This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/UbyUEzCsDyKqUbO4mcMwyNy8cOY.roa File: UbyUEzCsDyKqUbO4mcMwyNy8cOY.roa (raw, json) Hash identifier: oiMnmWGgvSnOjT8fp4+LrkyK7pAMt/y+JFMAU+BQTbc= Subject key identifier: 51:BC:94:13:30:AC:0F:22:AA:51:B3:B8:99:C3:30:C8:DC:BC:70:E6 Certificate issuer: /CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb Certificate serial: 019B79ED4D74D42E48B1599DB6F42C606F2B Authority key identifier: AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/UbyUEzCsDyKqUbO4mcMwyNy8cOY.roa Signing time: Thu 01 Jan 2026 14:19:13 +0000 ROA not before: Thu 01 Jan 2026 14:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61998 IP address blocks: 194.36.124.0/24 maxlen: 24 194.36.125.0/24 maxlen: 24 194.36.126.0/24 maxlen: 24 194.36.127.0/24 maxlen: 24 2a0c:bfc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 11:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:4d:74:d4:2e:48:b1:59:9d:b6:f4:2c:60:6f:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb Validity Not Before: Jan 1 14:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51bc941330ac0f22aa51b3b899c330c8dcbc70e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:24:18:93:e2:79:a7:87:49:ac:64:89:0a:06: 21:94:db:19:3a:b2:32:cc:22:a2:32:05:4a:49:9e: 42:0c:b2:92:c1:6f:bc:e8:a3:0b:19:35:9e:12:f8: f3:c1:f8:24:52:70:52:eb:cc:a0:32:ed:3e:a6:85: 57:b8:0b:7b:0c:35:a6:fc:20:c3:69:e6:90:6e:dd: 17:d1:a3:00:da:50:54:4e:cf:4b:c2:a7:00:a1:67: 01:20:02:98:16:cc:50:cc:7a:af:0f:07:46:86:e1: 94:c9:a9:46:95:e7:af:94:ee:ca:5a:58:0a:0f:9e: 4d:f5:94:27:e0:6d:0d:14:c7:84:e1:79:02:98:90: a7:7f:f3:75:eb:dc:e5:41:a5:bb:20:12:2d:31:c3: 94:db:15:0a:2c:2d:ca:57:7f:e3:e3:19:b8:48:b8: ad:05:31:b3:34:9c:93:66:08:b1:63:e1:e3:be:29: e7:65:90:d2:cb:ef:99:a6:d1:bb:4d:6d:7a:7d:da: 44:82:c3:97:ac:ce:70:a1:f3:a4:62:66:eb:ae:3a: c2:9d:94:22:60:0d:09:3c:0e:79:d6:36:82:e8:74: e5:c8:01:c5:38:5f:c3:65:75:8f:81:61:3e:e6:dc: 79:28:5d:bd:c4:ad:e1:a3:a0:65:2e:75:3a:d0:e9: 1f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:BC:94:13:30:AC:0F:22:AA:51:B3:B8:99:C3:30:C8:DC:BC:70:E6 X509v3 Authority Key Identifier: keyid:AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/UbyUEzCsDyKqUbO4mcMwyNy8cOY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.36.124.0/22 IPv6: 2a0c:bfc0::/29 Signature Algorithm: sha256WithRSAEncryption a0:57:02:99:67:f2:f1:85:ff:60:92:f5:42:54:b8:0f:13:d2: 43:f0:88:c3:36:e3:0c:0c:d4:c4:60:fc:69:c0:a3:2c:b8:08: