This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/uzZFqEjygWmU7HKXQF8zPUFOS_o.roa File: uzZFqEjygWmU7HKXQF8zPUFOS_o.roa (raw, json) Hash identifier: Hs28kHWbWOzbvHW65Y4TtQlgQLRdiGQuotE4jmDVvWQ= Subject key identifier: BB:36:45:A8:48:F2:81:69:94:EC:72:97:40:5F:33:3D:41:4E:4B:FA Certificate issuer: /CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e Certificate serial: 019B79101F07A6E7C7C6F8501CC0EB6A49C3 Authority key identifier: 76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/uzZFqEjygWmU7HKXQF8zPUFOS_o.roa Signing time: Thu 01 Jan 2026 10:17:38 +0000 ROA not before: Thu 01 Jan 2026 10:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52194 IP address blocks: 185.43.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:1f:07:a6:e7:c7:c6:f8:50:1c:c0:eb:6a:49:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e Validity Not Before: Jan 1 10:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb3645a848f2816994ec7297405f333d414e4bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1d:18:24:3d:b7:95:ac:db:08:83:5d:43:90: 1a:6e:11:f6:8c:7c:62:cc:d8:f8:ed:94:c2:4e:0f: 99:13:67:9e:42:81:5b:80:22:bd:eb:eb:27:44:c6: 72:32:f5:af:cd:4c:e1:f4:2b:64:6a:d2:4d:9d:4d: 72:21:cd:9f:96:75:98:d2:bf:fb:fd:57:8c:21:54: d1:77:91:5b:25:d9:20:d5:71:d8:11:6e:f1:87:2e: 58:33:13:0f:30:9b:38:13:c0:7f:ce:13:1a:0a:36: 82:65:cb:88:99:c8:74:55:3b:c3:27:21:91:5b:65: 4b:ec:79:a5:f6:bb:3e:2c:6a:b1:69:35:92:5b:3a: 0e:47:44:ad:fc:5f:04:5d:22:d4:0e:99:13:4d:cc: 11:f5:aa:d2:87:18:16:d2:cf:9c:85:43:09:66:42: 3c:d5:09:bc:a4:13:ff:58:33:60:9f:4e:79:31:fe: 53:cd:70:2b:78:c8:a4:1c:3e:49:0f:47:b9:b1:ba: 6c:8a:0f:87:b1:3f:35:b6:e1:7d:4b:e4:3d:f6:94: 58:70:c8:49:a0:27:f4:d7:83:c4:f0:5e:35:eb:4a: ed:7d:91:4d:6b:f2:98:34:ba:04:2f:b4:c8:ed:91: e6:63:33:e0:90:6b:6a:91:d5:22:fc:55:2b:c4:6d: 4b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:36:45:A8:48:F2:81:69:94:EC:72:97:40:5F:33:3D:41:4E:4B:FA X509v3 Authority Key Identifier: keyid:76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/uzZFqEjygWmU7HKXQF8zPUFOS_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.43.145.0/24 Signature Algorithm: sha256WithRSAEncryption 40:63:2e:d8:37:f2:be:05:29:6c:a7:93:e4:f9:e7:d4:9e:b8: 4d:47:98:cb:1a:ec:67:4e:75:81:92:19:5f:0a:b9:8e:e0:8c: 86:4c:5c:c5:31:f6:11:fe:df:3f:cd:8c:5b:e5:54:c9:9e:a2: 00:75:7d:1f:00:46:ca:cd:d7:0b:50:1a:7c:47:14:69:a9:1d: 95:c1:80:b1:66:3d:b0:42:af:5a:c2:09:8d:b2:a6:d3:8b:d3: 51:3f:e3:f4:72:9b:b8:f4:db:1d:39:f2:26:76:8a:fc:c3:bc: 61:70:c8:c7:5c:e1:33:ec:e0:ad:c8:25:5c:b6:41:b8:07:ea: f0:35:d4:2c:93:83:8f:59:a4:44:4b:3f:41:59:71:e1:b5:5c: a4:6c:1a:54:74:2f:0c:03:b3:9c:55:21:e0:1f:25:b6:fd:d6: 2d:0e:75:38:98:be:d2:e1:42:10:b2:c2:30:f8:7c:b6:29:3c: 45:fa:f0:ae:d2:89:d2:7b:09:ba:6b:0d:d1:30:5c:86:26:f5: 1c:e0:93:26:f0:f7:b4:8b:3f:79:0d:d8:51:3b:8d:05:f9:7c: 4e:20:96:42:c6:39:9c:ef:c7:be:4d:e1:c3:29:95:25:97:05: b3:0a:63:5c:cc:1e:c9:56:15:16:0f:3b:33:ea:74:e5:79:55: db:50:7a:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EB8HpufHxvhQHMDraknDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NzJjMGZlMDgzNzE3NjQwNThjNmFiODVkZmI1ZGNkYzEw OWY3N2UwHhcNMjYwMTAxMTAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjM2NDVhODQ4ZjI4MTY5OTRlYzcyOTc0MDVmMzMzZDQxNGU0YmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1R0YJD23lazbCINdQ5AabhH2jHxi zNj47ZTCTg+ZE2eeQoFbgCK96+snRMZyMvWvzUzh9CtkatJNnU1yIc2flnWY0r/7 /VeMIVTRd5FbJdkg1XHYEW7xhy5YMxMPMJs4E8B/zhMaCjaCZcuImch0VTvDJyGR W2VL7Hml9rs+LGqxaTWSWzoOR0St/F8EXSLUDpkTTcwR9arShxgW0s+chUMJZkI8 1Qm8pBP/WDNgn055Mf5TzXAreMikHD5JD0e5sbpsig+HsT81tuF9S+Q99pRYcMhJ oCf014PE8F4160rtfZFNa/KYNLoEL7TI7ZHmYzPgkGtqkdUi/FUrxG1LvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLs2RahI8oFplOxyl0BfMz1BTkv6MB8GA1UdIwQY MBaAFHZywP4INxdkBYxquF37Xc3BCfd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG5MQV9nZzNGMlFGakdxNFhmdGR6Y0VKOTM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOWYyZjYtMTkxZC00ZjBmLWEzYzQt YzNjODBlNDcwNGU0LzEvdXpaRnFFanlnV21VN0hLWFFGOHpQVUZPU19vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jOWYyZjYtMTkxZC00ZjBmLWEzYzQtYzNjODBlNDcwNGU0 LzEvZG5MQV9nZzNGMlFGakdxNFhmdGR6Y0VKOTM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSuRMA0G CSqGSIb3DQEBCwUAA4IBAQBAYy7YN/K+BSlsp5Pk+efUnrhNR5jLGuxnTnWBkhlf CrmO4IyGTFzFMfYR/t8/zYxb5VTJnqIAdX0fAEbKzdcLUBp8RxRpqR2VwYCxZj2w Qq9awgmNsqbTi9NRP+P0cpu49NsdOfImdor8w7xhcMjHXOEz7OCtyCVctkG4B+rw NdQsk4OPWaRESz9BWXHhtVykbBpUdC8MA7OcVSHgHyW2/dYtDnU4mL7S4UIQssIw +Hy2KTxF+vCu0onSewm6aw3RMFyGJvUc4JMm8Pe0iz95DdhRO40F+XxOIJZCxjmc 78e+TeHDKZUllwWzCmNczB7JVhUWDzsz6nTleVXbUHqj -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:07 2026 by rpki-client