This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/1--uZd9q-jqlCwf4KSHTkKxdp1P0.roa File: 1--uZd9q-jqlCwf4KSHTkKxdp1P0.roa (raw, json) Hash identifier: yJgoBtaw97/X+Yl828Ilk6xaEg2wiibhZ1X313r+u+s= Subject key identifier: FB:EB:99:77:DA:BE:8E:A9:42:C1:FE:0A:48:74:E4:2B:17:69:D4:FD Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901 Certificate serial: 019B7A5B8188B465CB6E1C78990F1701C52A Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/1--uZd9q-jqlCwf4KSHTkKxdp1P0.roa Signing time: Thu 01 Jan 2026 16:19:35 +0000 ROA not before: Thu 01 Jan 2026 16:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399641 IP address blocks: 193.57.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:81:88:b4:65:cb:6e:1c:78:99:0f:17:01:c5:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901 Validity Not Before: Jan 1 16:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbeb9977dabe8ea942c1fe0a4874e42b1769d4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d5:6e:5f:44:ba:85:b2:ef:d3:35:15:de:8c: 70:79:d5:c5:44:1f:c7:79:98:aa:f4:35:4b:c6:e8: c2:fc:9d:3e:da:eb:96:9e:19:b2:02:47:8b:7e:5c: 0d:79:68:7d:7c:0e:0b:d2:a1:39:13:51:e8:df:d4: 81:2c:fc:92:15:2d:89:f7:f9:ac:9e:2b:89:f5:9c: 76:69:28:34:03:99:d1:ca:84:ec:49:5c:d7:ba:5f: 2e:8b:5c:df:26:b8:ac:ee:b1:94:1f:9b:33:95:ad: 6d:3d:48:ac:72:39:3a:40:0b:aa:14:53:6c:bc:bf: 8c:75:8f:e8:45:57:c3:22:17:f3:65:d9:03:c3:af: 3a:ee:26:6a:4f:3b:94:06:a8:b4:9b:ff:b9:1a:78: d3:fd:42:4e:b3:18:51:d6:25:e1:32:18:fd:8e:f8: 36:d8:a5:98:36:11:a4:06:7d:1a:fd:57:cc:a4:b1: 04:2d:a1:aa:8d:38:7e:5b:7a:6c:74:d3:f8:ca:f6: 03:01:06:be:40:11:77:06:53:17:b5:23:a8:84:ba: 5b:6c:3d:66:56:f2:97:42:7c:8d:a9:a7:a5:97:74: fd:f4:b9:34:e5:50:bb:9e:4f:ef:ae:da:27:38:26: 70:59:3b:29:02:7a:72:48:56:11:a3:90:e6:5f:80: 15:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:EB:99:77:DA:BE:8E:A9:42:C1:FE:0A:48:74:E4:2B:17:69:D4:FD X509v3 Authority Key Identifier: keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/1--uZd9q-jqlCwf4KSHTkKxdp1P0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.57.165.0/24 Signature Algorithm: sha256WithRSAEncryption 19:42:9c:71:68:43:6e:20:23:c3:25:53:19:11:8a:a6:99:6c: 51:25:35:61:7f:c8:5a:93:9a:c3:8c:78:2a:d4:18:87:48:aa: 89:08:f6:0d:e5:95:0a:ec:df:4d:bb:9d:75:ae:83:fa:eb:42: d8:e5:5c:5a:80:10:91:1b:49:df:ad:4e:d7:03:d8:ac:2a:fa: a8:49:ef:9b:ac:1c:cb:cd:ef:91:67:df:e2:96:7e:1e:b3:d4: 78:83:5e:e9:93:99:78:b6:a6:49:cd:5b:3b:92:61:58:57:d4: b6:a5:bf:95:52:eb:3d:48:34:f3:1f:cc:c0:6b:98:89:8c:58: a1:90:48:2b:a0:9d:56:29:eb:86:d4:e0:1e:ad:d4:bd:62:ba: 10:b1:a3:f3:48:aa:de:59:19:f5:d9:95:90:f3:a4:be:a2:9e: 2b:4f:60:0c:e6:05:64:30:85:bb:b4:80:f1:2a:b5:bc:35:12: c9:ed:29:9f:f2:71:01:c1:6a:2d:18:ba:24:d9:fe:9e:83:a9: f0:04:c7:c4:14:56:dd:4c:74:4a:ac:84:13:cb:1c:a0:7b:0c: 17:ba:98:4a:c9:1d:10:4e:02:cb:28:4b:14:ac:72:66:0f:fa: af:6c:89:37:37:29:23:44:fd:7a:64:b8:ea:3f:8b:38:76:62: 76:20:92:96 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6W4GItGXLbhx4mQ8XAcUqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi YzU5MDEwHhcNMjYwMTAxMTYxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmViOTk3N2RhYmU4ZWE5NDJjMWZlMGE0ODc0ZTQyYjE3NjlkNGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdVuX0S6hbLv0zUV3oxwedXFRB/H eZiq9DVLxujC/J0+2uuWnhmyAkeLflwNeWh9fA4L0qE5E1Ho39SBLPySFS2J9/ms niuJ9Zx2aSg0A5nRyoTsSVzXul8ui1zfJris7rGUH5szla1tPUiscjk6QAuqFFNs vL+MdY/oRVfDIhfzZdkDw6867iZqTzuUBqi0m/+5GnjT/UJOsxhR1iXhMhj9jvg2 2KWYNhGkBn0a/VfMpLEELaGqjTh+W3psdNP4yvYDAQa+QBF3BlMXtSOohLpbbD1m VvKXQnyNqaell3T99Lk05VC7nk/vrtonOCZwWTspAnpySFYRo5DmX4AVTQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPvrmXfavo6pQsH+Ckh05CsXadT9MB8GA1UdIwQY MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt NGRkMDQzNDZhYmMzLzEvMS0tdVpkOXEtanFsQ3dmNEtTSFRrS3hkcDFQMC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODMvN2IxYzU1LWRkZDAtNDI4MS04Mzc4LTRkZDA0MzQ2YWJj My8xL09yb1Jja2N1cUFKbDBTbUNsbjNncUxDOFdRRS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAME5pTAN BgkqhkiG9w0BAQsFAAOCAQEAGUKccWhDbiAjwyVTGRGKpplsUSU1YX/IWpOaw4x4 KtQYh0iqiQj2DeWVCuzfTbudda6D+utC2OVcWoAQkRtJ361O1wPYrCr6qEnvm6wc y83vkWff4pZ+HrPUeINe6ZOZeLamSc1bO5JhWFfUtqW/lVLrPUg08x/MwGuYiYxY oZBIK6CdVinrhtTgHq3UvWK6ELGj80iq3lkZ9dmVkPOkvqKeK09gDOYFZDCFu7SA 8Sq1vDUSye0pn/JxAcFqLRi6JNn+noOp8ATHxBRW3Ux0SqyEE8scoHsMF7qYSskd EE4CyyhLFKxyZg/6r2yJNzcpI0T9emS46j+LOHZidiCSlg== -----END CERTIFICATE-----Generated at Sun Jan 25 15:14:24 2026 by rpki-client