This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/uCDv4tjf_h_XDIF_3hTuZK1APmE.roa File: uCDv4tjf_h_XDIF_3hTuZK1APmE.roa (raw, json) Hash identifier: l2vRueQ3llfeI+w0R0a+sfT68tb5dUjF3OoLYl3dC8A= Subject key identifier: B8:20:EF:E2:D8:DF:FE:1F:D7:0C:81:7F:DE:14:EE:64:AD:40:3E:61 Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C6A5B07B6D03FA7651F338AAB6171C Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/uCDv4tjf_h_XDIF_3hTuZK1APmE.roa Signing time: Thu 01 Jan 2026 04:17:45 +0000 ROA not before: Thu 01 Jan 2026 04:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60931 IP address blocks: 46.8.80.0/20 maxlen: 20 46.8.80.0/21 maxlen: 21 46.8.80.0/22 maxlen: 22 46.8.84.0/22 maxlen: 22 46.8.88.0/21 maxlen: 21 46.8.88.0/22 maxlen: 22 46.8.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a5:b0:7b:6d:03:fa:76:51:f3:38:aa:b6:17:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b820efe2d8dffe1fd70c817fde14ee64ad403e61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a8:52:32:7d:99:ea:7a:9d:50:f1:95:14:83: 5f:c0:93:18:38:b7:f1:e7:8f:17:ed:3c:ac:fa:8c: 24:48:05:f5:08:95:92:24:e1:75:23:c1:41:db:5a: b9:ad:65:1f:f2:26:10:b4:a7:9e:d3:9d:21:c0:91: f4:08:e6:d3:27:f2:e0:3a:21:8d:4c:55:9d:40:e1: c0:36:e4:a7:4a:dc:34:b3:16:db:7f:43:c7:d3:e5: 81:11:3b:61:4a:7c:b2:bf:36:ae:82:eb:e1:b6:0f: d8:6e:7a:c5:6e:58:b2:10:18:6a:2c:60:d5:d3:45: fb:73:70:68:7e:ea:b5:9c:af:1a:f1:c1:a4:4c:a5: df:15:eb:87:29:c3:ab:e8:9c:60:fb:48:55:9e:c0: 97:53:2d:0c:0f:57:b8:05:37:3d:40:71:e9:b5:4d: 7d:cd:2b:dc:ed:be:85:9a:58:4b:3f:36:33:4c:2b: 05:45:71:2d:e6:c5:85:6c:87:f9:85:3b:d3:1a:9f: f3:cb:af:d8:0e:b7:1b:42:03:96:6e:93:f7:8f:74: 65:8b:67:a3:91:d1:5b:c5:59:1c:d7:4d:cc:96:a5: 25:b7:10:30:b0:1f:dd:da:fe:65:cf:04:ff:ef:c0: 1f:79:b3:95:d0:57:08:fb:c3:e4:a0:f8:34:7f:97: 18:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:20:EF:E2:D8:DF:FE:1F:D7:0C:81:7F:DE:14:EE:64:AD:40:3E:61 X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/uCDv4tjf_h_XDIF_3hTuZK1APmE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.8.80.0/20 Signature Algorithm: sha256WithRSAEncryption 81:fd:16:36:a7:b4:82:2a:04:2d:ca:34:a9:d6:6c:0c:4d:8c: 5a:25:c7:33:d9:d9:f8:69:33:26:97:a5:a9:04:f3:17:3c:78: 9c:eb:d5:2f:35:42:51:b5:fa:fa:e5:9a:75:52:0c:fb:ca:77: 32:33:6a:eb:9d:e4:6c:66:aa:51:7c:c8:39:e6:06:c9:97:3c: 08:86:d7:55:1e:7c:d6:a5:02:02:ef:ba:b6:47:3d:07:73:63: 87:7a:ca:fd:e7:2e:54:3e:e6:02:1f:67:44:a2:59:74:0d:73: 3a:df:42:b9:2e:32:88:38:7d:00:28:f4:11:36:a1:ba:fe:bc: c4:a4:bc:f5:a3:cf:65:78:01:d9:fa:07:a9:3a:8e:05:7c:05: 6d:7e:b7:68:e3:39:58:87:0d:58:35:1b:d2:3b:02:4a:c5:f4: bf:47:6b:2b:ff:50:e6:fe:87:34:0d:4c:9b:59:66:73:18:27: 3e:e1:36:42:a9:42:9f:d6:5b:ad:5a:41:93:e9:26:ca:92:ab: 6c:97:ec:19:01:04:30:30:ee:48:65:6e:49:ee:c2:af:c7:a7: ab:de:88:c6:f3:36:b5:b0:e8:30:1b:b3:61:95:73:07:43:84: 69:43:38:a3:ec:b9:49:eb:7f:22:d7:db:56:99:64:55:2c:47: 08:a8:57:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xqWwe20D+nZR8ziqthccMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODIwZWZlMmQ4ZGZmZTFmZDcwYzgxN2ZkZTE0ZWU2NGFkNDAzZTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKhSMn2Z6nqdUPGVFINfwJMYOLfx 548X7Tys+owkSAX1CJWSJOF1I8FB21q5rWUf8iYQtKee050hwJH0CObTJ/LgOiGN TFWdQOHANuSnStw0sxbbf0PH0+WBETthSnyyvzauguvhtg/YbnrFbliyEBhqLGDV 00X7c3Bofuq1nK8a8cGkTKXfFeuHKcOr6Jxg+0hVnsCXUy0MD1e4BTc9QHHptU19 zSvc7b6FmlhLPzYzTCsFRXEt5sWFbIf5hTvTGp/zy6/YDrcbQgOWbpP3j3Rli2ej kdFbxVkc103MlqUltxAwsB/d2v5lzwT/78AfebOV0FcI+8PkoPg0f5cY1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLgg7+LY3/4f1wyBf94U7mStQD5hMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvdUNEdjR0amZfaF9YRElGXzNoVHVaSzFBUG1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELghQMA0G CSqGSIb3DQEBCwUAA4IBAQCB/RY2p7SCKgQtyjSp1mwMTYxaJccz2dn4aTMml6Wp BPMXPHic69UvNUJRtfr65Zp1Ugz7yncyM2rrneRsZqpRfMg55gbJlzwIhtdVHnzW pQIC77q2Rz0Hc2OHesr95y5UPuYCH2dEoll0DXM630K5LjKIOH0AKPQRNqG6/rzE pLz1o89leAHZ+gepOo4FfAVtfrdo4zlYhw1YNRvSOwJKxfS/R2sr/1Dm/oc0DUyb WWZzGCc+4TZCqUKf1lutWkGT6SbKkqtsl+wZAQQwMO5IZW5J7sKvx6er3ojG8za1 sOgwG7NhlXMHQ4RpQzij7LlJ638i19tWmWRVLEcIqFdI -----END CERTIFICATE-----Generated at Sun Jan 25 20:58:35 2026 by rpki-client