This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/uSr1yIrAzCz2O7l9EFFpJ1IdM7A.roa File: uSr1yIrAzCz2O7l9EFFpJ1IdM7A.roa (raw, json) Hash identifier: 2JNNqAz8LguyYvZQxdaeLL3oFCalZa88Rp3mN9dpy5w= Subject key identifier: B9:2A:F5:C8:8A:C0:CC:2C:F6:3B:B9:7D:10:51:69:27:52:1D:33:B0 Certificate issuer: /CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188 Certificate serial: 019B7C80B9E24B1C196272856E69D7A66F01 Authority key identifier: E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/uSr1yIrAzCz2O7l9EFFpJ1IdM7A.roa Signing time: Fri 02 Jan 2026 02:19:29 +0000 ROA not before: Fri 02 Jan 2026 02:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 194.147.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.mft rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b9:e2:4b:1c:19:62:72:85:6e:69:d7:a6:6f:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188 Validity Not Before: Jan 2 02:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b92af5c88ac0cc2cf63bb97d10516927521d33b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9c:19:8c:c0:21:7d:0c:99:e3:41:36:b9:98: 34:c4:81:90:5f:23:dc:8a:5a:d6:94:e9:37:c0:c7: d3:fe:3a:86:e1:07:f6:6c:e5:1a:d6:2d:80:a4:04: 0c:53:19:b2:e0:e2:8d:80:dc:94:95:f0:6f:fc:9d: d3:ca:15:58:d1:7e:0b:7e:cb:85:62:15:2b:8f:66: 38:56:ee:b8:9c:56:d6:a1:d6:68:d9:52:49:5e:2f: e1:0e:0b:1c:1f:5d:1e:69:80:88:45:8a:d5:9e:ce: 0c:50:63:4a:58:61:7e:b4:9c:e8:54:05:a1:15:e4: 14:fa:8d:07:38:41:d5:45:c2:1e:c1:13:96:18:87: 0c:d5:26:fc:53:8b:11:81:25:c2:1d:46:0c:06:c2: 35:28:e5:7c:85:a8:a0:95:5f:a0:22:27:67:77:f4: 6d:a1:83:a6:7c:41:9a:2b:3e:86:db:dc:f3:e7:da: 92:19:81:4a:b5:15:0e:47:70:43:86:a2:f3:4e:a9: 07:e3:94:d1:2d:46:5c:28:88:65:ac:d1:af:1f:26: 0b:f5:2d:2d:a9:80:68:27:d6:90:85:e4:b4:97:01: 46:ba:2a:82:97:ce:5e:53:71:dd:76:3e:a9:04:3f: 67:fb:ce:c4:e4:19:50:01:ec:c7:74:a6:8e:ca:d4: d8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:2A:F5:C8:8A:C0:CC:2C:F6:3B:B9:7D:10:51:69:27:52:1D:33:B0 X509v3 Authority Key Identifier: keyid:E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/uSr1yIrAzCz2O7l9EFFpJ1IdM7A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.147.112.0/24 Signature Algorithm: sha256WithRSAEncryption 89:83:54:12:df:e1:0f:99:e2:dd:77:e4:32:a2:6e:cf:46:fc: 60:bb:c7:32:d2:c8:3a:0d:70:d6:13:ff:0e:81:0d:9c:db:3a: 3a:7f:68:fe:5e:cf:7d:ea:fa:03:95:b9:ea:b2:ee:36:39:a3: c8:8d:48:2c:ac:0b:a2:d2:b1:57:6f:2d:a8:15:49:8b:ef:86: 65:29:94:f8:12:ed:22:49:78:97:e9:83:51:43:88:93:37:d1: d3:ab:83:c7:ef:e1:1f:19:67:eb:94:e3:86:32:14:04:38:41: 23:88:19:e2:6e:b4:64:63:6a:e5:7c:4a:95:71:d5:88:40:07: 3c:f1:fa:60:3d:90:3b:ed:ec:6d:f1:c9:e8:79:73:1e:b8:da: 9c:e9:7c:81:0a:2b:7f:42:b4:75:6c:d9:d2:9f:f6:fc:f7:4a: f6:d2:87:ff:c7:84:37:ad:b5:c7:e2:bd:25:bb:1e:b7:73:f0: 74:4d:0e:18:3e:67:1c:08:9f:61:f3:db:ed:46:ed:e4:50:32: d8:c0:95:64:7e:37:7d:9e:a3:a1:25:0e:09:a4:10:c5:d3:ef: 86:4f:5f:06:a9:21:40:e5:df:6d:bd:77:13:11:f1:34:5f:01: 60:fe:3f:bd:24:f2:b7:75:28:ad:23:16:01:a1:53:dd:1a:38: 00:75:7a:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gLniSxwZYnKFbmnXpm8BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5YWNjZmQyMWFiZDdmZTNmYTBkNmJiMzFkZjQ4MjBiZmI1 YTQxODgwHhcNMjYwMTAyMDIxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTJhZjVjODhhYzBjYzJjZjYzYmI5N2QxMDUxNjkyNzUyMWQzM2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15wZjMAhfQyZ40E2uZg0xIGQXyPc ilrWlOk3wMfT/jqG4Qf2bOUa1i2ApAQMUxmy4OKNgNyUlfBv/J3TyhVY0X4LfsuF YhUrj2Y4Vu64nFbWodZo2VJJXi/hDgscH10eaYCIRYrVns4MUGNKWGF+tJzoVAWh FeQU+o0HOEHVRcIewROWGIcM1Sb8U4sRgSXCHUYMBsI1KOV8haiglV+gIidnd/Rt oYOmfEGaKz6G29zz59qSGYFKtRUOR3BDhqLzTqkH45TRLUZcKIhlrNGvHyYL9S0t qYBoJ9aQheS0lwFGuiqCl85eU3Hddj6pBD9n+87E5BlQAezHdKaOytTYAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLkq9ciKwMws9ju5fRBRaSdSHTOwMB8GA1UdIwQY MBaAFOmsz9IavX/j+g1rsx30ggv7WkGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmF6UDBocTlmLVA2RFd1ekhmU0NDX3RhUVlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC82ZjI4ODYtMmZmNy00MGIwLTk2NzMt NzViNjg0Zjg5MGI0LzEvdVNyMXlJckF6Q3oyTzdsOUVGRnBKMUlkTTdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC82ZjI4ODYtMmZmNy00MGIwLTk2NzMtNzViNjg0Zjg5MGI0 LzEvNmF6UDBocTlmLVA2RFd1ekhmU0NDX3RhUVlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpNwMA0G CSqGSIb3DQEBCwUAA4IBAQCJg1QS3+EPmeLdd+Qyom7PRvxgu8cy0sg6DXDWE/8O gQ2c2zo6f2j+Xs996voDlbnqsu42OaPIjUgsrAui0rFXby2oFUmL74ZlKZT4Eu0i SXiX6YNRQ4iTN9HTq4PH7+EfGWfrlOOGMhQEOEEjiBnibrRkY2rlfEqVcdWIQAc8 8fpgPZA77ext8cnoeXMeuNqc6XyBCit/QrR1bNnSn/b890r20of/x4Q3rbXH4r0l ux63c/B0TQ4YPmccCJ9h89vtRu3kUDLYwJVkfjd9nqOhJQ4JpBDF0++GT18GqSFA 5d9tvXcTEfE0XwFg/j+9JPK3dSitIxYBoVPdGjgAdXqs -----END CERTIFICATE-----Generated at Mon Jan 26 02:08:08 2026 by rpki-client