This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/ukQY1BD04k-4MUx-U0jvExGFr_8.roa File: ukQY1BD04k-4MUx-U0jvExGFr_8.roa (raw, json) Hash identifier: HuqS4CCgoqnj6fxM4PKH7DEP94I/EN45blM+J9stnFU= Subject key identifier: BA:44:18:D4:10:F4:E2:4F:B8:31:4C:7E:53:48:EF:13:11:85:AF:FF Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24 Certificate serial: 019B78A3303F2B2AE2EAC8E508C38FFDE808 Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/ukQY1BD04k-4MUx-U0jvExGFr_8.roa Signing time: Thu 01 Jan 2026 08:18:39 +0000 ROA not before: Thu 01 Jan 2026 08:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64249 IP address blocks: 147.189.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:30:3f:2b:2a:e2:ea:c8:e5:08:c3:8f:fd:e8:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24 Validity Not Before: Jan 1 08:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba4418d410f4e24fb8314c7e5348ef131185afff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a8:99:a6:a9:bb:d2:2b:af:0b:b6:65:d8:b5: 8d:49:e0:b3:7c:e1:a5:eb:de:81:98:65:8c:64:40: 39:d9:ab:b7:09:b9:92:23:86:11:5a:59:9c:6c:fa: 28:8a:ea:d6:08:66:af:b9:db:91:2d:e1:57:f5:eb: 65:2b:99:0a:cc:82:6e:ca:62:1c:7a:91:c3:0e:89: 00:a2:83:28:24:d6:2c:81:0f:19:30:8d:d1:06:ec: 1e:0a:fe:64:56:a3:62:24:2a:f6:90:00:5b:95:79: 62:db:d4:4e:56:a6:e1:47:0f:aa:e3:12:00:6d:5d: 26:d7:56:98:63:bd:a7:3c:ec:25:e6:10:6b:9a:3c: 07:28:29:d5:6e:37:a4:d6:9f:21:ce:5f:6c:68:a2: 57:a2:7c:23:43:09:32:fd:b7:7b:c1:93:bb:ab:6d: c2:bf:9d:c5:95:14:56:4e:c1:65:9c:22:b2:87:02: ea:5f:fa:bc:b0:f2:0b:5b:f1:ac:8e:a0:78:e7:c5: 21:75:ae:81:0a:1f:66:77:40:24:3f:7e:df:e6:c3: bb:3b:ab:76:61:e6:24:17:1c:da:12:5d:a1:62:ec: 6f:67:5f:dd:2e:1c:df:25:eb:d5:8f:95:32:4c:9f: c5:81:95:b4:48:a4:34:51:d0:bb:dd:b7:6f:f6:8d: 8c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:44:18:D4:10:F4:E2:4F:B8:31:4C:7E:53:48:EF:13:11:85:AF:FF X509v3 Authority Key Identifier: keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/ukQY1BD04k-4MUx-U0jvExGFr_8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.189.137.0/24 Signature Algorithm: sha256WithRSAEncryption 65:53:0c:c1:32:fa:3e:67:7d:0c:7e:78:78:66:2a:f5:50:5d: 02:ce:c0:ae:c0:fb:95:7d:b6:bf:3c:8c:e4:41:e2:8d:61:03: 0e:9d:bc:71:ee:20:d8:c1:e8:55:76:04:9f:e3:72:6d:ed:f9: af:16:d8:ec:bc:8f:1c:b2:43:22:76:0e:49:fa:b4:78:4b:84: f6:75:6f:bc:fb:6f:a9:21:13:24:e6:49:03:b9:79:30:e9:5f: 72:35:a7:07:91:97:36:de:88:bc:0b:1b:ca:d3:0c:9c:e2:32: 9f:cd:ec:68:1a:5b:b0:f2:1a:73:6f:7a:f2:46:0d:b6:6c:60: c8:5f:c3:06:23:9b:7f:5e:20:fc:25:67:78:f9:0a:8b:31:97: 9f:d2:95:cc:e3:e4:da:5e:1b:76:74:2b:ee:c9:15:9f:84:03: b0:ce:e2:bf:8e:ad:32:07:12:a8:93:ea:82:6b:18:03:9c:fc: 4e:8a:1a:e3:16:63:67:1b:90:bd:29:fe:2a:01:27:cc:18:3e: d7:a4:b3:5e:99:26:19:d1:4e:13:ba:e2:99:01:0e:69:20:82: fe:45:dc:27:97:e7:0e:a8:cf:87:33:33:d7:20:75:22:21:62: 41:f8:76:81:d8:63:b6:f8:bc:90:8f:42:32:d7:2d:44:76:cd: f3:88:43:43 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt4ozA/Kyri6sjlCMOP/egIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5M2FjNmNkMjI0MDI0OWJiYTYwMTcxZjA4NmU5MTAxY2M4 N2NhMjQwHhcNMjYwMTAxMDgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTQ0MThkNDEwZjRlMjRmYjgzMTRjN2U1MzQ4ZWYxMzExODVhZmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKiZpqm70iuvC7Zl2LWNSeCzfOGl 696BmGWMZEA52au3CbmSI4YRWlmcbPooiurWCGavuduRLeFX9etlK5kKzIJuymIc epHDDokAooMoJNYsgQ8ZMI3RBuweCv5kVqNiJCr2kABblXli29ROVqbhRw+q4xIA bV0m11aYY72nPOwl5hBrmjwHKCnVbjek1p8hzl9saKJXonwjQwky/bd7wZO7q23C v53FlRRWTsFlnCKyhwLqX/q8sPILW/GsjqB458Uhda6BCh9md0AkP37f5sO7O6t2 YeYkFxzaEl2hYuxvZ1/dLhzfJevVj5UyTJ/FgZW0SKQ0UdC73bdv9o2MhQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFLpEGNQQ9OJPuDFMflNI7xMRha//MB8GA1UdIwQY MBaAFPk6xs0iQCSbumAXHwhukQHMh8okMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Uckd6U0pBSkp1NllCY2ZDRzZSQWN5SHlpUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNl LWY3NTJkODE2MDVmYi8xL3VrUVkxQkQwNGstNE1VeC1VMGp2RXhHRnJfOC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNlLWY3NTJkODE2MDVm Yi8xLzEtVHJHelNKQUpKdTZZQmNmQ0c2UkFjeUh5aVEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTvYkw DQYJKoZIhvcNAQELBQADggEBAGVTDMEy+j5nfQx+eHhmKvVQXQLOwK7A+5V9tr88 jORB4o1hAw6dvHHuINjB6FV2BJ/jcm3t+a8W2Oy8jxyyQyJ2Dkn6tHhLhPZ1b7z7 b6khEyTmSQO5eTDpX3I1pweRlzbeiLwLG8rTDJziMp/N7GgaW7DyGnNvevJGDbZs YMhfwwYjm39eIPwlZ3j5Cosxl5/Slczj5NpeG3Z0K+7JFZ+EA7DO4r+OrTIHEqiT 6oJrGAOc/E6KGuMWY2cbkL0p/ioBJ8wYPteks16ZJhnRThO64pkBDmkggv5F3CeX 5w6oz4czM9cgdSIhYkH4doHYY7b4vJCPQjLXLUR2zfOIQ0M= -----END CERTIFICATE-----Generated at Sun Jan 25 07:20:46 2026 by rpki-client