This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/UBFnHJZftNQO1qu-E-ov5vmyXLU.roa File: UBFnHJZftNQO1qu-E-ov5vmyXLU.roa (raw, json) Hash identifier: YH8/i2G9ICy6W3gDNpFmS7iYXtvYsBQ0DJI48fY9bwA= Subject key identifier: 50:11:67:1C:96:5F:B4:D4:0E:D6:AB:BE:13:EA:2F:E6:F9:B2:5C:B5 Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Certificate serial: 019B7CED042D26F74781D6E44A599830ADDD Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/UBFnHJZftNQO1qu-E-ov5vmyXLU.roa Signing time: Fri 02 Jan 2026 04:17:46 +0000 ROA not before: Fri 02 Jan 2026 04:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201374 IP address blocks: 195.251.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:04:2d:26:f7:47:81:d6:e4:4a:59:98:30:ad:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Validity Not Before: Jan 2 04:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5011671c965fb4d40ed6abbe13ea2fe6f9b25cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:dc:f3:70:2a:3a:44:e0:1e:85:9a:97:ad:7d: 92:36:fa:75:d1:80:b9:b9:fa:a8:31:83:b3:f5:55: 3d:c9:a6:79:97:e2:c1:43:7b:f4:ff:a8:46:48:55: 5a:b4:da:51:37:bd:e5:fe:fd:19:78:da:37:01:63: 2c:b5:80:a7:2c:bc:25:32:88:81:58:0c:65:55:1a: 6a:e7:74:82:09:1c:6c:61:d1:d3:75:23:50:36:c9: b3:b5:ab:ad:92:08:fb:51:49:e1:89:43:e2:2b:b5: ab:f5:66:fd:0f:a0:b7:54:d1:4c:17:f5:13:93:87: 91:1d:e1:23:9a:de:83:0a:22:51:f4:2b:86:6c:1e: a6:13:e1:b4:65:ca:2e:1f:c3:d8:f1:2a:e8:fe:6b: 13:4a:32:d2:2e:16:77:33:e5:8f:e3:1e:82:d4:4d: e6:a1:fb:fb:7c:1f:9e:86:01:a9:33:8c:52:a2:42: 0a:cb:a4:2d:75:f0:83:6a:dc:84:31:a8:8d:6e:e9: 5f:fb:1e:f1:d1:a5:1d:7f:5e:75:e5:9d:d5:dc:5a: c6:a8:b8:1d:3e:73:7b:d5:62:c6:b1:70:cf:bd:95: d7:58:9a:6d:62:37:2c:47:07:ea:c1:ed:f5:b3:59: 09:ec:fb:b5:d6:5f:5c:ca:e9:f2:f5:69:3a:69:75: d2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:11:67:1C:96:5F:B4:D4:0E:D6:AB:BE:13:EA:2F:E6:F9:B2:5C:B5 X509v3 Authority Key Identifier: keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/UBFnHJZftNQO1qu-E-ov5vmyXLU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.251.32.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:28:07:13:cf:b0:00:0e:39:a9:2f:b1:f3:6e:18:81:49:a0: 16:ec:cc:02:14:a2:c8:89:d4:99:04:d0:f1:ce:0f:28:b3:34: 95:9b:94:5f:77:55:47:89:e8:8a:c3:10:29:0d:a0:f0:5a:ec: 6b:05:b4:82:5b:77:d6:e7:ee:7c:cb:82:96:66:c8:c6:2e:6b: 33:02:17:3e:22:b3:62:ae:fe:98:79:a7:62:1f:f3:49:e8:08: 28:0f:d3:89:32:66:c0:ab:f2:36:84:ab:a1:cb:4d:8c:f1:cb: 00:51:b7:37:a2:16:fd:87:44:03:17:9c:0c:a7:bd:93:58:83: 2e:50:50:84:ee:29:17:a9:1d:22:81:3a:9a:16:c4:69:97:6a: 33:f8:71:ca:e0:09:99:ea:fe:6b:63:71:21:e3:89:64:f1:25: 8f:95:9f:92:b6:c0:32:42:cf:a7:05:fa:c0:e6:4f:6b:49:70: 8b:14:06:26:88:2d:02:9c:45:a2:83:9d:15:26:6c:79:93:66: da:10:b5:87:a0:aa:d4:fa:dd:a0:33:f1:6a:29:6d:a5:db:27: 52:0d:52:86:35:86:0d:81:9d:1a:73:11:25:bc:14:d0:9f:77: 7d:6a:5e:e4:e4:7f:b7:f8:f9:a8:2c:60:a2:d9:55:e7:59:51: 73:d5:70:a9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87QQtJvdHgdbkSlmYMK3dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1 MjlkYzMwHhcNMjYwMTAyMDQxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDExNjcxYzk2NWZiNGQ0MGVkNmFiYmUxM2VhMmZlNmY5YjI1Y2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8NzzcCo6ROAehZqXrX2SNvp10YC5 ufqoMYOz9VU9yaZ5l+LBQ3v0/6hGSFVatNpRN73l/v0ZeNo3AWMstYCnLLwlMoiB WAxlVRpq53SCCRxsYdHTdSNQNsmztautkgj7UUnhiUPiK7Wr9Wb9D6C3VNFMF/UT k4eRHeEjmt6DCiJR9CuGbB6mE+G0ZcouH8PY8Sro/msTSjLSLhZ3M+WP4x6C1E3m ofv7fB+ehgGpM4xSokIKy6QtdfCDatyEMaiNbulf+x7x0aUdf1515Z3V3FrGqLgd PnN71WLGsXDPvZXXWJptYjcsRwfqwe31s1kJ7Pu11l9cyuny9Wk6aXXSGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFARZxyWX7TUDtarvhPqL+b5sly1MB8GA1UdIwQY MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut YWFhNDU1M2QyYWJkLzEvVUJGbkhKWmZ0TlFPMXF1LUUtb3Y1dm15WExVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/sgMA0G CSqGSIb3DQEBCwUAA4IBAQCOKAcTz7AADjmpL7HzbhiBSaAW7MwCFKLIidSZBNDx zg8oszSVm5Rfd1VHieiKwxApDaDwWuxrBbSCW3fW5+58y4KWZsjGLmszAhc+IrNi rv6YeadiH/NJ6AgoD9OJMmbAq/I2hKuhy02M8csAUbc3ohb9h0QDF5wMp72TWIMu UFCE7ikXqR0igTqaFsRpl2oz+HHK4AmZ6v5rY3Eh44lk8SWPlZ+StsAyQs+nBfrA 5k9rSXCLFAYmiC0CnEWig50VJmx5k2baELWHoKrU+t2gM/FqKW2l2ydSDVKGNYYN gZ0acxElvBTQn3d9al7k5H+3+PmoLGCi2VXnWVFz1XCp -----END CERTIFICATE-----Generated at Mon Feb 2 09:39:24 2026 by rpki-client