This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/UCyuy9vRbjLM_Pl0vWlrVlIh2ww.roa File: UCyuy9vRbjLM_Pl0vWlrVlIh2ww.roa (raw, json) Hash identifier: +yTnevnvHgjgB09EjNKr6Q52SQxLHXa9dTLvLBsXYVY= Subject key identifier: 50:2C:AE:CB:DB:D1:6E:32:CC:FC:F9:74:BD:69:6B:56:52:21:DB:0C Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019B7AC8C0D77AAACCD33666200AD711B2EB Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/UCyuy9vRbjLM_Pl0vWlrVlIh2ww.roa Signing time: Thu 01 Jan 2026 18:18:55 +0000 ROA not before: Thu 01 Jan 2026 18:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25107 IP address blocks: 80.233.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:c0:d7:7a:aa:cc:d3:36:66:20:0a:d7:11:b2:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Jan 1 18:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=502caecbdbd16e32ccfcf974bd696b565221db0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4b:b1:57:f2:ed:63:d4:b4:db:b4:10:28:ce: e4:55:bd:4e:d9:42:2d:91:2a:36:01:a4:2d:ff:01: 86:c6:81:21:6f:a9:96:3b:cb:18:05:05:77:4b:65: 69:c6:4d:91:b3:87:99:ec:55:70:4a:fa:b4:1b:7f: 5a:36:0c:1e:dc:29:42:1f:b9:9b:54:de:b6:4c:25: c0:6e:ae:8b:4e:0b:b9:fe:63:88:f6:9d:e2:89:85: dd:4e:ad:02:ed:a8:5e:71:e6:0d:8b:4e:2a:1d:d8: 72:51:3d:2c:60:60:f9:e7:47:37:2c:69:78:a4:81: 23:94:23:73:99:3c:03:4b:b1:50:a0:30:34:de:45: 10:04:5f:9c:b3:4e:d1:48:83:2f:4e:e0:1b:19:db: 9c:d5:66:f7:4b:be:51:eb:a1:47:88:3c:8b:67:e0: d0:1f:66:0c:7a:1b:ca:3c:e7:a7:64:09:ec:76:9f: 42:c5:ba:58:f3:ca:40:8f:c5:b5:8a:35:0e:66:4c: 29:3a:9f:bd:67:f0:96:16:e0:4b:af:84:39:9b:6f: b6:da:f9:80:c4:aa:b4:dd:0e:44:7f:51:73:5a:72: 03:b5:f8:7f:21:8f:d0:15:4c:5b:24:92:ee:3e:19: f1:70:99:3f:b1:cf:f9:bc:7f:39:b5:34:3f:2d:54: cb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2C:AE:CB:DB:D1:6E:32:CC:FC:F9:74:BD:69:6B:56:52:21:DB:0C X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/UCyuy9vRbjLM_Pl0vWlrVlIh2ww.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.233.138.0/24 Signature Algorithm: sha256WithRSAEncryption aa:99:93:7c:70:1d:3c:49:9e:a9:df:73:40:b2:a9:72:0b:e4: 2b:06:f9:d3:dc:ec:67:1c:df:d7:d7:88:06:d2:be:ed:c0:d4: 9e:66:95:fd:4c:0f:f1:a6:bf:de:78:a1:e6:1e:d3:19:3a:e0: 0a:05:16:00:2d:8d:6a:6c:33:b5:74:46:e7:b4:a8:4f:4e:25: fc:c4:88:61:ee:b4:d4:b4:b9:cc:7c:62:64:65:f2:47:24:3f: 9f:e0:48:9c:31:81:f0:dc:fd:6c:77:f9:58:98:d6:f2:70:b3: 80:40:17:f2:a2:fe:b5:47:de:46:6d:01:84:c0:97:0b:c8:bc: bc:e3:a8:47:58:25:95:de:d9:2a:5a:a3:14:51:f7:5c:8e:f3: 28:9b:47:c2:85:4c:48:b1:5c:4b:32:c4:f7:3b:f1:29:63:af: 76:9c:d1:1b:cb:9b:84:47:0a:3a:67:ab:65:e6:df:4b:dd:28: 6b:dc:b6:f7:6c:87:6d:54:48:da:e5:3c:74:74:9f:92:76:30: 3d:e0:4d:b0:ea:45:11:1b:e3:0a:e2:8b:9e:42:f8:df:87:9a: 40:39:0c:1a:a8:01:12:77:24:fc:00:2e:a4:af:c5:4e:f7:eb: 7d:e7:43:7f:30:1e:44:dd:26:df:4f:c5:0c:c7:e0:5d:2b:dc: 0f:5d:ba:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yMDXeqrM0zZmIArXEbLrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjYwMTAxMTgxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDJjYWVjYmRiZDE2ZTMyY2NmY2Y5NzRiZDY5NmI1NjUyMjFkYjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUuxV/LtY9S027QQKM7kVb1O2UIt kSo2AaQt/wGGxoEhb6mWO8sYBQV3S2Vpxk2Rs4eZ7FVwSvq0G39aNgwe3ClCH7mb VN62TCXAbq6LTgu5/mOI9p3iiYXdTq0C7aheceYNi04qHdhyUT0sYGD550c3LGl4 pIEjlCNzmTwDS7FQoDA03kUQBF+cs07RSIMvTuAbGduc1Wb3S75R66FHiDyLZ+DQ H2YMehvKPOenZAnsdp9CxbpY88pAj8W1ijUOZkwpOp+9Z/CWFuBLr4Q5m2+22vmA xKq03Q5Ef1FzWnIDtfh/IY/QFUxbJJLuPhnxcJk/sc/5vH85tTQ/LVTLfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFAsrsvb0W4yzPz5dL1pa1ZSIdsMMB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvVUN5dXk5dlJiakxNX1BsMHZXbHJWbEloMnd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUOmKMA0G CSqGSIb3DQEBCwUAA4IBAQCqmZN8cB08SZ6p33NAsqlyC+QrBvnT3OxnHN/X14gG 0r7twNSeZpX9TA/xpr/eeKHmHtMZOuAKBRYALY1qbDO1dEbntKhPTiX8xIhh7rTU tLnMfGJkZfJHJD+f4EicMYHw3P1sd/lYmNbycLOAQBfyov61R95GbQGEwJcLyLy8 46hHWCWV3tkqWqMUUfdcjvMom0fChUxIsVxLMsT3O/EpY692nNEby5uERwo6Z6tl 5t9L3Shr3Lb3bIdtVEja5Tx0dJ+SdjA94E2w6kURG+MK4oueQvjfh5pAOQwaqAES dyT8AC6kr8VO9+t950N/MB5E3SbfT8UMx+BdK9wPXboe -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:48 2026 by rpki-client