This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/UG6rGpMCRGYwc6M9y1VhChB7D-o.roa File: UG6rGpMCRGYwc6M9y1VhChB7D-o.roa (raw, json) Hash identifier: PZpY+UE6o2ohwLTnt0nTubnygJyEIP8h+jg+Dy/lOic= Subject key identifier: 50:6E:AB:1A:93:02:44:66:30:73:A3:3D:CB:55:61:0A:10:7B:0F:EA Certificate issuer: /CN=aecaf94aedffefa4366bca2beb91992c1db34ccc Certificate serial: 019B7AC77F23D26AFCAD6BC37C92C61A208D Authority key identifier: AE:CA:F9:4A:ED:FF:EF:A4:36:6B:CA:2B:EB:91:99:2C:1D:B3:4C:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/UG6rGpMCRGYwc6M9y1VhChB7D-o.roa Signing time: Thu 01 Jan 2026 18:17:33 +0000 ROA not before: Thu 01 Jan 2026 18:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21286 IP address blocks: 193.176.216.0/23 maxlen: 23 2001:67c:5a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.crl rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:7f:23:d2:6a:fc:ad:6b:c3:7c:92:c6:1a:20:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aecaf94aedffefa4366bca2beb91992c1db34ccc Validity Not Before: Jan 1 18:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=506eab1a930244663073a33dcb55610a107b0fea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ed:38:a6:6d:52:f3:6e:75:c3:8e:ec:79:2e: 78:0e:5e:5e:db:58:db:89:29:ca:a7:d4:50:64:9c: 00:ec:2b:70:75:65:61:a1:71:70:b3:0f:04:41:11: 19:29:0e:74:f3:e3:a4:25:03:1f:25:e1:1b:af:63: 48:e5:5e:b0:cf:4d:19:aa:a6:e4:24:7b:39:69:3d: 0e:06:d5:d9:71:44:6a:4d:6d:82:1c:82:52:8b:ec: 65:3c:8d:8a:c0:43:19:af:24:80:34:17:b5:e2:53: 45:ae:19:55:b3:b1:5d:79:2a:5f:41:7f:43:cc:60: 41:fa:eb:c5:ef:9e:c3:d3:a6:8d:d1:97:d1:a4:f9: ae:49:3e:c7:c5:51:ec:9f:36:07:b1:a2:9d:04:42: 06:66:9a:d2:46:1b:f2:18:bc:e0:8c:fe:e6:18:69: 54:df:a3:10:b3:0d:ed:da:35:90:35:54:36:19:1a: a0:31:02:ca:c9:52:29:99:50:ab:3a:89:74:34:45: 2e:1b:4f:d4:1f:8c:1a:36:36:64:67:ab:46:f4:c5: 9c:fd:b6:9e:e3:d6:06:3c:2c:fd:ac:e9:fc:0d:29: d9:15:ca:7a:52:08:55:fb:65:e2:17:e1:8e:a9:7e: aa:a3:14:3b:cc:87:0e:54:fe:d1:45:ce:9d:33:d3: 6c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:6E:AB:1A:93:02:44:66:30:73:A3:3D:CB:55:61:0A:10:7B:0F:EA X509v3 Authority Key Identifier: keyid:AE:CA:F9:4A:ED:FF:EF:A4:36:6B:CA:2B:EB:91:99:2C:1D:B3:4C:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/UG6rGpMCRGYwc6M9y1VhChB7D-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.176.216.0/23 IPv6: 2001:67c:5a0::/48 Signature Algorithm: sha256WithRSAEncryption 93:50:2d:e7:78:28:56:ae:77:ab:ab:cf:e1:69:8f:9f:37:c0: 