This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/uPlVBkUpo1ExrOH-ryhMZzzg4VE.roa File: uPlVBkUpo1ExrOH-ryhMZzzg4VE.roa (raw, json) Hash identifier: i7u4A65jcZSKUSSb+jR2XNvvNO6njReiGIDIfrcj8i0= Subject key identifier: B8:F9:55:06:45:29:A3:51:31:AC:E1:FE:AF:28:4C:67:3C:E0:E1:51 Certificate issuer: /CN=e938f9182b7da44003591eeae2560f8451b3393a Certificate serial: 019B7FF2222649A2F55421569077AC484781 Authority key identifier: E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/uPlVBkUpo1ExrOH-ryhMZzzg4VE.roa Signing time: Fri 02 Jan 2026 18:22:13 +0000 ROA not before: Fri 02 Jan 2026 18:22:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48715 IP address blocks: 158.255.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.mft rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:22:26:49:a2:f5:54:21:56:90:77:ac:48:47:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e938f9182b7da44003591eeae2560f8451b3393a Validity Not Before: Jan 2 18:22:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8f955064529a35131ace1feaf284c673ce0e151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fe:dd:ed:19:3d:c6:2b:4f:53:32:b0:9d:10: f0:6c:b0:73:ea:6d:3d:ab:c5:8f:e6:cf:06:cb:b3: 4f:51:5c:85:e4:9d:e9:9b:a4:2a:da:47:36:97:e0: 41:c6:7f:45:77:96:5a:7c:6b:f6:ba:93:1d:56:8f: cb:37:45:67:f7:1a:bf:51:15:27:8b:0d:93:82:3a: 7f:95:ee:80:ee:9c:a2:c7:b7:1f:cd:f7:24:d1:22: 66:3a:73:51:bb:82:94:48:ff:8f:3e:f6:fb:47:91: 96:e6:e0:27:d4:db:de:79:2b:3c:e7:bf:b7:8f:ee: 42:93:36:c0:cf:71:1a:a3:03:6b:37:15:7b:82:53: 46:33:28:45:d5:cc:57:1b:5b:6d:a1:58:e8:65:3f: 28:e7:14:b5:10:36:be:f0:71:07:03:36:1e:85:2b: bb:5e:a3:a8:0b:97:ad:47:43:dc:26:f3:bd:a2:99: e6:77:ef:52:72:37:d9:2b:07:61:5c:30:fd:4b:9c: 35:16:93:11:bd:5f:f0:a7:76:3a:24:3c:2f:71:0e: b3:86:d7:0d:ec:3e:52:63:47:cc:91:b8:06:d9:66: 75:6f:8c:d7:30:7c:13:20:b5:4e:55:dc:46:88:29: 8b:53:fc:c8:16:1e:17:4b:45:26:07:40:26:eb:08: 5e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F9:55:06:45:29:A3:51:31:AC:E1:FE:AF:28:4C:67:3C:E0:E1:51 X509v3 Authority Key Identifier: keyid:E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/uPlVBkUpo1ExrOH-ryhMZzzg4VE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.255.78.0/24 Signature Algorithm: sha256WithRSAEncryption 76:98:db:60:05:5f:cf:74:68:12:9d:b1:4e:86:d4:b3:e1:d9: 67:b1:ab:c4:5f:94:89:70:41:f3:ab:3c:af:80:22:cd:42:dd: a4:cf:bb:dd:d0:c8:b4:79:db:46:34:2a:d7:36:d7:b0:53:ba: 8e:16:0f:b5:cf:b4:d1:ac:8e:2b:b8:d0:e4:75:d0:ed:09:f5: 5b:30:92:e8:60:22:33:bb:98:fa:21:29:10:2f:08:94:db:f8: 46:d4:b0:c3:2b:05:a5:df:0a:ca:5d:b9:89:26:17:ba:58:aa: 8b:7d:3a:dd:65:7c:55:b6:9e:2b:99:95:59:9f:d3:85:91:60: d6:65:71:14:63:5d:7f:59:c5:92:52:81:e3:77:02:30:71:08: e9:e9:c1:a6:80:c6:16:4c:30:ef:29:05:01:44:d2:e0:6c:85: 43:74:de:80:2d:b1:24:3c:8d:43:c6:15:e1:72:69:ac:db:75: b6:8b:26:3e:5a:6a:2b:44:2b:13:9a:41:52:b3:d8:29:45:51: bf:f2:9f:86:01:a1:1f:cf:c0:03:9d:92:9b:e8:b1:aa:05:9b: a7:8b:9a:ac:df:54:55:49:78:c4:3f:8e:2d:fb:f8:af:75:e9: 1a:3f:a8:d8:43:56:98:b7:3b:9a:74:70:e7:90:94:d8:a4:89: 96:d2:24:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8iImSaL1VCFWkHesSEeBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MzhmOTE4MmI3ZGE0NDAwMzU5MWVlYWUyNTYwZjg0NTFi MzM5M2EwHhcNMjYwMTAyMTgyMjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGY5NTUwNjQ1MjlhMzUxMzFhY2UxZmVhZjI4NGM2NzNjZTBlMTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkf7d7Rk9xitPUzKwnRDwbLBz6m09 q8WP5s8Gy7NPUVyF5J3pm6Qq2kc2l+BBxn9Fd5ZafGv2upMdVo/LN0Vn9xq/URUn iw2Tgjp/le6A7pyix7cfzfck0SJmOnNRu4KUSP+PPvb7R5GW5uAn1NveeSs857+3 j+5CkzbAz3EaowNrNxV7glNGMyhF1cxXG1ttoVjoZT8o5xS1EDa+8HEHAzYehSu7 XqOoC5etR0PcJvO9opnmd+9ScjfZKwdhXDD9S5w1FpMRvV/wp3Y6JDwvcQ6zhtcN 7D5SY0fMkbgG2WZ1b4zXMHwTILVOVdxGiCmLU/zIFh4XS0UmB0Am6wheEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLj5VQZFKaNRMazh/q8oTGc84OFRMB8GA1UdIwQY MBaAFOk4+RgrfaRAA1ke6uJWD4RRszk6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlRqNUdDdDlwRUFEV1I3cTRsWVBoRkd6T1RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9lYTk0MDItYmU0ZC00OWYzLTgxZmIt NGRmNzI4YzU4ZDE3LzEvdVBsVkJrVXBvMUV4ck9ILXJ5aE1aenpnNFZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9lYTk0MDItYmU0ZC00OWYzLTgxZmItNGRmNzI4YzU4ZDE3 LzEvNlRqNUdDdDlwRUFEV1I3cTRsWVBoRkd6T1RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnv9OMA0G CSqGSIb3DQEBCwUAA4IBAQB2mNtgBV/PdGgSnbFOhtSz4dlnsavEX5SJcEHzqzyv gCLNQt2kz7vd0Mi0edtGNCrXNtewU7qOFg+1z7TRrI4ruNDkddDtCfVbMJLoYCIz u5j6ISkQLwiU2/hG1LDDKwWl3wrKXbmJJhe6WKqLfTrdZXxVtp4rmZVZn9OFkWDW ZXEUY11/WcWSUoHjdwIwcQjp6cGmgMYWTDDvKQUBRNLgbIVDdN6ALbEkPI1DxhXh cmms23W2iyY+WmorRCsTmkFSs9gpRVG/8p+GAaEfz8ADnZKb6LGqBZuni5qs31RV SXjEP44t+/ivdekaP6jYQ1aYtzuadHDnkJTYpImW0iSh -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:18 2026 by rpki-client