This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uOqK6jTBOwcKwcb5nzSxSceu3i4.roa File: uOqK6jTBOwcKwcb5nzSxSceu3i4.roa (raw, json) Hash identifier: n6LIHJQmjQAdZerUGGRcnkdiOP7Xl6BTj+aErElWY5g= Subject key identifier: B8:EA:8A:EA:34:C1:3B:07:0A:C1:C6:F9:9F:34:B1:49:C7:AE:DE:2E Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84E46AAD9400D27AE325DA24832BCA Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uOqK6jTBOwcKwcb5nzSxSceu3i4.roa Signing time: Fri 02 Jan 2026 16:22:54 +0000 ROA not before: Fri 02 Jan 2026 16:22:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62069 IP address blocks: 31.148.5.0/24 maxlen: 24 92.38.3.0/24 maxlen: 24 95.47.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:e4:6a:ad:94:00:d2:7a:e3:25:da:24:83:2b:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8ea8aea34c13b070ac1c6f99f34b149c7aede2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:29:0b:12:89:99:76:23:66:97:30:21:fe:f5: 97:d5:01:ca:c6:ab:52:4b:a8:f6:a6:b0:32:f7:d5: 81:80:0f:b3:c8:a2:9d:e1:29:31:df:36:8a:a4:97: 42:f9:35:61:01:82:9b:59:cc:68:11:42:77:a1:ad: 90:97:fb:8e:0e:46:8d:67:76:84:b4:e1:d9:01:00: 52:3b:b2:1e:c4:34:77:7a:38:b1:6d:b7:a6:03:21: 32:16:c0:35:90:6e:a8:d0:37:33:9b:f7:1e:d1:34: 72:2e:a8:a7:fe:f7:ab:5d:6a:9a:18:e5:38:8a:9a: 53:0d:9e:b6:9c:d5:f9:fe:c6:66:37:00:7e:9f:3c: a8:58:fe:e9:56:4e:e7:4b:95:d6:05:21:81:4b:52: cb:f9:27:a2:76:d3:05:e9:95:3a:19:5b:fe:65:ed: 4c:cf:e0:d7:cf:15:8e:39:7d:56:0c:c5:ab:7c:3a: 36:d1:3d:8d:4c:44:89:0d:26:cd:36:3e:07:59:7a: 65:5a:82:8d:e5:c4:cb:65:13:ce:46:ee:05:c0:11: 22:47:f0:a0:20:ed:b2:a2:49:f9:ee:2a:78:28:40: 96:4d:de:05:09:bc:f1:82:03:30:e4:85:c1:2e:6f: 1c:55:4a:4d:a8:6a:92:55:cd:eb:e3:6d:10:1e:20: 1e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:EA:8A:EA:34:C1:3B:07:0A:C1:C6:F9:9F:34:B1:49:C7:AE:DE:2E X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uOqK6jTBOwcKwcb5nzSxSceu3i4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.5.0/24 92.38.3.0/24 95.47.242.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:04:b3:ec:00:0f:3e:92:f7:07:fe:15:8b:39:25:1a:38:b0: b6:34:76:04:4e:df:a1:9a:90:2e:c2:60:66:c1:a0:7b:d9:26: 51:d9:71:38:fa:ad:a3:eb:d2:75:db:1f:73:5f:15:79:44:7b: 0f:c4:55:55:35:8d:62:09:67:b8:e6:a0:f9:57:14:fe:98:56: 69:7f:9e:c7:35:bf:c7:ab:d5:2a:0a:eb:95:05:2c:e7:99:5c: 76:8b:1c:fe:04:eb:6d:9e:29:02:36:8d:cc:48:f3:6f:77:f1: 03:9d:cf:6a:be:91:0f:37:ea:8c:60:ae:2e:db:e5:e2:d2:26: 1c:ce:e2:5f:fa:9a:6a:fa:0a:1d:f5:1b:93:d1:87:fd:64:d2: 56:41:64:5a:0a:39:e8:7b:87:7f:0f:e2:45:13:85:49:3d:63: 9e:19:ba:48:74:13:6d:6b:47:88:06:24:6c:5f:39:b6:d1:e4: cc:48:e8:68:19:27:0a:56:39:95:0c:2b:f7:46:e6:9a:04:07: 73:65:44:8b:f4:b6:16:e9:19:04:b4:eb:e0:d9:33:17:a0:5f: e5:19:ad:fe:b3:94:5a:4e:69:e9:93:59:d1:01:fe:15:9b:8d: ad:56:30:1f:f3:f7:76:87:ed:ae:98:7d:6c:be:12:3c:12:40: b7:d3:8d:3c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hORqrZQA0nrjJdokgyvKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGVhOGFlYTM0YzEzYjA3MGFjMWM2Zjk5ZjM0YjE0OWM3YWVkZTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvikLEomZdiNmlzAh/vWX1QHKxqtS S6j2prAy99WBgA+zyKKd4Skx3zaKpJdC+TVhAYKbWcxoEUJ3oa2Ql/uODkaNZ3aE tOHZAQBSO7IexDR3ejixbbemAyEyFsA1kG6o0Dczm/ce0TRyLqin/verXWqaGOU4 ippTDZ62nNX5/sZmNwB+nzyoWP7pVk7nS5XWBSGBS1LL+SeidtMF6ZU6GVv+Ze1M z+DXzxWOOX1WDMWrfDo20T2NTESJDSbNNj4HWXplWoKN5cTLZRPORu4FwBEiR/Cg IO2yokn57ip4KECWTd4FCbzxggMw5IXBLm8cVUpNqGqSVc3r420QHiAeAQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLjqiuo0wTsHCsHG+Z80sUnHrt4uMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvdU9xSzZqVEJPd2NLd2NiNW56U3hTY2V1M2k0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAH5QFAwQA XCYDAwQAXy/yMA0GCSqGSIb3DQEBCwUAA4IBAQCKBLPsAA8+kvcH/hWLOSUaOLC2 NHYETt+hmpAuwmBmwaB72SZR2XE4+q2j69J12x9zXxV5RHsPxFVVNY1iCWe45qD5 VxT+mFZpf57HNb/Hq9UqCuuVBSznmVx2ixz+BOttnikCNo3MSPNvd/EDnc9qvpEP N+qMYK4u2+Xi0iYczuJf+ppq+god9RuT0Yf9ZNJWQWRaCjnoe4d/D+JFE4VJPWOe GbpIdBNta0eIBiRsXzm20eTMSOhoGScKVjmVDCv3RuaaBAdzZUSL9LYW6RkEtOvg 2TMXoF/lGa3+s5RaTmnpk1nRAf4Vm42tVjAf8/d2h+2umH1svhI8EkC30408 -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:38 2026 by rpki-client