This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/UziBeF9vZhF9BgfMO9asPeRvxQs.roa File: UziBeF9vZhF9BgfMO9asPeRvxQs.roa (raw, json) Hash identifier: b93bcZj29ys10OmZ+k4Z6n8bU3xxStbAH0qnq54JvrM= Subject key identifier: 53:38:81:78:5F:6F:66:11:7D:06:07:CC:3B:D6:AC:3D:E4:6F:C5:0B Certificate issuer: /CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1 Certificate serial: 019B7C805373510EDF734108E80E09C9DFE0 Authority key identifier: 16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/UziBeF9vZhF9BgfMO9asPeRvxQs.roa Signing time: Fri 02 Jan 2026 02:19:03 +0000 ROA not before: Fri 02 Jan 2026 02:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20594 IP address blocks: 185.62.144.0/23 maxlen: 23 185.62.146.0/24 maxlen: 24 217.194.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:53:73:51:0e:df:73:41:08:e8:0e:09:c9:df:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1 Validity Not Before: Jan 2 02:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=533881785f6f66117d0607cc3bd6ac3de46fc50b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:b3:c9:16:c4:af:31:e1:5d:70:f1:cf:78:53: cb:fd:67:92:76:22:47:d5:9e:b4:54:7f:0b:20:cc: 77:9d:2e:3c:d3:37:03:68:e4:41:eb:e2:a2:d4:4d: e9:d4:1e:3d:07:1b:7a:9d:f5:40:49:c0:73:1c:bc: 84:bd:15:c4:4c:91:ab:c1:87:73:20:65:6a:26:aa: fa:66:0d:a6:b6:99:ef:fb:5e:34:6a:70:3c:25:bd: e7:52:d6:69:7c:38:e0:b2:e3:47:31:95:10:27:0a: a2:c2:c1:15:b2:a1:1d:17:89:e3:2e:5c:cd:0c:f7: dc:e4:fc:01:49:57:63:3a:a2:71:e3:27:0d:00:48: 29:7a:58:22:39:e4:7c:ff:cf:ed:71:9f:e2:6d:96: a2:16:86:e3:97:42:73:e8:5a:94:99:ba:e3:07:7f: d4:8e:09:c4:71:11:9f:37:60:b7:9d:2f:4a:a1:4b: 35:7d:8a:d2:4e:9c:d9:18:74:62:ac:f3:30:1f:b5: 49:86:d5:4a:1e:b1:d3:72:a9:4f:f8:2f:b6:cc:80: 67:a5:7d:b1:0a:bd:6f:ae:3c:9f:49:87:9e:db:75: 58:c3:c8:10:05:97:b2:32:23:5f:17:da:51:67:01: 6d:e4:e7:9c:6f:ec:d0:dd:a1:6b:8b:6d:23:0b:da: b7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:38:81:78:5F:6F:66:11:7D:06:07:CC:3B:D6:AC:3D:E4:6F:C5:0B X509v3 Authority Key Identifier: keyid:16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/UziBeF9vZhF9BgfMO9asPeRvxQs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.62.144.0-185.62.146.255 217.194.32.0/20 Signature Algorithm: sha256WithRSAEncryption 4b:b7:d1:a0:a5:30:18:54:d8:a2:d6:96:af:d1:8e:c4:20:03: 65:63:8a:97:c5:a3:9e:51:d7:e5:95:b9:6a:5f:66:e4:c0:73: 