This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/uxXZ_hKsmnhQRsfJ1EfmQad0ATE.roa File: uxXZ_hKsmnhQRsfJ1EfmQad0ATE.roa (raw, json) Hash identifier: GZswREwDe56hmbMlhE5Azz0F2ZeFdeK1GV3fvvLTRak= Subject key identifier: BB:15:D9:FE:12:AC:9A:78:50:46:C7:C9:D4:47:E6:41:A7:74:01:31 Certificate issuer: /CN=b78678bd654ca6b10a5c773bc269754dc234cfd5 Certificate serial: 019B78A312006FEB8482E1FA55F200524D8A Authority key identifier: B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/uxXZ_hKsmnhQRsfJ1EfmQad0ATE.roa Signing time: Thu 01 Jan 2026 08:18:31 +0000 ROA not before: Thu 01 Jan 2026 08:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214123 IP address blocks: 192.140.229.0/24 maxlen: 24 192.140.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:12:00:6f:eb:84:82:e1:fa:55:f2:00:52:4d:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b78678bd654ca6b10a5c773bc269754dc234cfd5 Validity Not Before: Jan 1 08:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb15d9fe12ac9a785046c7c9d447e641a7740131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b8:6f:11:f0:d5:3f:0d:bc:6b:a0:36:c3:c1: 0d:a6:4b:4b:4b:b8:b0:42:e0:05:01:c2:ea:1d:59: 87:b5:10:f3:9b:f2:a0:85:fb:f9:a4:c6:01:65:de: b0:85:f7:04:f9:39:e9:d5:66:ab:3a:f6:ea:34:af: 72:80:3c:97:5c:01:b9:8f:33:d1:23:f1:15:53:47: 0c:f3:10:5c:5e:62:73:a5:6e:c9:af:6f:97:5c:16: d0:15:49:02:40:98:e9:2d:08:19:cd:9e:ca:87:d6: e5:2e:83:8f:df:68:a0:76:ba:3b:65:c2:b7:cb:83: c2:22:62:91:05:44:47:bf:b9:f6:05:2f:ff:08:3a: 0b:30:0a:ec:c3:36:77:a1:9c:e9:31:5c:7a:3f:a2: f9:b5:53:cf:a6:4d:40:16:34:f4:b8:a0:9e:6d:83: 59:07:06:72:6c:9a:45:8c:a3:a9:63:97:25:46:39: 72:0e:33:21:ce:75:4a:41:5a:4f:20:7e:a0:ac:11: 77:75:3e:99:33:53:8f:7e:de:a1:98:c3:e0:d9:a1: 85:67:72:f5:60:9f:68:87:45:a1:8d:aa:08:c7:8b: 7a:d6:cb:52:c2:5b:c8:14:e1:5f:46:d1:b4:05:8b: ed:2a:99:9a:8a:d7:ea:67:97:2a:16:fa:14:c6:98: 82:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:15:D9:FE:12:AC:9A:78:50:46:C7:C9:D4:47:E6:41:A7:74:01:31 X509v3 Authority Key Identifier: keyid:B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/uxXZ_hKsmnhQRsfJ1EfmQad0ATE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.140.229.0-192.140.230.255 Signature Algorithm: sha256WithRSAEncryption 74:0c:7a:2d:86:f2:c2:9f:a9:60:d8:91:aa:14:0e:20:58:71: 7f:a2:b8:87:81:f8:b5:e6:77:71:d2:52:e0:d3:b0:20:73:68: f9:4d:e3:fd:0e:14:2d:b1:47:17:bc:75:2e:71:a3:1a:15:25: 