This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/UZPOWsV_FJe0LaItYy8ujva8wUU.roa File: UZPOWsV_FJe0LaItYy8ujva8wUU.roa (raw, json) Hash identifier: uIto6VX+5CDXd7vtEA+gBkH2FtA4Z4f+sQvfJ6SzABY= Subject key identifier: 51:93:CE:5A:C5:7F:14:97:B4:2D:A2:2D:63:2F:2E:8E:F6:BC:C1:45 Certificate issuer: /CN=d79da465615c60094370833892da84c886e1c4ef Certificate serial: 019B79ED45F088F039F4CD3F34B5BDAD24BC Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/UZPOWsV_FJe0LaItYy8ujva8wUU.roa Signing time: Thu 01 Jan 2026 14:19:11 +0000 ROA not before: Thu 01 Jan 2026 14:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16004 IP address blocks: 217.29.72.0/21 maxlen: 21 217.29.72.0/24 maxlen: 24 217.29.76.0/24 maxlen: 24 217.29.77.0/24 maxlen: 24 2001:1ac0::/32 maxlen: 32 2001:1ac0::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:45:f0:88:f0:39:f4:cd:3f:34:b5:bd:ad:24:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d79da465615c60094370833892da84c886e1c4ef Validity Not Before: Jan 1 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5193ce5ac57f1497b42da22d632f2e8ef6bcc145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6d:82:22:d4:4d:53:58:e8:d5:0c:48:3f:0f: bb:ca:06:6e:be:9e:9f:e0:1e:af:82:c6:57:f5:a1: f9:43:4e:b9:e4:30:17:5b:5b:6d:54:a9:98:05:68: 1a:2d:38:a3:e6:ea:ea:77:f4:33:1a:f1:49:e1:65: ad:a1:0c:80:30:19:49:15:e6:26:e1:3a:bf:2c:ec: 78:e1:81:dc:e0:e2:86:a2:47:dc:10:30:f0:f5:6b: 2e:ff:8c:4c:c1:ec:69:03:2a:22:64:5a:da:6f:2f: 1f:93:72:92:90:4c:0f:55:29:25:a6:8f:ee:45:ce: 04:ed:21:57:a3:89:8f:e9:9f:cb:ca:d8:4b:7f:cd: 27:0f:d7:91:cf:7c:63:c5:c0:04:0b:02:d0:3b:2b: 93:76:30:82:5a:37:33:ff:ad:23:a9:c7:7c:11:f4: 11:0b:5c:43:ca:56:d3:20:7e:79:20:63:1f:59:fe: 14:6d:85:29:42:b2:6e:37:9f:b5:a4:fc:a9:72:c3: c9:5d:ca:b5:93:53:e5:34:44:6e:8e:02:11:cf:9e: 1b:a9:a6:a4:a9:29:13:2f:81:78:d2:e7:49:fb:b7: 89:ec:8d:10:ce:63:41:69:ff:04:b7:d7:c5:ca:9a: bf:c2:9b:11:d4:1f:1e:5b:f0:0b:93:fd:f2:33:a7: 5e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:93:CE:5A:C5:7F:14:97:B4:2D:A2:2D:63:2F:2E:8E:F6:BC:C1:45 X509v3 Authority Key Identifier: keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/UZPOWsV_FJe0LaItYy8ujva8wUU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.29.72.0/21 IPv6: 2001:1ac0::/32 Signature Algorithm: sha256WithRSAEncryption 37:c7:8c:25:50:d2:a9:15:ed:76:3c:74:f8:b5:b7:3a:43:d4: b5:9f:f2:c9:53:08:fe:94:03:97:83:b6:9f:56:40:dd:fc:36: