This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/uvUoFNRILkIA9-84ssKg0ZvRfq0.roa File: uvUoFNRILkIA9-84ssKg0ZvRfq0.roa (raw, json) Hash identifier: Nj5sSijcQqmzfBkRM6fK9Ym7x+LdiBa0Sl+oS0IaQqw= Subject key identifier: BA:F5:28:14:D4:48:2E:42:00:F7:EF:38:B2:C2:A0:D1:9B:D1:7E:AD Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B76EAF90849B0C93E4011B24B5E12AFB1 Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/uvUoFNRILkIA9-84ssKg0ZvRfq0.roa Signing time: Thu 01 Jan 2026 00:17:49 +0000 ROA not before: Thu 01 Jan 2026 00:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 152159 IP address blocks: 185.80.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f9:08:49:b0:c9:3e:40:11:b2:4b:5e:12:af:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 1 00:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=baf52814d4482e4200f7ef38b2c2a0d19bd17ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:16:73:40:58:e3:e1:49:44:03:26:52:17:80: e5:ac:c3:a2:9f:bb:41:e7:6d:fc:09:61:e0:76:e3: 46:c1:f1:f4:8e:c9:fc:38:a3:f3:af:ae:26:fa:b7: f2:2f:1a:40:eb:9e:5d:eb:5b:b3:a0:ca:25:27:c2: 00:e9:77:39:23:56:a8:bd:b0:91:bf:f0:5c:0e:b9: 1c:72:98:2c:35:64:12:48:1f:99:da:f2:c4:1f:b2: c9:4e:6b:71:60:b1:a1:55:6f:0d:9c:72:61:ca:5b: b9:11:fc:ae:e6:14:c2:c0:df:21:46:0b:36:e1:23: e9:6a:cf:9f:65:35:ec:0a:ff:98:53:49:54:d2:a8: 49:a0:0b:e1:3b:ed:cd:de:dc:ad:b8:99:03:e4:11: 73:70:4f:15:d6:f7:b4:38:03:3f:48:25:87:f3:ee: 34:ad:bd:15:ee:7d:04:f5:5f:f8:af:1a:ed:e2:0a: 4e:3c:61:69:5c:b4:67:41:e3:87:a4:83:4e:05:fb: 6b:4d:5f:78:dc:9a:0b:3b:57:67:35:d2:1e:b8:c8: 19:e5:a4:30:d6:a7:08:dc:5a:f5:f0:67:19:a7:63: 25:42:2f:3a:cf:7f:b7:d2:4c:53:83:2c:e6:b4:4a: 5a:65:99:3d:89:10:1e:d7:71:71:eb:8a:09:35:c8: ac:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F5:28:14:D4:48:2E:42:00:F7:EF:38:B2:C2:A0:D1:9B:D1:7E:AD X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/uvUoFNRILkIA9-84ssKg0ZvRfq0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.80.197.0/24 Signature Algorithm: sha256WithRSAEncryption 64:18:3e:a2:dd:5d:0c:fd:1b:05:1d:14:e9:2b:02:78:7a:93: 7c:5a:52:d7:4f:d2:23:05:3d:4a:1d:ea:cb:c3:bb:1a:72:33: cf:f9:ee:63:8e:f4:82:a5:e8:65:8f:e8:ca:f9:fa:f9:7a:59: fb:52:48:34:ff:29:04:e9:fd:db:1d:88:38:db:ad:49:9e:4a: 5c:97:69:97:3b:ad:3c:f2:89:78:e0:d9:fa:e7:a6:52:d1:2e: 57:00:34:9a:42:e3:14:44:6a:a7:e3:7f:3e:e8:8e:3d:2b:0d: 09:9e:91:66:34:71:f6:25:59:36:06:48:dd:15:38:a5:7d:c6: 17:b7:61:44:05:07:4a:b7:be:0f:5d:6a:e2:ce:af:10:cd:86: 49:dd:05:be:7b:71:44:3b:ac:39:de:79:0c:f3:3b:78:24:fb: 5d:d8:26:9b:80:e7:c5:19:d8:30:75:66:9c:be:c5:8b:7e:2d: eb:01:45:38:a7:50:a6:ef:ce:2b:bb:bd:6c:50:b6:38:8a:06: 30:7d:52:ae:23:42:1e:14:8b:f3:6e:32:a2:e9:78:24:d4:0a: 1a:7a:ba:ed:5e:98:ae:90:2d:69:bb:15:93:90:bb:94:76:0a: 93:8a:6a:9d:43:e8:8d:d4:73:66:67:60:99:32:43:cf:a0:94: f4:c5:c7:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26vkISbDJPkARskteEq+xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTAxMDAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWY1MjgxNGQ0NDgyZTQyMDBmN2VmMzhiMmMyYTBkMTliZDE3ZWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRZzQFjj4UlEAyZSF4DlrMOin7tB 5238CWHgduNGwfH0jsn8OKPzr64m+rfyLxpA655d61uzoMolJ8IA6Xc5I1aovbCR v/BcDrkccpgsNWQSSB+Z2vLEH7LJTmtxYLGhVW8NnHJhylu5Efyu5hTCwN8hRgs2 4SPpas+fZTXsCv+YU0lU0qhJoAvhO+3N3tytuJkD5BFzcE8V1ve0OAM/SCWH8+40 rb0V7n0E9V/4rxrt4gpOPGFpXLRnQeOHpINOBftrTV943JoLO1dnNdIeuMgZ5aQw 1qcI3Fr18GcZp2MlQi86z3+30kxTgyzmtEpaZZk9iRAe13Fx64oJNcis5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLr1KBTUSC5CAPfvOLLCoNGb0X6tMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvdXZVb0ZOUklMa0lBOS04NHNzS2cwWnZSZnEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVDFMA0G CSqGSIb3DQEBCwUAA4IBAQBkGD6i3V0M/RsFHRTpKwJ4epN8WlLXT9IjBT1KHerL w7sacjPP+e5jjvSCpehlj+jK+fr5eln7Ukg0/ykE6f3bHYg4261Jnkpcl2mXO608 8ol44Nn656ZS0S5XADSaQuMURGqn438+6I49Kw0JnpFmNHH2JVk2BkjdFTilfcYX t2FEBQdKt74PXWrizq8QzYZJ3QW+e3FEO6w53nkM8zt4JPtd2CabgOfFGdgwdWac vsWLfi3rAUU4p1Cm784ru71sULY4igYwfVKuI0IeFIvzbjKi6Xgk1AoaerrtXpiu kC1puxWTkLuUdgqTimqdQ+iN1HNmZ2CZMkPPoJT0xcca -----END CERTIFICATE-----Generated at Sun Jan 25 15:07:50 2026 by rpki-client