This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/UXTtsC8Oa5GFJq-oeBczgV235bU.roa File: UXTtsC8Oa5GFJq-oeBczgV235bU.roa (raw, json) Hash identifier: QROFgHuLFM3vpOALM0ZjBn/r8WQThhQx6Zrl/aYuc/o= Subject key identifier: 51:74:ED:B0:2F:0E:6B:91:85:26:AF:A8:78:17:33:81:5D:B7:E5:B5 Certificate issuer: /CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886 Certificate serial: 019B78343BA6004AD4630482D1EDC4B928D7 Authority key identifier: F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/UXTtsC8Oa5GFJq-oeBczgV235bU.roa Signing time: Thu 01 Jan 2026 06:17:27 +0000 ROA not before: Thu 01 Jan 2026 06:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6895 IP address blocks: 185.79.172.0/22 maxlen: 24 193.149.0.0/23 maxlen: 24 2001:7f8:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:3b:a6:00:4a:d4:63:04:82:d1:ed:c4:b9:28:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886 Validity Not Before: Jan 1 06:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5174edb02f0e6b918526afa8781733815db7e5b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5b:91:dc:9a:ae:6e:3d:72:a8:ff:02:78:e3: 78:94:f7:67:c2:a4:71:33:6b:ae:20:27:49:20:b8: 11:30:41:ae:23:6b:87:af:d1:fb:a7:0e:7f:dc:be: 60:9a:83:41:b8:e1:6f:ec:18:69:e1:60:0a:64:d3: 20:d4:d7:3a:4e:89:43:fd:21:10:95:f8:40:2a:9b: 66:e5:1f:8e:65:7e:0f:71:bc:2c:1a:27:6e:9c:40: 3b:a0:ba:fd:8d:3e:a0:71:00:9a:e8:c9:f8:9f:d4: 73:39:9f:3f:2f:23:78:c0:82:0c:e9:64:81:98:90: 56:54:65:7e:ee:75:17:2d:85:55:7b:6b:02:3f:02: b4:3a:6d:6a:73:89:30:5f:22:6f:d7:d7:97:fa:e8: a9:7c:ff:e7:bb:80:4b:8c:dc:00:9b:32:98:b7:a2: a6:68:0a:04:f6:07:c9:27:38:cc:0c:ec:5a:d9:17: b0:f5:53:2e:fb:f3:12:94:a8:2b:51:eb:10:bc:37: 49:af:95:d9:e8:a1:c3:d7:5b:09:4e:45:70:f4:90: e2:3d:47:6f:75:60:b2:e6:67:9e:7b:92:2f:cb:60: cb:bc:35:70:13:8b:75:e9:33:20:7f:47:7a:8a:40: 92:0b:1d:d9:84:c9:f2:59:33:db:56:9c:78:67:d9: e4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:74:ED:B0:2F:0E:6B:91:85:26:AF:A8:78:17:33:81:5D:B7:E5:B5 X509v3 Authority Key Identifier: keyid:F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/UXTtsC8Oa5GFJq-oeBczgV235bU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.79.172.0/22 193.149.0.0/23 IPv6: 2001:7f8:f::/48 Signature Algorithm: sha256WithRSAEncryption 9f:3a:be:c7:44:59:bf:eb:ca:42:6d:21:d7:95:30:60:3f:12: 84:04:17:97:55:6b:03:38:22:65:be:f4:81:5a:3d:36:18:c2: e5:68:ea:68:50:5b:76:22:35:00:f4:3e:7b:1d:c0:06:ec:41: 