This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/uWf3tTVhXiVcTF_bsE9bw1MD2T4.roa File: uWf3tTVhXiVcTF_bsE9bw1MD2T4.roa (raw, json) Hash identifier: LCPMsfcyxURpdxTULAQXWYhhRiaQLuroc5jgvHzKoa4= Subject key identifier: B9:67:F7:B5:35:61:5E:25:5C:4C:5F:DB:B0:4F:5B:C3:53:03:D9:3E Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 019B79ECBE9D5DBD8D1F6EEDAA62570B00E5 Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/uWf3tTVhXiVcTF_bsE9bw1MD2T4.roa Signing time: Thu 01 Jan 2026 14:18:37 +0000 ROA not before: Thu 01 Jan 2026 14:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49715 IP address blocks: 94.240.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:be:9d:5d:bd:8d:1f:6e:ed:aa:62:57:0b:00:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Jan 1 14:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b967f7b535615e255c4c5fdbb04f5bc35303d93e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b5:2e:0f:bf:c4:00:01:a5:9c:a4:3f:fd:2a: 43:2c:fe:ea:75:63:01:a9:3d:7f:e0:d2:7b:ab:04: d2:8d:ad:ca:b7:f0:09:a2:4d:99:8a:e3:43:98:ee: c7:69:93:8a:93:e3:dc:fc:da:2d:49:40:81:21:04: 80:c6:2f:cb:8b:ca:18:79:07:b8:c8:59:3c:08:95: fe:52:4b:f9:0f:b5:ba:ab:28:dd:1a:37:c0:99:99: 9e:84:72:a4:be:39:a0:43:e1:28:8a:a0:35:42:39: 88:0d:35:c7:45:84:62:d4:3b:0f:f4:10:05:47:44: ef:68:0f:50:4b:04:3e:04:0e:7c:15:00:cd:d8:35: f3:32:2e:bb:b0:c1:39:13:4b:bd:35:5d:fd:5b:d1: 2f:0f:e5:8f:31:15:ec:b4:e5:17:39:85:e3:cb:f9: 17:06:64:de:41:43:9c:e4:7f:cd:cb:a2:e9:a1:85: e7:c6:b9:f2:b7:50:57:91:c5:5f:1e:f1:75:b2:69: 5b:71:ec:83:8e:d0:74:71:cb:36:38:53:a5:e2:67: 69:10:5a:d2:4f:27:40:1a:42:b8:37:02:ab:65:3b: 50:d7:19:22:c4:01:0c:77:ee:a4:2d:7e:e6:66:8f: 5b:ab:21:b3:b0:b4:5f:19:b2:09:bc:84:fd:13:25: 08:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:67:F7:B5:35:61:5E:25:5C:4C:5F:DB:B0:4F:5B:C3:53:03:D9:3E X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/uWf3tTVhXiVcTF_bsE9bw1MD2T4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.240.8.0/22 Signature Algorithm: sha256WithRSAEncryption 72:af:13:9b:41:9d:4c:b6:66:e2:a2:7a:3d:c5:b1:62:b7:7f: 05:1b:c1:97:2c:14:be:10:e9:fc:c5:06:70:49:8b:41:28:6a: 89:ab:bd:5c:21:e7:8c:bc:82:d0:d8:70:ff:52:38:21:95:d3: 9e:46:bb:7a:bb:45:bb:e4:82:fe:e9:39:4d:b6:d4:21:a5:9f: 4a:94:b3:07:5b:8b:f3:a0:c3:54:c1:bf:b5:8e:ce:b4:8b:04: e3:0d:3f:dc:29:68:bd:13:93:e7:30:c1:79:8d:87:51:7f:1b: 68:6f:d0:6b:e7:c5:00:2b:54:fc:1b:9d:c7:4b:a2:5b:ba:af: da:a3:5f:5b:1f:4f:8e:f7:0a:31:f2:68:e8:5e:fd:01:66:e7: a4:81:eb:af:ab:3a:17:1b:41:4b:ad:17:c0:c6:29:f7:0d:fc: ca:5d:9f:be:6c:06:5c:ba:3e:36:28:73:d4:2d:d2:2c:a4:80: 25:c2:1d:1e:f6:07:4b:3b:71:4d:ec:18:ae:83:14:71:da:c1: db:16:cb:09:ce:46:f4:9a:64:52:eb:2b:e7:53:27:95:06:bf: 40:ca:bf:9f:78:58:a3:a1:4e:c9:c2:5f:b1:07:9a:93:50:22: 87:0c:cc:79:df:c1:09:4f:a1:7f:31:e2:7b:a7:4c:2e:9a:4f: a7:58:16:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57L6dXb2NH27tqmJXCwDlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjYwMTAxMTQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTY3ZjdiNTM1NjE1ZTI1NWM0YzVmZGJiMDRmNWJjMzUzMDNkOTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrUuD7/EAAGlnKQ//SpDLP7qdWMB qT1/4NJ7qwTSja3Kt/AJok2ZiuNDmO7HaZOKk+Pc/NotSUCBIQSAxi/Li8oYeQe4 yFk8CJX+Ukv5D7W6qyjdGjfAmZmehHKkvjmgQ+EoiqA1QjmIDTXHRYRi1DsP9BAF R0TvaA9QSwQ+BA58FQDN2DXzMi67sME5E0u9NV39W9EvD+WPMRXstOUXOYXjy/kX BmTeQUOc5H/Ny6LpoYXnxrnyt1BXkcVfHvF1smlbceyDjtB0ccs2OFOl4mdpEFrS TydAGkK4NwKrZTtQ1xkixAEMd+6kLX7mZo9bqyGzsLRfGbIJvIT9EyUIuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLln97U1YV4lXExf27BPW8NTA9k+MB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvdVdmM3RUVmhYaVZjVEZfYnNFOWJ3MU1EMlQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXvAIMA0G CSqGSIb3DQEBCwUAA4IBAQByrxObQZ1Mtmbiono9xbFit38FG8GXLBS+EOn8xQZw SYtBKGqJq71cIeeMvILQ2HD/UjghldOeRrt6u0W75IL+6TlNttQhpZ9KlLMHW4vz oMNUwb+1js60iwTjDT/cKWi9E5PnMMF5jYdRfxtob9Br58UAK1T8G53HS6Jbuq/a o19bH0+O9wox8mjoXv0BZuekgeuvqzoXG0FLrRfAxin3DfzKXZ++bAZcuj42KHPU LdIspIAlwh0e9gdLO3FN7BiugxRx2sHbFssJzkb0mmRS6yvnUyeVBr9Ayr+feFij oU7Jwl+xB5qTUCKHDMx538EJT6F/MeJ7p0wumk+nWBZT -----END CERTIFICATE-----Generated at Mon Jan 26 07:08:14 2026 by rpki-client