This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/pUi-gLSXqZ0JaQPDBRSSYpMiavg.roa File: pUi-gLSXqZ0JaQPDBRSSYpMiavg.roa (raw, json) Hash identifier: BVbd5i0a2oHy3QrO+gV4ifjJEQxi06QcvV9UBgsyx9E= Subject key identifier: A5:48:BE:80:B4:97:A9:9D:09:69:03:C3:05:14:92:62:93:22:6A:F8 Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Certificate serial: 019B78A3360BF7769AC5AF509F24B675B71A Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/pUi-gLSXqZ0JaQPDBRSSYpMiavg.roa Signing time: Thu 01 Jan 2026 08:18:40 +0000 ROA not before: Thu 01 Jan 2026 08:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205833 IP address blocks: 188.0.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:36:0b:f7:76:9a:c5:af:50:9f:24:b6:75:b7:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Validity Not Before: Jan 1 08:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a548be80b497a99d096903c30514926293226af8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:86:52:6f:50:19:59:d5:a5:c6:28:2a:4b:76: 2d:89:6f:0b:57:1f:70:cf:a9:60:9e:18:2d:f1:65: 98:eb:79:e8:78:11:12:3e:2c:34:e5:35:eb:73:35: 58:02:b9:5a:e8:70:c4:f8:d7:45:de:a4:af:50:4c: 17:6c:8a:c5:3a:b4:53:df:e9:f8:78:b2:ff:1d:f0: d7:02:8b:b9:8f:3a:2d:31:ec:43:2a:49:1c:bf:49: ab:44:55:55:43:ef:2e:ae:1f:c3:4b:bb:1f:ad:97: 60:82:29:45:df:9c:ac:e2:b2:bc:7c:42:98:d6:78: 03:36:db:0c:25:16:ac:1d:42:36:65:79:af:0f:e6: 4f:73:45:28:58:fb:4d:46:13:d5:01:ce:b2:78:3e: cd:16:28:37:5a:b3:7a:00:25:0c:90:8a:ad:22:fc: e4:74:33:9e:de:3c:93:5c:16:80:bb:17:90:51:f4: 3f:55:ff:25:9e:0c:f7:11:58:ec:5a:d4:ae:65:bd: 17:69:a2:50:23:95:05:f8:41:92:d5:7c:47:a7:dd: 6f:d5:f9:8d:69:e3:ee:03:b4:ee:f8:59:65:ea:72: 44:3f:af:91:73:54:ab:4e:ac:b3:f7:99:70:1e:39: 27:48:f4:9f:96:42:39:23:17:79:31:11:88:aa:4a: 79:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:48:BE:80:B4:97:A9:9D:09:69:03:C3:05:14:92:62:93:22:6A:F8 X509v3 Authority Key Identifier: keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/pUi-gLSXqZ0JaQPDBRSSYpMiavg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.0.245.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:ac:00:d7:67:83:ba:78:51:99:1f:0d:14:bc:8e:72:bb:30: 30:bd:17:44:9f:89:9f:07:e1:16:da:1e:74:62:45:6e:62:e0: 9e:29:a9:1b:99:31:b1:91:e8:3e:cc:e9:7d:d6:5c:29:88:ad: 0b:0a:b8:78:9c:12:67:48:ce:ef:cb:8d:45:c2:15:5b:61:af: d1:8c:53:5c:73:d6:5f:d9:1a:41:37:d0:61:14:8f:ec:47:b8: 79:65:4e:f8:24:5f:ca:d2:6f:52:5f:e8:9d:36:9d:43:56:bf: bd:7d:24:e6:37:a9:cf:1e:3f:25:00:e8:3f:e5:18:fa:da:b3: a6:d1:a6:60:66:d7:8e:11:6b:6c:33:4d:22:82:2d:16:aa:40: 28:87:6f:72:70:f0:07:d0:84:85:41:0b:cf:16:6e:26:9f:7b: 99:b5:67:e4:0a:a1:af:59:fd:65:a1:d5:bd:97:83:29:f1:b1: b8:ad:ed:e5:43:e2:cd:0c:61:08:8f:47:86:14:8e:80:be:9e: b1:f1:40:4c:6d:64:2f:90:76:49:3a:cd:5f:cf:57:e6:47:72: 29:06:20:e1:54:59:bf:30:f0:14:7e:4c:d8:1f:ba:b1:91:7c: 13:55:24:89:78:8d:2f:67:29:bf:e1:3e:3e:95:0a:4c:37:51: bd:f3:cf:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ozYL93aaxa9QnyS2dbcaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzAzMGE0YjY3Zjk1YzJmZWQ5MDJkNTY2NTdmYWEyNDk0 YjUxMjkwHhcNMjYwMTAxMDgxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTQ4YmU4MGI0OTdhOTlkMDk2OTAzYzMwNTE0OTI2MjkzMjI2YWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoZSb1AZWdWlxigqS3YtiW8LVx9w z6lgnhgt8WWY63noeBESPiw05TXrczVYArla6HDE+NdF3qSvUEwXbIrFOrRT3+n4 eLL/HfDXAou5jzotMexDKkkcv0mrRFVVQ+8urh/DS7sfrZdggilF35ys4rK8fEKY 1ngDNtsMJRasHUI2ZXmvD+ZPc0UoWPtNRhPVAc6yeD7NFig3WrN6ACUMkIqtIvzk dDOe3jyTXBaAuxeQUfQ/Vf8lngz3EVjsWtSuZb0XaaJQI5UF+EGS1XxHp91v1fmN aePuA7Tu+Fll6nJEP6+Rc1SrTqyz95lwHjknSPSflkI5Ixd5MRGIqkp5ZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKVIvoC0l6mdCWkDwwUUkmKTImr4MB8GA1UdIwQY MBaAFG8wMKS2f5XC/tkC1WZX+qJJS1EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYt YmYzYjIxYTI3MGYyLzEvcFVpLWdMU1hxWjBKYVFQREJSU1NZcE1pYXZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYtYmYzYjIxYTI3MGYy LzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvAD1MA0G CSqGSIb3DQEBCwUAA4IBAQAsrADXZ4O6eFGZHw0UvI5yuzAwvRdEn4mfB+EW2h50 YkVuYuCeKakbmTGxkeg+zOl91lwpiK0LCrh4nBJnSM7vy41FwhVbYa/RjFNcc9Zf 2RpBN9BhFI/sR7h5ZU74JF/K0m9SX+idNp1DVr+9fSTmN6nPHj8lAOg/5Rj62rOm 0aZgZteOEWtsM00igi0WqkAoh29ycPAH0ISFQQvPFm4mn3uZtWfkCqGvWf1lodW9 l4Mp8bG4re3lQ+LNDGEIj0eGFI6Avp6x8UBMbWQvkHZJOs1fz1fmR3IpBiDhVFm/ MPAUfkzYH7qxkXwTVSSJeI0vZym/4T4+lQpMN1G988+l -----END CERTIFICATE-----Generated at Mon Jan 26 07:27:50 2026 by rpki-client