This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/UuScKKPZU-rxDshW6inBZKRJIH0.roa File: UuScKKPZU-rxDshW6inBZKRJIH0.roa (raw, json) Hash identifier: oIb88lrmIIDaodPcRGV8PcCWp69cVR7+uTDhUXF8D0A= Subject key identifier: 52:E4:9C:28:A3:D9:53:EA:F1:0E:C8:56:EA:29:C1:64:A4:49:20:7D Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Certificate serial: 019B7E37ADEE263A6F932136D76FE083C1A9 Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/UuScKKPZU-rxDshW6inBZKRJIH0.roa Signing time: Fri 02 Jan 2026 10:18:56 +0000 ROA not before: Fri 02 Jan 2026 10:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 217.163.11.0/24 maxlen: 24 217.163.23.0/24 maxlen: 24 217.163.28.0/23 maxlen: 24 217.163.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ad:ee:26:3a:6f:93:21:36:d7:6f:e0:83:c1:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Validity Not Before: Jan 2 10:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52e49c28a3d953eaf10ec856ea29c164a449207d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:76:02:ae:83:89:3d:7d:2f:66:97:3d:76:5d: 6b:47:65:4f:a0:2c:1f:38:d5:11:44:f0:db:be:75: d0:37:89:fe:d3:15:8d:73:a3:42:43:1d:58:9a:e5: 96:6f:bd:a1:86:8e:18:2b:bb:e1:6e:44:ff:20:08: a9:76:8d:b8:c4:74:a6:ad:66:27:50:19:b7:54:d5: 0a:c9:3c:bf:98:cb:d0:e5:d4:5e:a8:d0:ff:76:e9: e0:90:07:ba:bb:fc:68:65:05:06:d0:1a:2d:9a:7e: e6:7f:ee:5b:77:44:80:d2:bc:94:46:88:60:8a:82: e3:60:35:ab:15:64:d1:44:2a:d4:91:cf:db:16:42: 88:1c:c0:98:d5:8e:d9:60:f2:a0:32:4c:a1:fc:99: a4:6b:44:ab:43:df:51:cd:51:5d:b7:8e:04:c0:d5: 58:f0:d9:88:e7:bf:1f:8e:54:8e:61:05:a2:b5:d8: ed:8a:55:95:59:f5:0f:04:e8:76:54:87:7e:30:c3: 59:35:e7:18:1a:f8:40:1e:33:6a:89:52:89:22:ce: 42:38:2c:43:d5:55:89:1d:fe:21:92:59:5f:31:93: 9e:a5:f1:94:03:55:a0:9a:00:4b:aa:95:fc:a1:f5: f0:28:8a:c2:7a:cd:d1:aa:7d:cd:06:6a:b7:bd:40: 42:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E4:9C:28:A3:D9:53:EA:F1:0E:C8:56:EA:29:C1:64:A4:49:20:7D X509v3 Authority Key Identifier: keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/UuScKKPZU-rxDshW6inBZKRJIH0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.163.11.0/24 217.163.23.0/24 217.163.28.0-217.163.30.255 Signature Algorithm: sha256WithRSAEncryption 09:a7:8e:63:96:b4:55:45:1a:3a:60:d7:91:42:de:7c:c6:f2: 19:5b:4f:ee:4b:ae:13:db:90:a2:bc:93:e1:47:7f:86:bc:0f: f9:39:15:d6:65:27:5a:46:d5:07:46:07:ea:5f:a5:3d:8c:14: 74:89:bf:97:00:2b:22:e5:cd:81:45:d4:24:0f:ed:21:cb:d7: 13:9e:b5:ac:c1:cf:47:50:1d:1a:be:f6:32:53:14:86:6a:36: b1:c1:5f:75:e6:ab:3f:00:b6:3e:85:b4:a6:6d:2a:4a:54:41: d4:a7:44:c0:21:24:09:82:8e:03:58:ca:e0:ad:65:69:c2:03: 42:7d:53:76:16:5a:c9:cb:f7:2d:4a:be:ec:f7:5f:4d:c4:b0: 95:d8:60:7c:25:e4:70:c1:e9:75:a1:4a:35:42:e5:73:86:63: 6d:44:5f:30:4f:96:f5:50:4a:bd:ca:4c:ac:12:cf:1f:18:f2: 5c:94:f5:25:1f:82:7d:66:9f:1d:5c:ae:58:f6:2c:3d:47:be: 12:c3:64:3d:54:90:6b:b4:d8:7f:01:11:c1:fa:7f:72:cc:02: d8:17:b0:94:27:ff:b8:80:3d:ba:5d:b0:93:4e:c7:a7:9d:de: 91:a1:57:9d:e9:b5:01:58:87:66:0f:dc:d7:b9:94:b8:13:f7: f7:bc:ec:a8 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt+N63uJjpvkyE212/gg8GpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMzJhNGJmYjc3OTY0MDVhNTU2Yjc1OWYxZDE5M2U0YzRk MzcxMjkwHhcNMjYwMTAyMTAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmU0OWMyOGEzZDk1M2VhZjEwZWM4NTZlYTI5YzE2NGE0NDkyMDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnYCroOJPX0vZpc9dl1rR2VPoCwf ONURRPDbvnXQN4n+0xWNc6NCQx1YmuWWb72hho4YK7vhbkT/IAipdo24xHSmrWYn UBm3VNUKyTy/mMvQ5dReqND/dungkAe6u/xoZQUG0Botmn7mf+5bd0SA0ryURohg ioLjYDWrFWTRRCrUkc/bFkKIHMCY1Y7ZYPKgMkyh/Jmka0SrQ99RzVFdt44EwNVY 8NmI578fjlSOYQWitdjtilWVWfUPBOh2VId+MMNZNecYGvhAHjNqiVKJIs5COCxD 1VWJHf4hkllfMZOepfGUA1WgmgBLqpX8ofXwKIrCes3Rqn3NBmq3vUBCTQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFFLknCij2VPq8Q7IVuopwWSkSSB9MB8GA1UdIwQY MBaAFAIypL+3eWQFpVa3WfHRk+TE03EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEt M2JiNGQ2MjAwNTE4LzEvVXVTY0tLUFpVLXJ4RHNoVzZpbkJaS1JKSUgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEtM2JiNGQ2MjAwNTE4 LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQA2aMLAwQA 2aMXMAwDBALZoxwDBADZox4wDQYJKoZIhvcNAQELBQADggEBAAmnjmOWtFVFGjpg 15FC3nzG8hlbT+5LrhPbkKK8k+FHf4a8D/k5FdZlJ1pG1QdGB+pfpT2MFHSJv5cA KyLlzYFF1CQP7SHL1xOetazBz0dQHRq+9jJTFIZqNrHBX3Xmqz8Atj6FtKZtKkpU QdSnRMAhJAmCjgNYyuCtZWnCA0J9U3YWWsnL9y1Kvuz3X03EsJXYYHwl5HDB6XWh SjVC5XOGY21EXzBPlvVQSr3KTKwSzx8Y8lyU9SUfgn1mnx1crlj2LD1HvhLDZD1U kGu02H8BEcH6f3LMAtgXsJQn/7iAPbpdsJNOx6ed3pGhV53ptQFYh2YP3Ne5lLgT 9/e87Kg= -----END CERTIFICATE-----Generated at Sun Jan 25 14:40:04 2026 by rpki-client