This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/uy5YZrZ342ZeZ2NGVVpULZDoPcE.roa File: uy5YZrZ342ZeZ2NGVVpULZDoPcE.roa (raw, json) Hash identifier: ePYFBpMymgZ8ANPnNiychRqaQ6Srx/8bC1+U5miv+Ng= Subject key identifier: BB:2E:58:66:B6:77:E3:66:5E:67:63:46:55:5A:54:2D:90:E8:3D:C1 Certificate issuer: /CN=21a717361309d2939351c9d8ba2173db8319a88f Certificate serial: 019B78A3758E1C416C884D801F92FE2657AC Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/uy5YZrZ342ZeZ2NGVVpULZDoPcE.roa Signing time: Thu 01 Jan 2026 08:18:56 +0000 ROA not before: Thu 01 Jan 2026 08:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 195.149.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 05:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:75:8e:1c:41:6c:88:4d:80:1f:92:fe:26:57:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f Validity Not Before: Jan 1 08:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb2e5866b677e3665e676346555a542d90e83dc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3f:1c:66:30:8b:4c:d3:a5:45:80:b8:64:1a: f5:1d:a0:56:ff:f7:26:15:ff:7b:4f:92:72:8c:08: d2:cd:3a:43:70:35:d8:e1:7f:84:70:ce:76:db:de: ef:34:20:29:1f:3f:e1:cf:48:bb:ef:10:c7:84:9d: ae:70:83:98:c9:23:f2:2c:90:38:d7:c7:74:b4:b1: 86:02:0d:dc:a3:2c:1c:d3:e1:42:a4:7d:96:ff:a6: cf:37:2e:db:48:90:bf:75:98:27:5c:f8:7a:6f:2b: fa:76:be:4f:99:1e:59:1b:03:3b:7f:c1:50:b0:88: cf:ec:ed:57:ff:ca:86:08:22:82:e1:cf:ed:ee:fc: ea:3b:19:7e:7a:92:82:10:76:9c:88:00:6d:7f:57: f3:d2:93:34:12:45:7d:54:93:2e:a5:f8:a2:df:e4: 5a:be:7b:28:da:dc:73:0e:77:43:6a:6b:e5:2f:f5: 25:39:03:d3:d6:d5:97:ec:ff:cf:f2:f3:4d:0a:2f: aa:96:49:f8:c9:39:de:81:85:c2:f0:8c:e1:01:f9: a0:2c:01:20:8f:6a:c7:46:37:b5:e0:43:c0:9d:36: f4:d8:6f:bb:9d:3d:72:ef:3b:dd:b6:5d:77:cd:a8: 61:6c:3c:81:b2:bb:57:7e:99:22:43:fd:62:12:6b: c4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:2E:58:66:B6:77:E3:66:5E:67:63:46:55:5A:54:2D:90:E8:3D:C1 X509v3 Authority Key Identifier: keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/uy5YZrZ342ZeZ2NGVVpULZDoPcE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.149.126.0/24 Signature Algorithm: sha256WithRSAEncryption af:4b:38:d6:56:40:11:6e:a4:bc:b9:af:e9:91:ba:ae:eb:66: 65:ad:5f:c3:c8:4c:84:19:a8:f8:ff:2d:5f:a9:7a:ff:ee:7d: a3:7a:23:1c:aa:ae:26:03:7a:69:a3:11:e4:48:90:71:8f:e1: a0:46:b1:f6:bb:d4:53:de:87:64:66:8e:c9:b5:d1:23:b1:62: 79:1a:54:82:81:88:df:a4:02:82:a1:5b:fd:54:21:cd:82:39: c5:7f:cc:d0:06:34:eb:2d:5c:07:01:f6:96:da:b8:ec:39:98: 07:8c:32:b4:89:51:53:10:9f:c3:8a:6e:13:12:3f:22:01:37: 63:fc:d6:05:c4:36:40:64:26:f0:62:10:35:04:79:f3:8a:7f: 5f:66:aa:96:66:a4:54:94:5e:51:7a:72:fc:3a:88:97:ce:ee: 03:7f:ba:89:68:9b:96:ff:f8:2c:5b:ef:78:84:61:29:5b:a5: ce:74:c1:1e:91:91:02:3d:39:0f:69:2e:a2:a9:1b:46:23:71: 1b:3b:0a:61:57:8e:28:39:09:f1:9c:03:da:2b:01:f0:b7:50: 4b:1c:af:2b:2a:1f:0a:3a:b6:b7:79:4f:72:19:4f:cd:bf:22: b8:64:d3:f6:f8:99:8c:41:25:ee:7f:31:30:b3:55:5d:65:11: 79:07:b2:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o3WOHEFsiE2AH5L+JlesMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYTcxNzM2MTMwOWQyOTM5MzUxYzlkOGJhMjE3M2RiODMx OWE4OGYwHhcNMjYwMTAxMDgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjJlNTg2NmI2NzdlMzY2NWU2NzYzNDY1NTVhNTQyZDkwZTgzZGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT8cZjCLTNOlRYC4ZBr1HaBW//cm Ff97T5JyjAjSzTpDcDXY4X+EcM52297vNCApHz/hz0i77xDHhJ2ucIOYySPyLJA4 18d0tLGGAg3coywc0+FCpH2W/6bPNy7bSJC/dZgnXPh6byv6dr5PmR5ZGwM7f8FQ sIjP7O1X/8qGCCKC4c/t7vzqOxl+epKCEHaciABtf1fz0pM0EkV9VJMupfii3+Ra vnso2txzDndDamvlL/UlOQPT1tWX7P/P8vNNCi+qlkn4yTnegYXC8IzhAfmgLAEg j2rHRje14EPAnTb02G+7nT1y7zvdtl13zahhbDyBsrtXfpkiQ/1iEmvE+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLsuWGa2d+NmXmdjRlVaVC2Q6D3BMB8GA1UdIwQY MBaAFCGnFzYTCdKTk1HJ2Lohc9uDGaiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWFjWE5oTUowcE9UVWNuWXVpRnoyNE1acUk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83ZmIzODEtZmM0NC00NGY2LWEzODUt ZjhhNDY5ZDRlMmIyLzEvdXk1WVpyWjM0MlplWjJOR1ZWcFVMWkRvUGNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny83ZmIzODEtZmM0NC00NGY2LWEzODUtZjhhNDY5ZDRlMmIy LzEvSWFjWE5oTUowcE9UVWNuWXVpRnoyNE1acUk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw5V+MA0G CSqGSIb3DQEBCwUAA4IBAQCvSzjWVkARbqS8ua/pkbqu62ZlrV/DyEyEGaj4/y1f qXr/7n2jeiMcqq4mA3ppoxHkSJBxj+GgRrH2u9RT3odkZo7JtdEjsWJ5GlSCgYjf pAKCoVv9VCHNgjnFf8zQBjTrLVwHAfaW2rjsOZgHjDK0iVFTEJ/Dim4TEj8iATdj /NYFxDZAZCbwYhA1BHnzin9fZqqWZqRUlF5RenL8OoiXzu4Df7qJaJuW//gsW+94 hGEpW6XOdMEekZECPTkPaS6iqRtGI3EbOwphV44oOQnxnAPaKwHwt1BLHK8rKh8K Ora3eU9yGU/NvyK4ZNP2+JmMQSXufzEws1VdZRF5B7Jz -----END CERTIFICATE-----Generated at Sat Jan 3 12:48:56 2026 by rpki-client