This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/UypHuJtN1zmqt0Zba9DljNJ2WgY.roa File: UypHuJtN1zmqt0Zba9DljNJ2WgY.roa (raw, json) Hash identifier: PFDshKDp/mzgsdaZsjSV8dCLT3xJ6p+HUpwQxcGrMuI= Subject key identifier: 53:2A:47:B8:9B:4D:D7:39:AA:B7:46:5B:6B:D0:E5:8C:D2:76:5A:06 Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d Certificate serial: 019B77C6FE20A1B05DFA718217E5D04C1E15 Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/UypHuJtN1zmqt0Zba9DljNJ2WgY.roa Signing time: Thu 01 Jan 2026 04:18:08 +0000 ROA not before: Thu 01 Jan 2026 04:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397044 IP address blocks: 95.164.228.0/22 maxlen: 22 95.164.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:fe:20:a1:b0:5d:fa:71:82:17:e5:d0:4c:1e:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6991c56f11a7171c6153239769f557beba10182d Validity Not Before: Jan 1 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=532a47b89b4dd739aab7465b6bd0e58cd2765a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e5:f3:f3:70:24:29:d5:f6:5d:c6:e6:78:f1: ba:fa:14:60:e4:db:06:97:78:d5:ab:63:a8:d8:cc: 3b:f2:8c:4d:ae:50:1d:df:e6:16:02:a1:00:e6:9e: 66:ec:6b:40:82:f1:d0:be:38:35:dc:fe:e1:fa:b8: e1:3f:b0:a7:df:7e:3f:05:6e:af:db:18:c1:20:7e: 13:36:61:65:0c:dd:13:f8:f8:db:e3:38:11:63:c6: 5d:63:32:16:f6:6f:41:12:63:01:e4:3b:8a:43:aa: 24:ae:ae:e8:a7:c7:94:9d:e1:92:4e:f3:53:54:df: 80:26:84:80:68:f4:b1:bc:98:49:e9:2e:1e:1b:56: 37:a6:8d:fe:29:d9:e1:04:ea:92:f6:3f:63:3d:76: 4c:d7:ea:77:1c:40:53:35:6b:74:4a:e3:af:1a:f3: 21:d8:3f:ec:7e:c0:91:cb:cc:00:17:1a:35:cb:24: 94:a8:34:36:fb:31:64:b3:81:b9:25:bd:9b:d3:44: c5:a5:f0:b5:e7:19:83:44:a3:1d:70:46:b4:31:71: a6:c8:90:e6:91:7d:d3:bc:92:67:81:e2:48:52:31: 64:31:93:48:b4:50:f8:b4:c3:8f:10:c8:fe:3b:ab: 33:61:b4:9c:77:5d:05:c5:d4:8d:72:f5:fe:89:32: f1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2A:47:B8:9B:4D:D7:39:AA:B7:46:5B:6B:D0:E5:8C:D2:76:5A:06 X509v3 Authority Key Identifier: keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/UypHuJtN1zmqt0Zba9DljNJ2WgY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.164.228.0-95.164.235.255 Signature Algorithm: sha256WithRSAEncryption 11:7b:1b:91:1c:27:75:76:23:ae:57:fb:a3:5c:bc:dd:42:ca: bd:ca:b3:91:90:12:cc:cb:32:d6:ca:10:8a:68:11:a1:62:d8: 7f:f7:83:61:42:c8:75:88:5f:9b:39:7d:7e:87:aa:ab:c5:93: 1b:87:0b:f4:02:0e:e5:81:8f:91:fa:6a:9a:8f:59:c7:c6:83: ce:85:c2:f6:e9:4d:19:e7:a7:2d:50:e5:02:b5:bd:2a:00:7b: f9:04:b5:7c:95:31:42:ea:06:09:6d:a0:28:71:76:ef:fd:9c: cf:f5:36:4d:ac:9a:7e:3d:29:0b:38:e4:62:ec:4b:87:ce:81: e2:d9:ad:53:02:e3:5a:ec:f9:89:8f:96:6b:df:61:29:b1:0c: 91:23:a6:e3:77:c3:33:91:6c:a0:e2:da:f2:5d:d8:23:27:f0: 54:49:98:7d:f2:f4:91:2c:f1:01:c2:6d:46:10:d8:97:d6:3d: d8:7a:e6:5f:ee:48:ea:1f:00:58:24:af:40:c9:86:b2:39:b1: 8f:dc:49:6c:99:a5:aa:17:c1:ea:c2:5c:31:f4:2a:37:97:83: 59:77:02:d2:46:f6:f1:14:08:35:98:71:be:91:cd:66:b6:6f: 44:69:7c:87:d2:70:ea:cd:66:a5:6a:ce:50:93:de:39:1f:81: 77:be:c6:41 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xv4gobBd+nGCF+XQTB4VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx MDE4MmQwHhcNMjYwMTAxMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzJhNDdiODliNGRkNzM5YWFiNzQ2NWI2YmQwZTU4Y2QyNzY1YTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOXz83AkKdX2XcbmePG6+hRg5NsG l3jVq2Oo2Mw78oxNrlAd3+YWAqEA5p5m7GtAgvHQvjg13P7h+rjhP7Cn334/BW6v 2xjBIH4TNmFlDN0T+Pjb4zgRY8ZdYzIW9m9BEmMB5DuKQ6okrq7op8eUneGSTvNT VN+AJoSAaPSxvJhJ6S4eG1Y3po3+KdnhBOqS9j9jPXZM1+p3HEBTNWt0SuOvGvMh 2D/sfsCRy8wAFxo1yySUqDQ2+zFks4G5Jb2b00TFpfC15xmDRKMdcEa0MXGmyJDm kX3TvJJngeJIUjFkMZNItFD4tMOPEMj+O6szYbScd10FxdSNcvX+iTLxlQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFFMqR7ibTdc5qrdGW2vQ5YzSdloGMB8GA1UdIwQY MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt NjVkMTU2NzM0MGZkLzEvVXlwSHVKdE4xem1xdDBaYmE5RGxqTkoyV2dZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJfpOQD BAJfpOgwDQYJKoZIhvcNAQELBQADggEBABF7G5EcJ3V2I65X+6NcvN1Cyr3Ks5GQ EszLMtbKEIpoEaFi2H/3g2FCyHWIX5s5fX6HqqvFkxuHC/QCDuWBj5H6apqPWcfG g86FwvbpTRnnpy1Q5QK1vSoAe/kEtXyVMULqBgltoChxdu/9nM/1Nk2smn49KQs4 5GLsS4fOgeLZrVMC41rs+YmPlmvfYSmxDJEjpuN3wzORbKDi2vJd2CMn8FRJmH3y 9JEs8QHCbUYQ2JfWPdh65l/uSOofAFgkr0DJhrI5sY/cSWyZpaoXwerCXDH0KjeX g1l3AtJG9vEUCDWYcb6RzWa2b0RpfIfScOrNZqVqzlCT3jkfgXe+xkE= -----END CERTIFICATE-----Generated at Wed Jan 21 12:47:16 2026 by rpki-client