This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/ukZM-3_xV-iFuOqVLRRZDpxgm-s.roa File: ukZM-3_xV-iFuOqVLRRZDpxgm-s.roa (raw, json) Hash identifier: vg+eKlX0YTyZM3VY4Qut9mEJDRF4SsmNGim25sAbw6M= Subject key identifier: BA:46:4C:FB:7F:F1:57:E8:85:B8:EA:95:2D:14:59:0E:9C:60:9B:EB Certificate issuer: /CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc Certificate serial: 019B7DCAD0075B9B7A64C0AF32A61B87EE68 Authority key identifier: 4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/ukZM-3_xV-iFuOqVLRRZDpxgm-s.roa Signing time: Fri 02 Jan 2026 08:20:02 +0000 ROA not before: Fri 02 Jan 2026 08:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35280 IP address blocks: 132.76.0.0/16 maxlen: 16 132.77.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 23:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:d0:07:5b:9b:7a:64:c0:af:32:a6:1b:87:ee:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc Validity Not Before: Jan 2 08:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba464cfb7ff157e885b8ea952d14590e9c609beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:20:33:7d:e0:84:9f:58:65:c4:a8:44:b9:c3: a2:8a:5b:5f:82:dc:61:eb:b8:02:a2:de:46:96:06: 41:e6:71:fa:4c:4b:20:77:80:be:c8:b1:a6:04:e9: 8a:33:9a:04:dd:b7:d6:81:da:06:68:0b:a9:25:73: a4:7a:6e:4a:59:39:bf:84:4a:ea:2c:e1:ad:51:bd: 73:92:aa:fb:8f:ac:12:b6:68:47:01:e0:32:a7:b1: a3:f9:bf:5d:e8:8c:81:c4:39:3b:8a:40:54:9a:8c: 0c:c2:a2:4d:f7:3a:ec:cd:a8:e5:7c:ae:41:c5:36: e0:fd:ae:f7:a0:bb:e0:4c:23:29:11:13:aa:a3:08: af:e3:62:93:99:b0:18:da:96:3c:94:9e:5e:80:7d: 2e:6a:51:49:79:11:b9:c8:ad:3b:87:f2:99:a0:38: 3f:d6:9b:1b:f5:09:a3:66:79:74:af:61:47:3e:c2: a1:cf:7e:50:a4:9e:25:1c:b1:4a:cf:a7:b0:aa:8f: 52:62:44:f4:69:70:94:a9:90:75:13:9a:bf:d6:88: c0:02:60:d2:e0:da:15:79:be:b6:f4:1a:45:c8:d6: 8b:16:be:dc:f4:4e:54:bb:69:a8:c6:2f:d5:d3:33: 21:05:59:7d:9d:ad:b2:3e:24:aa:53:a1:ec:85:49: 23:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:46:4C:FB:7F:F1:57:E8:85:B8:EA:95:2D:14:59:0E:9C:60:9B:EB X509v3 Authority Key Identifier: keyid:4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/ukZM-3_xV-iFuOqVLRRZDpxgm-s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.76.0.0/15 Signature Algorithm: sha256WithRSAEncryption b1:f6:91:38:1f:ea:91:d2:66:c8:07:cf:0b:91:cb:bb:8d:db: 9f:c0:a4:5b:ba:3b:34:1e:c1:d2:75:7f:b9:8f:60:56:02:4f: c7:3f:c4:8b:26:44:c4:c0:b1:4a:49:af:e5:9e:e7:f2:8c:45: f3:08:8b:d2:a6:52:63:35:e3:74:75:70:1a:9c:36:8f:df:8c: 00:02:22:53:e1:7f:3e:df:ac:16:d5:84:35:f4:1c:79:ac:1b: d1:fa:88:9c:29:83:15:c3:7a:3f:7a:b4:58:29:e3:f4:65:be: 80:36:38:fc:f7:9b:66:0c:2f:42:64:55:0d:47:5a:fc:27:b8: d8:19:f5:d1:bd:64:7b:2a:ef:3f:1e:50:a1:3b:52:c1:37:02: ae:bf:b7:4f:8a:bb:a6:d5:18:80:59:da:89:38:18:75:83:fc: a2:f6:78:82:06:21:f1:7f:57:db:d0:7e:dd:6b:8c:fd:ab:1d: 9b:fd:d9:6f:71:2f:b7:d7:88:37:31:cd:e3:fe:ca:3c:76:de: b1:62:03:0e:e3:48:a6:62:2a:36:61:02:2a:c1:a3:89:4b:e4: 2e:d1:ba:d6:cc:2f:8a:49:5d:89:81:6c:9b:60:2c:7c:5e:87: 55:a9:3e:b5:25:0f:bf:60:bd:b5:f3:0d:34:8c:34:77:8e:ad: d1:fc:68:d3 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt9ytAHW5t6ZMCvMqYbh+5oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMzJiOWVmZjlmMDJjN2NhYmUxOTk1YTJkYjUwOWQ4MjU4 ZDM1ZmMwHhcNMjYwMTAyMDgyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTQ2NGNmYjdmZjE1N2U4ODViOGVhOTUyZDE0NTkwZTljNjA5YmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSAzfeCEn1hlxKhEucOiiltfgtxh 67gCot5GlgZB5nH6TEsgd4C+yLGmBOmKM5oE3bfWgdoGaAupJXOkem5KWTm/hErq LOGtUb1zkqr7j6wStmhHAeAyp7Gj+b9d6IyBxDk7ikBUmowMwqJN9zrszajlfK5B xTbg/a73oLvgTCMpEROqowiv42KTmbAY2pY8lJ5egH0ualFJeRG5yK07h/KZoDg/ 1psb9QmjZnl0r2FHPsKhz35QpJ4lHLFKz6ewqo9SYkT0aXCUqZB1E5q/1ojAAmDS 4NoVeb629BpFyNaLFr7c9E5Uu2moxi/V0zMhBVl9na2yPiSqU6HshUkj3wIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFLpGTPt/8VfohbjqlS0UWQ6cYJvrMB8GA1UdIwQY MBaAFE8yue/58Cx8q+GZWi21CdgljTX8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHpLNTdfbndMSHlyNFpsYUxiVUoyQ1dOTmZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xNzJjNGUtNmY1ZC00NzVlLTliZTkt YzQwNzNjMTNmZjdjLzEvdWtaTS0zX3hWLWlGdU9xVkxSUlpEcHhnbS1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8xNzJjNGUtNmY1ZC00NzVlLTliZTktYzQwNzNjMTNmZjdj LzEvVHpLNTdfbndMSHlyNFpsYUxiVUoyQ1dOTmZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBhEwwDQYJ KoZIhvcNAQELBQADggEBALH2kTgf6pHSZsgHzwuRy7uN25/ApFu6OzQewdJ1f7mP YFYCT8c/xIsmRMTAsUpJr+We5/KMRfMIi9KmUmM143R1cBqcNo/fjAACIlPhfz7f rBbVhDX0HHmsG9H6iJwpgxXDej96tFgp4/RlvoA2OPz3m2YML0JkVQ1HWvwnuNgZ 9dG9ZHsq7z8eUKE7UsE3Aq6/t0+Ku6bVGIBZ2ok4GHWD/KL2eIIGIfF/V9vQft1r jP2rHZv92W9xL7fXiDcxzeP+yjx23rFiAw7jSKZiKjZhAirBo4lL5C7RutbML4pJ XYmBbJtgLHxeh1WpPrUlD79gvbXzDTSMNHeOrdH8aNM= -----END CERTIFICATE-----Generated at Tue Jan 20 08:02:40 2026 by rpki-client