This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/UjcpoND4jTWKKcWkX2exhWEuEY8.roa File: UjcpoND4jTWKKcWkX2exhWEuEY8.roa (raw, json) Hash identifier: XLZikrKhG93A0xMENVh7LOQQT8lhvwT0f4TqN/G3rY0= Subject key identifier: 52:37:29:A0:D0:F8:8D:35:8A:29:C5:A4:5F:67:B1:85:61:2E:11:8F Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 019B7C135F9B3D3036EB82D4AE37080E8806 Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/UjcpoND4jTWKKcWkX2exhWEuEY8.roa Signing time: Fri 02 Jan 2026 00:20:03 +0000 ROA not before: Fri 02 Jan 2026 00:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60089 IP address blocks: 185.206.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:5f:9b:3d:30:36:eb:82:d4:ae:37:08:0e:88:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Jan 2 00:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=523729a0d0f88d358a29c5a45f67b185612e118f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7f:8f:b0:94:70:60:a1:1a:ad:73:e0:f2:51: 47:61:8a:58:7d:86:2a:5e:da:d7:de:9f:22:fd:59: 5c:e4:23:b6:4e:1c:fc:9f:93:c5:dc:7d:c7:18:cf: 9f:58:5c:8e:7e:4c:ec:b3:18:12:7a:8e:33:eb:04: 54:56:10:45:3e:d7:e8:fa:de:35:39:6e:9b:8d:af: fb:07:60:51:f7:8c:ba:90:a1:7d:cc:74:d9:77:21: cf:80:33:d7:54:5f:d1:8c:d1:b0:66:4b:32:9a:5f: d5:08:a2:46:5d:25:32:27:a0:9e:be:3d:e6:5f:3c: 36:aa:53:da:56:1a:9c:dc:9d:e2:9c:56:56:c0:a3: 4f:6d:98:7f:8d:ae:0c:40:4f:66:ad:77:65:a6:31: 9d:a4:19:81:bf:fe:c3:f4:94:66:15:57:5a:b8:19: f0:18:75:f3:15:cd:84:90:21:bd:44:d5:18:96:45: 28:e2:15:0b:2f:6d:ef:e9:17:3c:db:24:cc:cd:f6: a3:46:f1:92:dd:a2:39:2f:c0:92:72:a0:74:5c:35: 01:4d:43:f1:f0:4e:b4:6e:77:2f:a3:46:65:8b:a2: 1b:6b:23:3c:e0:a5:3b:1a:fe:f2:62:92:5c:c3:36: f3:6d:f1:99:42:8a:65:4f:b7:42:ae:40:70:91:ef: 73:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:37:29:A0:D0:F8:8D:35:8A:29:C5:A4:5F:67:B1:85:61:2E:11:8F X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/UjcpoND4jTWKKcWkX2exhWEuEY8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.206.55.0/24 Signature Algorithm: sha256WithRSAEncryption 53:52:b8:6b:fa:87:05:df:06:75:0e:2b:f0:4b:bb:23:ab:bd: ab:e9:9e:52:62:f0:49:0c:05:14:d4:5b:01:0c:62:eb:f6:31: bd:3c:74:54:8a:80:b8:8e:9a:92:97:74:81:96:87:30:c7:c1: b1:67:f1:ba:67:da:9a:31:65:31:19:90:35:45:88:e6:bc:74: cf:33:66:ef:5f:07:d9:22:7a:8d:93:d5:58:d5:f2:e3:d9:fc: 89:ac:4a:2d:93:7f:11:4c:f1:5c:85:6f:59:15:03:a5:17:3b: 22:1c:16:07:81:36:c0:8b:f4:c3:3f:c5:bf:b1:b7:7c:c7:e9: 79:d0:9c:01:7f:28:02:38:97:87:cc:94:e0:cf:2b:f3:fa:07: 9c:77:9d:7e:5a:d5:c0:b0:6a:62:25:57:c5:f3:9d:a8:b2:d5: 9c:0e:2d:12:67:7c:39:94:ca:e3:96:ba:db:bf:c6:23:3d:e9: 35:aa:24:33:af:10:c0:ac:fe:7b:0a:7f:26:1b:b9:8d:08:be: e4:c5:76:dd:6d:9a:09:99:4f:6b:45:f9:18:ac:06:b1:ee:c3: 09:c6:59:30:1c:77:15:b7:c7:3b:79:96:e4:f2:59:7a:8e:18: 8a:71:64:a2:ab:d3:ba:58:9d:9b:10:a4:74:a4:4b:6f:35:05: 41:8c:3b:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E1+bPTA264LUrjcIDogGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjYwMTAyMDAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjM3MjlhMGQwZjg4ZDM1OGEyOWM1YTQ1ZjY3YjE4NTYxMmUxMThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4n+PsJRwYKEarXPg8lFHYYpYfYYq XtrX3p8i/Vlc5CO2Thz8n5PF3H3HGM+fWFyOfkzssxgSeo4z6wRUVhBFPtfo+t41 OW6bja/7B2BR94y6kKF9zHTZdyHPgDPXVF/RjNGwZksyml/VCKJGXSUyJ6Cevj3m Xzw2qlPaVhqc3J3inFZWwKNPbZh/ja4MQE9mrXdlpjGdpBmBv/7D9JRmFVdauBnw GHXzFc2EkCG9RNUYlkUo4hULL23v6Rc82yTMzfajRvGS3aI5L8CScqB0XDUBTUPx 8E60bncvo0Zli6IbayM84KU7Gv7yYpJcwzbzbfGZQoplT7dCrkBwke9zpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFI3KaDQ+I01iinFpF9nsYVhLhGPMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvVWpjcG9ORDRqVFdLS2NXa1gyZXhoV0V1RVk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc43MA0G CSqGSIb3DQEBCwUAA4IBAQBTUrhr+ocF3wZ1DivwS7sjq72r6Z5SYvBJDAUU1FsB DGLr9jG9PHRUioC4jpqSl3SBlocwx8GxZ/G6Z9qaMWUxGZA1RYjmvHTPM2bvXwfZ InqNk9VY1fLj2fyJrEotk38RTPFchW9ZFQOlFzsiHBYHgTbAi/TDP8W/sbd8x+l5 0JwBfygCOJeHzJTgzyvz+gecd51+WtXAsGpiJVfF852ostWcDi0SZ3w5lMrjlrrb v8YjPek1qiQzrxDArP57Cn8mG7mNCL7kxXbdbZoJmU9rRfkYrAax7sMJxlkwHHcV t8c7eZbk8ll6jhiKcWSiq9O6WJ2bEKR0pEtvNQVBjDul -----END CERTIFICATE-----Generated at Wed Jan 7 22:30:53 2026 by rpki-client