3b:b4:13:a4:ff:be:65:97:87:d1:03:6e:28:d8:2e:12:17:46: d1:cc:37:87:cb:4d:d1:69:77:c3:05:f5:f0:c1:23:c2:9e:d6: 83:5c:11:5e:22:b9:62:8d:41:11:05:61:92:81:3b:2e:4d:26: 04:f1:8c:01:8b:b9:9f:b8:4a:eb:40:93:4e:b6:2a:4a:a1:f9: 9c:45:13:dd:79:4e:07:b0:b9:9d:d2:3e:48:31:54:d6:d4:b5: 0b:fe:b6:fb:21:ea:e7:5f:54:5e:5b:cd:7a:1a:94:3f:dc:f3: 39:fb:6b:b9:fe:fb:0e:06:cc:b4:65:ff:91:e7:64:c3:1c:20: 6e:0a:55:20:18:1d:8c:f0:84:b1:93:7f:1c:17:a2:12:5b:8e: 7a:a6:c9:1b:ee:24:09:ec:21:03:89:83:ab:75:06:9e:c4:00: 34:88:b2:97:a5:de:49:67:08:5b:bf:8d:70:72:e1:56:12:75: dc:0f:71:9d:23:47:03:00:88:6c:95:9c:49:43:d7:2b:0c:60: cd:d5:22:9d:41:1a:77:1b:50:65:11:b8:90:d6:2d:67:25:d1: 97:9f:f8:62:52:73:e7:31:2a:b1:70:bc:07:b6:a0:9f:d0:66: 54:9d:97:50 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6x38j0mr8rWvDfJLGGiCNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlY2FmOTRhZWRmZmVmYTQzNjZiY2EyYmViOTE5OTJjMWRi MzRjY2MwHhcNMjYwMTAxMTgxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDZlYWIxYTkzMDI0NDY2MzA3M2EzM2RjYjU1NjEwYTEwN2IwZmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO04pm1S8251w47seS54Dl5e21jb iSnKp9RQZJwA7CtwdWVhoXFwsw8EQREZKQ508+OkJQMfJeEbr2NI5V6wz00Zqqbk JHs5aT0OBtXZcURqTW2CHIJSi+xlPI2KwEMZrySANBe14lNFrhlVs7FdeSpfQX9D zGBB+uvF757D06aN0ZfRpPmuST7HxVHsnzYHsaKdBEIGZprSRhvyGLzgjP7mGGlU 36MQsw3t2jWQNVQ2GRqgMQLKyVIpmVCrOol0NEUuG0/UH4waNjZkZ6tG9MWc/bae 49YGPCz9rOn8DSnZFcp6UghV+2XiF+GOqX6qoxQ7zIcOVP7RRc6dM9NsEwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFBuqxqTAkRmMHOjPctVYQoQew/qMB8GA1UdIwQY MBaAFK7K+Urt/++kNmvKK+uRmSwds0zMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnNyNVN1M183NlEyYThvcjY1R1pMQjJ6VE13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8wNDdkZWMtZDg0NC00NjdhLWEwMWEt ZmMwM2VmNzk0NzE4LzEvVUc2ckdwTUNSR1l3YzZNOXkxVmhDaEI3RC1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8wNDdkZWMtZDg0NC00NjdhLWEwMWEtZmMwM2VmNzk0NzE4 LzEvcnNyNVN1M183NlEyYThvcjY1R1pMQjJ6VE13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwbDYMA8E AgACMAkDBwAgAQZ8BaAwDQYJKoZIhvcNAQELBQADggEBAJNQLed4KFaud6urz+Fp j583wDu0E6T/vmWXh9EDbijYLhIXRtHMN4fLTdFpd8MF9fDBI8Ke1oNcEV4iuWKN QREFYZKBOy5NJgTxjAGLuZ+4SutAk062Kkqh+ZxFE915TgewuZ3SPkgxVNbUtQv+ tvsh6udfVF5bzXoalD/c8zn7a7n++w4GzLRl/5HnZMMcIG4KVSAYHYzwhLGTfxwX ohJbjnqmyRvuJAnsIQOJg6t1Bp7EADSIspel3klnCFu/jXBy4VYSddwPcZ0jRwMA iGyVnElD1ysMYM3VIp1BGncbUGURuJDWLWcl0Zef+GJSc+cxKrFwvAe2oJ/QZlSd l1A= -----END CERTIFICATE-----Generated at Mon Jan 26 01:43:29 2026 by rpki-client