This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/UhbmNbA2hwd3CclD7uA5e7VB30s.roa File: UhbmNbA2hwd3CclD7uA5e7VB30s.roa (raw, json) Hash identifier: juSkCYLLU3kVaC1Dq0hdQw2DrlMO0olfzSo1w3Y2IAk= Subject key identifier: 52:16:E6:35:B0:36:87:07:77:09:C9:43:EE:E0:39:7B:B5:41:DF:4B Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108 Certificate serial: 019B797EA40098C23F6474FEF4E84E42928A Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/UhbmNbA2hwd3CclD7uA5e7VB30s.roa Signing time: Thu 01 Jan 2026 12:18:21 +0000 ROA not before: Thu 01 Jan 2026 12:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209980 IP address blocks: 193.220.160.0/24 maxlen: 24 193.220.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a4:00:98:c2:3f:64:74:fe:f4:e8:4e:42:92:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896a82a725ed22bb46847ae568912078de25c108 Validity Not Before: Jan 1 12:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5216e635b03687077709c943eee0397bb541df4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:75:24:78:57:57:04:80:79:4e:a3:ab:f7:f3: ad:0f:cf:cd:9b:c9:df:1a:da:28:82:a5:50:a4:a1: f5:15:ad:d5:6c:48:48:15:e0:2b:ed:f8:e0:64:ee: ba:bc:42:79:3e:ee:2a:eb:9e:89:cf:06:d1:59:ea: 29:88:a3:94:fe:84:94:bc:67:54:a4:54:70:fe:63: 39:e3:b6:67:be:d8:c9:cb:ff:a4:3f:15:d2:df:fc: 65:98:00:9d:00:2e:33:f4:78:9b:31:a1:cf:51:aa: 98:72:c4:95:f4:e7:36:5e:cd:51:a7:43:3f:d1:d3: ce:84:f6:23:e6:99:8c:52:3f:bb:67:f9:d3:c6:62: 64:37:89:c3:16:cf:65:81:84:9e:5b:f0:89:49:32: 15:bc:c3:ec:b8:2a:f0:29:7c:74:46:8d:50:ad:a0: df:4a:58:8b:b7:ff:b8:8d:7e:af:37:d3:5f:a8:09: 23:0b:17:79:a5:06:fa:89:7c:c9:e2:3c:00:dc:0b: 16:d5:7b:5a:53:30:44:b3:7e:0f:58:84:a0:9c:f6: cd:d9:bd:48:4d:7d:64:97:c9:d9:30:fd:ab:23:7a: cc:ba:a9:e1:46:60:85:79:86:10:6a:23:a7:80:a9: 3b:5e:e1:8a:cf:9e:18:99:af:58:67:43:64:df:ce: 84:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:16:E6:35:B0:36:87:07:77:09:C9:43:EE:E0:39:7B:B5:41:DF:4B X509v3 Authority Key Identifier: keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/UhbmNbA2hwd3CclD7uA5e7VB30s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.220.160.0/23 Signature Algorithm: sha256WithRSAEncryption 7b:01:43:17:86:f9:c5:45:fd:79:d8:f3:78:b5:3f:56:a8:07: 69:7e:38:34:a6:cc:41:9b:be:bf:26:43:3b:63:5b:c1:9c:ef: e8:b7:94:68:a2:82:c5:de:7f:96:91:88:42:93:1d:a7:d2:7e: 79:ca:77:89:1c:33:f1:cd:e1:e6:a8:f6:aa:3a:66:3d:bf:0b: 02:b8:99:23:b3:3b:24:ab:fd:ba:0b:22:72:7e:86:aa:1d:ce: 21:29:b3:b4:09:fb:2d:fe:ca:b1:5c:0e:7f:07:2f:8d:29:9d: a7:d8:55:2e:01:04:9a:68:eb:b9:f2:32:91:8c:88:93:06:c1: 8e:cf:3e:eb:ea:ab:07:31:ba:a7:be:ae:c7:29:af:cd:97:0f: 26:1b:47:79:23:dd:aa:0d:a9:7e:60:08:a4:6a:0c:34:af:8d: 05:b8:63:d1:71:b9:66:77:4c:16:fd:a0:85:13:77:9f:8b:6b: 4b:82:36:c8:4c:64:31:ea:94:1b:36:de:f5:78:67:30:85:41: 8c:0b:b2:e3:a1:b4:83:81:1e:e7:77:eb:e8:f7:22:6d:e6:30: b4:f4:88:cf:3e:34:56:eb:0f:74:a1:f8:9b:5f:34:ae:bc:93: d7:e7:4a:ae:ee:a3:3d:db:1d:ef:de:d5:ba:22:1a:e1:61:0f: 6b:4c:ed:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fqQAmMI/ZHT+9OhOQpKKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmE4MmE3MjVlZDIyYmI0Njg0N2FlNTY4OTEyMDc4ZGUy NWMxMDgwHhcNMjYwMTAxMTIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjE2ZTYzNWIwMzY4NzA3NzcwOWM5NDNlZWUwMzk3YmI1NDFkZjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnUkeFdXBIB5TqOr9/OtD8/Nm8nf GtoogqVQpKH1Fa3VbEhIFeAr7fjgZO66vEJ5Pu4q656JzwbRWeopiKOU/oSUvGdU pFRw/mM547ZnvtjJy/+kPxXS3/xlmACdAC4z9HibMaHPUaqYcsSV9Oc2Xs1Rp0M/ 0dPOhPYj5pmMUj+7Z/nTxmJkN4nDFs9lgYSeW/CJSTIVvMPsuCrwKXx0Ro1QraDf SliLt/+4jX6vN9NfqAkjCxd5pQb6iXzJ4jwA3AsW1XtaUzBEs34PWISgnPbN2b1I TX1kl8nZMP2rI3rMuqnhRmCFeYYQaiOngKk7XuGKz54Yma9YZ0Nk386ERQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFIW5jWwNocHdwnJQ+7gOXu1Qd9LMB8GA1UdIwQY MBaAFIlqgqcl7SK7RoR65WiRIHjeJcEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUt MDQwMTI3MTAyMjA5LzEvVWhibU5iQTJod2QzQ2NsRDd1QTVlN1ZCMzBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUtMDQwMTI3MTAyMjA5 LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwdygMA0G CSqGSIb3DQEBCwUAA4IBAQB7AUMXhvnFRf152PN4tT9WqAdpfjg0psxBm76/JkM7 Y1vBnO/ot5RoooLF3n+WkYhCkx2n0n55yneJHDPxzeHmqPaqOmY9vwsCuJkjszsk q/26CyJyfoaqHc4hKbO0Cfst/sqxXA5/By+NKZ2n2FUuAQSaaOu58jKRjIiTBsGO zz7r6qsHMbqnvq7HKa/Nlw8mG0d5I92qDal+YAikagw0r40FuGPRcblmd0wW/aCF E3efi2tLgjbITGQx6pQbNt71eGcwhUGMC7LjobSDgR7nd+vo9yJt5jC09IjPPjRW 6w90ofibXzSuvJPX50qu7qM92x3v3tW6IhrhYQ9rTO2R -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:21 2026 by rpki-client