This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/uEDcfQUKjvJ-T6m4BFBmAxGw1pE.roa
File: uEDcfQUKjvJ-T6m4BFBmAxGw1pE.roa (raw, json)
Hash identifier: RPlWNsPzW+HTVReSUqehc6xhgHlJTXox9YoPdrDPgvw=
Subject key identifier: B8:40:DC:7D:05:0A:8E:F2:7E:4F:A9:B8:04:50:66:03:11:B0:D6:91
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019B7C801D422572E2794468F7ABEF316CC9
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/uEDcfQUKjvJ-T6m4BFBmAxGw1pE.roa
Signing time: Fri 02 Jan 2026 02:18:49 +0000
ROA not before: Fri 02 Jan 2026 02:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39931
IP address blocks: 83.206.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:1d:42:25:72:e2:79:44:68:f7:ab:ef:31:6c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 2 02:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b840dc7d050a8ef27e4fa9b80450660311b0d691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e4:19:a0:3f:8b:f4:ed:aa:8b:ad:bf:cf:9b:
3e:98:ee:3d:d1:27:5b:c6:54:d3:f7:06:1d:02:12:
9a:28:a2:03:c7:84:92:7b:ee:cd:12:a0:ed:48:bc:
70:12:49:c5:44:64:09:de:a3:70:a7:62:bc:88:11:
d8:4a:ba:ac:40:6c:db:ba:1b:4e:76:c7:e2:b6:b6:
28:54:bc:35:55:0c:22:40:8a:27:51:12:3e:a0:32:
8d:e8:dc:24:59:ef:c4:8f:55:43:f7:44:85:94:66:
34:cd:65:68:ba:a7:97:76:1d:72:61:97:33:20:28:
52:97:8e:5f:48:99:9c:e5:02:d4:f4:e6:df:07:2b:
95:63:b9:be:1c:f0:ea:5e:46:18:73:96:78:4f:a6:
08:e9:52:60:7a:bb:e6:3f:23:d3:86:5c:8b:d9:0f:
e3:61:13:78:8b:fa:d5:a0:5c:e8:18:bd:1e:56:bc:
c2:e1:f7:f9:a5:30:b9:e7:f2:a9:b5:4e:2c:ef:10:
74:28:34:82:49:6d:33:0c:2d:e7:79:a9:53:8d:64:
2c:dc:3a:f1:e7:56:64:8c:2c:cf:b3:aa:32:ed:ed:
22:88:d9:fb:56:b1:2d:12:f6:2d:67:68:6f:0c:72:
00:bf:c3:83:6f:fe:aa:b5:5d:6a:c9:96:8c:dc:ba:
2a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:40:DC:7D:05:0A:8E:F2:7E:4F:A9:B8:04:50:66:03:11:B0:D6:91
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/uEDcfQUKjvJ-T6m4BFBmAxGw1pE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.206.188.0/24
Signature Algorithm: sha256WithRSAEncryption
31:c4:61:74:a1:79:bb:c2:dd:5c:8d:31:bc:77:22:d6:49:33:
74:f5:f5:19:c5:77:10:e8:db:bf:f4:48:52:6b:70:b4:2c:54:
4b:f7:e7:77:e5:60:6f:97:97:2e:a9:fb:ad:8a:b5:aa:03:48:
a7:03:70:64:06:28:cc:d4:5e:29:e9:5e:30:a3:6f:35:53:da:
2e:9a:9e:de:a1:67:b8:27:71:2c:63:45:a2:9b:54:78:34:06:
a1:08:53:5c:6f:33:e2:19:6f:e8:ec:e0:ef:d1:ea:51:2c:3d:
68:18:6a:c2:cd:ce:b2:b2:80:85:9f:75:b1:3c:67:f8:01:76:
5b:ab:28:82:af:5f:3e:34:00:05:24:4b:8f:9e:f4:0b:68:06:
4b:1e:86:06:fa:22:db:df:5d:0e:c4:bf:b9:ac:fa:f2:36:58:
49:0b:91:37:9a:0e:b5:57:5c:b9:8e:c7:75:14:fd:b5:06:b9:
1d:0c:d0:61:6c:c6:03:73:8b:70:4d:00:8e:a7:ea:b3:b9:23:
a3:45:5e:c7:9a:56:24:d2:a4:e6:14:93:e6:2e:ce:73:06:0f:
4e:21:e3:00:aa:e2:b7:93:e4:f3:04:62:0a:20:3e:2d:e7:1c:
3f:5a:ef:f3:b0:58:40:cc:a9:8a:69:b3:45:67:e4:9f:62:a1:
ea:cc:92:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8gB1CJXLieURo96vvMWzJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh
MTA1MTEwHhcNMjYwMTAyMDIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODQwZGM3ZDA1MGE4ZWYyN2U0ZmE5YjgwNDUwNjYwMzExYjBkNjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+QZoD+L9O2qi62/z5s+mO490Sdb
xlTT9wYdAhKaKKIDx4SSe+7NEqDtSLxwEknFRGQJ3qNwp2K8iBHYSrqsQGzbuhtO
dsfitrYoVLw1VQwiQIonURI+oDKN6NwkWe/Ej1VD90SFlGY0zWVouqeXdh1yYZcz
IChSl45fSJmc5QLU9ObfByuVY7m+HPDqXkYYc5Z4T6YI6VJgervmPyPThlyL2Q/j
YRN4i/rVoFzoGL0eVrzC4ff5pTC55/KptU4s7xB0KDSCSW0zDC3nealTjWQs3Drx
51ZkjCzPs6oy7e0iiNn7VrEtEvYtZ2hvDHIAv8ODb/6qtV1qyZaM3LoqbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLhA3H0FCo7yfk+puARQZgMRsNaRMB8GA1UdIwQY
MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt
NDU5MzVmNTA2YTEyLzEvdUVEY2ZRVUtqdkotVDZtNEJGQm1BeEd3MXBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy
LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU868MA0G
CSqGSIb3DQEBCwUAA4IBAQAxxGF0oXm7wt1cjTG8dyLWSTN09fUZxXcQ6Nu/9EhS
a3C0LFRL9+d35WBvl5cuqfutirWqA0inA3BkBijM1F4p6V4wo281U9oump7eoWe4
J3EsY0Wim1R4NAahCFNcbzPiGW/o7ODv0epRLD1oGGrCzc6ysoCFn3WxPGf4AXZb
qyiCr18+NAAFJEuPnvQLaAZLHoYG+iLb310OxL+5rPryNlhJC5E3mg61V1y5jsd1
FP21BrkdDNBhbMYDc4twTQCOp+qzuSOjRV7HmlYk0qTmFJPmLs5zBg9OIeMAquK3
k+TzBGIKID4t5xw/Wu/zsFhAzKmKabNFZ+SfYqHqzJI3
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:31:51 2026 by rpki-client