a4:8f:da:64:0d:40:d3:37:4a:99:79:5f:da:8a:70:ae:df:5c: 3e:10:f2:8b:fc:de:62:b5:0b:6a:8e:de:45:70:5a:e8:81:80: 84:e3:43:f1:c3:85:43:21:50:a7:f1:19:df:40:ad:bd:16:70: 67:ea:71:60:ad:0f:e1:3e:83:7b:6e:cd:ef:79:6d:db:82:89: dc:af:84:9d:69:5f:d6:f5:dc:0f:d8:e0:35:4b:f7:ce:3e:ba: 7d:5d:08:7f:c5:61:41:38:22:0e:0d:cf:8e:2a:58:70:41:b7: 48:0c:44:00:4d:c7:71:68:b4:e4:6c:8f:db:73:6f:83:dc:a4: de:73:fd:78:07:7a:41:5f:bc:f9:62:11:ad:53:cd:c3:53:a1: 07:95:27:6d:3f:2a:1a:83:91:05:46:0c:48:cd:6a:2c:da:c9: e8:7b:e7:d7:53:b9:6a:d1:ab:91:7a:0b:b5:e7:db:05:84:f7: a4:85:db:3d:1d:bf:7a:04:dd:8e:63:f1:dd:64:aa:ec:24:40: 9f:3e:1f:e8:78:71:54:c8:5f:bb:c1:9b:af:9c:85:60:d3:57: 14:c2:c8:28 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57U101C5IsVmdtvQsYG8rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMGJkNzhjYTJjYWE1ZWI4ZmYzYjllODIzNzc0ZGMxYjc0 ZGViZWIwHhcNMjYwMTAxMTQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWJjOTQxMzMwYWMwZjIyYWE1MWIzYjg5OWMzMzBjOGRjYmM3MGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSQYk+J5p4dJrGSJCgYhlNsZOrIy zCKiMgVKSZ5CDLKSwW+86KMLGTWeEvjzwfgkUnBS68ygMu0+poVXuAt7DDWm/CDD aeaQbt0X0aMA2lBUTs9LwqcAoWcBIAKYFsxQzHqvDwdGhuGUyalGleevlO7KWlgK D55N9ZQn4G0NFMeE4XkCmJCnf/N169zlQaW7IBItMcOU2xUKLC3KV3/j4xm4SLit BTGzNJyTZgixY+HjvinnZZDSy++ZptG7TW16fdpEgsOXrM5wofOkYmbrrjrCnZQi YA0JPA551jaC6HTlyAHFOF/DZXWPgWE+5tx5KF29xK3ho6BlLnU60OkfyQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFG8lBMwrA8iqlGzuJnDMMjcvHDmMB8GA1UdIwQY MBaAFKoL14yiyqXrj/O56CN3TcG3TevrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWd2WGpLTEtwZXVQODdub0kzZE53YmRONi1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85Nzg4MzctMTAyMy00YjM5LTliMzct YTEwOGRiZTBmZDFmLzEvVWJ5VUV6Q3NEeUtxVWJPNG1jTXd5Tnk4Y09ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy85Nzg4MzctMTAyMy00YjM5LTliMzctYTEwOGRiZTBmZDFm LzEvcWd2WGpLTEtwZXVQODdub0kzZE53YmRONi1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwiR8MA0E AgACMAcDBQMqDL/AMA0GCSqGSIb3DQEBCwUAA4IBAQCgVwKZZ/Lxhf9gkvVCVLgP E9JD8IjDNuMMDNTEYPxpwKMsuAikj9pkDUDTN0qZeV/ainCu31w+EPKL/N5itQtq jt5FcFrogYCE40Pxw4VDIVCn8RnfQK29FnBn6nFgrQ/hPoN7bs3veW3bgoncr4Sd aV/W9dwP2OA1S/fOPrp9XQh/xWFBOCIODc+OKlhwQbdIDEQATcdxaLTkbI/bc2+D 3KTec/14B3pBX7z5YhGtU83DU6EHlSdtPyoag5EFRgxIzWos2snoe+fXU7lq0auR egu159sFhPekhds9Hb96BN2OY/HdZKrsJECfPh/oeHFUyF+7wZuvnIVg01cUwsgo -----END CERTIFICATE-----Generated at Mon Feb 2 17:19:01 2026 by rpki-client