: 1b:ab:e7:f9 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4o33WZxntFsnVM5/Nb9vLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5Yzg5Y2ZhZGQ1MWY0ZDkyMWJiM2QwYzU1ZjkzMTM2NjNh NzFjYzQwHhcNMjYwMTAxMDgxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzhlNTlmYmFmNDk3NTVkM2NjZWY0NGQwZjdiMzcwODIxYzFjYThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbvC8edle0fU8E4rWq0PFoZMJz2T j3PddGXF2kSAX6thoByUUAU7w+rkGzscUDGxOX4o1W/uroDMHTkhhE/PB/YFYXe1 aplMtE/98EcZIVLrJedKRsyqGZCNiVy1rpVevOVrUNlTivy+FGZf0oS9IaX4MC2S hcwbc6HFOxTbYxw3IHW7z/z/nICsAn6aMu9JEs+1Y9va/xUOGineVuYIeTIB4IZ0 6Rh0CHy2V3yl76rheqump78Jd605r9kWOcfviGmb2fQaS3yowduaqCHfaoE+TKue nnPElViIFZQRQSNvs7qEzrXTG+UL4IOtPf9Gl04tPZIJUvfo5enACdL0mwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGOOWfuvSXVdPM70TQ97NwghwcqLMB8GA1UdIwQY MBaAFLnInPrdUfTZIbs9DFX5MTZjpxzEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWNpYy10MVI5TmtodXowTVZma3hObU9uSE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82ZTBlZDMtZWIwMS00NGY3LThkNTQt MzlkOWUwOTYyNDQwLzEvWTQ1Wi02OUpkVjA4enZSTkQzczNDQ0hCeW9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi82ZTBlZDMtZWIwMS00NGY3LThkNTQtMzlkOWUwOTYyNDQw LzEvdWNpYy10MVI5TmtodXowTVZma3hObU9uSE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuaeMMA0E AgACMAcDBQAqC24AMA0GCSqGSIb3DQEBCwUAA4IBAQBsN6JnyOnJHjF4tASy4alJ FagIFee3gOB+e5/qOUNQ/OQc34tAS49NREUQ06WmdFM8MncjTSy7fjFsXRFop8wn VxoRPL21uwlZh5n30Zfhd1+O0PKIhks+OMmC9VrEWV9K3FBwQ3Y+xrkdseWUxaQo verZcZCdlQpDLVhs3RJ745FKIYayt/kSgpohUn6QsFKjO9p8C0QYKFD0eXQITmNu UGcuX4JpGnAlE7esN3E+yD0jbPr8g/i2Q8qBNvefloQYAn1JfvEBoQxwaDz4HZNU 174BWd6c13bvLQK3D6yTfb3QtkjboF5RkzGm2h1KNbPx3zg3TuYokLZDx6Qbq+f5 -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:52 2026 by rpki-client