This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/UFTSnKGBgxvCGwFWrnEupwjfegE.roa File: UFTSnKGBgxvCGwFWrnEupwjfegE.roa (raw, json) Hash identifier: PID1yaojEY9k8QS2SJyFWj2gkf3SBqh4EBGwQTcUcJE= Subject key identifier: 50:54:D2:9C:A1:81:83:1B:C2:1B:01:56:AE:71:2E:A7:08:DF:7A:01 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E3807440D7459F5F5584C489C2891 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/UFTSnKGBgxvCGwFWrnEupwjfegE.roa Signing time: Thu 01 Jan 2026 12:17:53 +0000 ROA not before: Thu 01 Jan 2026 12:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202365 IP address blocks: 185.255.155.0/24 maxlen: 24 2a0c:da04::/38 maxlen: 128 2a0c:da04::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:38:07:44:0d:74:59:f5:f5:58:4c:48:9c:28:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5054d29ca181831bc21b0156ae712ea708df7a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6a:09:a7:dd:76:5c:c9:e8:a1:b4:8a:a4:d9: a6:36:c7:f0:fc:d3:63:d2:7f:c4:35:c3:17:d9:e8: 4d:f2:93:93:3e:b6:19:39:72:9b:90:46:0a:90:83: 5d:5d:2b:27:8c:6d:49:55:b5:a4:43:42:df:6e:5a: eb:60:62:93:95:bc:0d:0c:53:d3:55:b8:be:d2:0e: 9f:e6:b3:a3:5f:49:d1:e9:52:a0:49:9d:28:b2:6e: 62:8f:ca:dc:0e:f3:70:08:22:4c:46:2d:bd:ad:ba: e8:e4:59:e0:29:f8:28:6a:7c:20:20:58:29:23:4d: ae:54:b6:6e:67:6a:c0:21:d3:8e:c2:33:db:3f:37: 73:6d:13:51:68:b7:e7:db:ca:43:1e:88:0e:2f:bb: 7e:f1:a2:04:4a:fb:09:79:3c:50:3d:70:f9:c3:12: 67:dc:80:94:6f:62:77:63:28:47:2c:69:e1:31:8f: 3c:3c:bb:f5:64:82:ba:d1:51:66:f7:84:8c:f5:7b: fe:09:40:f9:52:4b:74:8e:71:ad:87:0f:7e:a9:20: 54:cb:01:5c:73:02:e0:2e:91:58:91:d0:f1:1f:1b: 06:2b:ca:85:03:08:92:01:41:e3:43:1d:a7:77:4c: 79:6f:a4:8f:3f:f5:2c:e1:dd:06:b3:ac:d6:4f:04: 50:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:54:D2:9C:A1:81:83:1B:C2:1B:01:56:AE:71:2E:A7:08:DF:7A:01 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/UFTSnKGBgxvCGwFWrnEupwjfegE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.255.155.0/24 IPv6: 2a0c:da04::/38 Signature Algorithm: sha256WithRSAEncryption 78:f4:6f:ef:70:53:ab:f2:52:23:25:a6:8f:b6:20:11:71:f6: d5:8e:89:c5:6c:11:25:ac:0f:ca:12:83:5a:24:d0:10:01:c9: 48:ba:d0:ed:c3:63:71:df:41:60:b4:13:89:30:a6:cc:22:e6: ba:7b:f4:fe:66:7e:73:a9:b8:21:ad:61:98:9a:a5:42:43:66: 67:82:9e:48:75:71:b1:4a:12:b9:21:57:34:de:96:5e:77:91: 92:2a:5b:b2:87:da:99:25:9e:8f:b1:63:1e:3d:27:8f:22:69: 4b:1e:6c:9a:b8:be:48:6c:73:2c:9e:47:c1:94:0f:c3:8a:45: ef:ef:19:34:92:a8:1d:d7:28:98:08:cb:2b:9b:64:c4:ad:89: 42:da:23:92:57:a4:ea:32:fc:58:01:d0:27:9a:73:00:50:47: 17:51:fa:2c:73:09:50:45:a3:51:b6:04:d5:05:d0:cb:bc:f5: 31:7d:1d:cc:54:79:d4:ec:5c:ec:bc:87:7f:03:ec:1e:66:ae: 85:9c:c7:96:f9:fc:d8:1b:c2:b2:a5:db:94:99:ca:c6:c9:2c: bd:54:9c:2c:b2:ff:d8:8c:46:ef:65:00:85:87:24:28:36:4d: bd:bd:d1:8d:48:60:e3:66:45:43:1b:67:b4:99:00:0f:d1:89: 88:aa:e9:2b -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt5fjgHRA10WfX1WExInCiRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDU0ZDI5Y2ExODE4MzFiYzIxYjAxNTZhZTcxMmVhNzA4ZGY3YTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2oJp912XMnoobSKpNmmNsfw/NNj 0n/ENcMX2ehN8pOTPrYZOXKbkEYKkINdXSsnjG1JVbWkQ0LfblrrYGKTlbwNDFPT Vbi+0g6f5rOjX0nR6VKgSZ0osm5ij8rcDvNwCCJMRi29rbro5FngKfgoanwgIFgp I02uVLZuZ2rAIdOOwjPbPzdzbRNRaLfn28pDHogOL7t+8aIESvsJeTxQPXD5wxJn 3ICUb2J3YyhHLGnhMY88PLv1ZIK60VFm94SM9Xv+CUD5Ukt0jnGthw9+qSBUywFc cwLgLpFYkdDxHxsGK8qFAwiSAUHjQx2nd0x5b6SPP/Us4d0Gs6zWTwRQHwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFFBU0pyhgYMbwhsBVq5xLqcI33oBMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvVUZUU25LR0JneHZDR3dGV3JuRXVwd2pmZWdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAuf+bMA4E AgACMAgDBgIqDNoEADANBgkqhkiG9w0BAQsFAAOCAQEAePRv73BTq/JSIyWmj7Yg EXH21Y6JxWwRJawPyhKDWiTQEAHJSLrQ7cNjcd9BYLQTiTCmzCLmunv0/mZ+c6m4 Ia1hmJqlQkNmZ4KeSHVxsUoSuSFXNN6WXneRkipbsofamSWej7FjHj0njyJpSx5s mri+SGxzLJ5HwZQPw4pF7+8ZNJKoHdcomAjLK5tkxK2JQtojklek6jL8WAHQJ5pz AFBHF1H6LHMJUEWjUbYE1QXQy7z1MX0dzFR51Oxc7LyHfwPsHmauhZzHlvn82BvC sqXblJnKxsksvVScLLL/2IxG72UAhYckKDZNvb3RjUhg42ZFQxtntJkAD9GJiKrp Kw== -----END CERTIFICATE-----Generated at Mon Jan 19 20:26:45 2026 by rpki-client