This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/UVZSH-qjnUODxApJvnuBt-EAJoY.roa File: UVZSH-qjnUODxApJvnuBt-EAJoY.roa (raw, json) Hash identifier: qEeNRBoEnR3OhUU2I8brudlBLMuFLZh8jyPrCOjJSRQ= Subject key identifier: 51:56:52:1F:EA:A3:9D:43:83:C4:0A:49:BE:7B:81:B7:E1:00:26:86 Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c Certificate serial: 019B7C7F46834527420E9EC184632478D19F Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/UVZSH-qjnUODxApJvnuBt-EAJoY.roa Signing time: Fri 02 Jan 2026 02:17:54 +0000 ROA not before: Fri 02 Jan 2026 02:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 45.85.12.0/24 maxlen: 24 193.43.142.0/23 maxlen: 24 193.43.142.0/24 maxlen: 24 193.43.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:46:83:45:27:42:0e:9e:c1:84:63:24:78:d1:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c Validity Not Before: Jan 2 02:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5156521feaa39d4383c40a49be7b81b7e1002686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ae:69:9d:7d:fd:85:8e:27:a5:cb:99:17:ed: 06:5b:95:c4:0b:14:ec:43:b9:85:41:9e:b7:6b:29: 1e:1d:4a:70:d9:cc:30:60:31:b9:29:86:66:c2:0d: 84:61:df:e2:14:1c:1a:f0:df:16:b8:22:22:c4:f8: b9:2d:39:62:5b:27:32:11:78:41:c1:e1:ae:65:57: ac:6d:05:8e:e3:65:78:94:d2:9a:c1:ec:1a:ff:6c: 1e:4d:14:12:c3:99:5d:c4:6e:28:96:0b:1f:28:8e: b0:7d:ac:4c:2e:5e:6f:ac:2b:ae:64:ea:d7:27:24: 87:e7:63:e9:23:4c:75:ab:cc:f5:c5:4b:43:61:12: 6e:de:56:d8:6b:14:d5:2c:b9:d5:ef:77:db:88:70: 45:b4:92:09:4e:d3:39:34:b8:e6:07:5a:ae:23:c5: 14:87:80:44:ee:19:f6:56:01:30:b8:e5:d2:1e:74: 99:eb:d6:54:31:ef:fa:a3:e8:79:af:8c:55:79:7d: 35:9b:cd:f2:c3:fe:0e:ba:63:05:17:1b:6f:ae:fd: 86:88:fe:fe:9e:6d:af:30:c1:ae:49:a9:c6:04:d6: 53:30:93:77:05:b5:06:ac:84:69:80:0a:01:e4:ae: 27:41:7d:f0:5e:14:64:de:f8:1d:06:5c:4c:02:40: 6a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:56:52:1F:EA:A3:9D:43:83:C4:0A:49:BE:7B:81:B7:E1:00:26:86 X509v3 Authority Key Identifier: keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/UVZSH-qjnUODxApJvnuBt-EAJoY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.12.0/24 193.43.142.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:4d:42:f4:48:a2:5c:bb:77:e7:88:39:f0:e2:53:f0:33:08: ed:07:70:eb:c7:31:0c:9f:00:f5:48:91:7d:22:fc:8c:1d:dd: d6:31:e9:2c:7c:19:4d:69:34:0f:5c:be:6e:cf:fe:62:59:4f: 10:ce:2a:fd:b2:1d:d7:32:22:4a:b3:60:a6:57:23:e9:59:a3: c0:0f:89:bd:16:c3:67:cf:7b:a9:01:fb:af:34:70:d4:8d:9d: 92:e1:c9:cf:0e:1d:c1:21:67:6b:e2:0d:3b:49:d1:5f:ba:9c: f1:b4:34:f5:4a:ba:37:8f:6e:1d:e6:04:63:a5:e1:94:8e:36: 37:de:09:d3:0b:27:16:32:8a:94:38:d2:83:06:ab:42:46:88: 57:38:6f:15:d4:8b:c5:c4:5a:bd:33:17:58:36:fa:63:40:8b: 19:f7:31:da:bf:9a:62:6b:e3:bd:b3:d8:3e:93:03:42:44:9e: df:3d:67:30:2b:31:a2:3e:9f:d6:d0:04:f6:20:05:a6:a6:c8: ce:59:7e:51:d8:91:77:e6:64:85:5b:d2:82:ba:88:89:1c:b0: 99:c3:2d:0a:56:fd:c9:c5:0e:cb:c5:96:03:06:cc:35:68:b9: be:e7:bb:34:dd:5e:bd:d4:cb:c4:75:85:bb:a3:0d:67:fa:8e: 4c:3f:7f:49 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8f0aDRSdCDp7BhGMkeNGfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZmM4ODdjOTc3MzkzNTc1ZGU2MjU3ZTc1ZmE5OWNkZTIw MzdjNmMwHhcNMjYwMTAyMDIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTU2NTIxZmVhYTM5ZDQzODNjNDBhNDliZTdiODFiN2UxMDAyNjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAya5pnX39hY4npcuZF+0GW5XECxTs Q7mFQZ63aykeHUpw2cwwYDG5KYZmwg2EYd/iFBwa8N8WuCIixPi5LTliWycyEXhB weGuZVesbQWO42V4lNKawewa/2weTRQSw5ldxG4olgsfKI6wfaxMLl5vrCuuZOrX JySH52PpI0x1q8z1xUtDYRJu3lbYaxTVLLnV73fbiHBFtJIJTtM5NLjmB1quI8UU h4BE7hn2VgEwuOXSHnSZ69ZUMe/6o+h5r4xVeX01m83yw/4OumMFFxtvrv2GiP7+ nm2vMMGuSanGBNZTMJN3BbUGrIRpgAoB5K4nQX3wXhRk3vgdBlxMAkBqRwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFFWUh/qo51Dg8QKSb57gbfhACaGMB8GA1UdIwQY MBaAFET8iHyXc5NXXeYlfnX6mc3iA3xsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMt YzM2OWMxZDRjMzM3LzEvVVZaU0gtcWpuVU9EeEFwSnZudUJ0LUVBSm9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMtYzM2OWMxZDRjMzM3 LzEvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVUMAwQB wSuOMA0GCSqGSIb3DQEBCwUAA4IBAQCNTUL0SKJcu3fniDnw4lPwMwjtB3DrxzEM nwD1SJF9IvyMHd3WMeksfBlNaTQPXL5uz/5iWU8Qzir9sh3XMiJKs2CmVyPpWaPA D4m9FsNnz3upAfuvNHDUjZ2S4cnPDh3BIWdr4g07SdFfupzxtDT1Sro3j24d5gRj peGUjjY33gnTCycWMoqUONKDBqtCRohXOG8V1IvFxFq9MxdYNvpjQIsZ9zHav5pi a+O9s9g+kwNCRJ7fPWcwKzGiPp/W0AT2IAWmpsjOWX5R2JF35mSFW9KCuoiJHLCZ wy0KVv3JxQ7LxZYDBsw1aLm+57s03V691MvEdYW7ow1n+o5MP39J -----END CERTIFICATE-----Generated at Sun Jan 11 17:05:25 2026 by rpki-client