This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/UiYKZv_nf6g6lMuEagnSGv0kAAw.roa File: UiYKZv_nf6g6lMuEagnSGv0kAAw.roa (raw, json) Hash identifier: PTK0hI3EFperuvKBPntydYLK0hdElxooN2h+y17nzk0= Subject key identifier: 52:26:0A:66:FF:E7:7F:A8:3A:94:CB:84:6A:09:D2:1A:FD:24:00:0C Certificate issuer: /CN=07f2a175be20108641c649553213f212511667a5 Certificate serial: 019B775923D1FD67F8D102D9C6805B4A33D0 Authority key identifier: 07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/UiYKZv_nf6g6lMuEagnSGv0kAAw.roa Signing time: Thu 01 Jan 2026 02:18:09 +0000 ROA not before: Thu 01 Jan 2026 02:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39806 IP address blocks: 185.166.232.0/23 maxlen: 24 185.166.234.0/24 maxlen: 24 185.166.235.0/24 maxlen: 24 195.190.149.0/24 maxlen: 24 195.190.150.0/24 maxlen: 24 195.190.154.0/24 maxlen: 24 195.190.157.0/24 maxlen: 24 2a0b:2200::/29 maxlen: 64 2a0f:c140::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:23:d1:fd:67:f8:d1:02:d9:c6:80:5b:4a:33:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07f2a175be20108641c649553213f212511667a5 Validity Not Before: Jan 1 02:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52260a66ffe77fa83a94cb846a09d21afd24000c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:42:06:e3:9a:ad:21:4b:13:f3:41:7f:39:16: fd:58:28:f6:ee:74:8d:8c:d0:53:e6:d5:91:ce:66: a4:52:17:67:87:f4:0e:73:d0:8d:4f:88:e7:c1:f8: 65:bd:31:f7:5e:e4:9f:83:24:f8:68:f8:6f:29:42: 32:81:4f:bf:2d:ba:fd:8c:d0:f5:7d:49:08:88:e1: 50:d7:94:c5:37:fa:a6:81:b5:03:01:0e:43:d1:3d: bc:18:ae:d2:13:4c:a7:e7:6c:4f:65:ef:c8:74:a4: 21:ff:4f:2d:ea:f3:6a:bd:2a:da:0c:08:99:90:a5: f7:97:82:b3:d5:eb:96:ac:08:64:8d:16:2f:a0:da: a1:5a:ef:d5:20:1e:7d:b6:32:f8:e2:0b:b9:33:57: 24:45:69:1a:e2:a1:62:7d:b5:e1:78:f2:b9:ce:0c: 8b:d9:d0:3d:ac:13:77:27:fa:c4:26:f5:4a:54:b6: 58:9b:c7:01:5f:8e:41:aa:bc:24:d5:af:49:8e:1d: 5b:5a:7d:93:d8:0a:d9:64:ad:40:fd:1f:ec:46:a0: a6:01:72:84:c2:ca:14:7d:0b:97:26:ea:1a:19:c2: bb:e2:6e:3c:9e:bf:b7:7c:ec:82:37:5c:df:7d:d2: d8:d8:f5:49:5c:03:48:6a:40:42:54:51:a3:c2:69: 46:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:26:0A:66:FF:E7:7F:A8:3A:94:CB:84:6A:09:D2:1A:FD:24:00:0C X509v3 Authority Key Identifier: keyid:07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/UiYKZv_nf6g6lMuEagnSGv0kAAw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.166.232.0/22 195.190.149.0-195.190.150.255 195.190.154.0/24 195.190.157.0/24 IPv6: 2a0b:2200::/29 2a0f:c140::/29 Signature Algorithm: sha256WithRSAEncryption 2a:f2:4b:35:c3:19:f9:1a:be:cc:1a:8d:fd:b1:50:37:23:5f: 