This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/UFyGWXWcim7DlwzYRFdDDxFp02E.roa File: UFyGWXWcim7DlwzYRFdDDxFp02E.roa (raw, json) Hash identifier: kKnEir5+3nk1ouhvn6251pQ8Tl1aQO6TIVnnwdHfSdI= Subject key identifier: 50:5C:86:59:75:9C:8A:6E:C3:97:0C:D8:44:57:43:0F:11:69:D3:61 Certificate issuer: /CN=be37c70f1c67eca1775a709c9235d6a2f55516b8 Certificate serial: 019B7F83EC03969D17135A2EC9578F2E65F8 Authority key identifier: BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/UFyGWXWcim7DlwzYRFdDDxFp02E.roa Signing time: Fri 02 Jan 2026 16:21:50 +0000 ROA not before: Fri 02 Jan 2026 16:21:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16019 IP address blocks: 185.95.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 16:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:ec:03:96:9d:17:13:5a:2e:c9:57:8f:2e:65:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be37c70f1c67eca1775a709c9235d6a2f55516b8 Validity Not Before: Jan 2 16:21:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=505c8659759c8a6ec3970cd84457430f1169d361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:26:b3:5c:cc:f3:e5:66:01:f1:5e:15:9f:e9: b3:c1:ae:ad:8b:c4:02:c1:54:fa:b6:d4:dc:b3:96: 3d:6d:9f:b4:71:87:78:ba:c8:7a:bc:23:b0:7b:38: 34:66:a9:82:2d:c8:d2:7e:6d:0c:66:dc:e5:98:1f: 7d:3b:2f:9a:91:e5:8f:ec:b9:72:32:9e:c7:c5:7a: fb:ba:b6:9c:32:df:2f:e8:42:65:de:72:7a:94:7c: d5:23:a2:0e:74:8e:00:5e:e6:d5:7c:3e:02:82:f7: d8:e3:e1:a2:a8:88:f8:86:fb:c5:67:97:d5:8c:cd: 3a:83:61:3c:ec:91:de:19:9e:ed:65:e2:96:a4:68: de:b1:94:16:c9:17:eb:48:79:c0:dd:00:56:24:c9: c1:1e:ff:3d:af:97:40:3f:c5:db:0e:52:02:10:0b: ef:5d:bf:f1:7f:a7:1b:9c:08:cf:d8:56:7b:17:e4: bd:32:b8:c3:d6:df:9c:53:fd:ad:28:a5:27:ef:a7: b1:b9:05:b3:b1:b3:02:08:58:28:43:d8:7e:92:85: 93:2c:f2:23:f8:6d:87:4f:32:2a:2d:72:9f:82:26: 31:4f:8f:45:b8:e6:01:52:c8:35:18:ab:33:49:9e: 56:ae:b0:1c:2b:b8:92:9a:b6:c2:f2:f8:25:89:f0: fa:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:5C:86:59:75:9C:8A:6E:C3:97:0C:D8:44:57:43:0F:11:69:D3:61 X509v3 Authority Key Identifier: keyid:BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/UFyGWXWcim7DlwzYRFdDDxFp02E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.95.118.0/23 Signature Algorithm: sha256WithRSAEncryption ae:bc:c2:d8:fd:dd:92:6e:4a:66:5c:af:1f:52:ec:20:ad:b3: 0b:b9:63:38:e8:27:99:19:b6:98:a3:aa:10:7d:ee:d6:ff:da: 