This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/uZlDhgwC5WgpGxBcWB2bo_vzZZU.roa File: uZlDhgwC5WgpGxBcWB2bo_vzZZU.roa (raw, json) Hash identifier: n7rmT7eWhWaDz6MLyzDuXY6l9WnAuvoKMn9XsT5ZVWw= Subject key identifier: B9:99:43:86:0C:02:E5:68:29:1B:10:5C:58:1D:9B:A3:FB:F3:65:95 Certificate issuer: /CN=59bc52b15069c1c47b54e97b9f5694b755b5ceb1 Certificate serial: 019B78A35BB36F17D3D7F8B944A00E792A7A Authority key identifier: 59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/uZlDhgwC5WgpGxBcWB2bo_vzZZU.roa Signing time: Thu 01 Jan 2026 08:18:50 +0000 ROA not before: Thu 01 Jan 2026 08:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59729 IP address blocks: 185.36.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:5b:b3:6f:17:d3:d7:f8:b9:44:a0:0e:79:2a:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59bc52b15069c1c47b54e97b9f5694b755b5ceb1 Validity Not Before: Jan 1 08:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b99943860c02e568291b105c581d9ba3fbf36595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:06:aa:29:25:89:46:19:3e:2b:56:46:d9:bd: f3:9c:3c:d2:83:45:27:59:12:07:cb:56:85:20:73: 40:d9:d7:c1:63:66:b7:43:c4:7f:9d:85:5b:0c:05: f2:90:2e:e4:93:37:9f:ef:ed:e2:7a:96:3e:76:1a: bd:5f:2b:39:e9:63:43:12:18:f3:20:d1:d0:6c:d6: 98:6a:48:23:b4:e1:cf:66:6f:67:10:6a:7b:ec:6c: 32:57:89:26:81:d6:f9:ab:60:0e:58:60:e2:bd:55: 3c:68:81:f4:6b:b7:d3:2b:07:23:04:d2:2a:62:b9: 0f:ee:e4:cc:05:6c:7f:5c:84:c1:fa:8f:11:68:2b: c2:8a:13:eb:8a:a9:40:5a:62:12:4e:60:d2:89:0e: a6:2f:b8:bb:84:7a:00:69:fe:7a:90:2d:ee:12:3f: d9:4e:d9:42:46:ed:33:76:b5:3b:9f:6e:e3:6c:81: c9:ce:5e:9a:6e:07:85:1e:dd:64:af:0f:0c:dd:1b: bf:29:27:60:b7:c8:78:86:0d:19:ac:5d:fb:17:ca: e4:1b:0f:5b:38:f5:89:74:74:ab:df:c9:e1:fd:35: 18:c1:e4:b6:06:bd:45:fd:af:a8:43:16:67:69:15: d0:5e:5a:ef:f7:58:19:62:54:5a:54:f2:33:79:96: c9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:99:43:86:0C:02:E5:68:29:1B:10:5C:58:1D:9B:A3:FB:F3:65:95 X509v3 Authority Key Identifier: keyid:59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/uZlDhgwC5WgpGxBcWB2bo_vzZZU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.36.147.0/24 Signature Algorithm: sha256WithRSAEncryption 19:1c:15:96:a0:45:34:6e:98:fa:bd:e6:72:fc:44:ba:9c:67: 92:3f:2d:ab:ea:57:d6:d3:d0:3d:ff:8a:78:63:aa:f0:63:43: 2e:e0:f4:20:ba:7c:bd:4e:2f:33:4b:b0:e0:f8:5a:f0:b6:d8: 94:aa:57:90:1f:4d:99:40:70:34:5d:71:6f:15:fc:05:e3:97: f5:e7:77:62:75:a3:43:2a:4e:be:8d:d2:6d:d4:d6:23:e4:ac: c5:f5:10:f4:11:6f:93:66:bb:c5:69:77:d3:83:ab:74:23:a4: 0c:cd:14:52:00:a9:b0:74:00:e1:3b:f1:7f:3e:32:f5:b5:ce: d2:af:98:7a:1a:33:4d:f8:a2:2c:ca:0f:aa:81:ce:79:bf:cc: 47:21:4e:19:b0:94:52:18:85:d9:d7:d5:0c:ce:c6:93:71:2f: c4:b0:09:30:80:26:6f:04:32:ec:79:ab:9b:c0:77:a7:ba:35: e6:25:65:28:d5:ba:f8:43:22:fb:71:da:76:5b:8e:48:3a:49: 04:40:74:0a:80:38:8c:3b:7a:f0:8a:82:3a:06:3c:8a:d7:7c: 32:af:ac:94:d9:d6:a4:ad:2b:91:7e:25:21:0d:6b:41:be:92: 68:92:45:bf:7e:79:b8:f7:de:3d:19:f4:ae:d9:c2:74:07:39: dd:fa:77:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o1uzbxfT1/i5RKAOeSp6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5YmM1MmIxNTA2OWMxYzQ3YjU0ZTk3YjlmNTY5NGI3NTVi NWNlYjEwHhcNMjYwMTAxMDgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTk5NDM4NjBjMDJlNTY4MjkxYjEwNWM1ODFkOWJhM2ZiZjM2NTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowaqKSWJRhk+K1ZG2b3znDzSg0Un WRIHy1aFIHNA2dfBY2a3Q8R/nYVbDAXykC7kkzef7+3iepY+dhq9Xys56WNDEhjz INHQbNaYakgjtOHPZm9nEGp77GwyV4kmgdb5q2AOWGDivVU8aIH0a7fTKwcjBNIq YrkP7uTMBWx/XITB+o8RaCvCihPriqlAWmISTmDSiQ6mL7i7hHoAaf56kC3uEj/Z TtlCRu0zdrU7n27jbIHJzl6abgeFHt1krw8M3Ru/KSdgt8h4hg0ZrF37F8rkGw9b OPWJdHSr38nh/TUYweS2Br1F/a+oQxZnaRXQXlrv91gZYlRaVPIzeZbJAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLmZQ4YMAuVoKRsQXFgdm6P782WVMB8GA1UdIwQY MBaAFFm8UrFQacHEe1Tpe59WlLdVtc6xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2J4U3NWQnB3Y1I3Vk9sN24xYVV0MVcxenJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kMWZjZDAtNTVjMS00NmJhLTlkYjEt MmMxMGIxOWQ0YzJhLzEvdVpsRGhnd0M1V2dwR3hCY1dCMmJvX3Z6WlpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9kMWZjZDAtNTVjMS00NmJhLTlkYjEtMmMxMGIxOWQ0YzJh LzEvV2J4U3NWQnB3Y1I3Vk9sN24xYVV0MVcxenJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSSTMA0G CSqGSIb3DQEBCwUAA4IBAQAZHBWWoEU0bpj6veZy/ES6nGeSPy2r6lfW09A9/4p4 Y6rwY0Mu4PQguny9Ti8zS7Dg+FrwttiUqleQH02ZQHA0XXFvFfwF45f153didaND Kk6+jdJt1NYj5KzF9RD0EW+TZrvFaXfTg6t0I6QMzRRSAKmwdADhO/F/PjL1tc7S r5h6GjNN+KIsyg+qgc55v8xHIU4ZsJRSGIXZ19UMzsaTcS/EsAkwgCZvBDLseaub wHenujXmJWUo1br4QyL7cdp2W45IOkkEQHQKgDiMO3rwioI6BjyK13wyr6yU2dak rSuRfiUhDWtBvpJokkW/fnm49949GfSu2cJ0Bznd+nfy -----END CERTIFICATE-----Generated at Sun Jan 25 16:13:25 2026 by rpki-client