This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/UZH0fpr1tyUVaCTBDnjkP57r0fg.roa File: UZH0fpr1tyUVaCTBDnjkP57r0fg.roa (raw, json) Hash identifier: asbZ5HvBqKNvkMzm24LOBMXDZ+s4an0DuYC6LDjlSWE= Subject key identifier: 51:91:F4:7E:9A:F5:B7:25:15:68:24:C1:0E:78:E4:3F:9E:EB:D1:F8 Certificate issuer: /CN=54a0f0811f9c256374448aa015d7769271821bf3 Certificate serial: 019B7CEE2C97EEB8F5F63C3325C2E7047CE2 Authority key identifier: 54:A0:F0:81:1F:9C:25:63:74:44:8A:A0:15:D7:76:92:71:82:1B:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/UZH0fpr1tyUVaCTBDnjkP57r0fg.roa Signing time: Fri 02 Jan 2026 04:19:02 +0000 ROA not before: Fri 02 Jan 2026 04:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5610 IP address blocks: 5.23.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 14:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:2c:97:ee:b8:f5:f6:3c:33:25:c2:e7:04:7c:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54a0f0811f9c256374448aa015d7769271821bf3 Validity Not Before: Jan 2 04:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5191f47e9af5b725156824c10e78e43f9eebd1f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c8:c9:27:ea:55:02:b2:0e:9c:8b:6d:2d:d1: 28:db:66:72:5e:11:9a:83:d3:b8:82:55:ef:cf:e2: 39:a9:11:5d:f3:f7:cc:7c:a9:a6:68:4b:dc:f0:50: e7:49:bd:5c:0a:1e:22:60:8f:a1:af:c8:86:c2:59: e0:38:5e:c5:f0:fa:15:62:cf:06:75:b7:33:54:44: fb:7b:e3:13:f0:c4:28:ba:20:b7:05:6b:a8:1d:46: b7:25:cb:5a:df:91:7c:a4:8a:8d:f1:11:dc:aa:05: 1f:29:99:dd:5c:64:85:70:cf:a1:43:fb:17:9a:ba: ea:26:ae:73:06:62:8c:e7:13:fb:49:9d:bf:05:ac: b6:62:98:01:98:4b:3e:7b:6a:46:34:99:0c:84:89: f0:97:0f:8d:a7:1d:6b:6f:d0:07:99:18:af:6f:ab: 5d:01:9e:6f:87:17:72:cd:3c:82:ac:9c:1c:63:09: 62:dc:b0:ed:bb:45:b9:c1:6a:a9:76:bb:2d:e5:b4: 24:30:8b:fc:fa:2c:13:c7:81:64:ef:6c:ea:ff:97: 94:7d:f8:84:1b:14:a6:37:86:83:50:e9:9c:4f:41: cf:46:55:21:5e:3c:ce:96:2a:4a:c7:51:97:b4:a2: ba:e0:b0:d3:5b:47:4b:a6:de:0e:0a:28:b6:8b:cb: 2e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:91:F4:7E:9A:F5:B7:25:15:68:24:C1:0E:78:E4:3F:9E:EB:D1:F8 X509v3 Authority Key Identifier: keyid:54:A0:F0:81:1F:9C:25:63:74:44:8A:A0:15:D7:76:92:71:82:1B:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/UZH0fpr1tyUVaCTBDnjkP57r0fg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.23.39.0/24 Signature Algorithm: sha256WithRSAEncryption 39:bd:23:0e:bd:49:0a:3f:34:c9:3b:07:29:01:5b:f8:f1:0e: