This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/UXnKo4Ey-1UOsTwsFxzecNca4ws.roa File: UXnKo4Ey-1UOsTwsFxzecNca4ws.roa (raw, json) Hash identifier: ilB1dCXfkW75QAbnFoJP+oitYYjAJLiYJ/zgOjFv/HU= Subject key identifier: 51:79:CA:A3:81:32:FB:55:0E:B1:3C:2C:17:1C:DE:70:D7:1A:E3:0B Certificate issuer: /CN=448ca39537597cfae60ae0421db8e098b4e26130 Certificate serial: 019B7E387589660224A71C854D1700E26840 Authority key identifier: 44:8C:A3:95:37:59:7C:FA:E6:0A:E0:42:1D:B8:E0:98:B4:E2:61:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/UXnKo4Ey-1UOsTwsFxzecNca4ws.roa Signing time: Fri 02 Jan 2026 10:19:47 +0000 ROA not before: Fri 02 Jan 2026 10:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51758 IP address blocks: 95.215.184.0/21 maxlen: 24 95.215.185.0/24 maxlen: 24 95.215.189.0/24 maxlen: 24 185.206.232.0/22 maxlen: 24 2a00:51c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:75:89:66:02:24:a7:1c:85:4d:17:00:e2:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=448ca39537597cfae60ae0421db8e098b4e26130 Validity Not Before: Jan 2 10:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5179caa38132fb550eb13c2c171cde70d71ae30b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:af:a2:6d:76:87:1e:ed:7e:ea:81:bf:c7:db: 7c:90:63:32:df:84:5e:ae:c8:aa:29:74:41:ed:35: 87:3a:84:d0:59:7a:20:8f:26:26:58:3c:e6:8b:1c: c4:f0:97:07:f6:ec:c8:da:b9:00:1a:7c:c6:29:6f: 62:27:32:46:07:d6:75:49:3f:cc:61:c0:ce:7e:3e: f1:d6:f0:88:89:37:70:8a:4f:fe:fc:b6:5c:31:df: 08:e6:f1:e0:bc:76:be:d1:83:f7:12:54:c3:36:bb: 11:68:2a:b5:39:25:06:7f:2e:dd:44:43:81:c8:07: 3f:b5:b7:8f:57:a5:a0:78:56:6c:1d:4c:d4:d7:87: d4:86:d4:95:13:bc:b7:16:83:37:a1:e7:18:ad:a2: dd:62:ae:41:a3:e0:31:03:1b:39:cc:91:66:a1:4c: 6f:d1:32:d5:a6:c9:21:ef:06:a7:5f:9c:9d:6e:bb: 0a:85:17:b3:41:7e:aa:d5:6a:d5:5c:1d:59:1e:97: 3d:c0:86:a1:cd:3e:45:cf:3a:61:4e:f6:a2:14:01: 16:c0:2c:83:47:db:08:65:e3:92:35:47:28:03:d5: 82:d9:75:90:16:0d:b3:e2:a7:ae:54:9c:d3:23:5d: 8e:9c:4b:ee:a9:65:50:5b:e9:e1:07:e3:bf:7e:52: 47:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:79:CA:A3:81:32:FB:55:0E:B1:3C:2C:17:1C:DE:70:D7:1A:E3:0B X509v3 Authority Key Identifier: keyid:44:8C:A3:95:37:59:7C:FA:E6:0A:E0:42:1D:B8:E0:98:B4:E2:61:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/UXnKo4Ey-1UOsTwsFxzecNca4ws.