This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/UhAbETd73I_RNmPinYlIjwaxS5A.roa File: UhAbETd73I_RNmPinYlIjwaxS5A.roa (raw, json) Hash identifier: 72Y1aXwOgGGk1TvFfLXba73tNjzJqcFFrwUxU2i0lEg= Subject key identifier: 52:10:1B:11:37:7B:DC:8F:D1:36:63:E2:9D:89:48:8F:06:B1:4B:90 Certificate issuer: /CN=b944ca2d992d7785800bdd5524d3e11383d9f1de Certificate serial: 019B7834D1E8AC32411B464368F489B26EBC Authority key identifier: B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/UhAbETd73I_RNmPinYlIjwaxS5A.roa Signing time: Thu 01 Jan 2026 06:18:06 +0000 ROA not before: Thu 01 Jan 2026 06:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25353 IP address blocks: 46.235.56.0/21 maxlen: 21 81.201.192.0/20 maxlen: 20 2a03:2600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.mft rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:d1:e8:ac:32:41:1b:46:43:68:f4:89:b2:6e:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b944ca2d992d7785800bdd5524d3e11383d9f1de Validity Not Before: Jan 1 06:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52101b11377bdc8fd13663e29d89488f06b14b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bd:63:a1:27:d6:33:4f:08:11:fc:e2:02:73: d2:3b:36:79:bc:36:df:7c:95:6a:3b:a0:3d:ee:a0: 80:04:55:d7:62:ae:51:7a:ef:b5:1c:87:d2:ec:a5: b9:84:5b:b3:72:18:d8:bc:e6:5f:0e:94:37:19:ae: 30:89:ff:7c:60:77:76:13:b2:12:8d:06:df:8e:32: 83:bb:7c:79:1f:c1:b9:cc:60:bb:ed:80:93:b0:c5: 85:da:1a:7c:8a:a4:80:1f:1a:3a:2b:27:6b:47:2b: 3c:5a:9f:82:00:18:2f:b6:71:5a:80:09:bf:35:84: a6:29:5c:32:d5:72:e7:e6:5c:a6:b9:7a:48:63:ae: e0:eb:e2:95:37:1f:a0:df:92:60:77:77:06:ab:bf: 29:31:b3:4f:7d:e3:b1:8a:d2:de:d3:d4:65:fc:c9: b3:5a:d4:5f:70:9b:2a:8d:07:22:e7:1f:1a:d3:5a: 6b:44:6b:f8:a2:38:30:f5:0e:f3:83:f6:2e:d5:ed: d5:35:f8:a6:76:81:4e:da:f0:ac:96:84:22:8c:58: 8f:d2:5d:f1:51:76:d1:d7:fa:98:39:4a:f4:28:ba: b6:36:4f:64:74:fe:96:cc:ba:80:ff:0a:d1:fd:2c: 61:88:45:33:a6:c9:0f:d4:81:f0:fa:ca:78:29:1d: 0e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:10:1B:11:37:7B:DC:8F:D1:36:63:E2:9D:89:48:8F:06:B1:4B:90 X509v3 Authority Key Identifier: keyid:B9:44:CA:2D:99:2D:77:85:80:0B:DD:55:24:D3:E1:13:83:D9:F1:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUTKLZktd4WAC91VJNPhE4PZ8d4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/UhAbETd73I_RNmPinYlIjwaxS5A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b34a33-062b-4b70-ba51-02a12b86180d/1/uUTKLZktd4WAC91VJNPhE4PZ8d4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.235.56.0/21 81.201.192.0/20 IPv6: 2a03:2600::/32 Signature