This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/VnCUFpdYn6p9SWgBKCYPBMB_uag.roa File: VnCUFpdYn6p9SWgBKCYPBMB_uag.roa (raw, json) Hash identifier: CTE/bVTVJxivSVfHlKssz3gbLXyaKsvtaNtZL1+VzWQ= Subject key identifier: 56:70:94:16:97:58:9F:AA:7D:49:68:01:28:26:0F:04:C0:7F:B9:A8 Certificate issuer: /CN=2421ffb68eab97e24a90626d90498be7ed7066f0 Certificate serial: 019B7D5C67D1EFE4BDA851C059442DF1CD14 Authority key identifier: 24:21:FF:B6:8E:AB:97:E2:4A:90:62:6D:90:49:8B:E7:ED:70:66:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/VnCUFpdYn6p9SWgBKCYPBMB_uag.roa Signing time: Fri 02 Jan 2026 06:19:26 +0000 ROA not before: Fri 02 Jan 2026 06:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1850 IP address blocks: 185.93.156.0/22 maxlen: 22 193.4.58.0/23 maxlen: 23 195.130.211.0/24 maxlen: 24 2001:67c:6c::/48 maxlen: 48 2001:7f8:48::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:67:d1:ef:e4:bd:a8:51:c0:59:44:2d:f1:cd:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2421ffb68eab97e24a90626d90498be7ed7066f0 Validity Not Before: Jan 2 06:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5670941697589faa7d49680128260f04c07fb9a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:37:8c:4d:2e:96:a1:45:ef:90:22:25:11:ca: 1a:fe:49:af:57:80:9d:07:87:e8:a9:7f:0e:40:94: ea:e5:cf:3c:a1:b5:57:a3:34:51:d0:9a:a8:4f:2f: 8e:93:09:67:6a:c6:ff:8d:69:04:f6:73:30:54:75: 8c:77:24:31:e9:b6:0b:c0:db:d5:6c:7a:ae:05:9a: af:a3:30:d9:c1:fb:df:88:ea:81:3f:4f:a2:99:ec: 35:f6:8f:e3:bb:2d:c0:7b:e4:53:5e:06:c7:e0:94: 03:ed:3b:b9:c6:36:30:39:d2:11:ca:c6:fa:92:33: a6:e7:20:11:01:ea:76:32:50:71:d7:47:1e:6f:b4: 8d:98:1f:da:0f:c5:d2:7b:c8:dd:73:8b:dc:6d:d0: 4b:5c:2b:50:26:f6:ca:67:1f:10:e0:41:88:f9:51: a6:10:51:92:68:1d:7d:73:74:80:01:e9:14:3f:56: fb:56:0b:7a:6b:2c:db:87:59:b5:5d:4d:eb:c0:f5: 10:a7:c4:cb:b3:9c:c3:58:5a:72:f1:54:9d:ba:10: cb:6a:bb:a5:7b:ed:06:a1:0c:b4:71:79:87:e5:ba: 2b:79:b2:7d:d0:05:56:12:31:03:41:da:94:21:a0: 48:90:e9:89:d5:0c:f3:00:11:6f:3b:f5:e2:1a:5a: ba:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:70:94:16:97:58:9F:AA:7D:49:68:01:28:26:0F:04:C0:7F:B9:A8 X509v3 Authority Key Identifier: keyid:24:21:FF:B6:8E:AB:97:E2:4A:90:62:6D:90:49:8B:E7:ED:70:66:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/VnCUFpdYn6p9SWgBKCYPBMB_uag.