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.215.184.0/21 185.206.232.0/22 IPv6: 2a00:51c0::/32 Signature Algorithm: sha256WithRSAEncryption 5e:8f:5c:00:43:ed:b3:64:2c:32:7d:8a:d1:81:fc:5b:1d:95: 58:8a:66:d7:07:83:1c:1a:e3:d2:33:8b:88:02:b2:a9:14:79: cf:58:8a:11:5c:5b:de:57:ad:23:84:e5:64:f0:90:89:57:39: 92:ef:c7:98:cf:34:0d:6c:d3:51:4d:37:ef:79:dc:88:95:ef: 02:d4:49:54:75:9e:19:a8:fc:be:10:bd:bf:e9:91:c7:40:b4: 41:48:50:7b:df:74:f4:6b:46:49:54:04:54:93:f5:1e:21:af: e3:b8:c9:39:b5:35:53:05:c3:45:98:fb:2b:30:35:b0:6c:7e: e6:49:ed:53:d9:34:0e:47:42:ac:4c:39:13:5b:68:f7:c7:67: 72:2b:a2:5d:68:3f:0a:f5:24:78:38:e6:7f:84:0c:be:88:00: 9d:07:58:b8:1d:e5:28:3b:93:aa:09:74:5e:50:38:57:66:55: e1:3f:a8:da:ec:8b:10:c1:b3:d3:0a:67:a0:d2:c8:3a:69:13: 3c:14:cb:6c:7f:9d:98:21:38:6b:3a:e2:e8:45:2f:b6:d1:29: fc:4e:0a:b2:33:a8:c2:1e:0f:77:3e:98:38:f2:1c:0c:16:e3: 92:23:c6:cf:e9:df:c7:c9:60:ff:38:a2:0c:f0:f5:b8:f1:fe: dd:1d:2d:b3 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+OHWJZgIkpxyFTRcA4mhAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0OGNhMzk1Mzc1OTdjZmFlNjBhZTA0MjFkYjhlMDk4YjRl MjYxMzAwHhcNMjYwMTAyMTAxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTc5Y2FhMzgxMzJmYjU1MGViMTNjMmMxNzFjZGU3MGQ3MWFlMzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16+ibXaHHu1+6oG/x9t8kGMy34Re rsiqKXRB7TWHOoTQWXogjyYmWDzmixzE8JcH9uzI2rkAGnzGKW9iJzJGB9Z1ST/M YcDOfj7x1vCIiTdwik/+/LZcMd8I5vHgvHa+0YP3ElTDNrsRaCq1OSUGfy7dREOB yAc/tbePV6WgeFZsHUzU14fUhtSVE7y3FoM3oecYraLdYq5Bo+AxAxs5zJFmoUxv 0TLVpskh7wanX5ydbrsKhRezQX6q1WrVXB1ZHpc9wIahzT5FzzphTvaiFAEWwCyD R9sIZeOSNUcoA9WC2XWQFg2z4qeuVJzTI12OnEvuqWVQW+nhB+O/flJH8QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFF5yqOBMvtVDrE8LBcc3nDXGuMLMB8GA1UdIwQY MBaAFESMo5U3WXz65grgQh244Ji04mEwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkl5amxUZFpmUHJtQ3VCQ0hiamdtTFRpWVRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kYjA1MTktNGU1YS00Yjc1LTg4ZmQt YmJjMjM5ZTg5N2ViLzEvVVhuS280RXktMVVPc1R3c0Z4emVjTmNhNHdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9kYjA1MTktNGU1YS00Yjc1LTg4ZmQtYmJjMjM5ZTg5N2Vi LzEvUkl5amxUZFpmUHJtQ3VCQ0hiamdtTFRpWVRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDX9e4AwQC uc7oMA0EAgACMAcDBQAqAFHAMA0GCSqGSIb3DQEBCwUAA4IBAQBej1wAQ+2zZCwy fYrRgfxbHZVYimbXB4McGuPSM4uIArKpFHnPWIoRXFveV60jhOVk8JCJVzmS78eY zzQNbNNRTTfvedyIle8C1ElUdZ4ZqPy+EL2/6ZHHQLRBSFB733T0a0ZJVARUk/Ue Ia/juMk5tTVTBcNFmPsrMDWwbH7mSe1T2TQOR0KsTDkTW2j3x2dyK6JdaD8K9SR4 OOZ/hAy+iACdB1i4HeUoO5OqCXReUDhXZlXhP6ja7IsQwbPTCmeg0sg6aRM8FMts f52YIThrOuLoRS+20Sn8TgqyM6jCHg93Ppg48hwMFuOSI8bP6d/HyWD/OKIM8PW4 8f7dHS2z -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:53 2026 by rpki-client