3d:6a:a6:a3:cd:70:1f:29:a3:eb:ec:7a:ab:fb:8d:f8:08:31: 40:39:8f:56:60:33:05:7a:4d:aa:bf:74:22:90:4d:49:32:43: 01:32:00:bf:2e:f6:49:41:97:3e:ff:e1:7a:c9:ba:1d:0d:41: c9:cd:85:68:07:40:b1:ae:00:13:0b:cf:ba:71:fa:62:ab:19: ee:47:fb:db:5f:76:25:83:46:4d:16:94:c3:e3:00:a8:29:90: 94:ee:5f:4b:67:50:5e:58:e6:e6:f5:8a:4e:1b:b4:06:f7:5a: 24:a3:9a:74:44:6a:ba:e4:e5:8d:f8:e1:cd:b3:7d:fa:e2:dd: d8:5b:c9:f7:e1:fa:40:05:e0:b5:f9:72:c2:b2:a6:4e:f3:68: 4d:76:93:12:80:02:75:4a:3f:55:80:35:20:bb:fa:7e:ef:33: 24:8b:b4:dd:bc:76:31:80:ba:14:9c:db:55:35:a5:7d:01:bf: 1c:67:eb:da:f0:1a:a0:e8:2b:aa:44:0b:2f:30:49:30:1b:a1: 39:8a:9d:98:4e:2b:51:f0:f2:d5:89:ee:98:ed:1d:f4:5d:db: 07:02:ba:4e:a4:c2:98:27:e3:fa:27:42:63:5c:6f:9a:8d:56: 5b:f5:aa:6b -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt3WSPR/Wf40QLZxoBbSjPQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZjJhMTc1YmUyMDEwODY0MWM2NDk1NTMyMTNmMjEyNTEx NjY3YTUwHhcNMjYwMTAxMDIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjI2MGE2NmZmZTc3ZmE4M2E5NGNiODQ2YTA5ZDIxYWZkMjQwMDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEIG45qtIUsT80F/ORb9WCj27nSN jNBT5tWRzmakUhdnh/QOc9CNT4jnwfhlvTH3XuSfgyT4aPhvKUIygU+/Lbr9jND1 fUkIiOFQ15TFN/qmgbUDAQ5D0T28GK7SE0yn52xPZe/IdKQh/08t6vNqvSraDAiZ kKX3l4Kz1euWrAhkjRYvoNqhWu/VIB59tjL44gu5M1ckRWka4qFifbXhePK5zgyL 2dA9rBN3J/rEJvVKVLZYm8cBX45Bqrwk1a9Jjh1bWn2T2ArZZK1A/R/sRqCmAXKE wsoUfQuXJuoaGcK74m48nr+3fOyCN1zffdLY2PVJXANIakBCVFGjwmlGYQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFFImCmb/53+oOpTLhGoJ0hr9JAAMMB8GA1UdIwQY MBaAFAfyoXW+IBCGQcZJVTIT8hJRFmelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQl9LaGRiNGdFSVpCeGtsVk1oUHlFbEVXWjZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8zNmIwODUtMWE1Yi00YWY5LTg3OGIt Mzc2NDI2ZmZkNjYyLzEvVWlZS1p2X25mNmc2bE11RWFnblNHdjBrQUF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8zNmIwODUtMWE1Yi00YWY5LTg3OGItMzc2NDI2ZmZkNjYy LzEvQl9LaGRiNGdFSVpCeGtsVk1oUHlFbEVXWjZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjAmBAIAATAgAwQCuaboMAwD BADDvpUDBADDvpYDBADDvpoDBADDvp0wFAQCAAIwDgMFAyoLIgADBQMqD8FAMA0G CSqGSIb3DQEBCwUAA4IBAQAq8ks1wxn5Gr7MGo39sVA3I189aqajzXAfKaPr7Hqr +434CDFAOY9WYDMFek2qv3QikE1JMkMBMgC/LvZJQZc+/+F6ybodDUHJzYVoB0Cx rgATC8+6cfpiqxnuR/vbX3Ylg0ZNFpTD4wCoKZCU7l9LZ1BeWObm9YpOG7QG91ok o5p0RGq65OWN+OHNs3364t3YW8n34fpABeC1+XLCsqZO82hNdpMSgAJ1Sj9VgDUg u/p+7zMki7TdvHYxgLoUnNtVNaV9Ab8cZ+va8Bqg6CuqRAsvMEkwG6E5ip2YTitR 8PLVie6Y7R30XdsHArpOpMKYJ+P6J0JjXG+ajVZb9apr -----END CERTIFICATE-----Generated at Tue Feb 10 06:03:44 2026 by rpki-client