This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/uKuuYWmjqM2xupAEXFGSa3h-MaE.roa File: uKuuYWmjqM2xupAEXFGSa3h-MaE.roa (raw, json) Hash identifier: FAvKw/d08SYAWcoVLx+8l9dFyUcn/GaKHVNcCMbJaSs= Subject key identifier: B8:AB:AE:61:69:A3:A8:CD:B1:BA:90:04:5C:51:92:6B:78:7E:31:A1 Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414 Certificate serial: 019B76EB0ABB95CCD2DDC2D08B5FC067A36A Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/uKuuYWmjqM2xupAEXFGSa3h-MaE.roa Signing time: Thu 01 Jan 2026 00:17:53 +0000 ROA not before: Thu 01 Jan 2026 00:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396426 IP address blocks: 185.101.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:0a:bb:95:cc:d2:dd:c2:d0:8b:5f:c0:67:a3:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414 Validity Not Before: Jan 1 00:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8abae6169a3a8cdb1ba90045c51926b787e31a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0d:48:4b:3e:bd:2a:1b:3f:b0:da:56:2d:39: b6:1e:15:11:68:51:8f:69:33:03:47:d8:04:ce:04: 40:7f:4c:7f:b6:59:dc:51:9e:26:d2:d4:c9:74:b8: fd:77:b3:fe:0e:3e:a4:b5:3c:4f:71:ec:ac:b4:11: fe:99:bb:c5:cd:6d:91:0e:5c:81:db:1d:36:5f:61: 8c:2f:66:e9:46:f3:56:33:87:f9:e1:a5:f0:78:e1: 22:16:fe:92:aa:b8:dd:6a:5c:40:f3:06:59:5e:4c: bb:10:09:40:c2:e1:3f:95:7c:d9:26:97:c0:a5:c4: 1b:52:22:03:d8:fa:d2:40:05:bf:76:7d:70:42:83: 9b:42:70:2c:62:ea:c6:88:d2:9f:3b:2a:8c:fa:81: 87:0e:cd:48:24:14:56:e2:07:f0:9b:ab:77:ba:8a: 9d:9d:ba:01:a7:f8:ab:4e:2d:1a:2e:fa:0c:49:b7: d5:2e:07:b1:b7:74:76:79:84:02:b6:00:75:59:2a: 42:56:76:f5:44:d1:f7:33:a7:8a:99:20:1a:d8:53: f0:cf:52:af:4a:9e:9d:e1:45:72:62:91:44:eb:83: a5:a2:72:f9:18:43:61:c9:50:2d:62:04:3a:51:20: ce:ec:cb:d2:86:7f:ed:d4:94:f6:f9:68:09:c2:c1: c2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AB:AE:61:69:A3:A8:CD:B1:BA:90:04:5C:51:92:6B:78:7E:31:A1 X509v3 Authority Key Identifier: keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/uKuuYWmjqM2xupAEXFGSa3h-MaE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.101.22.0/24 Signature Algorithm: sha256WithRSAEncryption 59:62:9f:4f:fb:b9:86:3c:6b:36:5f:27:95:ef:ea:f1:c4:16: 22:82:00:c7:c7:60:a1:16:b7:7f:28:ad:1f:f1:58:6b:31:4c: 7b:bd:dd:6f:a5:c3:dc:0b:9e:61:b5:34:a2:ba:23:aa:5d:c5: ea:e8:68:5b:18:55:23:b2:37:e8:3a:a6:5f:cc:42:19:69:45: 56:35:e2:c9:ad:db:09:15:69:72:70:e2:24:05:d0:22:4f:71: 69:5a:b1:7f:bb:bd:66:e6:de:da:99:ef:73:f5:ad:41:13:3e: 4f:db:63:46:c0:eb:b5:17:c3:88:b1:1c:ad:ec:8f:a2:1c:90: 6d:1f:5b:58:6a:f8:e8:22:f8:c0:83:b2:df:8a:9e:d3:59:93: 9c:7a:7f:8e:c2:1b:04:10:9a:e8:c3:4d:f3:c9:1d:13:4c:1e: c3:a1:1b:06:09:fd:74:6f:59:f0:75:f1:e9:c0:24:07:b4:bf: 6a:7b:7b:c3:ac:cc:8c:91:36:30:7e:e5:2c:00:32:75:5d:d8: ac:51:b7:91:c7:df:a4:c5:84:8f:f4:2c:31:c7:cc:92:f3:c5: f3:e3:80:e0:8f:b5:a4:2a:73:86:9e:7e:65:77:e3:53:9c:de: 12:67:f9:b5:c3:96:5b:ae:e2:9b:a4:45:64:25:2f:77:64:e1: 84:10:e6:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26wq7lczS3cLQi1/AZ6NqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGUyNzI5YjE3MzY5ODkwYTE1MTJmNjQzY2QwOGU0YmEy ZmY0MTQwHhcNMjYwMTAxMDAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGFiYWU2MTY5YTNhOGNkYjFiYTkwMDQ1YzUxOTI2Yjc4N2UzMWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ1ISz69Khs/sNpWLTm2HhURaFGP aTMDR9gEzgRAf0x/tlncUZ4m0tTJdLj9d7P+Dj6ktTxPceystBH+mbvFzW2RDlyB 2x02X2GML2bpRvNWM4f54aXweOEiFv6SqrjdalxA8wZZXky7EAlAwuE/lXzZJpfA pcQbUiID2PrSQAW/dn1wQoObQnAsYurGiNKfOyqM+oGHDs1IJBRW4gfwm6t3uoqd nboBp/irTi0aLvoMSbfVLgext3R2eYQCtgB1WSpCVnb1RNH3M6eKmSAa2FPwz1Kv Sp6d4UVyYpFE64OlonL5GENhyVAtYgQ6USDO7MvShn/t1JT2+WgJwsHCcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLirrmFpo6jNsbqQBFxRkmt4fjGhMB8GA1UdIwQY MBaAFDdOJymxc2mJChUS9kPNCOS6L/QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYt Y2ZjNDZhNzZlYzc4LzEvdUt1dVlXbWpxTTJ4dXBBRVhGR1NhM2gtTWFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYtY2ZjNDZhNzZlYzc4 LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWUWMA0G CSqGSIb3DQEBCwUAA4IBAQBZYp9P+7mGPGs2XyeV7+rxxBYiggDHx2ChFrd/KK0f 8VhrMUx7vd1vpcPcC55htTSiuiOqXcXq6GhbGFUjsjfoOqZfzEIZaUVWNeLJrdsJ FWlycOIkBdAiT3FpWrF/u71m5t7ame9z9a1BEz5P22NGwOu1F8OIsRyt7I+iHJBt H1tYavjoIvjAg7Lfip7TWZOcen+OwhsEEJrow03zyR0TTB7DoRsGCf10b1nwdfHp wCQHtL9qe3vDrMyMkTYwfuUsADJ1XdisUbeRx9+kxYSP9Cwxx8yS88Xz44Dgj7Wk KnOGnn5ld+NTnN4SZ/m1w5ZbruKbpEVkJS93ZOGEEOYJ -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:50 2026 by rpki-client