0b:1d:0c:b4:d7:5f:cf:8c:dc:83:12:3f:db:fa:41:32:2b:c8: df:d1:47:d5:c0:59:44:b6:78:28:fd:83:1b:05:18:c1:a0:94: e5:43:6f:da:5a:85:2a:d6:66:fc:e1:1b:86:e3:7d:78:c2:cc: 85:87:dc:ac:63:6f:0c:bc:c2:0b:1f:c0:0c:20:9d:f7:af:1c: a0:8d:ff:16:c9:8d:f4:c5:4a:29:56:95:fe:3c:ff:c3:a2:48: 5d:80:8c:f0:60:52:f7:e9:86:02:7c:6f:3a:c9:cc:11:8e:72: 49:26:b2:6e:e4:42:78:33:2e:3d:64:f3:12:9d:86:a9:e6:32: 87:95:e1:da:31:37:e2:17:dd:35:4a:64:27:69:f0:d6:ea:d5: ca:32:d1:da:f4:cd:d6:84:7e:bb:cb:88:bd:0f:07:5f:f8:e6: 6f:b6:f1:7a:f0:5e:3a:65:c9:74:bc:98:84:d6:ff:29:8f:62: 2c:77:d9:8c:da:e8:74:c2:52:20:cc:20:81:be:2b:6c:a7:40: 39:fb:02:ac -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt4oxIAb+uEguH6VfIAUk2KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ODY3OGJkNjU0Y2E2YjEwYTVjNzczYmMyNjk3NTRkYzIz NGNmZDUwHhcNMjYwMTAxMDgxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjE1ZDlmZTEyYWM5YTc4NTA0NmM3YzlkNDQ3ZTY0MWE3NzQwMTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7hvEfDVPw28a6A2w8ENpktLS7iw QuAFAcLqHVmHtRDzm/Kghfv5pMYBZd6whfcE+Tnp1WarOvbqNK9ygDyXXAG5jzPR I/EVU0cM8xBcXmJzpW7Jr2+XXBbQFUkCQJjpLQgZzZ7Kh9blLoOP32igdro7ZcK3 y4PCImKRBURHv7n2BS//CDoLMArswzZ3oZzpMVx6P6L5tVPPpk1AFjT0uKCebYNZ BwZybJpFjKOpY5clRjlyDjMhznVKQVpPIH6grBF3dT6ZM1OPft6hmMPg2aGFZ3L1 YJ9oh0WhjaoIx4t61stSwlvIFOFfRtG0BYvtKpmaitfqZ5cqFvoUxpiCSQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLsV2f4SrJp4UEbHydRH5kGndAExMB8GA1UdIwQY MBaAFLeGeL1lTKaxClx3O8JpdU3CNM/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDRaNHZXVk1wckVLWEhjN3dtbDFUY0kwejlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS80ODBmNGEtYTkzNy00MTQ5LWFlZTgt ZTMyOTI0YWM3YjYzLzEvdXhYWl9oS3NtbmhRUnNmSjFFZm1RYWQwQVRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS80ODBmNGEtYTkzNy00MTQ5LWFlZTgtZTMyOTI0YWM3YjYz LzEvdDRaNHZXVk1wckVLWEhjN3dtbDFUY0kwejlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADAjOUD BADAjOYwDQYJKoZIhvcNAQELBQADggEBAHQMei2G8sKfqWDYkaoUDiBYcX+iuIeB +LXmd3HSUuDTsCBzaPlN4/0OFC2xRxe8dS5xoxoVJQsdDLTXX8+M3IMSP9v6QTIr yN/RR9XAWUS2eCj9gxsFGMGglOVDb9pahSrWZvzhG4bjfXjCzIWH3Kxjbwy8wgsf wAwgnfevHKCN/xbJjfTFSilWlf48/8OiSF2AjPBgUvfphgJ8bzrJzBGOckkmsm7k QngzLj1k8xKdhqnmMoeV4doxN+IX3TVKZCdp8Nbq1coy0dr0zdaEfrvLiL0PB1/4 5m+28XrwXjplyXS8mITW/ymPYix32Yza6HTCUiDMIIG+K2ynQDn7Aqw= -----END CERTIFICATE-----Generated at Mon Jan 26 01:02:08 2026 by rpki-client