This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/Uznpkkv0JYkSUm9kbpD4n2vwDL4.roa File: Uznpkkv0JYkSUm9kbpD4n2vwDL4.roa (raw, json) Hash identifier: 88Ax8PWskGYROIxixKAI4HTq+EJ3yI4/MFKViDiNQbE= Subject key identifier: 53:39:E9:92:4B:F4:25:89:12:52:6F:64:6E:90:F8:9F:6B:F0:0C:BE Certificate issuer: /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24 Certificate serial: 019B7E3759BEF5D0E94FC8F05BEA08CBD115 Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/Uznpkkv0JYkSUm9kbpD4n2vwDL4.roa Signing time: Fri 02 Jan 2026 10:18:35 +0000 ROA not before: Fri 02 Jan 2026 10:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51411 IP address blocks: 31.25.92.0/24 maxlen: 24 31.25.93.0/24 maxlen: 24 31.25.94.0/24 maxlen: 24 31.25.95.0/24 maxlen: 24 178.236.32.0/22 maxlen: 22 178.236.33.0/24 maxlen: 24 178.236.34.0/24 maxlen: 24 178.236.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:59:be:f5:d0:e9:4f:c8:f0:5b:ea:08:cb:d1:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24 Validity Not Before: Jan 2 10:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5339e9924bf4258912526f646e90f89f6bf00cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:75:3f:fa:55:05:5f:75:e9:12:a8:d6:c1:04: e7:4c:9b:16:6d:19:4d:65:2f:c4:09:f7:c4:16:6f: 81:6c:44:d0:5d:51:45:86:f3:2c:26:f0:b9:2d:98: 01:95:73:1b:61:f0:a3:59:59:51:d7:8e:a1:48:ca: 99:02:e8:f1:08:e2:52:54:b7:e0:c3:40:9c:f7:51: 97:bf:19:0d:0b:87:7b:a7:8a:0b:9d:2f:c5:01:ea: e8:db:7f:74:fd:0c:84:7b:0f:92:47:10:b5:ce:8e: 13:9a:50:b4:00:33:a1:98:bc:7c:15:af:36:36:43: 2c:60:24:cc:e8:9e:68:59:33:53:6a:49:7e:e7:38: 12:06:19:3d:c5:5f:d4:a0:b9:2f:30:10:e8:74:85: 9d:a5:f5:69:56:d1:d0:a0:b4:4b:0c:f7:16:0b:ec: 33:e5:20:78:1d:b7:f5:81:d2:73:ac:e0:e6:06:ff: 6d:46:cd:c9:ab:a5:94:e6:3c:05:2d:c5:02:2e:4c: b9:a4:e4:64:30:fa:86:5a:ee:35:63:56:31:9b:4f: 25:c8:a1:fb:eb:46:e7:61:ce:f4:e4:1c:69:80:5b: e6:18:ba:dc:66:5f:7e:c0:4b:25:91:b5:3e:bd:e8: 9f:2f:19:3b:e2:dd:ca:87:b7:65:f4:7f:4e:8e:a9: 80:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:39:E9:92:4B:F4:25:89:12:52:6F:64:6E:90:F8:9F:6B:F0:0C:BE X509v3 Authority Key Identifier: keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/Uznpkkv0JYkSUm9kbpD4n2vwDL4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.25.92.0/22 178.236.32.