This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/uulI6ExTJtP3irGdM2S5HIHQNgA.roa File: uulI6ExTJtP3irGdM2S5HIHQNgA.roa (raw, json) Hash identifier: dOSl4h1kgdktrCS2a2Neg4UQzObDt3tKhXAVO/T4UEs= Subject key identifier: BA:E9:48:E8:4C:53:26:D3:F7:8A:B1:9D:33:64:B9:1C:81:D0:36:00 Certificate issuer: /CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987 Certificate serial: 019B76EB1D775693E3F0AD4A4231B712F69B Authority key identifier: 4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/uulI6ExTJtP3irGdM2S5HIHQNgA.roa Signing time: Thu 01 Jan 2026 00:17:58 +0000 ROA not before: Thu 01 Jan 2026 00:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197289 IP address blocks: 95.215.132.0/22 maxlen: 22 185.18.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:1d:77:56:93:e3:f0:ad:4a:42:31:b7:12:f6:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987 Validity Not Before: Jan 1 00:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bae948e84c5326d3f78ab19d3364b91c81d03600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1e:bc:7a:29:e4:d2:a1:c5:1b:07:93:72:20: 7a:4c:6f:e2:9e:85:73:5c:ed:1b:8f:25:9b:62:af: 57:f0:24:ea:67:51:19:68:6c:93:db:c0:d8:1a:1f: 48:38:ef:62:4a:35:3b:57:49:8a:d2:9f:47:08:5b: 6f:76:eb:43:31:23:ee:6a:ec:e6:6b:36:2b:e9:a4: c4:5d:df:b2:c2:e1:55:2e:a8:bb:cc:51:08:71:1e: 0d:d8:fd:46:67:d0:80:ed:4d:52:d9:40:7f:dc:05: c5:51:58:c2:87:72:22:9d:53:46:97:ef:df:22:30: c2:7c:2a:6f:3f:15:ea:37:34:f2:12:ca:e5:0e:84: 2a:66:05:ab:f2:36:30:20:3d:1f:19:bd:aa:5e:65: a8:2d:a8:b0:7f:3d:4f:4d:bc:44:7b:15:b7:f7:13: d1:92:91:0f:bb:94:45:70:db:0d:23:be:dd:e7:65: a1:bf:6f:0b:d6:07:fe:2b:18:3c:0b:c9:32:8b:7d: 54:ef:b5:8f:9c:4c:5b:ba:81:a1:fa:6a:12:1f:0a: 12:28:a3:90:1c:ec:ec:18:95:20:7c:47:dd:31:34: e3:9f:bd:f8:41:21:d3:73:65:c8:ce:5c:85:45:92: c5:33:85:1b:3e:0a:ab:7c:e0:92:a6:45:08:ae:c3: 49:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E9:48:E8:4C:53:26:D3:F7:8A:B1:9D:33:64:B9:1C:81:D0:36:00 X509v3 Authority Key Identifier: keyid:4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/uulI6ExTJtP3irGdM2S5HIHQNgA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.215.132.0/22 185.18.160.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:d4:4a:66:05:09:62:f4:48:ff:d9:0c:21:f1:8d:d1:f4:5f: e3:fe:91:ad:fd:a2:80:f6:5c:a4:a6:5a:b2:8c:52:40:39:d3: a5:85:6d:f7:e1:31:31:0a:d9:f0:4c:81:e3:f1:c4:81:9c:17: 18:94:0b:3b:11:a3:7b:ae:08:35:27:8a:e1:af:49:68:38:d4: a0:d9:a4:1b:12:40:27:1e:c8:1a:fd:df:dd:a4:ba:9a:ad:4b: 61:c8:f5:00:ce:21:b8:76:98:a2:4b:9e:5f:f1:e0:63:d8:80: 27:54:64:0a:01:06:dc:16:30:ce:0f:43:8a:92:2b:66:64:68: 0a:be:f0:8e:db:a9:65:b3:24:c9:ae:94:80:ce:13:2f:02:03: cb:1a:6d:2f:d2:cb:ae:fc:ea:19:f0:da:8a:51:a9:60:3d:22: c2:6b:21:c8:b3:80:cb:d2:15:10:13:d2:ae:59:23:6a:15:10: f8:2e:cd:41:21:e6:09:cd:91:7a:38:59:b2:65:aa:54:63:09: 19:96:68:42:24:5b:b5:a3:8b:c3:46:6d:b9:0e:44:95:9c:80: 91:00:b9:bd:91:6d:04:2b:de:d5:d0:85:1f:b7:dd:a4:d0:ad: 49:5d:04:48:9a:99:4b:6a:c3:65:22:09:df:ec:5a:da:c8:13: d2:76:51:54 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26x13VpPj8K1KQjG3EvabMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmODEyMmIwOTQ1ZWNjY2IxZjJmYjk5MTJmYmQ4NmFhMDRh NjE5ODcwHhcNMjYwMTAxMDAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWU5NDhlODRjNTMyNmQzZjc4YWIxOWQzMzY0YjkxYzgxZDAzNjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh68eink0qHFGweTciB6TG/inoVz XO0bjyWbYq9X8CTqZ1EZaGyT28DYGh9IOO9iSjU7V0mK0p9HCFtvdutDMSPuauzm azYr6aTEXd+ywuFVLqi7zFEIcR4N2P1GZ9CA7U1S2UB/3AXFUVjCh3IinVNGl+/f IjDCfCpvPxXqNzTyEsrlDoQqZgWr8jYwID0fGb2qXmWoLaiwfz1PTbxEexW39xPR kpEPu5RFcNsNI77d52Whv28L1gf+Kxg8C8kyi31U77WPnExbuoGh+moSHwoSKKOQ HOzsGJUgfEfdMTTjn734QSHTc2XIzlyFRZLFM4UbPgqrfOCSpkUIrsNJZQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLrpSOhMUybT94qxnTNkuRyB0DYAMB8GA1UdIwQY MBaAFE+BIrCUXszLHy+5kS+9hqoEphmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yMWRlZTItMjlkNy00ZGFkLWJlYjkt MmIyMjZhMjM0MDZhLzEvdXVsSTZFeFRKdFAzaXJHZE0yUzVISUhRTmdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yMWRlZTItMjlkNy00ZGFkLWJlYjktMmIyMjZhMjM0MDZh LzEvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCX9eEAwQC uRKgMA0GCSqGSIb3DQEBCwUAA4IBAQAd1EpmBQli9Ej/2Qwh8Y3R9F/j/pGt/aKA 9lykplqyjFJAOdOlhW334TExCtnwTIHj8cSBnBcYlAs7EaN7rgg1J4rhr0loONSg 2aQbEkAnHsga/d/dpLqarUthyPUAziG4dpiiS55f8eBj2IAnVGQKAQbcFjDOD0OK kitmZGgKvvCO26llsyTJrpSAzhMvAgPLGm0v0suu/OoZ8NqKUalgPSLCayHIs4DL 0hUQE9KuWSNqFRD4Ls1BIeYJzZF6OFmyZapUYwkZlmhCJFu1o4vDRm25DkSVnICR ALm9kW0EK97V0IUft92k0K1JXQRImplLasNlIgnf7FrayBPSdlFU -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:50 2026 by rpki-client