Algorithm: sha256WithRSAEncryption 2d:b2:a7:ba:f0:74:99:ec:f8:07:7d:2a:d4:24:56:5a:51:50: ab:f3:bf:a8:8e:73:5c:5d:61:43:3b:58:3a:a9:22:47:2d:2b: 7e:a1:40:7a:91:7a:3c:5a:b9:f6:65:6d:7e:6b:ef:51:87:97: 8d:bf:19:6a:1a:7c:3f:3d:77:22:ca:48:c1:f4:5c:6e:c7:7b: a0:1e:44:a8:91:c2:27:b4:66:f5:71:35:f1:90:9d:47:a7:25: 7c:31:b8:90:d5:84:86:1f:16:03:78:be:14:45:ed:46:5d:91: fb:d8:02:17:4e:c8:e4:17:3b:6c:b3:3c:bc:52:f5:06:fa:17: 1e:48:59:72:a2:21:78:77:0b:96:62:57:0f:17:18:bb:4e:45: d6:2d:9c:a1:c0:61:65:7a:6f:27:3c:b1:0f:82:02:db:58:dd: 89:7b:8f:6c:b9:88:b6:b9:38:05:26:8c:85:cf:0d:cc:02:cc: 35:28:95:94:b3:a0:76:45:6e:70:53:a8:9a:93:f5:cb:58:fc: 3b:6e:be:00:8a:0c:de:0c:26:d0:d8:66:d5:49:ea:92:80:ae: c2:af:7e:44:2d:e1:24:8c:1a:32:4d:20:d5:7f:02:31:b4:e3: f3:99:f0:dc:11:99:00:14:bd:e6:7c:7b:51:34:56:1d:e7:92: 5e:d2:44:ea -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4NNHorDJBG0ZDaPSJsm68MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NDRjYTJkOTkyZDc3ODU4MDBiZGQ1NTI0ZDNlMTEzODNk OWYxZGUwHhcNMjYwMTAxMDYxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjEwMWIxMTM3N2JkYzhmZDEzNjYzZTI5ZDg5NDg4ZjA2YjE0YjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx71joSfWM08IEfziAnPSOzZ5vDbf fJVqO6A97qCABFXXYq5Reu+1HIfS7KW5hFuzchjYvOZfDpQ3Ga4wif98YHd2E7IS jQbfjjKDu3x5H8G5zGC77YCTsMWF2hp8iqSAHxo6KydrRys8Wp+CABgvtnFagAm/ NYSmKVwy1XLn5lymuXpIY67g6+KVNx+g35Jgd3cGq78pMbNPfeOxitLe09Rl/Mmz WtRfcJsqjQci5x8a01prRGv4ojgw9Q7zg/Yu1e3VNfimdoFO2vCsloQijFiP0l3x UXbR1/qYOUr0KLq2Nk9kdP6WzLqA/wrR/SxhiEUzpskP1IHw+sp4KR0OJwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFIQGxE3e9yP0TZj4p2JSI8GsUuQMB8GA1UdIwQY MBaAFLlEyi2ZLXeFgAvdVSTT4ROD2fHeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVVUS0xaa3RkNFdBQzkxVkpOUGhFNFBaOGQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iMzRhMzMtMDYyYi00YjcwLWJhNTEt MDJhMTJiODYxODBkLzEvVWhBYkVUZDczSV9STm1QaW5ZbElqd2F4UzVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9iMzRhMzMtMDYyYi00YjcwLWJhNTEtMDJhMTJiODYxODBk LzEvdVVUS0xaa3RkNFdBQzkxVkpOUGhFNFBaOGQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDLus4AwQE UcnAMA0EAgACMAcDBQAqAyYAMA0GCSqGSIb3DQEBCwUAA4IBAQAtsqe68HSZ7PgH fSrUJFZaUVCr87+ojnNcXWFDO1g6qSJHLSt+oUB6kXo8Wrn2ZW1+a+9Rh5eNvxlq Gnw/PXciykjB9Fxux3ugHkSokcIntGb1cTXxkJ1HpyV8MbiQ1YSGHxYDeL4URe1G XZH72AIXTsjkFztsszy8UvUG+hceSFlyoiF4dwuWYlcPFxi7TkXWLZyhwGFlem8n PLEPggLbWN2Je49suYi2uTgFJoyFzw3MAsw1KJWUs6B2RW5wU6iak/XLWPw7br4A igzeDCbQ2GbVSeqSgK7Cr35ELeEkjBoyTSDVfwIxtOPzmfDcEZkAFL3mfHtRNFYd 55Je0kTq -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:12 2026 by rpki-client