This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/UjG7pZ5OX7qjTBfdLiqQn5f3Tsg.roa File: UjG7pZ5OX7qjTBfdLiqQn5f3Tsg.roa (raw, json) Hash identifier: rPOWW1BQGVjU95mocTIKHOlSB3cdPzNx/TQRYEzg1E8= Subject key identifier: 52:31:BB:A5:9E:4E:5F:BA:A3:4C:17:DD:2E:2A:90:9F:97:F7:4E:C8 Certificate issuer: /CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b Certificate serial: 019B7A5B4627F8FF226B8C32A66DC65720E4 Authority key identifier: 59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/UjG7pZ5OX7qjTBfdLiqQn5f3Tsg.roa Signing time: Thu 01 Jan 2026 16:19:20 +0000 ROA not before: Thu 01 Jan 2026 16:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25369 IP address blocks: 185.241.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:46:27:f8:ff:22:6b:8c:32:a6:6d:c6:57:20:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b Validity Not Before: Jan 1 16:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5231bba59e4e5fbaa34c17dd2e2a909f97f74ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a7:f4:b7:52:6f:be:c4:67:ef:05:69:66:69: 5c:66:9a:ad:a5:87:86:ab:1e:30:a7:97:0a:96:d2: 97:35:8b:0e:96:c4:4c:9b:60:7f:90:eb:db:54:d4: 00:d1:4a:f1:77:fd:1d:0b:9e:69:a8:b0:f4:eb:79: bd:0b:03:ef:66:c1:bd:d6:fe:fc:c4:29:0d:0b:e3: 72:ec:3e:bd:1a:f8:88:3e:60:da:5b:5a:a9:6c:53: a1:ad:c8:4b:14:b4:1b:d5:3d:4b:03:59:7c:73:00: 25:fa:7e:57:03:fa:65:06:7c:93:77:66:36:10:2f: e1:15:ca:82:a3:71:59:66:43:df:bb:f2:18:b2:7c: cb:9b:ba:64:f2:0b:0f:74:8e:01:b6:2b:f5:85:22: e5:57:ee:98:67:e5:b6:2d:54:ca:86:71:fa:71:6e: 0e:11:8d:ca:56:bb:63:0b:b3:29:eb:0c:01:6e:18: 4f:36:63:1a:4b:44:e7:1c:ce:44:af:ff:27:3f:a5: d1:f8:04:64:5d:50:48:75:3e:40:7a:2f:7e:b7:e9: c8:06:7d:71:97:93:a9:55:e3:e6:76:24:96:1e:c3: 54:17:aa:f9:bf:5f:38:42:b7:7c:fc:0b:32:6b:d7: 56:34:af:c3:5d:40:58:f3:57:f8:0d:e4:c3:f5:7d: 27:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:31:BB:A5:9E:4E:5F:BA:A3:4C:17:DD:2E:2A:90:9F:97:F7:4E:C8 X509v3 Authority Key Identifier: keyid:59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/UjG7pZ5OX7qjTBfdLiqQn5f3Tsg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.241.228.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:45:12:d9:5f:61:79:56:bb:e3:46:66:ed:46:71:fa:a0:a0: dd:23:cf:cc:e8:12:3b:67:fd:4a:b5:5f:2c:86:df:fb:03:5b: 09:06:d3:cb:45:3c:a1:f0:cf:14:4f:12:3f:09:19:55:04:45: ca:8a:3a:94:a4:e3:7f:d6:53:fd:22:0a:58:21:95:19:fd:05: 90:10:4a:f9:d2:cb:e1:08:23:12:e9:9e:75:0f:73:c3:55:5a: 2f:d2:8e:aa:28:0a:34:d5:46:4e:13:88:9f:97:44:eb:2c:07: e1:34:16:82:74:3c:be:7b:ad:78:e6:1c:6a:e9:4c:89:2d:28: 99:43:ca:96:00:41:66:b8:20:bf:a8:22:58:3c:fd:71:19:51: 0c:58:05:f4:00:54:03:0e:6c:75:a1:25:2a:45:1f:d0:14:57: d8:17:d1:03:ed:16:5d:de:a6:f7:a5:bb:f2:6a:48:24:a0:c3: 0a:41:fe:23:3f:a2:a5:64:68:5a:cf:1c:46:d6:6a:91:1e:b0: 62:45:a5:ac:01:3a:09:1b:cf:cd:52:0f:8f:df:76:bc:07:da: ad:f3:2f:40:ee:60:f0:f2:43:e8:97:8e:4f:db:b8:e5:f2:3a: f7:ce:ca:1c:d8:b7:a8:e3:54:69:b3:62:3d:4d:b3:0a:dc:80: f7:8e:bb:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W0Yn+P8ia4wypm3GVyDkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NDU3YzY4NWM1YjE1YzNhZjRkNDNiNjBlNGQ0YzBhMGVl ZWQ2OGIwHhcNMjYwMTAxMTYxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjMxYmJhNTllNGU1ZmJhYTM0YzE3ZGQyZTJhOTA5Zjk3Zjc0ZWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6f0t1JvvsRn7wVpZmlcZpqtpYeG qx4wp5cKltKXNYsOlsRMm2B/kOvbVNQA0Urxd/0dC55pqLD063m9CwPvZsG91v78 xCkNC+Ny7D69GviIPmDaW1qpbFOhrchLFLQb1T1LA1l8cwAl+n5XA/plBnyTd2Y2 EC/hFcqCo3FZZkPfu/IYsnzLm7pk8gsPdI4Btiv1hSLlV+6YZ+W2LVTKhnH6cW4O EY3KVrtjC7Mp6wwBbhhPNmMaS0TnHM5Er/8nP6XR+ARkXVBIdT5Aei9+t+nIBn1x l5OpVePmdiSWHsNUF6r5v184Qrd8/Asya9dWNK/DXUBY81f4DeTD9X0nUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFIxu6WeTl+6o0wX3S4qkJ+X907IMB8GA1UdIwQY MBaAFFlFfGhcWxXDr01Dtg5NTAoO7taLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mNDgyMWItMDg2My00NWVkLWE2Y2Qt MGJmMmExYjJjY2NiLzEvVWpHN3BaNU9YN3FqVEJmZExpcVFuNWYzVHNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9mNDgyMWItMDg2My00NWVkLWE2Y2QtMGJmMmExYjJjY2Ni LzEvV1VWOGFGeGJGY092VFVPMkRrMU1DZzd1MW9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufHkMA0G CSqGSIb3DQEBCwUAA4IBAQAcRRLZX2F5VrvjRmbtRnH6oKDdI8/M6BI7Z/1KtV8s ht/7A1sJBtPLRTyh8M8UTxI/CRlVBEXKijqUpON/1lP9IgpYIZUZ/QWQEEr50svh CCMS6Z51D3PDVVov0o6qKAo01UZOE4ifl0TrLAfhNBaCdDy+e6145hxq6UyJLSiZ Q8qWAEFmuCC/qCJYPP1xGVEMWAX0AFQDDmx1oSUqRR/QFFfYF9ED7RZd3qb3pbvy akgkoMMKQf4jP6KlZGhazxxG1mqRHrBiRaWsAToJG8/NUg+P33a8B9qt8y9A7mDw 8kPol45P27jl8jr3zsoc2Leo41Rps2I9TbMK3ID3jrtl -----END CERTIFICATE-----Generated at Mon Jan 19 17:05:12 2026 by rpki-client