6b:18:19:b2:a7:97:3f:b4:26:cb:90:8b:de:ed:ac:f0:6f:e6: a3:6c:b8:42:f7:44:9c:ee:ee:33:b2:d8:a9:d2:23:e2:f0:8d: 4b:2a:fa:50:fc:9a:21:98:c5:a3:bf:bd:50:d0:d2:90:74:ed: 0b:5b:e6:d8:1b:18:b2:a4:d5:87:5c:24:23:57:8b:67:62:4a: a5:61:a0:6a:6c:24:5f:3e:af:e6:b7:9c:3c:2b:5a:1e:ad:cd: 48:c9:33:1a:d2:31:3a:e5:4d:fb:5d:99:48:a8:65:00:35:52: 40:43:8c:2e:e7:7d:d3:0b:62:dc:4c:65:6f:ae:27:9c:a2:6d: 04:ea:ff:e0:97:dc:3c:56:05:f6:6b:eb:fd:8e:97:f8:c4:3c: 21:3a:c9:0f:8d:66:fa:c5:bb:f3:a2:74:2c:93:63:12:2d:49: bb:c9:b5:52:1f:a8:33:59:9a:23:4e:62:ff:21:36:6c:41:20: 2d:4e:43:6b:d2:c5:ce:89:26:73:ae:e6:5f:89:52:b5:a2:16: 6a:08:77:5f:5a:60:40:13:21:ed:1d:ea:a3:41:8a:f3:3b:61: 30:20:a5:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g+wDlp0XE1ouyVePLmX4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMzdjNzBmMWM2N2VjYTE3NzVhNzA5YzkyMzVkNmEyZjU1 NTE2YjgwHhcNMjYwMTAyMTYyMTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDVjODY1OTc1OWM4YTZlYzM5NzBjZDg0NDU3NDMwZjExNjlkMzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yazXMzz5WYB8V4Vn+mzwa6ti8QC wVT6ttTcs5Y9bZ+0cYd4ush6vCOwezg0ZqmCLcjSfm0MZtzlmB99Oy+akeWP7Lly Mp7HxXr7uracMt8v6EJl3nJ6lHzVI6IOdI4AXubVfD4CgvfY4+GiqIj4hvvFZ5fV jM06g2E87JHeGZ7tZeKWpGjesZQWyRfrSHnA3QBWJMnBHv89r5dAP8XbDlICEAvv Xb/xf6cbnAjP2FZ7F+S9MrjD1t+cU/2tKKUn76exuQWzsbMCCFgoQ9h+koWTLPIj +G2HTzIqLXKfgiYxT49FuOYBUsg1GKszSZ5WrrAcK7iSmrbC8vglifD6YQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFBchll1nIpuw5cM2ERXQw8RadNhMB8GA1UdIwQY MBaAFL43xw8cZ+yhd1pwnJI11qL1VRa4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmpmSER4eG43S0YzV25DY2tqWFdvdlZWRnJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85NzM0MzEtNWFlNC00NTIxLTk0NTQt YzhlYjA4Y2U5MDg5LzEvVUZ5R1dYV2NpbTdEbHd6WVJGZEREeEZwMDJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS85NzM0MzEtNWFlNC00NTIxLTk0NTQtYzhlYjA4Y2U5MDg5 LzEvdmpmSER4eG43S0YzV25DY2tqWFdvdlZWRnJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuV92MA0G CSqGSIb3DQEBCwUAA4IBAQCuvMLY/d2SbkpmXK8fUuwgrbMLuWM46CeZGbaYo6oQ fe7W/9prGBmyp5c/tCbLkIve7azwb+ajbLhC90Sc7u4zstip0iPi8I1LKvpQ/Joh mMWjv71Q0NKQdO0LW+bYGxiypNWHXCQjV4tnYkqlYaBqbCRfPq/mt5w8K1oerc1I yTMa0jE65U37XZlIqGUANVJAQ4wu533TC2LcTGVvriecom0E6v/gl9w8VgX2a+v9 jpf4xDwhOskPjWb6xbvzonQsk2MSLUm7ybVSH6gzWZojTmL/ITZsQSAtTkNr0sXO iSZzruZfiVK1ohZqCHdfWmBAEyHtHeqjQYrzO2EwIKXk -----END CERTIFICATE-----Generated at Sat Jan 3 02:31:06 2026 by rpki-client