This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/Uiq3Q3sxBu1zkNFNAouvaBj47yk.roa File: Uiq3Q3sxBu1zkNFNAouvaBj47yk.roa (raw, json) Hash identifier: JfT+vlrYbEM9FjvE79Xki+Hz1cWLi2L1kmNNGPO6oHE= Subject key identifier: 52:2A:B7:43:7B:31:06:ED:73:90:D1:4D:02:8B:AF:68:18:F8:EF:29 Certificate issuer: /CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80 Certificate serial: 019B7834A90BD38748CD0EFBDB18E68E4B36 Authority key identifier: B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/Uiq3Q3sxBu1zkNFNAouvaBj47yk.roa Signing time: Thu 01 Jan 2026 06:17:55 +0000 ROA not before: Thu 01 Jan 2026 06:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3292 IP address blocks: 185.73.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:a9:0b:d3:87:48:cd:0e:fb:db:18:e6:8e:4b:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80 Validity Not Before: Jan 1 06:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=522ab7437b3106ed7390d14d028baf6818f8ef29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fa:a1:9a:8f:4a:f4:e1:db:fb:10:c2:a8:b4: e1:f0:e1:37:d2:d9:fc:6b:3c:2b:5f:2d:0e:13:a4: be:17:8c:82:84:f3:51:c0:0a:ea:c0:27:6a:56:e2: 57:d8:1e:2c:e3:fc:6b:5c:d2:39:1f:9b:56:4a:38: 45:b9:31:fc:bd:8c:91:ab:5c:83:da:01:91:aa:bf: 90:f0:70:81:db:cc:46:91:5d:be:a6:5a:2e:4b:fe: 2d:5b:ed:45:d2:a3:de:0c:05:98:50:93:16:eb:88: a0:e3:08:12:3d:97:9f:74:25:d5:12:cc:3a:d7:f5: b8:1a:4a:33:f3:89:4c:b5:03:88:f5:26:3e:f3:d8: 9f:37:9e:32:34:09:7b:e9:8b:52:1c:e2:89:5a:ff: 51:b8:1b:f7:51:59:c0:c3:e6:b0:50:05:26:a0:09: fd:1e:0c:ac:6d:c7:ce:3c:ff:fd:ac:09:25:c7:45: 09:3b:f2:4c:87:ba:86:c3:35:2d:45:62:14:b5:45: ed:c1:b6:32:35:fa:3e:be:46:91:e0:27:18:44:68: 7c:b6:1b:47:cf:6f:a1:ff:62:16:cd:ef:4c:3a:f5: 38:a8:bb:07:ad:52:ae:a4:92:9f:e6:0a:91:be:ee: f6:95:2b:70:32:1f:4f:bd:91:32:63:fb:ea:52:f6: 07:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2A:B7:43:7B:31:06:ED:73:90:D1:4D:02:8B:AF:68:18:F8:EF:29 X509v3 Authority Key Identifier: keyid:B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/Uiq3Q3sxBu1zkNFNAouvaBj47yk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.73.73.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:2e:f7:fb:d9:8b:e0:03:63:5a:a2:8a:1e:50:54:cf:0a:0d: 4b:5a:b3:2b:32:10:27:b5:aa:ab:e6:b1:b9:62:00:b1:8e:39: 9a:cf:80:a4:f0:2d:5b:13:f3:d0:3b:2a:ec:ec:dd:2d:0b:8b: 28:0b:3a:a0:4c:be:04:52:9f:d6:6a:5a:b8:05:12:7b:fb:7f: 45:fe:5a:c1:26:ae:a2:24:5c:15:0a:b5:e3:45:86:43:48:2e: b3:1d:ab:c0:b5:13:77:70:15:31:bd:ff:a1:e7:d3:59:aa:56: 98:7e:13:b3:f2:39:48:32:23:a1:6a:bb:b4:e3:9c:a1:47:0a: c4:c9:8a:9d:a6:ff:05:67:02:15:e4:93:18:1a:c6:41:0c:67: 2b:84:ba:bc:74:a6:be:ff:09:c3:b3:21:c4:fa:f4:ae:bd:95: 5d:3b:4d:2a:d2:b1:f5:89:8f:73:e6:52:ce:f9:03:2f:fd:6b: 06:1d:28:18:45:73:bd:06:fe:fe:1f:f7:eb:b3:ba:b8:13:a7: 30:bb:1f:6f:d3:02:79:39:02:d9:17:ec:03:39:cd:9e:0a:98: 7e:6a:0f:47:6a:5a:fe:74:c7:89:02:b2:37:23:08:fb:1a:57: 9e:d9:17:20:ac:74:65:b9:3f:5c:7d:7a:32:dd:58:ae:9d:76: 05:8b:05:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NKkL04dIzQ772xjmjks2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZjRiZTQxMDU0ZWFmNzg3ZWFhMzgzM2ZmY2FlOGYxZWQ3 ZmFhODAwHhcNMjYwMTAxMDYxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjJhYjc0MzdiMzEwNmVkNzM5MGQxNGQwMjhiYWY2ODE4ZjhlZjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/qhmo9K9OHb+xDCqLTh8OE30tn8 azwrXy0OE6S+F4yChPNRwArqwCdqVuJX2B4s4/xrXNI5H5tWSjhFuTH8vYyRq1yD 2gGRqr+Q8HCB28xGkV2+plouS/4tW+1F0qPeDAWYUJMW64ig4wgSPZefdCXVEsw6 1/W4Gkoz84lMtQOI9SY+89ifN54yNAl76YtSHOKJWv9RuBv3UVnAw+awUAUmoAn9 HgysbcfOPP/9rAklx0UJO/JMh7qGwzUtRWIUtUXtwbYyNfo+vkaR4CcYRGh8thtH z2+h/2IWze9MOvU4qLsHrVKupJKf5gqRvu72lStwMh9PvZEyY/vqUvYHIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFIqt0N7MQbtc5DRTQKLr2gY+O8pMB8GA1UdIwQY MBaAFLj0vkEFTq94fqo4M//K6PHtf6qAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVBTLVFRVk9yM2gtcWpnel84cm84ZTFfcW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8xNmExMmUtOGI1YS00NjQ5LWEwM2Mt NzFjZDZhZjA3MmE1LzEvVWlxM1Ezc3hCdTF6a05GTkFvdXZhQmo0N3lrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni8xNmExMmUtOGI1YS00NjQ5LWEwM2MtNzFjZDZhZjA3MmE1 LzEvdVBTLVFRVk9yM2gtcWpnel84cm84ZTFfcW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUlJMA0G CSqGSIb3DQEBCwUAA4IBAQBcLvf72YvgA2NaoooeUFTPCg1LWrMrMhAntaqr5rG5 YgCxjjmaz4Ck8C1bE/PQOyrs7N0tC4soCzqgTL4EUp/Walq4BRJ7+39F/lrBJq6i JFwVCrXjRYZDSC6zHavAtRN3cBUxvf+h59NZqlaYfhOz8jlIMiOharu045yhRwrE yYqdpv8FZwIV5JMYGsZBDGcrhLq8dKa+/wnDsyHE+vSuvZVdO00q0rH1iY9z5lLO +QMv/WsGHSgYRXO9Bv7+H/frs7q4E6cwux9v0wJ5OQLZF+wDOc2eCph+ag9Halr+ dMeJArI3Iwj7Glee2RcgrHRluT9cfXoy3ViunXYFiwUN -----END CERTIFICATE-----Generated at Mon Jan 26 01:17:14 2026 by rpki-client