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:24:fa:75:05:5d:37:53:d6:84:0b:41:7b:50:27:32:d9:1f: d8:d2:d5:8d:0e:5b:fc:3b:4a:79:44:82:c7:c0:9c:60:0e:58: 6a:c4:d4:de:c6:fa:36:55:28:3a:8d:2f:77:77:78:4b:dd:bf: 0e:62:d6:4c:1c:64:d5:a5:d4:4e:15:8e:cf:6a:35:c2:e0:e0: 4c:4a:c2:a8:4d:3c:55:43:6b:a0:73:4e:0f:81:6a:d8:18:54: 4a:49:74:e4:20:3c:3e:c5:dd:cc:fd:b9:f8:47:78:01:0d:3d: 44:b7:92:25:59:c2:43:6b:30:54:3c:ff:2e:1a:1f:25:77:5d: eb:b3:e4:6f:4c:63:17:99:e3:1e:07:f5:6d:b0:1b:74:43:56: e6:9b:dd:17:82:0f:00:60:42:f9:b6:3b:2f:00:8e:0b:63:dc: 44:e6:d2:45:81:8f:d8:47:c3:85:08:92:fb:97:f7:6d:72:a6: be:6f:5d:45:12:9a:44:81:87:65:66:bf:59:31:6f:e5:b6:ee: 83:60:c4:4b:12:9e:5d:dc:8c:07:81:f0:57:f5:7d:99:44:32: 89:d3:25:40:0a:24:a2:56:b4:7e:1f:6c:36:b4:31:9f:ec:37: df:bb:89:67:13:4d:71:33:05:b5:b1:0b:84:f4:18:a3:43:b1: e0:74:6b:fb -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+N1m+9dDpT8jwW+oIy9EVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhM2QwYmMxMWIyOWRhNDRhZDU3MzA0YzNmODU2ODg3MGEw MTljMjQwHhcNMjYwMTAyMTAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzM5ZTk5MjRiZjQyNTg5MTI1MjZmNjQ2ZTkwZjg5ZjZiZjAwY2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXU/+lUFX3XpEqjWwQTnTJsWbRlN ZS/ECffEFm+BbETQXVFFhvMsJvC5LZgBlXMbYfCjWVlR146hSMqZAujxCOJSVLfg w0Cc91GXvxkNC4d7p4oLnS/FAero2390/QyEew+SRxC1zo4TmlC0ADOhmLx8Fa82 NkMsYCTM6J5oWTNTakl+5zgSBhk9xV/UoLkvMBDodIWdpfVpVtHQoLRLDPcWC+wz 5SB4Hbf1gdJzrODmBv9tRs3Jq6WU5jwFLcUCLky5pORkMPqGWu41Y1Yxm08lyKH7 60bnYc705BxpgFvmGLrcZl9+wEslkbU+veifLxk74t3Kh7dl9H9OjqmAXQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFFM56ZJL9CWJElJvZG6Q+J9r8Ay+MB8GA1UdIwQY MBaAFPo9C8EbKdpErVcwTD+FaIcKAZwkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1qMEx3UnNwMmtTdFZ6Qk1QNFZvaHdvQm5DUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1 LWQyMTA3MWVmNzM1Yi8xL1V6bnBra3YwSllrU1VtOWticEQ0bjJ2d0RMNC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzMvYWE2NjI5LWQxNDktNDE5Ny1hMzE1LWQyMTA3MWVmNzM1 Yi8xLzEtajBMd1JzcDJrU3RWekJNUDRWb2h3b0JuQ1EuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAIfGVwD BAKy7CAwDQYJKoZIhvcNAQELBQADggEBAFsk+nUFXTdT1oQLQXtQJzLZH9jS1Y0O W/w7SnlEgsfAnGAOWGrE1N7G+jZVKDqNL3d3eEvdvw5i1kwcZNWl1E4Vjs9qNcLg 4ExKwqhNPFVDa6BzTg+BatgYVEpJdOQgPD7F3cz9ufhHeAENPUS3kiVZwkNrMFQ8 /y4aHyV3Xeuz5G9MYxeZ4x4H9W2wG3RDVuab3ReCDwBgQvm2Oy8Ajgtj3ETm0kWB j9hHw4UIkvuX921ypr5vXUUSmkSBh2Vmv1kxb+W27oNgxEsSnl3cjAeB8Ff1fZlE MonTJUAKJKJWtH4fbDa0MZ/sN9+7iWcTTXEzBbWxC4T0GKNDseB0a/s= -----END CERTIFICATE-----Generated at Mon Jan 26 03:58:21 2026 by rpki-client