This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/UZseksy0uhuo08VXcgnfylQC3DI.roa File: UZseksy0uhuo08VXcgnfylQC3DI.roa (raw, json) Hash identifier: WI6osdG7JdUaHymm4KYLyMVR4pGV77Pctw9oWtJpBZw= Subject key identifier: 51:9B:1E:92:CC:B4:BA:1B:A8:D3:C5:57:72:09:DF:CA:54:02:DC:32 Certificate issuer: /CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf Certificate serial: 019B7B3660235B140DDC8A090C5328F2C5EE Authority key identifier: 5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/UZseksy0uhuo08VXcgnfylQC3DI.roa Signing time: Thu 01 Jan 2026 20:18:39 +0000 ROA not before: Thu 01 Jan 2026 20:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47737 IP address blocks: 78.142.220.0/22 maxlen: 22 94.124.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:60:23:5b:14:0d:dc:8a:09:0c:53:28:f2:c5:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf Validity Not Before: Jan 1 20:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=519b1e92ccb4ba1ba8d3c5577209dfca5402dc32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:5a:90:e6:63:fa:8b:d8:32:a2:be:f8:16:3c: 5a:69:26:1a:b8:b2:f7:66:2b:db:95:99:0b:06:1d: eb:5a:52:33:77:5a:40:61:27:c7:ec:b2:ce:5e:03: 53:1f:bd:08:4b:1e:d8:45:0a:49:75:5a:ee:f4:38: 3b:62:f2:e8:58:b1:b5:89:3c:ac:d9:2e:13:a8:59: fa:d3:8a:ed:29:ea:92:19:ba:86:26:37:35:f0:74: 05:97:cc:0e:94:06:23:65:6e:48:8a:67:be:d8:22: bc:7c:27:17:61:d8:51:99:77:32:4b:98:b4:04:0f: 9d:a5:01:44:cb:31:cd:96:97:8e:b2:9e:41:96:fd: 39:a5:2c:c1:88:c7:e3:0c:a1:b2:12:97:78:f0:1b: 4f:9f:b0:e6:81:ee:a3:22:b2:4d:2d:59:95:65:d3: 34:22:8d:50:9b:70:92:58:c1:3c:72:07:51:6b:c1: 75:89:75:db:ad:17:9e:ec:c5:4b:82:68:0a:0f:3d: 19:c7:32:75:48:13:4e:0b:0f:63:d2:1c:c0:6d:b3: 28:99:8f:d4:d6:b4:1d:58:c4:d5:c3:7f:1d:86:a5: 8d:47:3d:28:94:6c:41:a6:5f:ee:3d:2b:31:6c:5f: e5:71:d7:f2:86:dd:01:a6:f3:29:fe:88:a0:57:7b: 3d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:9B:1E:92:CC:B4:BA:1B:A8:D3:C5:57:72:09:DF:CA:54:02:DC:32 X509v3 Authority Key Identifier: keyid:5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/UZseksy0uhuo08VXcgnfylQC3DI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.142.220.0/22 94.124.168.0/21 Signature Algorithm: sha256WithRSAEncryption 77:0b:45:4e:89:fe:8a:b8:a3:82:98:9f:52:6a:39:84:3d:3c: 27:b5:aa:ce:6d:25:51:f4:b0:b8:2c:2c:42:da:5c:3a:69:ce: 53:96:7b:9e:69:3a:30:0d:ca:30:24:0d:1e:bc:f7:31:54:06: 46:9c:e5:7d:dc:09:82:a6:86:aa:ec:bf:b4:09:45:9c:f0:7e: cf:77:c2:25:45:c5:79:63:08:2e:10:0e:20:37:2d:a5:a5:a8: 35:89:ca:8d:99:3b:7e:f9:41:c4:6b:2a:13:d8:12:d5:6f:ef: 1e:22:6b:77:87:7b:46:c9:cc:d5:d6:84:cd:43:22:a8:49:6f: ad:8b:cf:76:7e:51:9f:2e:9f:c5:b8:8d:5e:1e:ab:e6:ee:09: c7:df:d6:89:d9:20:23:9d:95:9c:9e:f2:9b:89:cd:23:37:9c: 82:f7:2d:7c:7c:c3:ac:df:54:8e:39:6f:2e:4f:15:a4:e6:32: 0e:87:d9:0b:cc:c6:06:fa:14:34:a1:c6:26:ce:f1:38:2f:5f: 95:81:f7:82:be:95:ba:3c:a2:22:11:53:ba:e4:43:e6:72:d4: e1:ee:74:c2:98:8e:0c:ca:03:78:38:33:04:1f:c7:0b:30:49: 12:b4:0d:3a:f4:cf:3b:e0:aa:25:77:45:06:ce:88:3e:87:e1: fd:0f:23:92 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NmAjWxQN3IoJDFMo8sXuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMGYxNjJhZmE3YmZkN2I4NDdjMWRkMGViNGFlYmVhOTNj NDY5Y2YwHhcNMjYwMTAxMjAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTliMWU5MmNjYjRiYTFiYThkM2M1NTc3MjA5ZGZjYTU0MDJkYzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FqQ5mP6i9gyor74FjxaaSYauLL3 ZivblZkLBh3rWlIzd1pAYSfH7LLOXgNTH70ISx7YRQpJdVru9Dg7YvLoWLG1iTys 2S4TqFn604rtKeqSGbqGJjc18HQFl8wOlAYjZW5Iime+2CK8fCcXYdhRmXcyS5i0 BA+dpQFEyzHNlpeOsp5Blv05pSzBiMfjDKGyEpd48BtPn7Dmge6jIrJNLVmVZdM0 Io1Qm3CSWME8cgdRa8F1iXXbrRee7MVLgmgKDz0ZxzJ1SBNOCw9j0hzAbbMomY/U 1rQdWMTVw38dhqWNRz0olGxBpl/uPSsxbF/lcdfyht0BpvMp/oigV3s9kwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFGbHpLMtLobqNPFV3IJ38pUAtwyMB8GA1UdIwQY MBaAFF8PFir6e/17hHwd0OtK6+qTxGnPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHc4V0t2cDdfWHVFZkIzUTYwcnI2cFBFYWM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy84MmQ2YWYtZWFjOC00ZDE4LTlhZWEt Y2VlNGM1MTg3NzBkLzEvVVpzZWtzeTB1aHVvMDhWWGNnbmZ5bFFDM0RJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy84MmQ2YWYtZWFjOC00ZDE4LTlhZWEtY2VlNGM1MTg3NzBk LzEvWHc4V0t2cDdfWHVFZkIzUTYwcnI2cFBFYWM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCTo7cAwQD XnyoMA0GCSqGSIb3DQEBCwUAA4IBAQB3C0VOif6KuKOCmJ9SajmEPTwntarObSVR 9LC4LCxC2lw6ac5TlnueaTowDcowJA0evPcxVAZGnOV93AmCpoaq7L+0CUWc8H7P d8IlRcV5YwguEA4gNy2lpag1icqNmTt++UHEayoT2BLVb+8eImt3h3tGyczV1oTN QyKoSW+ti892flGfLp/FuI1eHqvm7gnH39aJ2SAjnZWcnvKbic0jN5yC9y18fMOs 31SOOW8uTxWk5jIOh9kLzMYG+hQ0ocYmzvE4L1+VgfeCvpW6PKIiEVO65EPmctTh 7nTCmI4MygN4ODMEH8cLMEkStA069M874Kold0UGzog+h+H9DyOS -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:11 2026 by rpki-client