1d:4f:3d:93:39:07:10:98:95:bf:18:db:50:e1:4b:5a:91:1b: c5:23:8f:9d:7b:42:95:2e:f1:28:f6:a5:aa:b2:f8:90:69:9d: e0:26:b9:f4:7a:65:89:90:79:d2:19:76:b7:4c:8d:3e:8a:46: 7d:a0:11:e4:90:d3:f1:7c:a9:8e:47:cf:05:37:39:aa:51:76: 79:a9:c8:05:0c:9f:61:7e:4d:a6:28:09:02:2b:f3:36:88:bf: e3:d5:8c:7a:cf:25:bd:26:e8:23:28:ab:0b:78:e6:40:7d:60: e2:26:67:50:11:db:01:8d:f9:02:b9:10:c8:84:2a:f9:cf:89: cd:c5:cf:ef:b4:9b:84:a2:e4:0c:0b:40:b9:b3:d0:e4:03:bd: 70:12:9f:82:71:76:25:a8:b3:eb:8b:15:91:7f:5d:28:b3:04: b5:64:3a:f0:ec:51:0c:26:6f:f2:fb:33:45:8c:4e:56:a4:99: 1b:86:d2:5d:f8:8f:72:ac:c6:a2:f5:e6:65:51:a1:12:d4:77: 37:b3:2c:46 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt4NDumAErUYwSC0e3EuSjXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ZDMyZTc1Mjk0MTg3ZDQ2ZThlYWUwZjhmZTcyYjVmZDdh YmY4ODYwHhcNMjYwMTAxMDYxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTc0ZWRiMDJmMGU2YjkxODUyNmFmYTg3ODE3MzM4MTVkYjdlNWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVuR3Jqubj1yqP8CeON4lPdnwqRx M2uuICdJILgRMEGuI2uHr9H7pw5/3L5gmoNBuOFv7Bhp4WAKZNMg1Nc6TolD/SEQ lfhAKptm5R+OZX4PcbwsGidunEA7oLr9jT6gcQCa6Mn4n9RzOZ8/LyN4wIIM6WSB mJBWVGV+7nUXLYVVe2sCPwK0Om1qc4kwXyJv19eX+uipfP/nu4BLjNwAmzKYt6Km aAoE9gfJJzjMDOxa2Rew9VMu+/MSlKgrUesQvDdJr5XZ6KHD11sJTkVw9JDiPUdv dWCy5meee5Ivy2DLvDVwE4t16TMgf0d6ikCSCx3ZhMnyWTPbVpx4Z9nkgwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFFF07bAvDmuRhSavqHgXM4Fdt+W1MB8GA1UdIwQY MBaAFPfTLnUpQYfUbo6uD4/nK1/Xq/iGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTlNdWRTbEJoOVJ1anE0UGotY3JYOWVyLUlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kMGNjNDEtYzhmMS00YTQ0LTkxZjAt ZDFhNDU5OWNiMGU1LzEvVVhUdHNDOE9hNUdGSnEtb2VCY3pnVjIzNWJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9kMGNjNDEtYzhmMS00YTQ0LTkxZjAtZDFhNDU5OWNiMGU1 LzEvOTlNdWRTbEJoOVJ1anE0UGotY3JYOWVyLUlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCuU+sAwQB wZUAMA8EAgACMAkDBwAgAQf4AA8wDQYJKoZIhvcNAQELBQADggEBAJ86vsdEWb/r ykJtIdeVMGA/EoQEF5dVawM4ImW+9IFaPTYYwuVo6mhQW3YiNQD0PnsdwAbsQR1P PZM5BxCYlb8Y21DhS1qRG8Ujj517QpUu8Sj2paqy+JBpneAmufR6ZYmQedIZdrdM jT6KRn2gEeSQ0/F8qY5HzwU3OapRdnmpyAUMn2F+TaYoCQIr8zaIv+PVjHrPJb0m 6CMoqwt45kB9YOImZ1AR2wGN+QK5EMiEKvnPic3Fz++0m4Si5AwLQLmz0OQDvXAS n4JxdiWos+uLFZF/XSizBLVkOvDsUQwmb/L7M0WMTlakmRuG0l34j3KsxqL15mVR oRLUdzezLEY= -----END CERTIFICATE-----Generated at Tue Feb 10 03:06:13 2026 by rpki-client