This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/UoTm2cjOxeWwzsTm_tIMM9wPv40.roa File: UoTm2cjOxeWwzsTm_tIMM9wPv40.roa (raw, json) Hash identifier: adnzRNtY+kmU7Hbc2Pe9kRN3c/i17qsS4UkPfFW6Zac= Subject key identifier: 52:84:E6:D9:C8:CE:C5:E5:B0:CE:C4:E6:FE:D2:0C:33:DC:0F:BF:8D Certificate issuer: /CN=191a96a28c65d584c8dd234d3db444cf4b337ba2 Certificate serial: 019B7911030833EF02D1FFEA4DF3E4D45D7A Authority key identifier: 19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/UoTm2cjOxeWwzsTm_tIMM9wPv40.roa Signing time: Thu 01 Jan 2026 10:18:36 +0000 ROA not before: Thu 01 Jan 2026 10:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16552 IP address blocks: 46.31.232.0/21 maxlen: 24 185.165.52.0/22 maxlen: 24 185.165.52.0/24 maxlen: 28 185.165.54.0/24 maxlen: 28 185.165.55.0/24 maxlen: 28 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:03:08:33:ef:02:d1:ff:ea:4d:f3:e4:d4:5d:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=191a96a28c65d584c8dd234d3db444cf4b337ba2 Validity Not Before: Jan 1 10:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5284e6d9c8cec5e5b0cec4e6fed20c33dc0fbf8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2f:66:b3:49:68:66:4a:0c:8b:e7:20:ff:91: ad:4f:5c:81:ba:b7:da:c7:dc:e4:21:36:df:b8:12: 50:03:da:2f:94:a5:54:8c:91:f4:85:b9:41:a0:07: 3c:1c:f5:5e:fa:9e:52:ad:f0:80:a6:9a:f9:c9:05: 3d:12:97:19:ac:11:c1:92:6c:fd:40:13:47:7b:95: 27:e5:4f:02:64:e2:1c:46:fa:26:9a:a6:48:24:61: 23:7b:25:a6:ec:f0:8a:14:2e:96:34:0b:7e:9e:52: 11:0d:40:d2:7c:cd:f0:63:c9:8d:d5:a9:f7:8d:89: 28:91:61:dd:1a:64:df:f2:da:2c:d0:b8:ad:7f:e9: 8d:96:4a:1b:94:28:f4:22:25:2c:e2:d0:bd:04:fb: 64:52:a5:ee:e1:9e:c3:cf:38:41:3f:8a:5e:c8:37: cb:4b:54:61:01:ca:c7:ef:b4:67:73:0e:cd:91:6f: b8:f8:d0:75:71:6e:19:3f:73:ea:68:17:3b:af:a4: 86:3e:86:91:22:43:62:a1:dc:8a:39:28:72:2d:1d: ad:75:68:98:0d:23:2c:98:18:49:61:8f:1a:99:0f: f9:1b:c5:5c:e0:d2:64:13:aa:1c:32:c9:27:28:ff: a1:8f:79:7e:bb:e4:51:ea:03:3c:a8:c0:f8:9e:62: 54:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:84:E6:D9:C8:CE:C5:E5:B0:CE:C4:E6:FE:D2:0C:33:DC:0F:BF:8D X509v3 Authority Key Identifier: keyid:19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/UoTm2cjOxeWwzsTm_tIMM9wPv40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.232.0/21 185.165.52.0/22 Signature Algorithm: sha256WithRSAEncryption 77:d3:71:25:89:7b:b6:98:a0:e3:fa:97:84:a5:5a:39:18:02: 83:16:56:00:7c:36:9c:27:3f:37:6f:3d:d6:60:e9:eb:5b:93: f7:46:21:8d:43:15:c5:14:a9:15:80:e4:55:46:56:9a:40:d0: 5b:93:a5:ed:62:ce:41:b4:c0:e6:ce:b7:14:eb:bd:8c:83:fd: c8:e5:26:a3:1c:9b:38:9f:a2:ab:ae:01:f7:7f:9d:27:af:19: e4:54:45:b6:4a:25:2e:bd:e8:bf:98:66:c2:1b:62:a1:d7:f6: c4:ef:d7:4f:51:65:db:c3:7f:8d:90:45:62:c0:bd:bb:09:48: 17:a6:08:30:08:13:16:c4:19:c0:8b:b5:23:0c:92:a8:23:8c: 4f:59:5d:2a:42:6a:8b:e9:0d:0f:8a:2c:75:fc:7f:00:e2:57: d7:2c:20:f5:2c:ad:6e:69:fd:de:26:eb:7c:92:4a:db:79:f5: d9:58:d7:4a:59:31:a7:f8:05:0e:03:3e:84:3b:26:ba:32:5f: 64:c9:ca:fb:1f:b5:80:4c:62:87:0c:5d:a5:db:1f:a3:6b:82: 39:45:67:8c:e4:64:fc:c0:51:d1:bf:88:9e:33:a5:89:42:15: 57:eb:35:07:b1:9d:d1:25:71:46:e3:e2:3e:18:13:47:62:af: 1e:c7:bf:42 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EQMIM+8C0f/qTfPk1F16MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MWE5NmEyOGM2NWQ1ODRjOGRkMjM0ZDNkYjQ0NGNmNGIz MzdiYTIwHhcNMjYwMTAxMTAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Mjg0ZTZkOWM4Y2VjNWU1YjBjZWM0ZTZmZWQyMGMzM2RjMGZiZjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvC9ms0loZkoMi+cg/5GtT1yBurfa x9zkITbfuBJQA9ovlKVUjJH0hblBoAc8HPVe+p5SrfCAppr5yQU9EpcZrBHBkmz9 QBNHe5Un5U8CZOIcRvommqZIJGEjeyWm7PCKFC6WNAt+nlIRDUDSfM3wY8mN1an3 jYkokWHdGmTf8tos0Litf+mNlkoblCj0IiUs4tC9BPtkUqXu4Z7DzzhBP4peyDfL S1RhAcrH77Rncw7NkW+4+NB1cW4ZP3PqaBc7r6SGPoaRIkNiodyKOShyLR2tdWiY DSMsmBhJYY8amQ/5G8Vc4NJkE6ocMsknKP+hj3l+u+RR6gM8qMD4nmJUjQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFKE5tnIzsXlsM7E5v7SDDPcD7+NMB8GA1UdIwQY MBaAFBkalqKMZdWEyN0jTT20RM9LM3uiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1JxV29veGwxWVRJM1NOTlBiUkV6MHN6ZTZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81ZTAyOTgtMGQ2Yi00MWI0LTg4ZjYt OTE4NTE5OWExOGMwLzEvVW9UbTJjak94ZVd3enNUbV90SU1NOXdQdjQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi81ZTAyOTgtMGQ2Yi00MWI0LTg4ZjYtOTE4NTE5OWExOGMw LzEvR1JxV29veGwxWVRJM1NOTlBiUkV6MHN6ZTZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLh/oAwQC uaU0MA0GCSqGSIb3DQEBCwUAA4IBAQB303EliXu2mKDj+peEpVo5GAKDFlYAfDac Jz83bz3WYOnrW5P3RiGNQxXFFKkVgORVRlaaQNBbk6XtYs5BtMDmzrcU672Mg/3I 5SajHJs4n6KrrgH3f50nrxnkVEW2SiUuvei/mGbCG2Kh1/bE79dPUWXbw3+NkEVi wL27CUgXpggwCBMWxBnAi7UjDJKoI4xPWV0qQmqL6Q0Piix1/H8A4lfXLCD1LK1u af3eJut8kkrbefXZWNdKWTGn+AUOAz6EOya6Ml9kycr7H7WATGKHDF2l2x+ja4I5 RWeM5GT8wFHRv4ieM6WJQhVX6zUHsZ3RJXFG4+I+GBNHYq8ex79C -----END CERTIFICATE-----Generated at Sun Jan 25 21:28:55 2026 by rpki-client