bd:1c:9d:47:a4:f4:8c:7a:98:3a:ba:bc:34:39:74:a1:77:56: 61:48:63:09:4c:b1:6b:08:42:6b:7e:c4:9f:c1:6a:88:3e:56: da:00:d5:25:78:00:95:4c:a7:da:6d:de:7e:e6:24:80:b9:74: f8:98:ed:f2:e6:16:84:6f:ee:0a:1c:53:8a:49:a2:d9:56:10: 3c:fd:e1:04:3d:86:1d:d1:fa:dc:00:a8:49:ec:f7:04:b8:52: 84:49:40:a1:33:9e:ae:95:be:3b:ce:e0:2b:0b:10:02:9e:fd: 78:7f:d6:4b:a7:a6:af:59:62:d4:de:8f:33:ab:a6:2d:4f:80: 7a:0e:a7:32:8e:7e:ae:b0:39:4b:5d:1d:69:02:ab:53:69:a7: 0b:9e:80:ef:18:cf:72:6d:3f:ae:11:33:a8:35:04:b2:71:ce: 30:2a:56:d4:dd:3a:d7:49:aa:d5:ad:36:9d:b1:3e:66:fc:7e: 45:99:b1:8e:53:8f:72:c1:2f:37:25:97:ee:dc:b3:c3:93:b5: 65:3d:0b:0a:14:64:80:f1:5e:33:9f:09:da:c6:1f:7e:d2:3a: 61:4c:d1:74:c2:24:a4:cc:f6:d5:51:23:cd:3b:8d:98:be:bd: db:9b:da:b6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87iyX7rj19jwzJcLnBHziMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YTBmMDgxMWY5YzI1NjM3NDQ0OGFhMDE1ZDc3NjkyNzE4 MjFiZjMwHhcNMjYwMTAyMDQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTkxZjQ3ZTlhZjViNzI1MTU2ODI0YzEwZTc4ZTQzZjllZWJkMWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8jJJ+pVArIOnIttLdEo22ZyXhGa g9O4glXvz+I5qRFd8/fMfKmmaEvc8FDnSb1cCh4iYI+hr8iGwlngOF7F8PoVYs8G dbczVET7e+MT8MQouiC3BWuoHUa3Jcta35F8pIqN8RHcqgUfKZndXGSFcM+hQ/sX mrrqJq5zBmKM5xP7SZ2/Bay2YpgBmEs+e2pGNJkMhInwlw+Npx1rb9AHmRivb6td AZ5vhxdyzTyCrJwcYwli3LDtu0W5wWqpdrst5bQkMIv8+iwTx4Fk72zq/5eUffiE GxSmN4aDUOmcT0HPRlUhXjzOlipKx1GXtKK64LDTW0dLpt4OCii2i8suuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFGR9H6a9bclFWgkwQ545D+e69H4MB8GA1UdIwQY MBaAFFSg8IEfnCVjdESKoBXXdpJxghvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVktEd2dSLWNKV04wUklxZ0ZkZDJrbkdDR19NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jYWU4YTctMDBkYS00ODczLWJmMmIt MDI5NjRjNTBkMjEyLzEvVVpIMGZwcjF0eVVWYUNUQkRuamtQNTdyMGZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9jYWU4YTctMDBkYS00ODczLWJmMmItMDI5NjRjNTBkMjEy LzEvVktEd2dSLWNKV04wUklxZ0ZkZDJrbkdDR19NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABRcnMA0G CSqGSIb3DQEBCwUAA4IBAQA5vSMOvUkKPzTJOwcpAVv48Q69HJ1HpPSMepg6urw0 OXShd1ZhSGMJTLFrCEJrfsSfwWqIPlbaANUleACVTKfabd5+5iSAuXT4mO3y5haE b+4KHFOKSaLZVhA8/eEEPYYd0frcAKhJ7PcEuFKESUChM56ulb47zuArCxACnv14 f9ZLp6avWWLU3o8zq6YtT4B6Dqcyjn6usDlLXR1pAqtTaacLnoDvGM9ybT+uETOo NQSycc4wKlbU3TrXSarVrTadsT5m/H5FmbGOU49ywS83JZfu3LPDk7VlPQsKFGSA 8V4znwnaxh9+0jphTNF0wiSkzPbVUSPNO42Yvr3bm9q2 -----END CERTIFICATE-----Generated at Sun Jan 18 19:28:59 2026 by rpki-client