This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/uJxInf6ICiGHJ89hAw8O54JzCxE.roa File: uJxInf6ICiGHJ89hAw8O54JzCxE.roa (raw, json) Hash identifier: aArm6IlaXvcsj/mHpId+uxqDg0SqzMDiEKe14y+pDBE= Subject key identifier: B8:9C:48:9D:FE:88:0A:21:87:27:CF:61:03:0F:0E:E7:82:73:0B:11 Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88 Certificate serial: 019B7DCAB88C11518A6FA3CC5231AB31DA3D Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/uJxInf6ICiGHJ89hAw8O54JzCxE.roa Signing time: Fri 02 Jan 2026 08:19:56 +0000 ROA not before: Fri 02 Jan 2026 08:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25306 IP address blocks: 194.225.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:b8:8c:11:51:8a:6f:a3:cc:52:31:ab:31:da:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88 Validity Not Before: Jan 2 08:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b89c489dfe880a218727cf61030f0ee782730b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6c:1f:08:75:f9:00:55:c3:61:e4:53:92:94: 9c:f4:16:b6:7c:a7:05:cd:b1:16:45:6a:e9:3b:dc: c6:71:83:0c:46:d8:98:23:5b:3b:f7:77:5c:c4:b0: 2b:10:b0:b1:ca:64:5b:07:f3:5b:93:80:5b:46:a0: 0b:f4:c0:78:f2:bd:d2:0b:b7:7d:f1:04:a8:8c:e6: 9b:8e:6f:31:93:c4:59:9c:8a:cb:8a:9a:54:ee:13: 3f:09:45:b3:f4:1d:1b:6b:fc:be:20:15:1b:ca:17: 26:42:1a:da:33:35:1b:0f:71:2b:9e:f1:8d:91:69: f6:01:d7:8c:0a:e8:c1:34:74:0d:68:be:25:62:2b: bb:14:13:5a:03:59:b8:0e:45:5e:18:9c:b4:57:3f: b9:14:0e:6d:a4:95:b9:09:d1:76:2d:bd:4b:2f:ba: 83:a9:cb:cd:f2:e0:40:3d:ae:3f:c4:81:57:46:f0: 4b:6e:96:16:67:95:04:27:99:82:de:6f:3b:79:ba: 85:cb:a6:a3:da:c0:d3:9c:95:37:d8:fa:c8:29:80: 44:c7:10:9d:2e:40:a4:59:94:75:2e:36:20:7b:0a: 9d:59:4e:af:60:1d:7e:54:2d:a6:71:19:3a:52:bc: 8d:91:cb:4c:cc:ad:e1:20:45:ff:8f:77:3c:e0:a2: 85:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9C:48:9D:FE:88:0A:21:87:27:CF:61:03:0F:0E:E7:82:73:0B:11 X509v3 Authority Key Identifier: keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/uJxInf6ICiGHJ89hAw8O54JzCxE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.225.101.0/24 Signature Algorithm: sha256WithRSAEncryption 17:e0:a6:8f:0c:ab:c6:34:21:a3:30:6a:a2:f5:67:9c:d1:42: 0f:fb:da:c8:53:16:62:de:50:9f:90:5e:d6:65:4c:05:56:e2: 53:b4:96:e0:46:67:e5:37:c4:12:5d:10:00:60:9f:14:94:89: 59:dd:3f:2c:79:3a:0f:c3:ac:ca:3f:9a:09:27:95:a2:98:49: dd:99:df:ae:8a:29:ba:3d:2b:57:8d:ee:a2:b6:23:80:d2:7b: da:1f:30:69:b7:a6:37:da:88:39:57:4d:44:a2:c5:4c:42:58: 37:b8:df:c0:80:8f:0d:09:ca:54:94:9c:e8:2d:1c:fc:bd:fc: d9:e3:3c:9c:0d:3e:21:67:f2:0b:f5:7c:fd:41:f7:19:e7:07: 4e:af:8f:a0:cb:2e:2a:b6:13:93:6d:d2:8d:e4:5e:68:00:97: 0c:82:31:d1:d8:b0:d5:40:65:e3:c2:a7:ed:53:9e:f3:4d:f5: 31:b8:92:bd:79:9a:05:bd:77:a4:2a:10:53:00:98:95:21:d1: 72:75:f3:7c:bc:80:39:43:a2:44:f6:9b:23:0f:65:b6:98:e4: 9d:dc:05:e2:08:81:73:9c:8a:1b:ed:e8:63:ba:8e:66:b6:75: 09:9a:d8:69:56:3e:9b:d9:e6:88:a0:1b:c5:0a:5d:c5:5e:13: 8e:bf:b6:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yriMEVGKb6PMUjGrMdo9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3 YjBhODgwHhcNMjYwMTAyMDgxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODljNDg5ZGZlODgwYTIxODcyN2NmNjEwMzBmMGVlNzgyNzMwYjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2wfCHX5AFXDYeRTkpSc9Ba2fKcF zbEWRWrpO9zGcYMMRtiYI1s793dcxLArELCxymRbB/Nbk4BbRqAL9MB48r3SC7d9 8QSojOabjm8xk8RZnIrLippU7hM/CUWz9B0ba/y+IBUbyhcmQhraMzUbD3ErnvGN kWn2AdeMCujBNHQNaL4lYiu7FBNaA1m4DkVeGJy0Vz+5FA5tpJW5CdF2Lb1LL7qD qcvN8uBAPa4/xIFXRvBLbpYWZ5UEJ5mC3m87ebqFy6aj2sDTnJU32PrIKYBExxCd LkCkWZR1LjYgewqdWU6vYB1+VC2mcRk6UryNkctMzK3hIEX/j3c84KKFIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLicSJ3+iAohhyfPYQMPDueCcwsRMB8GA1UdIwQY MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt ZGE2MTUzODg1ZjNiLzEvdUp4SW5mNklDaUdISjg5aEF3OE81NEp6Q3hFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwuFlMA0G CSqGSIb3DQEBCwUAA4IBAQAX4KaPDKvGNCGjMGqi9Wec0UIP+9rIUxZi3lCfkF7W ZUwFVuJTtJbgRmflN8QSXRAAYJ8UlIlZ3T8seToPw6zKP5oJJ5WimEndmd+uiim6 PStXje6itiOA0nvaHzBpt6Y32og5V01EosVMQlg3uN/AgI8NCcpUlJzoLRz8vfzZ 4zycDT4hZ/IL9Xz9QfcZ5wdOr4+gyy4qthOTbdKN5F5oAJcMgjHR2LDVQGXjwqft U57zTfUxuJK9eZoFvXekKhBTAJiVIdFydfN8vIA5Q6JE9psjD2W2mOSd3AXiCIFz nIob7ehjuo5mtnUJmthpVj6b2eaIoBvFCl3FXhOOv7YZ -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:22 2026 by rpki-client