This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/UaN_1fjhpEGb9PtMuS2VXdx_MDY.roa File: UaN_1fjhpEGb9PtMuS2VXdx_MDY.roa (raw, json) Hash identifier: Iztx2alVydZOs1RecbqbrO4/NgXon+AnLrachil2CRY= Subject key identifier: 51:A3:7F:D5:F8:E1:A4:41:9B:F4:FB:4C:B9:2D:95:5D:DC:7F:30:36 Certificate issuer: /CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64 Certificate serial: 019B79EC9D1AD9CD679BB824E913AD402495 Authority key identifier: 78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/UaN_1fjhpEGb9PtMuS2VXdx_MDY.roa Signing time: Thu 01 Jan 2026 14:18:28 +0000 ROA not before: Thu 01 Jan 2026 14:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38933 IP address blocks: 5.133.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:9d:1a:d9:cd:67:9b:b8:24:e9:13:ad:40:24:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64 Validity Not Before: Jan 1 14:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51a37fd5f8e1a4419bf4fb4cb92d955ddc7f3036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ba:c9:cc:e6:2f:1b:5c:5d:49:e7:8b:7a:20: 92:09:c9:6e:5e:7b:92:cd:0e:09:a6:d7:fc:6a:e7: da:c6:18:d7:83:d3:da:50:4a:14:06:53:d3:e4:2d: a2:e4:29:05:ea:62:74:a8:1f:d7:59:3b:fa:10:41: 7b:2e:95:2a:e4:a2:ad:2b:d8:21:cb:8e:50:65:4f: f7:2a:e8:fe:05:c3:f7:23:2e:7b:af:78:eb:85:7d: 3a:68:82:ed:27:f9:16:66:d9:92:5b:0d:4b:45:20: 48:4d:a7:10:10:70:e6:ec:f7:4f:b9:cf:49:60:67: f0:49:a3:fc:e0:eb:27:66:f2:9d:c8:ba:01:8a:d5: e2:29:d3:2a:81:48:52:1c:af:8c:d9:e5:76:ea:32: a9:6c:14:5c:e1:f4:be:1d:f5:80:ee:51:7f:1e:90: d4:1d:ea:22:43:0e:0c:2f:02:c7:eb:e8:94:c9:fc: 43:65:7f:ee:76:e1:6f:97:06:88:8e:75:e3:26:8e: f5:11:41:f6:03:10:a1:f2:a0:6f:68:b5:41:ad:b3: dd:25:b7:04:de:5a:82:29:1a:91:5f:ff:7a:b1:a8: 14:71:77:69:97:f9:fd:fa:17:d2:04:69:db:a7:bd: 2d:87:db:fb:bc:e0:39:cf:b5:ee:eb:26:e1:ab:71: fe:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A3:7F:D5:F8:E1:A4:41:9B:F4:FB:4C:B9:2D:95:5D:DC:7F:30:36 X509v3 Authority Key Identifier: keyid:78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/UaN_1fjhpEGb9PtMuS2VXdx_MDY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.104.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:7e:37:cb:7a:17:19:56:66:bd:11:20:b6:e5:cc:83:dd:f2: b5:b5:79:12:35:a1:14:27:f3:5c:e5:6c:bd:77:e9:27:a8:be: 27:e3:72:26:7e:a5:83:8b:da:9b:b2:a1:07:77:4d:8b:c1:5b: f1:70:48:c6:06:0f:ea:04:26:54:47:cb:b0:26:05:25:5c:ce: 8c:60:45:c9:1c:8c:a3:a7:81:ad:3d:48:0f:07:23:60:0f:d0: 87:b2:17:4e:5e:40:c2:00:6f:53:fd:fe:13:67:98:fa:51:d1: 8c:4f:de:86:a7:f1:eb:b7:e4:2d:c2:71:35:1b:48:a3:56:24: 21:ae:52:64:d5:62:f5:62:40:a7:e9:08:28:28:4c:57:81:3d: b0:1a:68:85:23:5a:e8:62:17:5e:02:15:cd:02:03:26:9d:ed: b9:66:66:89:67:7a:fa:a4:1c:db:93:cc:6e:54:88:dd:39:29: 01:67:bc:e0:12:ae:58:d1:ea:12:74:b7:40:c2:42:64:2b:10: c2:d1:02:2e:9a:fc:ab:15:8c:02:45:76:7c:34:90:c9:7e:c1: 33:a0:40:e1:ff:c4:7a:05:5e:93:d4:8e:40:62:e3:f8:07:78: 8a:4f:3f:d9:64:79:06:b4:3c:4f:6e:ff:b7:41:05:66:a8:54: fb:85:d8:4b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57J0a2c1nm7gk6ROtQCSVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZmIwOTlhYTQzMDgxYWM4Mzk1ZWUwYjkwY2NmMWE4ODQ0 ZjhkNjQwHhcNMjYwMTAxMTQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWEzN2ZkNWY4ZTFhNDQxOWJmNGZiNGNiOTJkOTU1ZGRjN2YzMDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbrJzOYvG1xdSeeLeiCSCcluXnuS zQ4Jptf8aufaxhjXg9PaUEoUBlPT5C2i5CkF6mJ0qB/XWTv6EEF7LpUq5KKtK9gh y45QZU/3Kuj+BcP3Iy57r3jrhX06aILtJ/kWZtmSWw1LRSBITacQEHDm7PdPuc9J YGfwSaP84OsnZvKdyLoBitXiKdMqgUhSHK+M2eV26jKpbBRc4fS+HfWA7lF/HpDU HeoiQw4MLwLH6+iUyfxDZX/uduFvlwaIjnXjJo71EUH2AxCh8qBvaLVBrbPdJbcE 3lqCKRqRX/96sagUcXdpl/n9+hfSBGnbp70th9v7vOA5z7Xu6ybhq3H+uQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFGjf9X44aRBm/T7TLktlV3cfzA2MB8GA1UdIwQY MBaAFHj7CZqkMIGsg5XuC5DM8aiET41kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVBzSm1xUXdnYXlEbGU0TGtNenhxSVJQaldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jZDE3ZmUtZTQ0YS00Yjk4LTlmMWMt MmQ4YThkOTY2OWY4LzEvVWFOXzFmamhwRUdiOVB0TXVTMlZYZHhfTURZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9jZDE3ZmUtZTQ0YS00Yjk4LTlmMWMtMmQ4YThkOTY2OWY4 LzEvZVBzSm1xUXdnYXlEbGU0TGtNenhxSVJQaldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBYVoMA0G CSqGSIb3DQEBCwUAA4IBAQBPfjfLehcZVma9ESC25cyD3fK1tXkSNaEUJ/Nc5Wy9 d+knqL4n43ImfqWDi9qbsqEHd02LwVvxcEjGBg/qBCZUR8uwJgUlXM6MYEXJHIyj p4GtPUgPByNgD9CHshdOXkDCAG9T/f4TZ5j6UdGMT96Gp/Hrt+QtwnE1G0ijViQh rlJk1WL1YkCn6QgoKExXgT2wGmiFI1roYhdeAhXNAgMmne25ZmaJZ3r6pBzbk8xu VIjdOSkBZ7zgEq5Y0eoSdLdAwkJkKxDC0QIumvyrFYwCRXZ8NJDJfsEzoEDh/8R6 BV6T1I5AYuP4B3iKTz/ZZHkGtDxPbv+3QQVmqFT7hdhL -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:51 2026 by rpki-client