86:73:21:ea:59:21:c3:57:3e:b8:b1:f6:e8:6a:f7:de:17:56: de:ae:ea:f8:44:98:bc:ce:b3:5b:67:0e:da:91:3a:32:0a:b6: 7d:90:77:e6:7a:89:8e:11:b7:f9:69:59:87:b3:3f:f0:10:d2: c3:98:21:4f:57:a0:bb:8b:e8:28:e6:e1:0d:b9:98:20:3f:f9: 4a:27:53:ce:b3:43:78:21:ab:12:db:38:b3:e0:31:73:a2:74: 0d:6a:e8:f8:5a:4a:bd:79:48:9e:41:26:2b:7d:9a:24:d3:b9: 7c:2f:93:08:b4:59:ef:cd:32:60:39:87:16:68:dc:f6:f3:0e: fb:16:b7:c3:f4:da:c3:d9:ba:61:a3:80:94:92:61:3d:5e:b0: 65:0b:08:3d:e9:ff:58:44:9a:6d:4c:72:f7:92:2b:98:8c:23: 6b:98:89:96:6f:cc:db:8e:78:84:2b:21:be:a2:18:08:a2:47: fb:ea:3b:89:88:2a:e3:6d:1f:9e:72:5a:65:a7:34:2c:7a:60: 5e:df:33:48:18:68:1e:01:e1:73:67:57:2a:6d:5d:ae:3d:7e: 8e:38:b7:4e -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt8gFNzUQ7fc0EI6A4Jyd/gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2Y2RlMTM5YWUwNTczYjBhNGRkYTkzZTc3YjU3ZmYyN2Y5 YmViYTEwHhcNMjYwMTAyMDIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzM4ODE3ODVmNmY2NjExN2QwNjA3Y2MzYmQ2YWMzZGU0NmZjNTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+bPJFsSvMeFdcPHPeFPL/WeSdiJH 1Z60VH8LIMx3nS480zcDaORB6+Ki1E3p1B49Bxt6nfVAScBzHLyEvRXETJGrwYdz IGVqJqr6Zg2mtpnv+140anA8Jb3nUtZpfDjgsuNHMZUQJwqiwsEVsqEdF4njLlzN DPfc5PwBSVdjOqJx4ycNAEgpelgiOeR8/8/tcZ/ibZaiFobjl0Jz6FqUmbrjB3/U jgnEcRGfN2C3nS9KoUs1fYrSTpzZGHRirPMwH7VJhtVKHrHTcqlP+C+2zIBnpX2x Cr1vrjyfSYee23VYw8gQBZeyMiNfF9pRZwFt5Oecb+zQ3aFri20jC9q3ZQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFFM4gXhfb2YRfQYHzDvWrD3kb8ULMB8GA1UdIwQY MBaAFBbN4TmuBXOwpN2pPne1f/J/m+uhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnMzaE9hNEZjN0NrM2FrLWQ3Vl84bi1iNjZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zYzAyZjYtN2M0MS00OWJiLWI5ZGUt YjY5ZGNlNzU0N2ExLzEvVXppQmVGOXZaaEY5QmdmTU85YXNQZVJ2eFFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8zYzAyZjYtN2M0MS00OWJiLWI5ZGUtYjY5ZGNlNzU0N2Ex LzEvRnMzaE9hNEZjN0NrM2FrLWQ3Vl84bi1iNjZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAS5PpAD BAC5PpIDBATZwiAwDQYJKoZIhvcNAQELBQADggEBAEu30aClMBhU2KLWlq/RjsQg A2VjipfFo55R1+WVuWpfZuTAc4ZzIepZIcNXPrix9uhq994XVt6u6vhEmLzOs1tn DtqROjIKtn2Qd+Z6iY4Rt/lpWYezP/AQ0sOYIU9XoLuL6Cjm4Q25mCA/+UonU86z Q3ghqxLbOLPgMXOidA1q6PhaSr15SJ5BJit9miTTuXwvkwi0We/NMmA5hxZo3Pbz DvsWt8P02sPZumGjgJSSYT1esGULCD3p/1hEmm1McveSK5iMI2uYiZZvzNuOeIQr Ib6iGAiiR/vqO4mIKuNtH55yWmWnNCx6YF7fM0gYaB4B4XNnVyptXa49fo44t04= -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:04 2026 by rpki-client