f6:76:0f:f6:71:e0:59:bd:ab:42:11:ec:ef:4a:6e:ee:72:ed: f4:e3:86:94:bd:e1:d4:73:37:46:93:8c:00:fc:72:54:d8:3b: e6:1f:d8:ec:99:51:97:b2:a9:22:37:5e:32:1b:52:96:86:66: 7a:cc:78:77:c5:65:94:ee:e3:0a:b1:9d:42:00:26:1b:cc:e8: 6e:e9:b1:60:3b:43:13:eb:23:21:a5:13:3d:2e:53:ab:85:87: 24:3c:89:2c:06:b8:52:ea:fb:49:d0:cb:08:e8:04:a6:6f:e2: 6c:96:34:bd:d3:4b:77:a8:41:47:cb:8e:b1:32:0c:05:eb:32: e9:a6:86:31:91:6f:ad:93:46:03:0e:66:da:83:93:eb:64:20: 49:2d:fb:bb:61:25:91:ef:17:ad:cc:b0:7c:62:e9:b3:a2:17: 33:ca:8f:9f:f6:31:c6:66:f5:5b:4b:4a:c3:93:c0:93:8a:70: a7:a1:74:26:4a:a8:30:48:0c:fc:42:83:0a:4f:c7:36:79:51: d8:56:02:16:a1:5b:2e:f1:ba:da:11:69:aa:50:9b:6f:d0:6e: 21:3c:c1:05 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57UXwiPA59M0/NLW9rSS8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OWRhNDY1NjE1YzYwMDk0MzcwODMzODkyZGE4NGM4ODZl MWM0ZWYwHhcNMjYwMTAxMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTkzY2U1YWM1N2YxNDk3YjQyZGEyMmQ2MzJmMmU4ZWY2YmNjMTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw22CItRNU1jo1QxIPw+7ygZuvp6f 4B6vgsZX9aH5Q0655DAXW1ttVKmYBWgaLTij5urqd/QzGvFJ4WWtoQyAMBlJFeYm 4Tq/LOx44YHc4OKGokfcEDDw9Wsu/4xMwexpAyoiZFraby8fk3KSkEwPVSklpo/u Rc4E7SFXo4mP6Z/LythLf80nD9eRz3xjxcAECwLQOyuTdjCCWjcz/60jqcd8EfQR C1xDylbTIH55IGMfWf4UbYUpQrJuN5+1pPypcsPJXcq1k1PlNERujgIRz54bqaak qSkTL4F40udJ+7eJ7I0QzmNBaf8Et9fFypq/wpsR1B8eW/ALk/3yM6deCQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFGTzlrFfxSXtC2iLWMvLo72vMFFMB8GA1UdIwQY MBaAFNedpGVhXGAJQ3CDOJLahMiG4cTvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTUya1pXRmNZQWxEY0lNNGt0cUV5SWJoeE84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9kNzljOTgtYzI3ZC00NWIzLTg2ZDkt ZGFkM2JiMTNjMGEyLzEvVVpQT1dzVl9GSmUwTGFJdFl5OHVqdmE4d1VVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9kNzljOTgtYzI3ZC00NWIzLTg2ZDktZGFkM2JiMTNjMGEy LzEvMTUya1pXRmNZQWxEY0lNNGt0cUV5SWJoeE84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQD2R1IMA0E AgACMAcDBQAgARrAMA0GCSqGSIb3DQEBCwUAA4IBAQA3x4wlUNKpFe12PHT4tbc6 Q9S1n/LJUwj+lAOXg7afVkDd/Db2dg/2ceBZvatCEezvSm7ucu3044aUveHUczdG k4wA/HJU2DvmH9jsmVGXsqkiN14yG1KWhmZ6zHh3xWWU7uMKsZ1CACYbzOhu6bFg O0MT6yMhpRM9LlOrhYckPIksBrhS6vtJ0MsI6ASmb+JsljS900t3qEFHy46xMgwF 6zLppoYxkW+tk0YDDmbag5PrZCBJLfu7YSWR7xetzLB8Yumzohczyo+f9jHGZvVb S0rDk8CTinCnoXQmSqgwSAz8QoMKT8c2eVHYVgIWoVsu8braEWmqUJtv0G4hPMEF -----END CERTIFICATE-----Generated at Sat Jan 10 22:34:39 2026 by rpki-client