This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/Uv7GAQ_UlMBXFGvxutIi16HxUTg.roa File: Uv7GAQ_UlMBXFGvxutIi16HxUTg.roa (raw, json) Hash identifier: CsEeDd1h6WkVmrp/M5Z/7OMRR7HqcBmhfSum5Jl9L2E= Subject key identifier: 52:FE:C6:01:0F:D4:94:C0:57:14:6B:F1:BA:D2:22:D7:A1:F1:51:38 Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f Certificate serial: 019B77595DC1F9CA175B76483BD9E5313BF1 Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/Uv7GAQ_UlMBXFGvxutIi16HxUTg.roa Signing time: Thu 01 Jan 2026 02:18:23 +0000 ROA not before: Thu 01 Jan 2026 02:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204964 IP address blocks: 185.233.156.0/22 maxlen: 22 185.233.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:5d:c1:f9:ca:17:5b:76:48:3b:d9:e5:31:3b:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f Validity Not Before: Jan 1 02:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52fec6010fd494c057146bf1bad222d7a1f15138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:57:76:1a:56:21:27:03:06:e8:96:ea:68:ef: bd:bc:d8:f4:6d:3c:f7:28:9e:c4:8b:0a:75:1f:59: fd:6a:61:75:7d:57:a5:0f:4d:9c:45:02:f9:0e:eb: 32:a5:26:9b:28:8f:3c:b5:5c:44:fc:2b:d6:7b:7e: da:aa:b1:b4:4c:45:0e:b1:86:ca:53:e6:43:5d:ce: 81:0f:1c:cb:23:7f:13:6b:7f:8c:a5:12:a3:47:27: 9f:7f:39:6f:ac:fa:ea:0e:38:41:1d:da:ea:34:18: 1b:34:7a:b2:71:9b:b4:86:54:f7:b7:ab:27:9c:c5: 13:59:6f:e0:dc:52:14:74:7d:64:4d:10:3c:ed:54: 60:28:90:e2:cc:25:44:51:1f:f0:aa:1c:8d:e1:bc: d8:12:50:c1:b5:60:79:a9:44:81:01:e0:66:d0:ed: 4c:ea:ff:f5:2b:45:6c:fc:5f:c0:e0:e2:a0:09:0b: e7:c6:94:6f:10:93:44:ad:c3:5a:43:97:d2:63:04: a0:6c:52:4b:5b:de:17:90:21:83:6f:4b:20:af:15: d9:12:6c:6b:65:2e:c1:1c:c1:68:cd:18:aa:a6:ef: db:7b:01:15:9e:16:d9:5d:a7:f5:32:12:4b:5d:c7: bf:d4:72:5c:63:d9:9e:89:e3:ec:04:eb:d6:2b:cd: ba:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FE:C6:01:0F:D4:94:C0:57:14:6B:F1:BA:D2:22:D7:A1:F1:51:38 X509v3 Authority Key Identifier: keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/Uv7GAQ_UlMBXFGvxutIi16HxUTg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.233.156.0-185.233.163.255 Signature Algorithm: sha256WithRSAEncryption 5f:ee:40:93:1c:06:92:fc:ca:cb:5c:4e:6f:17:fa:67:82:78: a3:2f:7c:dd:b1:1f:2f:6d:70:26:b0:50:34:98:29:46:f5:96: a1:25:d5:63:46:32:30:5c:6b:d4:f2:b1:06:66:16:b3:f4:23: a6:69:57:67:bf:4b:83:a6:51:5b:c9:57:c0:f8:08:2a:de:1c: 85:46:83:e0:a6:6b:49:7c:12:5f:6e:29:42:61:a8:b9:6c:0e: f2:0b:61:a5:6c:b5:3c:83:a9:7a:f1:f4:a1:e4:24:34:93:17: da:62:48:98:36:67:39:b7:56:95:2b:dd:bb:c5:06:1b:4a:af: 5d:8f:d4:ff:1d:ee:f2:09:88:89:4e:33:37:b4:2b:a7:cc:6d: c6:b0:23:60:d7:ed:ee:46:2f:fd:12:b6:a4:bd:3f:9b:bb:72: d0:4d:62:57:8a:04:e5:b3:a3:c2:f2:6a:10:f5:dd:34:30:5f: 0e:4b:91:f3:a6:68:ed:3b:e0:8c:ee:97:e6:ef:b6:bc:f8:09: a1:5d:67:fd:c7:24:bf:b1:95:bc:62:d8:3f:cf:2d:23:d0:67: dc:37:85:86:e3:95:fb:e4:32:0b:c7:c8:2b:7b:8e:f2:78:0d: 8c:9b:8e:0d:1f:23:74:b0:30:18:02:c1:54:5f:27:b7:2d:6b: f2:7e:b9:ec -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3WV3B+coXW3ZIO9nlMTvxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmN2RhNTY4YWQwMjdiOWUyNDljMTNlMjIzZDMyMjc2OTg4 MWEyOWYwHhcNMjYwMTAxMDIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmZlYzYwMTBmZDQ5NGMwNTcxNDZiZjFiYWQyMjJkN2ExZjE1MTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21d2GlYhJwMG6JbqaO+9vNj0bTz3 KJ7Eiwp1H1n9amF1fVelD02cRQL5DusypSabKI88tVxE/CvWe37aqrG0TEUOsYbK U+ZDXc6BDxzLI38Ta3+MpRKjRyeffzlvrPrqDjhBHdrqNBgbNHqycZu0hlT3t6sn nMUTWW/g3FIUdH1kTRA87VRgKJDizCVEUR/wqhyN4bzYElDBtWB5qUSBAeBm0O1M 6v/1K0Vs/F/A4OKgCQvnxpRvEJNErcNaQ5fSYwSgbFJLW94XkCGDb0sgrxXZEmxr ZS7BHMFozRiqpu/bewEVnhbZXaf1MhJLXce/1HJcY9meiePsBOvWK826cQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFFL+xgEP1JTAVxRr8brSIteh8VE4MB8GA1UdIwQY MBaAFF99pWitAnueJJwT4iPTInaYgaKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUt Mzc1NzUzOWMyYWM5LzEvVXY3R0FRX1VsTUJYRkd2eHV0SWkxNkh4VVRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUtMzc1NzUzOWMyYWM5 LzEvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAK56ZwD BAK56aAwDQYJKoZIhvcNAQELBQADggEBAF/uQJMcBpL8ystcTm8X+meCeKMvfN2x Hy9tcCawUDSYKUb1lqEl1WNGMjBca9TysQZmFrP0I6ZpV2e/S4OmUVvJV8D4CCre HIVGg+Cma0l8El9uKUJhqLlsDvILYaVstTyDqXrx9KHkJDSTF9piSJg2Zzm3VpUr 3bvFBhtKr12P1P8d7vIJiIlOMze0K6fMbcawI2DX7e5GL/0StqS9P5u7ctBNYleK BOWzo8LyahD13TQwXw5LkfOmaO074Izul+bvtrz4CaFdZ/3HJL+xlbxi2D/PLSPQ Z9w3hYbjlfvkMgvHyCt7jvJ4DYybjg0fI3SwMBgCwVRfJ7cta/J+uew= -----END CERTIFICATE-----Generated at Mon Jan 26 11:04:32 2026 by rpki-client