This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/uqRQxH9qEjG0hA9B3Ap6knKry0I.roa File: uqRQxH9qEjG0hA9B3Ap6knKry0I.roa (raw, json) Hash identifier: aVZsCZDmcN6Rpr0mzKedChfzxWEnLoXai4QxhXhqgNM= Subject key identifier: BA:A4:50:C4:7F:6A:12:31:B4:84:0F:41:DC:0A:7A:92:72:AB:CB:42 Certificate issuer: /CN=9be76ef4aa498c21524dd7edad16de1d3db002e3 Certificate serial: 019B77C6F92CA4BF346E4433F6F393C9B8A0 Authority key identifier: 9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/uqRQxH9qEjG0hA9B3Ap6knKry0I.roa Signing time: Thu 01 Jan 2026 04:18:07 +0000 ROA not before: Thu 01 Jan 2026 04:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12817 IP address blocks: 194.145.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f9:2c:a4:bf:34:6e:44:33:f6:f3:93:c9:b8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9be76ef4aa498c21524dd7edad16de1d3db002e3 Validity Not Before: Jan 1 04:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=baa450c47f6a1231b4840f41dc0a7a9272abcb42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f8:4a:e7:c8:54:9c:4c:77:3b:29:93:b4:89: c6:e5:2b:6e:8a:0c:4e:bb:1a:88:3e:12:c9:ac:37: fb:81:ba:e2:41:81:90:eb:60:45:52:69:6b:81:6c: 03:81:27:b8:a9:8c:b8:2e:d3:0c:41:21:f3:8d:bc: 93:57:58:95:67:a0:fe:82:97:81:30:b2:79:31:9a: ef:6e:d2:a6:2e:9c:7f:e3:5a:a2:e1:d3:53:95:b9: b7:31:43:05:89:f8:99:6f:fa:9c:b8:0a:f1:e8:3f: 90:dc:ea:cf:c6:60:58:61:70:63:ca:8b:d4:c1:0d: f2:0f:b8:fc:3a:0e:9e:85:f7:36:32:a2:96:58:e2: 11:70:be:1d:30:bc:79:37:95:cd:2d:78:b6:e1:47: 3d:f0:19:dd:65:98:12:a5:12:38:be:ce:b2:1d:b6: e6:44:33:94:3d:a2:d4:d4:c5:60:be:b7:b1:80:66: bb:37:5a:9b:c4:86:b3:61:89:a2:b3:9b:05:08:b5: f0:90:b6:c3:9a:38:f9:e4:b2:ee:1c:50:40:8f:82: 70:04:b4:f1:fa:5f:da:73:f5:1f:26:25:16:10:c3: 8c:b8:d0:c3:37:00:7a:3e:af:c0:9c:ba:3d:59:4d: f7:4d:c3:3c:8c:8f:e4:bb:ed:78:98:b9:e3:69:b9: cd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A4:50:C4:7F:6A:12:31:B4:84:0F:41:DC:0A:7A:92:72:AB:CB:42 X509v3 Authority Key Identifier: keyid:9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/uqRQxH9qEjG0hA9B3Ap6knKry0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.145.150.0/23 Signature Algorithm: sha256WithRSAEncryption 19:d2:9f:a6:90:d7:2a:af:a9:20:4a:c9:b6:ff:d4:78:7b:ee: 1d:58:94:06:b2:bb:dc:58:7a:42:d7:4e:fc:de:db:c1:63:3b: 05:77:85:9e:84:8c:e3:d2:13:2f:8a:81:f2:e3:71:bd:d0:44: 7f:24:27:b3:31:82:ed:ad:ed:0c:a9:3d:f7:a3:57:0b:6e:2b: 03:86:0a:59:7c:96:1f:58:1a:d9:61:a9:33:5b:3c:0f:f2:4f: 1e:d8:99:fa:a4:70:e5:4c:98:01:89:ed:56:50:bc:bb:56:4c: 31:6e:0f:f2:86:4b:b3:2f:ee:24:89:39:c0:b9:bd:51:6c:ce: cd:85:09:cd:f1:d4:16:ed:b2:65:28:ee:bd:50:ce:52:2d:f9: b8:46:65:29:ee:a9:f8:d0:58:28:e2:10:d5:6b:12:57:d3:0d: f3:9f:50:d8:2e:c9:e0:26:15:2d:31:18:81:d5:87:74:cc:90: 96:fe:c7:52:d7:24:2e:7e:83:ce:d9:37:2f:2f:b3:34:d2:db: 36:42:bf:fc:60:62:12:4e:a8:ae:7b:f0:61:f2:2a:c5:90:03: e9:53:de:f9:b6:44:17:70:5c:dd:aa:a6:30:c8:7c:fc:fc:6f: 20:af:55:81:08:8f:a6:fb:30:30:e0:31:d1:f6:1e:66:f2:7f: db:87:aa:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xvkspL80bkQz9vOTybigMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZTc2ZWY0YWE0OThjMjE1MjRkZDdlZGFkMTZkZTFkM2Ri MDAyZTMwHhcNMjYwMTAxMDQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWE0NTBjNDdmNmExMjMxYjQ4NDBmNDFkYzBhN2E5MjcyYWJjYjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvhK58hUnEx3OymTtInG5StuigxO uxqIPhLJrDf7gbriQYGQ62BFUmlrgWwDgSe4qYy4LtMMQSHzjbyTV1iVZ6D+gpeB MLJ5MZrvbtKmLpx/41qi4dNTlbm3MUMFifiZb/qcuArx6D+Q3OrPxmBYYXBjyovU wQ3yD7j8Og6ehfc2MqKWWOIRcL4dMLx5N5XNLXi24Uc98BndZZgSpRI4vs6yHbbm RDOUPaLU1MVgvrexgGa7N1qbxIazYYmis5sFCLXwkLbDmjj55LLuHFBAj4JwBLTx +l/ac/UfJiUWEMOMuNDDNwB6Pq/AnLo9WU33TcM8jI/ku+14mLnjabnNVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLqkUMR/ahIxtIQPQdwKepJyq8tCMB8GA1UdIwQY MBaAFJvnbvSqSYwhUk3X7a0W3h09sALjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbS1kdTlLcEpqQ0ZTVGRmdHJSYmVIVDJ3QXVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lYjMwMWQtYWI1MC00YzNlLThjNzgt OWRmMzcxMDljODFkLzEvdXFSUXhIOXFFakcwaEE5QjNBcDZrbktyeTBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lYjMwMWQtYWI1MC00YzNlLThjNzgtOWRmMzcxMDljODFk LzEvbS1kdTlLcEpqQ0ZTVGRmdHJSYmVIVDJ3QXVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwpGWMA0G CSqGSIb3DQEBCwUAA4IBAQAZ0p+mkNcqr6kgSsm2/9R4e+4dWJQGsrvcWHpC1078 3tvBYzsFd4WehIzj0hMvioHy43G90ER/JCezMYLtre0MqT33o1cLbisDhgpZfJYf WBrZYakzWzwP8k8e2Jn6pHDlTJgBie1WULy7Vkwxbg/yhkuzL+4kiTnAub1RbM7N hQnN8dQW7bJlKO69UM5SLfm4RmUp7qn40Fgo4hDVaxJX0w3zn1DYLsngJhUtMRiB 1Yd0zJCW/sdS1yQufoPO2TcvL7M00ts2Qr/8YGISTqiue/Bh8irFkAPpU975tkQX cFzdqqYwyHz8/G8gr1WBCI+m+zAw4DHR9h5m8n/bh6ps -----END CERTIFICATE-----Generated at Tue Jan 27 00:33:42 2026 by rpki-client