This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/uCT5qS0TatwLKR2syBgBgC34NYE.roa File: uCT5qS0TatwLKR2syBgBgC34NYE.roa (raw, json) Hash identifier: 6Pav0LB8Y/JGRbLI7vMShFMSStiFyP+H+ECIrWK519s= Subject key identifier: B8:24:F9:A9:2D:13:6A:DC:0B:29:1D:AC:C8:18:01:80:2D:F8:35:81 Certificate issuer: /CN=c4064476c2c47f778474a14816c1e06a40813e5c Certificate serial: 019B7EA53DB34C42B7ABE56F4C4320920630 Authority key identifier: C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/uCT5qS0TatwLKR2syBgBgC34NYE.roa Signing time: Fri 02 Jan 2026 12:18:37 +0000 ROA not before: Fri 02 Jan 2026 12:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15725 IP address blocks: 185.98.236.0/22 maxlen: 24 217.17.192.0/20 maxlen: 24 2001:4bd8::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:3d:b3:4c:42:b7:ab:e5:6f:4c:43:20:92:06:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4064476c2c47f778474a14816c1e06a40813e5c Validity Not Before: Jan 2 12:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b824f9a92d136adc0b291dacc81801802df83581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:94:1e:ef:3b:6c:8f:59:a5:66:17:9f:34:47: ed:37:ab:6d:4a:0a:42:cd:d8:65:b7:f5:03:87:63: 67:98:7e:aa:6c:45:4f:c7:5d:4e:3c:e5:77:ba:5d: 2e:e7:4e:2a:e1:4c:1c:24:a4:24:73:0c:42:70:44: 7e:86:5b:32:d6:61:42:c6:0f:08:11:49:70:4a:12: 3d:df:0d:ed:d4:a6:ae:aa:3e:99:25:94:52:8c:c6: cb:32:00:f9:98:50:5b:83:9a:da:4d:ba:e5:ce:82: d9:94:0d:a3:88:2e:69:be:8e:5d:25:b4:76:75:f4: 5a:bd:c9:8a:12:12:b1:e4:19:a8:d2:39:92:17:c8: 16:b4:e1:fc:f6:eb:3d:d7:3f:80:3f:86:9a:14:03: 11:77:6c:4b:b8:a3:bb:2e:d6:a1:3b:17:4f:63:cd: ce:c0:b7:c8:68:84:2b:10:9a:2e:f7:a6:bd:fa:b9: b3:70:64:88:ea:5f:82:b6:b1:a7:46:1c:75:5c:51: d9:f6:a1:8a:86:9e:96:5b:d0:fa:08:50:73:76:07: c2:e9:a8:a0:d3:2f:2c:83:f0:5b:13:6d:f5:c2:36: 7e:7b:3c:56:30:10:5e:52:cb:06:48:15:8b:7e:05: 2d:c5:b3:a5:fa:db:d0:d6:2c:a8:b0:93:85:38:ff: fe:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:24:F9:A9:2D:13:6A:DC:0B:29:1D:AC:C8:18:01:80:2D:F8:35:81 X509v3 Authority Key Identifier: keyid:C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/uCT5qS0TatwLKR2syBgBgC34NYE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.98.236.0/22 217.17.192.0/20 IPv6: 2001:4bd8::/29 Signature Algorithm: sha256WithRSAEncryption a8:9f:6d:12:0d:06:66:62:f2:39:d4:dd:7b:c5:dc:92:61:1f: f7:8a:98:3d:37:94:c5:bc:94:9f:44:fa:72:6c:fe:d1:94:de: fe:bc:77:ae:63:4d:10:d0:bf:62:03:5d:43:8e:3e:7a:2f:2f: 4d:ce:44:bc:56:27:a5:27:d8:8a:6f:2a:94:2a:1f:8a:30:da: 10:c1:ca:1a:0b:f1:16:43:2f:ae:61:d3:d2:79:5b:45:a9:13: 20:d3:c2:3c:cd:9d:55:01:60:1d:59:79:1e:25:12:b1:98:69: 20:e2:3c:8b:1c:7c:90:4e:05:72:c8:06:4d:e5:7c:ec:98:06: 3d:24:d8:32:35:c0:4d:99:e4:1f:1e:4f:0f:41:fe:c3:01:3b: a7:fb:ba:e2:c2:71:0e:0d:56:e7:99:77:b0:5e:42:48:31:11: 9f:3c:9d:26:cc:99:5d:2e:0d:49:0f:af:03:0d:a2:e8:c3:34: 2c:a6:9a:df:c5:b2:21:90:f4:68:65:72:a3:f3:73:29:03:d6: 65:d3:f2:53:0c:84:9d:a5:48:79:e7:f6:c0:89:74:fd:c2:22: 1c:8f:72:48:5a:c4:7f:da:9d:a8:5e:13:a8:6c:79:99:c9:e5: aa:a2:83:be:40:2a:84:3e:33:28:59:dd:62:0b:79:c0:f6:b6: b9:1d:25:1f -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+pT2zTEK3q+VvTEMgkgYwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MDY0NDc2YzJjNDdmNzc4NDc0YTE0ODE2YzFlMDZhNDA4 MTNlNWMwHhcNMjYwMTAyMTIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODI0ZjlhOTJkMTM2YWRjMGIyOTFkYWNjODE4MDE4MDJkZjgzNTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpQe7ztsj1mlZhefNEftN6ttSgpC zdhlt/UDh2NnmH6qbEVPx11OPOV3ul0u504q4UwcJKQkcwxCcER+hlsy1mFCxg8I EUlwShI93w3t1Kauqj6ZJZRSjMbLMgD5mFBbg5raTbrlzoLZlA2jiC5pvo5dJbR2 dfRavcmKEhKx5Bmo0jmSF8gWtOH89us91z+AP4aaFAMRd2xLuKO7LtahOxdPY83O wLfIaIQrEJou96a9+rmzcGSI6l+CtrGnRhx1XFHZ9qGKhp6WW9D6CFBzdgfC6aig 0y8sg/BbE231wjZ+ezxWMBBeUssGSBWLfgUtxbOl+tvQ1iyosJOFOP/+iwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFLgk+aktE2rcCykdrMgYAYAt+DWBMB8GA1UdIwQY MBaAFMQGRHbCxH93hHShSBbB4GpAgT5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEFaRWRzTEVmM2VFZEtGSUZzSGdha0NCUGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85YTdkZjctMThiYS00MWY3LTg4MGEt NzQ2Nzc3ZTIxYzViLzEvdUNUNXFTMFRhdHdMS1Iyc3lCZ0JnQzM0TllFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC85YTdkZjctMThiYS00MWY3LTg4MGEtNzQ2Nzc3ZTIxYzVi LzEveEFaRWRzTEVmM2VFZEtGSUZzSGdha0NCUGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuWLsAwQE 2RHAMA0EAgACMAcDBQMgAUvYMA0GCSqGSIb3DQEBCwUAA4IBAQCon20SDQZmYvI5 1N17xdySYR/3ipg9N5TFvJSfRPpybP7RlN7+vHeuY00Q0L9iA11Djj56Ly9NzkS8 VielJ9iKbyqUKh+KMNoQwcoaC/EWQy+uYdPSeVtFqRMg08I8zZ1VAWAdWXkeJRKx mGkg4jyLHHyQTgVyyAZN5XzsmAY9JNgyNcBNmeQfHk8PQf7DATun+7riwnEODVbn mXewXkJIMRGfPJ0mzJldLg1JD68DDaLowzQspprfxbIhkPRoZXKj83MpA9Zl0/JT DISdpUh55/bAiXT9wiIcj3JIWsR/2p2oXhOobHmZyeWqooO+QCqEPjMoWd1iC3nA 9ra5HSUf -----END CERTIFICATE-----Generated at Mon Jan 26 23:00:54 2026 by rpki-client