This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/uiTCPMJO6WqLGnhBcOzk3vGNCRI.roa File: uiTCPMJO6WqLGnhBcOzk3vGNCRI.roa (raw, json) Hash identifier: /uSluzarRD7hzKeftDLlUNqVrK3dUPCuVWYOJEdnTrg= Subject key identifier: BA:24:C2:3C:C2:4E:E9:6A:8B:1A:78:41:70:EC:E4:DE:F1:8D:09:12 Certificate issuer: /CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1 Certificate serial: 019B7EA4EC784B2905F56BD28BEBF73AB446 Authority key identifier: 33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/uiTCPMJO6WqLGnhBcOzk3vGNCRI.roa Signing time: Fri 02 Jan 2026 12:18:16 +0000 ROA not before: Fri 02 Jan 2026 12:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19198 IP address blocks: 45.95.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:ec:78:4b:29:05:f5:6b:d2:8b:eb:f7:3a:b4:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1 Validity Not Before: Jan 2 12:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba24c23cc24ee96a8b1a784170ece4def18d0912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:54:3d:ee:6d:78:a6:79:df:b9:b2:ee:ee:8e: 6b:a1:4e:c6:bd:aa:cb:22:45:0d:bd:8b:82:13:1d: cb:84:84:7b:c5:b4:57:db:5d:55:0a:a8:9d:29:ff: 38:54:63:7d:de:7c:94:99:40:4d:ef:d6:6d:74:a1: 55:84:a2:d1:b0:d4:c1:80:b1:2f:bf:be:2d:51:e1: 22:99:7f:bd:9d:99:a5:52:07:78:60:4f:c8:67:55: a4:f8:8a:e6:f7:ce:8c:bb:89:75:0a:05:20:00:26: 68:99:6b:78:58:df:1b:cb:9a:f6:3c:41:4c:bf:9d: ca:b7:dc:02:b0:36:13:b9:50:fb:8b:f4:2d:7d:f0: 4e:1f:11:ae:d1:65:4b:d1:28:bb:b7:8a:46:fb:c3: 3b:6a:5d:82:1d:9d:d0:ee:68:e7:e5:59:e9:64:2a: 79:21:b0:67:01:8d:d1:ea:97:22:8e:6b:07:cb:7f: 81:ff:4d:dc:8a:dd:1f:e7:ab:ef:f5:c4:4d:9d:6b: 11:19:1e:99:47:7b:6a:5a:db:40:93:1a:d3:b5:60: 7a:70:8d:cb:7a:08:27:a0:7d:90:0f:ed:3a:cd:75: b1:e1:79:c3:53:bf:04:1b:d7:ea:6c:30:9c:26:9a: c6:f6:c4:69:35:16:5c:0e:2c:3f:1b:0f:10:ad:00: 4d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:24:C2:3C:C2:4E:E9:6A:8B:1A:78:41:70:EC:E4:DE:F1:8D:09:12 X509v3 Authority Key Identifier: keyid:33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/uiTCPMJO6WqLGnhBcOzk3vGNCRI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.94.0/24 Signature Algorithm: sha256WithRSAEncryption ad:0f:c9:4f:17:c8:d2:13:aa:8b:8d:02:a7:6d:11:a5:0b:90: 53:30:bb:df:58:15:44:b6:6d:74:61:fe:54:7e:85:6e:da:8c: db:9a:cb:ee:ec:f0:c9:4e:e2:6f:fe:96:80:b2:a0:ec:b8:89: e9:03:02:ce:8c:25:b1:ec:27:4a:c1:4d:c8:49:47:1f:20:80: 4f:ef:1d:29:4a:81:47:3c:ac:bd:d3:af:34:e6:7a:93:ea:f0: f8:2f:f9:f7:ea:73:fb:3f:2a:0c:bb:b9:1a:89:bd:e4:a2:d7: a9:d4:95:bc:0c:e0:b6:2b:59:13:32:88:40:04:34:71:0b:b6: 40:e1:2c:80:6f:0d:8c:f9:9a:6d:9d:31:68:0d:0f:9c:fa:7b: 54:33:fb:ef:77:ec:82:f4:ac:17:92:98:fa:74:74:31:33:34: 33:fd:aa:8c:91:72:ae:b6:a4:2a:d4:68:71:35:c5:75:49:5a: 4a:50:07:5a:35:aa:88:0d:97:23:c1:ba:c3:bd:bb:10:98:81: d2:b8:b0:66:f0:da:63:cb:69:f7:c7:a0:6a:1e:10:af:6e:e9: b4:97:0a:5e:7e:9d:a3:0a:0d:30:34:ea:f5:99:4c:6a:a6:52: b1:57:de:f2:c5:4d:da:60:8a:77:bc:65:a7:ae:9c:7d:59:00: 19:f0:e7:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pOx4SykF9WvSi+v3OrRGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzOGQ0MmZiYjNmNDNmNTZkZGI4NzgyZTY1NDkwYTIzZDg1 YjcyZTEwHhcNMjYwMTAyMTIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTI0YzIzY2MyNGVlOTZhOGIxYTc4NDE3MGVjZTRkZWYxOGQwOTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFQ97m14pnnfubLu7o5roU7GvarL IkUNvYuCEx3LhIR7xbRX211VCqidKf84VGN93nyUmUBN79ZtdKFVhKLRsNTBgLEv v74tUeEimX+9nZmlUgd4YE/IZ1Wk+Irm986Mu4l1CgUgACZomWt4WN8by5r2PEFM v53Kt9wCsDYTuVD7i/QtffBOHxGu0WVL0Si7t4pG+8M7al2CHZ3Q7mjn5VnpZCp5 IbBnAY3R6pcijmsHy3+B/03cit0f56vv9cRNnWsRGR6ZR3tqWttAkxrTtWB6cI3L eggnoH2QD+06zXWx4XnDU78EG9fqbDCcJprG9sRpNRZcDiw/Gw8QrQBN8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLokwjzCTulqixp4QXDs5N7xjQkSMB8GA1UdIwQY MBaAFDONQvuz9D9W3bh4LmVJCiPYW3LhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTQxQy03UDBQMWJkdUhndVpVa0tJOWhiY3VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85MTY2YjgtNWU1NC00NThkLTliMzIt NTU3YTdkMTFlMmFlLzEvdWlUQ1BNSk82V3FMR25oQmNPemszdkdOQ1JJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85MTY2YjgtNWU1NC00NThkLTliMzItNTU3YTdkMTFlMmFl LzEvTTQxQy03UDBQMWJkdUhndVpVa0tJOWhiY3VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV9eMA0G CSqGSIb3DQEBCwUAA4IBAQCtD8lPF8jSE6qLjQKnbRGlC5BTMLvfWBVEtm10Yf5U foVu2ozbmsvu7PDJTuJv/paAsqDsuInpAwLOjCWx7CdKwU3ISUcfIIBP7x0pSoFH PKy906805nqT6vD4L/n36nP7PyoMu7kaib3kotep1JW8DOC2K1kTMohABDRxC7ZA 4SyAbw2M+ZptnTFoDQ+c+ntUM/vvd+yC9KwXkpj6dHQxMzQz/aqMkXKutqQq1Ghx NcV1SVpKUAdaNaqIDZcjwbrDvbsQmIHSuLBm8Npjy2n3x6BqHhCvbum0lwpefp2j Cg0wNOr1mUxqplKxV97yxU3aYIp3vGWnrpx9WQAZ8Of+ -----END CERTIFICATE-----Generated at Sun Jan 25 12:01:25 2026 by rpki-client