This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/uMdvLhd0nAzb-t3qAHThe0aIqoc.roa File: uMdvLhd0nAzb-t3qAHThe0aIqoc.roa (raw, json) Hash identifier: R/qUt3vy2Q0qA3zo3sd4LqTWz9aSAv/W43kTlYx3ZuQ= Subject key identifier: B8:C7:6F:2E:17:74:9C:0C:DB:FA:DD:EA:00:74:E1:7B:46:88:AA:87 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 019B7CECE5C81D3450F4A84F73E1A73425C7 Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/uMdvLhd0nAzb-t3qAHThe0aIqoc.roa Signing time: Fri 02 Jan 2026 04:17:38 +0000 ROA not before: Fri 02 Jan 2026 04:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215336 IP address blocks: 185.35.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:e5:c8:1d:34:50:f4:a8:4f:73:e1:a7:34:25:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Jan 2 04:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8c76f2e17749c0cdbfaddea0074e17b4688aa87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e0:01:ba:7b:e7:ea:1f:db:c6:14:3e:17:bd: ee:4a:ac:ad:49:a1:6e:65:4e:ac:11:52:86:7f:18: 9e:6b:4e:16:fc:0c:ae:87:dc:74:49:59:df:58:6a: 71:0a:78:b3:fa:de:aa:5c:c4:bb:19:38:45:73:60: 09:49:fc:d7:76:57:1c:20:27:3d:39:7c:b3:7a:11: 5c:56:21:bb:78:9f:bb:5d:f1:16:55:fd:7c:ca:01: 62:10:8d:bb:70:0e:3b:84:20:f9:35:4d:e5:4b:5f: a4:c6:42:9a:6c:4d:fb:f2:db:37:45:c1:76:42:74: d3:3f:81:12:07:5a:90:9e:ed:11:6a:85:73:4a:25: 6a:4b:31:93:54:61:b4:f1:19:93:80:9b:71:d7:20: 57:2a:0e:3f:58:22:74:42:51:61:f0:2c:66:22:36: 2f:e3:ed:4e:e2:34:6c:ba:24:1a:d1:4d:ef:94:2c: 5f:e4:f2:f4:ad:e5:89:72:c7:51:a7:3d:74:88:73: 34:3f:8e:fb:f0:24:66:43:a3:2f:99:38:cc:0c:fb: 8b:4d:77:7c:14:13:89:5e:3f:41:6c:b7:bf:4d:15: 31:77:ba:d5:de:d6:39:aa:2a:68:35:18:36:72:8d: dd:e4:da:61:59:44:d3:61:ca:77:e7:c7:75:c7:e5: 95:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C7:6F:2E:17:74:9C:0C:DB:FA:DD:EA:00:74:E1:7B:46:88:AA:87 X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/uMdvLhd0nAzb-t3qAHThe0aIqoc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.35.203.0/24 Signature Algorithm: sha256WithRSAEncryption a7:38:a7:9e:74:f5:bd:87:b4:c5:a2:50:41:d0:03:9f:bd:5f: b4:9b:65:46:94:19:04:96:20:02:19:62:80:da:29:1c:42:dc: 2b:82:b2:ed:f1:e8:97:60:f5:2c:16:da:f2:35:dc:e3:1f:3b: 39:6e:17:0c:e4:3b:c2:24:8b:6d:45:f5:ab:7f:f5:d5:6a:d1: 49:51:31:be:20:30:1d:cd:ba:60:62:52:4b:e0:e3:9a:ce:78: fb:ed:e1:0e:e9:51:ff:76:26:e5:3c:63:16:74:9b:60:e6:8a: 00:af:a3:eb:ae:cf:e2:59:08:10:37:02:d5:d8:37:97:4a:24: 6e:66:fe:c6:c3:bc:d8:6f:c6:50:54:be:b5:23:61:89:d6:42: 1b:a5:47:da:2d:37:ae:da:65:08:fb:ca:92:16:da:62:58:48: 7d:dc:79:70:a2:00:63:63:97:34:b1:55:a8:0b:66:b2:92:a4: 17:d5:0a:7e:c1:c8:45:88:5f:d5:81:24:0f:f0:60:ce:e7:41: f2:21:4a:fe:25:00:ae:30:c8:6e:d8:35:8a:93:7f:ac:22:53: 86:58:14:15:29:17:3a:ce:4e:40:d8:69:0c:85:87:fa:ba:8c: 17:b8:42:3f:2e:97:c3:3c:bd:f6:e2:e1:88:2c:7e:a9:5c:64: fc:33:04:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87OXIHTRQ9KhPc+GnNCXHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjYwMTAyMDQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGM3NmYyZTE3NzQ5YzBjZGJmYWRkZWEwMDc0ZTE3YjQ2ODhhYTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+ABunvn6h/bxhQ+F73uSqytSaFu ZU6sEVKGfxiea04W/Ayuh9x0SVnfWGpxCniz+t6qXMS7GThFc2AJSfzXdlccICc9 OXyzehFcViG7eJ+7XfEWVf18ygFiEI27cA47hCD5NU3lS1+kxkKabE378ts3RcF2 QnTTP4ESB1qQnu0RaoVzSiVqSzGTVGG08RmTgJtx1yBXKg4/WCJ0QlFh8CxmIjYv 4+1O4jRsuiQa0U3vlCxf5PL0reWJcsdRpz10iHM0P4778CRmQ6MvmTjMDPuLTXd8 FBOJXj9BbLe/TRUxd7rV3tY5qipoNRg2co3d5NphWUTTYcp358d1x+WV+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLjHby4XdJwM2/rd6gB04XtGiKqHMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvdU1kdkxoZDBuQXpiLXQzcUFIVGhlMGFJcW9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSPLMA0G CSqGSIb3DQEBCwUAA4IBAQCnOKeedPW9h7TFolBB0AOfvV+0m2VGlBkEliACGWKA 2ikcQtwrgrLt8eiXYPUsFtryNdzjHzs5bhcM5DvCJIttRfWrf/XVatFJUTG+IDAd zbpgYlJL4OOaznj77eEO6VH/diblPGMWdJtg5ooAr6Prrs/iWQgQNwLV2DeXSiRu Zv7Gw7zYb8ZQVL61I2GJ1kIbpUfaLTeu2mUI+8qSFtpiWEh93HlwogBjY5c0sVWo C2aykqQX1Qp+wchFiF/VgSQP8GDO50HyIUr+JQCuMMhu2DWKk3+sIlOGWBQVKRc6 zk5A2GkMhYf6uowXuEI/LpfDPL324uGILH6pXGT8MwSZ -----END CERTIFICATE-----Generated at Sun Jan 25 18:22:29 2026 by rpki-client