This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/uCRrF5H6MO65ZSaMccf4F3ImvvI.roa File: uCRrF5H6MO65ZSaMccf4F3ImvvI.roa (raw, json) Hash identifier: wGlRyFIjCEhLLNtkuVs0yaGsRVeHljW+UCOqu6XTaik= Subject key identifier: B8:24:6B:17:91:FA:30:EE:B9:65:26:8C:71:C7:F8:17:72:26:BE:F2 Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d Certificate serial: 019B7AC82E2BB884BB6730258AD63DF0E811 Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/uCRrF5H6MO65ZSaMccf4F3ImvvI.roa Signing time: Thu 01 Jan 2026 18:18:17 +0000 ROA not before: Thu 01 Jan 2026 18:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199527 IP address blocks: 86.38.163.0/24 maxlen: 24 185.189.152.0/24 maxlen: 24 213.252.208.0/24 maxlen: 24 213.252.209.0/24 maxlen: 24 213.252.242.0/24 maxlen: 24 213.252.250.0/24 maxlen: 24 213.252.251.0/24 maxlen: 24 213.252.253.0/24 maxlen: 24 2a00:f501:a001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:2e:2b:b8:84:bb:67:30:25:8a:d6:3d:f0:e8:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d Validity Not Before: Jan 1 18:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8246b1791fa30eeb965268c71c7f8177226bef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:39:d0:e7:b8:c4:43:d1:93:71:8c:c5:4c:9e: f5:64:1d:00:2a:44:ff:69:7d:2a:b4:a4:7b:2a:0b: 88:f6:ac:0a:41:3b:ff:63:4e:3e:d8:a1:a2:7b:d7: f7:55:b9:dd:ac:21:64:28:e8:9a:f6:c9:20:1d:62: 2c:a6:85:4d:4d:ed:e7:84:8e:db:32:c0:46:9f:b6: d2:73:b9:38:6a:00:0d:a2:8a:b2:86:5f:9e:14:7b: b4:99:d5:55:1e:92:51:ea:af:79:52:6e:a5:ad:49: 10:f3:f9:00:51:f8:50:85:1f:db:f5:e1:32:27:7e: fc:81:5a:3e:6c:65:e8:64:b5:b0:8e:3b:e1:d7:c8: ef:48:5e:98:33:0f:0d:fc:c4:18:2c:3e:eb:36:9b: 80:f6:4e:de:58:6f:62:21:43:e9:74:ec:34:20:51: 1e:12:ec:5d:1b:fd:98:a9:ef:a7:2a:ec:66:ec:37: 30:3e:96:de:34:b2:20:ad:a0:68:51:11:73:46:5f: 8f:b4:50:8f:2a:b9:1e:fc:56:b3:34:9f:80:ef:05: a2:83:15:ec:0f:5c:0e:9e:c2:06:bb:3a:25:d4:92: b6:34:6c:b5:6f:8b:c1:50:a0:06:4e:5d:c7:af:e8: 1d:20:a1:7d:dc:ec:b9:7d:b9:32:57:85:ce:24:6f: a3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:24:6B:17:91:FA:30:EE:B9:65:26:8C:71:C7:F8:17:72:26:BE:F2 X509v3 Authority Key Identifier: keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/uCRrF5H6MO65ZSaMccf4F3ImvvI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.38.163.0/24 185.189.152.0/24 213.252.208.0/23 213.252.242.0/24 213.252.250.0/23 213.252.253.0/24 IPv6: 2a00:f501:a001::/48 Signature Algorithm: sha256WithRSAEncryption 4b:fc:a7:7a:bc:88:55:c4:4b:48:80:fe:f1:e4:e2:63:f2:20: bb:de:75:3e:6e:d1:cf:e5:89:f1:0a:63:b4:26:3e:49:0d:e4: e4:91:8a:d6:bd:b9:1b:9c:07:30:b0:cb:e3:12:04:93:bf:90: c6:85:5f:9d:d2:d5:5a:02:51:bf:55:e0:bf:f0:59:0e:0b:79: c6:09:a6:4c:12:70:c3:8d:2e:1c:33:bb:90:29:e3:b4:62:7a: 24:d7:a1:35:84:5a:03:61:cb:bf:30:f5:01:53:46:15:7f:52: 4f:4d:c9:32:63:29:64:69:55:ab:52:4b:70:84:15:bd:19:5f: d4:db:80:fa:21:8c:00:b8:e1:67:e6:08:60:ed:35:fc:65:fe: 2e:ad:a7:27:8c:26:fb:fa:56:09:6e:de:a4:5d:a8:f1:90:11: a0:a1:d7:ef:24:dd:81:69:54:b9:f9:bf:aa:75:18:3e:55:aa: dc:14:5c:86:fa:80:4a:a5:04:a1:17:e1:47:90:d7:be:8f:af: 07:cf:f4:cc:39:af:19:a3:d7:3b:84:a6:b5:c2:9e:5f:25:4e: 6b:2d:20:ec:c0:f3:64:d4:31:66:d2:2a:9b:1b:4c:f2:9d:6b: d8:f9:fa:5b:27:a3:ba:6a:a2:07:c2:23:6a:ad:cc:35:21:6a: 07:c8:80:2f -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt6yC4ruIS7ZzAlitY98OgRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3 MTE4MGQwHhcNMjYwMTAxMTgxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODI0NmIxNzkxZmEzMGVlYjk2NTI2OGM3MWM3ZjgxNzcyMjZiZWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjnQ57jEQ9GTcYzFTJ71ZB0AKkT/ aX0qtKR7KguI9qwKQTv/Y04+2KGie9f3VbndrCFkKOia9skgHWIspoVNTe3nhI7b MsBGn7bSc7k4agANooqyhl+eFHu0mdVVHpJR6q95Um6lrUkQ8/kAUfhQhR/b9eEy J378gVo+bGXoZLWwjjvh18jvSF6YMw8N/MQYLD7rNpuA9k7eWG9iIUPpdOw0IFEe EuxdG/2Yqe+nKuxm7DcwPpbeNLIgraBoURFzRl+PtFCPKrke/FazNJ+A7wWigxXs D1wOnsIGuzol1JK2NGy1b4vBUKAGTl3Hr+gdIKF93Oy5fbkyV4XOJG+jdwIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFLgkaxeR+jDuuWUmjHHH+BdyJr7yMB8GA1UdIwQY MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt MDQ2ODA0MjQ4NmRjLzEvdUNSckY1SDZNTzY1WlNhTWNjZjRGM0ltdnZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAqBAIAATAkAwQAViajAwQA ub2YAwQB1fzQAwQA1fzyAwQB1fz6AwQA1fz9MA8EAgACMAkDBwAqAPUBoAEwDQYJ KoZIhvcNAQELBQADggEBAEv8p3q8iFXES0iA/vHk4mPyILvedT5u0c/lifEKY7Qm PkkN5OSRita9uRucBzCwy+MSBJO/kMaFX53S1VoCUb9V4L/wWQ4LecYJpkwScMON Lhwzu5Ap47RieiTXoTWEWgNhy78w9QFTRhV/Uk9NyTJjKWRpVatSS3CEFb0ZX9Tb gPohjAC44WfmCGDtNfxl/i6tpyeMJvv6Vglu3qRdqPGQEaCh1+8k3YFpVLn5v6p1 GD5VqtwUXIb6gEqlBKEX4UeQ176PrwfP9Mw5rxmj1zuEprXCnl8lTmstIOzA82TU MWbSKpsbTPKda9j5+lsno7pqogfCI2qtzDUhagfIgC8= -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:54 2026 by rpki-client