This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/ugyXshHr8wuLJhM8Vr2WcFZCUG4.roa File: ugyXshHr8wuLJhM8Vr2WcFZCUG4.roa (raw, json) Hash identifier: yVgEXEDLqTUHDzrLVVJTJnKbB6aMI3zrlCtjybaz+8Q= Subject key identifier: BA:0C:97:B2:11:EB:F3:0B:8B:26:13:3C:56:BD:96:70:56:42:50:6E Certificate issuer: /CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca Certificate serial: 019B76EAF28CAB68E7F9BA5DC13ECAC0DCC9 Authority key identifier: 9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/ugyXshHr8wuLJhM8Vr2WcFZCUG4.roa Signing time: Thu 01 Jan 2026 00:17:47 +0000 ROA not before: Thu 01 Jan 2026 00:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59517 IP address blocks: 176.122.200.0/21 maxlen: 21 176.122.200.0/24 maxlen: 24 176.122.201.0/24 maxlen: 24 176.122.202.0/24 maxlen: 24 176.122.203.0/24 maxlen: 24 176.122.204.0/24 maxlen: 24 176.122.205.0/24 maxlen: 24 176.122.206.0/24 maxlen: 24 176.122.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f2:8c:ab:68:e7:f9:ba:5d:c1:3e:ca:c0:dc:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca Validity Not Before: Jan 1 00:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba0c97b211ebf30b8b26133c56bd96705642506e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:57:02:bb:9d:e7:2c:3a:b7:6f:6a:9a:14:df: 9c:b7:7d:20:0d:be:ab:61:52:d8:60:24:83:c8:f6: 3f:87:d4:7b:bf:69:fb:76:eb:8d:f9:e5:c1:23:20: d6:81:a6:21:e9:70:03:9e:bc:e1:a6:fe:73:7c:9d: 01:40:97:3c:dd:28:35:fe:2a:53:44:1d:2e:5e:de: d9:67:3a:35:bf:04:9f:b6:8b:b8:28:79:24:7c:b6: 1d:54:06:3a:3e:df:a3:f9:cd:46:29:dc:5a:a2:2d: 58:5f:b8:35:81:be:2f:f4:fd:fe:2a:ba:83:d0:54: 32:1f:5e:a1:77:4e:0c:89:64:fd:c4:5c:18:72:56: df:07:63:73:9a:2f:cc:28:74:b8:dc:f0:01:b1:3f: 98:96:58:5d:71:8e:4f:49:98:9b:05:29:55:80:b7: 89:17:13:22:cc:49:97:d6:2e:08:44:94:0d:31:bd: a9:42:57:c7:e5:34:5f:c5:f9:f3:c3:af:51:8b:d4: 74:84:ba:8a:d3:d9:09:01:f3:7c:50:aa:24:fa:f1: c8:f1:56:b7:d1:38:38:cf:7d:47:18:4d:e4:af:80: 62:03:55:12:dd:1b:32:0c:ea:1d:4f:6d:0c:37:85: d3:bb:4e:91:31:81:3e:93:00:79:b6:cd:6d:8a:aa: 75:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:0C:97:B2:11:EB:F3:0B:8B:26:13:3C:56:BD:96:70:56:42:50:6E X509v3 Authority Key Identifier: keyid:9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/ugyXshHr8wuLJhM8Vr2WcFZCUG4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.122.200.0/21 Signature Algorithm: sha256WithRSAEncryption 26:95:d2:86:3b:d1:60:3a:9b:ae:27:50:62:c3:07:83:0f:d9: cb:4d:ad:67:95:e5:49:df:d9:b4:be:02:41:51:b5:25:54:e1: 6b:9c:13:51:0d:0f:3a:d3:61:c7:3c:f2:4b:15:2a:1d:12:c9: af:2e:16:21:44:18:b2:be:a3:ec:7b:2d:d1:91:20:a4:47:7f: 93:ad:fc:ff:57:fd:24:74:15:92:8e:9b:ff:70:2e:9f:84:cb: f1:aa:77:83:af:f9:00:fd:90:d7:29:d6:16:08:6b:95:a4:1b: 3a:f3:5b:90:f1:2b:41:da:ae:1a:9a:03:d5:54:0e:d2:39:05: 9f:8d:ee:bb:56:00:ee:fb:1b:e3:43:b9:8b:2f:5c:85:c1:f0: 8d:1b:a8:d2:47:f8:e7:8f:af:49:b3:b8:c5:ea:c1:ad:0e:fb: 62:0f:9d:27:0c:ca:4d:a2:03:fb:4e:d4:1b:84:fa:6e:94:5f: ed:ae:aa:34:94:f4:f0:7b:19:ba:ba:af:bc:21:64:98:29:3f: ec:6f:0a:61:53:0b:19:a0:95:30:78:e3:30:11:e2:c4:56:36: 85:a8:a1:76:84:4e:8f:56:47:2e:33:16:53:4a:b1:1e:c7:35: 76:39:da:b4:a1:4a:99:92:b7:44:d5:9c:3e:4d:83:23:9e:38: b8:82:db:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26vKMq2jn+bpdwT7KwNzJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZTk0ZDJlZWRjZDgyNGFjMWRlNzRhZGUzNmMxZjlkNjlk NDk2Y2EwHhcNMjYwMTAxMDAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTBjOTdiMjExZWJmMzBiOGIyNjEzM2M1NmJkOTY3MDU2NDI1MDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVcCu53nLDq3b2qaFN+ct30gDb6r YVLYYCSDyPY/h9R7v2n7duuN+eXBIyDWgaYh6XADnrzhpv5zfJ0BQJc83Sg1/ipT RB0uXt7ZZzo1vwSftou4KHkkfLYdVAY6Pt+j+c1GKdxaoi1YX7g1gb4v9P3+KrqD 0FQyH16hd04MiWT9xFwYclbfB2Nzmi/MKHS43PABsT+YllhdcY5PSZibBSlVgLeJ FxMizEmX1i4IRJQNMb2pQlfH5TRfxfnzw69Ri9R0hLqK09kJAfN8UKok+vHI8Va3 0Tg4z31HGE3kr4BiA1US3RsyDOodT20MN4XTu06RMYE+kwB5ts1tiqp1TQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLoMl7IR6/MLiyYTPFa9lnBWQlBuMB8GA1UdIwQY MBaAFJ/pTS7tzYJKwd50reNsH51p1JbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbi1sTkx1M05na3JCM25TdDQyd2ZuV25VbHNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82NjBlNTQtNWM4NS00ZDI1LThlNjEt N2NhMTFkYzNhZTgyLzEvdWd5WHNoSHI4d3VMSmhNOFZyMldjRlpDVUc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82NjBlNTQtNWM4NS00ZDI1LThlNjEtN2NhMTFkYzNhZTgy LzEvbi1sTkx1M05na3JCM25TdDQyd2ZuV25VbHNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsHrIMA0G CSqGSIb3DQEBCwUAA4IBAQAmldKGO9FgOpuuJ1BiwweDD9nLTa1nleVJ39m0vgJB UbUlVOFrnBNRDQ8602HHPPJLFSodEsmvLhYhRBiyvqPsey3RkSCkR3+Trfz/V/0k dBWSjpv/cC6fhMvxqneDr/kA/ZDXKdYWCGuVpBs681uQ8StB2q4amgPVVA7SOQWf je67VgDu+xvjQ7mLL1yFwfCNG6jSR/jnj69Js7jF6sGtDvtiD50nDMpNogP7TtQb hPpulF/trqo0lPTwexm6uq+8IWSYKT/sbwphUwsZoJUweOMwEeLEVjaFqKF2hE6P VkcuMxZTSrEexzV2Odq0oUqZkrdE1Zw+TYMjnji4gtvg -----END CERTIFICATE-----Generated at Sat Jan 3 01:01:55 2026 by rpki-client