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.93.156.0/22 193.4.58.0/23 195.130.211.0/24 IPv6: 2001:67c:6c::/48 2001:7f8:48::/48 Signature Algorithm: sha256WithRSAEncryption 26:7b:9e:12:ce:9a:37:f4:36:91:aa:23:cf:cd:30:96:8d:bd: 27:ae:78:e1:66:4b:8d:7b:b3:7d:67:a3:cf:ba:f1:ee:ea:7c: 7d:65:c1:15:ee:8b:5b:cf:75:c6:7c:fa:8d:8a:68:41:8f:9a: 19:61:52:de:18:09:8e:e1:bb:78:ee:0b:dc:c0:d6:71:16:b2: 00:76:7d:fb:38:1a:75:0c:f7:c2:f5:62:62:16:2e:92:c0:91: fa:46:bc:0e:e7:b3:73:f0:d8:a7:ff:ee:94:c1:2a:d0:82:d6: 87:37:b4:ea:f5:f8:07:27:a6:92:c7:e0:a7:a1:89:84:be:a8: 52:27:75:97:35:4e:5a:9f:14:33:f0:93:74:1a:01:e8:f5:b2: ae:9f:76:89:1c:48:70:76:98:0b:2f:ee:50:25:48:4b:88:76: df:60:16:6a:54:95:7a:93:ba:c4:45:1b:d8:96:c0:b0:2e:a2: 95:0e:26:2a:98:fe:64:54:87:6e:24:c9:3b:c6:34:18:57:b0: 91:ba:8d:79:c5:d2:97:aa:80:74:5f:6e:5b:13:06:1a:21:67: ff:01:a6:27:7f:0b:bc:fd:0a:0c:5f:bf:53:29:3b:11:bc:b4: 8e:16:55:2f:22:0f:96:cd:b8:8f:0a:f2:a3:aa:2e:3d:28:1f: 16:a1:77:dd -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt9XGfR7+S9qFHAWUQt8c0UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MjFmZmI2OGVhYjk3ZTI0YTkwNjI2ZDkwNDk4YmU3ZWQ3 MDY2ZjAwHhcNMjYwMTAyMDYxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjcwOTQxNjk3NTg5ZmFhN2Q0OTY4MDEyODI2MGYwNGMwN2ZiOWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTeMTS6WoUXvkCIlEcoa/kmvV4Cd B4foqX8OQJTq5c88obVXozRR0JqoTy+Okwlnasb/jWkE9nMwVHWMdyQx6bYLwNvV bHquBZqvozDZwfvfiOqBP0+imew19o/juy3Ae+RTXgbH4JQD7Tu5xjYwOdIRysb6 kjOm5yARAep2MlBx10ceb7SNmB/aD8XSe8jdc4vcbdBLXCtQJvbKZx8Q4EGI+VGm EFGSaB19c3SAAekUP1b7Vgt6ayzbh1m1XU3rwPUQp8TLs5zDWFpy8VSduhDLarul e+0GoQy0cXmH5borebJ90AVWEjEDQdqUIaBIkOmJ1QzzABFvO/XiGlq6twIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFFZwlBaXWJ+qfUloASgmDwTAf7moMB8GA1UdIwQY MBaAFCQh/7aOq5fiSpBibZBJi+ftcGbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkNIX3RvNnJsLUpLa0dKdGtFbUw1LTF3WnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9hZTAyMGItZTBkNy00NTFkLWJiMDUt ZDkwOGZhZjM0ZWY4LzEvVm5DVUZwZFluNnA5U1dnQktDWVBCTUJfdWFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9hZTAyMGItZTBkNy00NTFkLWJiMDUtZDkwOGZhZjM0ZWY4 LzEvSkNIX3RvNnJsLUpLa0dKdGtFbUw1LTF3WnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAYBAIAATASAwQCuV2cAwQB wQQ6AwQAw4LTMBgEAgACMBIDBwAgAQZ8AGwDBwAgAQf4AEgwDQYJKoZIhvcNAQEL BQADggEBACZ7nhLOmjf0NpGqI8/NMJaNvSeueOFmS417s31no8+68e7qfH1lwRXu i1vPdcZ8+o2KaEGPmhlhUt4YCY7hu3juC9zA1nEWsgB2ffs4GnUM98L1YmIWLpLA kfpGvA7ns3Pw2Kf/7pTBKtCC1oc3tOr1+AcnppLH4KehiYS+qFIndZc1TlqfFDPw k3QaAej1sq6fdokcSHB2mAsv7lAlSEuIdt9gFmpUlXqTusRFG9iWwLAuopUOJiqY /mRUh24kyTvGNBhXsJG6jXnF0peqgHRfblsTBhohZ/8Bpid/C7z9Cgxfv1MpOxG8 tI4WVS8iD5bNuI8K8qOqLj0oHxahd90= -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:42 2026 by rpki-client