This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/1Uo76hmvh5FzNDo276Zm4m_BT0s.roa File: 1Uo76hmvh5FzNDo276Zm4m_BT0s.roa (raw, json) Hash identifier: N6dkUQu86zvoRHT3ompLiDGklhcKWt0L+DfJn/M9Ues= Subject key identifier: D5:4A:3B:EA:19:AF:87:91:73:34:3A:36:EF:A6:66:E2:6F:C1:4F:4B Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Certificate serial: 019B7B36B283649CD834B83EF2CEEBA1DBCF Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/1Uo76hmvh5FzNDo276Zm4m_BT0s.roa Signing time: Thu 01 Jan 2026 20:19:00 +0000 ROA not before: Thu 01 Jan 2026 20:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205022 IP address blocks: 193.232.72.0/24 maxlen: 24 193.232.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b2:83:64:9c:d8:34:b8:3e:f2:ce:eb:a1:db:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Validity Not Before: Jan 1 20:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d54a3bea19af879173343a36efa666e26fc14f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e1:7f:5a:8d:7f:60:cb:7b:0c:89:14:76:cb: 68:67:a2:08:c9:17:14:e4:fb:91:16:e6:77:e2:dc: c2:04:3c:1b:5e:25:cb:54:7c:f5:38:e7:f0:5c:5e: 73:d8:9d:55:02:d3:71:21:59:82:e3:92:82:af:96: 1a:06:04:4d:e7:ba:9f:fd:23:f9:77:12:99:4f:ad: d5:da:d6:fe:49:38:69:be:95:40:0c:31:e1:49:4f: 9c:60:51:a6:5b:fd:3b:5e:bd:e0:b3:6f:a8:2a:74: 9b:fb:d2:e4:49:9c:5b:64:b3:91:8b:7a:16:bb:0e: 06:f5:96:64:88:23:5a:05:eb:60:11:0a:0e:14:f0: ce:b1:14:76:06:31:63:2e:1a:bc:6d:16:de:aa:8c: 2e:1b:e8:a8:07:97:98:6a:e5:62:80:be:1b:c7:dc: f3:0c:24:42:96:8f:bd:c6:83:26:d1:43:89:b8:bd: 00:24:40:19:82:a4:e0:15:72:ca:97:cb:86:0a:c6: 59:74:f6:a3:06:c6:d7:1b:6b:47:b5:56:2a:d9:32: a2:a9:f0:b7:d8:a0:76:2e:84:25:1d:37:38:4d:4d: ee:95:e3:d4:3b:0d:1d:9f:28:98:24:c3:08:9f:ad: 31:c9:49:e2:98:f8:47:67:b3:81:cd:50:d1:1a:51: bb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:4A:3B:EA:19:AF:87:91:73:34:3A:36:EF:A6:66:E2:6F:C1:4F:4B X509v3 Authority Key Identifier: keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/1Uo76hmvh5FzNDo276Zm4m_BT0s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.232.72.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:65:d5:b6:c1:97:d4:50:0b:a3:d0:e4:99:2e:d4:2a:7b:8f: 3b:f5:3d:ec:d5:2b:56:a5:e8:bc:c0:ff:a2:9b:98:5d:b3:fa: 26:e5:ba:79:87:1d:ed:7b:fc:b4:11:fe:b1:7c:3f:1a:b1:2e: 11:0d:99:50:61:5a:2a:92:ff:f7:bb:0d:1d:43:da:e4:83:a6: 60:a6:88:e2:81:04:61:f7:15:6c:f2:0e:80:c5:52:f4:a1:8b: a3:c0:0a:ce:45:b7:df:2e:6e:f0:46:68:ef:4f:21:5f:4e:ef: c4:ce:7e:33:42:19:bf:bd:b4:eb:aa:08:d8:56:29:ac:f7:51: d4:ea:ff:fb:7b:95:d4:6a:11:c5:6b:21:59:e2:9d:3a:fa:81: 97:77:08:c3:77:97:c5:9a:4a:bf:71:6f:38:65:9c:af:a5:5d: 26:51:db:82:53:d0:48:b4:ca:7e:1a:53:27:b7:89:53:f0:0e: d5:19:5a:07:c9:b9:49:cf:e0:e7:e3:c7:15:5f:30:af:95:73: c4:90:70:e6:8c:8f:7a:d1:1b:56:78:4b:7c:ec:8c:36:e3:10: 6c:64:78:f6:16:c2:f9:08:e5:fd:d7:85:a6:ad:0c:8c:3f:71: 09:0c:9e:d0:d2:de:53:ea:d3:ae:96:dc:3e:14:60:db:6a:50: ef:2d:3e:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NrKDZJzYNLg+8s7rodvPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMWM2NjViMDM4NjkyYjkzYmRmNWQxZDhmM2NlYTNlOTg2 OTdhMDMwHhcNMjYwMTAxMjAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTRhM2JlYTE5YWY4NzkxNzMzNDNhMzZlZmE2NjZlMjZmYzE0ZjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuF/Wo1/YMt7DIkUdstoZ6IIyRcU 5PuRFuZ34tzCBDwbXiXLVHz1OOfwXF5z2J1VAtNxIVmC45KCr5YaBgRN57qf/SP5 dxKZT63V2tb+SThpvpVADDHhSU+cYFGmW/07Xr3gs2+oKnSb+9LkSZxbZLORi3oW uw4G9ZZkiCNaBetgEQoOFPDOsRR2BjFjLhq8bRbeqowuG+ioB5eYauVigL4bx9zz DCRClo+9xoMm0UOJuL0AJEAZgqTgFXLKl8uGCsZZdPajBsbXG2tHtVYq2TKiqfC3 2KB2LoQlHTc4TU3ulePUOw0dnyiYJMMIn60xyUnimPhHZ7OBzVDRGlG79QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNVKO+oZr4eRczQ6Nu+mZuJvwU9LMB8GA1UdIwQY MBaAFO8cZlsDhpK5O99dHY886j6YaXoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAt Njg4ZDMzM2VkOWQ1LzEvMVVvNzZobXZoNUZ6TkRvMjc2Wm00bV9CVDBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAtNjg4ZDMzM2VkOWQ1 LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwehIMA0G CSqGSIb3DQEBCwUAA4IBAQCKZdW2wZfUUAuj0OSZLtQqe4879T3s1StWpei8wP+i m5hds/om5bp5hx3te/y0Ef6xfD8asS4RDZlQYVoqkv/3uw0dQ9rkg6ZgpojigQRh 9xVs8g6AxVL0oYujwArORbffLm7wRmjvTyFfTu/Ezn4zQhm/vbTrqgjYVims91HU 6v/7e5XUahHFayFZ4p06+oGXdwjDd5fFmkq/cW84ZZyvpV0mUduCU9BItMp+GlMn t4lT8A7VGVoHyblJz+Dn48cVXzCvlXPEkHDmjI960RtWeEt87Iw24xBsZHj2FsL5 COX914WmrQyMP3EJDJ7Q0t5T6tOultw+FGDbalDvLT5J -----END CERTIFICATE-----Generated at Mon Jan 26 05:54:42 2026 by rpki-client