This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/uEzr34GI2Dr5hwhEVt4xZfPC8EI.roa File: uEzr34GI2Dr5hwhEVt4xZfPC8EI.roa (raw, json) Hash identifier: kGeEk7OkD0P+nD/81UEoWaKV/DOV/0iCVS4vvfQK9NA= Subject key identifier: B8:4C:EB:DF:81:88:D8:3A:F9:87:08:44:56:DE:31:65:F3:C2:F0:42 Certificate issuer: /CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea Certificate serial: 019B7910C0D12C2F3DCF6F1B6C40CCED6F7C Authority key identifier: BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/uEzr34GI2Dr5hwhEVt4xZfPC8EI.roa Signing time: Thu 01 Jan 2026 10:18:19 +0000 ROA not before: Thu 01 Jan 2026 10:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201011 IP address blocks: 185.247.150.0/24 maxlen: 24 2a03:2a00:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c0:d1:2c:2f:3d:cf:6f:1b:6c:40:cc:ed:6f:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea Validity Not Before: Jan 1 10:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b84cebdf8188d83af987084456de3165f3c2f042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:72:a6:49:7d:65:ce:3c:d8:c5:b5:5f:45:66: de:ac:8c:80:26:1d:d8:5f:a0:39:78:99:9f:88:0a: f0:eb:84:80:b9:60:b0:72:76:5d:23:8b:d8:7e:03: 89:bb:ab:6e:ae:68:a6:32:8f:44:f4:3c:54:17:aa: 91:05:bc:ee:26:1d:6b:08:c0:cf:59:7f:f8:3f:3f: 30:31:4e:6b:58:e9:b9:19:a4:6c:a6:bb:f8:01:7e: 68:ac:f7:fb:20:cf:13:f3:34:85:e3:ea:42:8c:ea: f1:33:41:5c:40:e2:6e:1b:62:7f:b4:36:6b:20:22: 77:bc:40:8d:e2:86:ed:a0:86:a6:51:90:7c:17:d4: 2d:6b:89:d3:ae:ce:ba:7f:3c:62:66:e7:74:a8:8d: a6:c9:a4:5b:db:9f:43:21:fb:40:af:c7:4b:9b:fc: 6a:0a:5a:0f:0a:3b:47:60:9b:01:98:22:5a:bd:04: 3e:a3:d9:f5:0a:b8:e8:74:9a:77:2d:7e:7f:38:55: d1:f4:94:90:3e:6f:74:88:65:00:db:53:6f:72:b1: 6b:72:b0:d5:78:11:bd:1e:2c:85:6b:99:ad:7d:45: b3:3d:d7:9d:3a:d1:31:bb:39:b2:4e:fd:0c:a1:83: 4e:04:58:72:8e:9e:00:bb:1d:57:7c:0b:f1:00:20: c2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4C:EB:DF:81:88:D8:3A:F9:87:08:44:56:DE:31:65:F3:C2:F0:42 X509v3 Authority Key Identifier: keyid:BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/uEzr34GI2Dr5hwhEVt4xZfPC8EI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.247.150.0/24 IPv6: 2a03:2a00:10::/48 Signature Algorithm: sha256WithRSAEncryption 41:9b:85:82:bb:b6:42:c2:7b:03:00:81:69:06:31:c5:5f:6d: cd:0b:e0:e1:f4:16:1a:a8:c8:79:b8:dc:76:d9:f6:4f:bd:45: 34:ab:8e:a6:30:c8:fe:24:f6:0b:5a:42:ce:7a:d9:34:85:d6: a7:3d:1b:63:36:e6:b4:d1:73:5a:10:ba:fa:d8:fa:38:81:74: b1:2d:23:39:ea:94:09:f7:e3:9d:8d:62:a9:eb:58:3f:20:a8: 53:d9:3c:02:64:b3:35:b7:3b:90:b3:6f:71:88:79:f1:35:5e: 8e:55:50:05:d2:05:49:88:48:77:2b:8f:c4:47:ab:21:96:26: 49:33:0e:c3:11:cd:a8:ae:ca:0a:0a:4b:9e:87:f4:b0:68:41: 1d:90:e4:79:ea:e8:31:2e:a5:11:53:c3:8d:e4:a1:e6:7d:5e: 19:f6:14:3d:25:5c:02:98:bd:34:2c:89:da:b0:b4:75:ca:c0: 1d:a7:f6:b8:a1:87:84:a2:bf:b9:ee:d0:95:73:36:fb:e2:60: 4b:99:9f:44:ef:a8:be:05:d8:03:fa:35:db:37:35:c5:a5:b7: c4:e3:fb:41:33:14:e0:99:e0:8c:a9:22:4f:f4:77:69:a6:ff: a8:48:06:7b:db:77:c4:c8:18:96:96:dc:ce:40:cc:73:d1:11: f2:39:9f:8e -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5EMDRLC89z28bbEDM7W98MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZTZmYzc2OGFkNDdiOTY4ZTBhMjU5ZmVjYzhhM2RhMzJm YWM1ZWEwHhcNMjYwMTAxMTAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODRjZWJkZjgxODhkODNhZjk4NzA4NDQ1NmRlMzE2NWYzYzJmMDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHKmSX1lzjzYxbVfRWberIyAJh3Y X6A5eJmfiArw64SAuWCwcnZdI4vYfgOJu6turmimMo9E9DxUF6qRBbzuJh1rCMDP WX/4Pz8wMU5rWOm5GaRsprv4AX5orPf7IM8T8zSF4+pCjOrxM0FcQOJuG2J/tDZr ICJ3vECN4obtoIamUZB8F9Qta4nTrs66fzxiZud0qI2myaRb259DIftAr8dLm/xq CloPCjtHYJsBmCJavQQ+o9n1CrjodJp3LX5/OFXR9JSQPm90iGUA21NvcrFrcrDV eBG9HiyFa5mtfUWzPdedOtExuzmyTv0MoYNOBFhyjp4Aux1XfAvxACDCvwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLhM69+BiNg6+YcIRFbeMWXzwvBCMB8GA1UdIwQY MBaAFL/m/HaK1HuWjgoln+zIo9oy+sXqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdi1iOGRvclVlNWFPQ2lXZjdNaWoyakw2eGVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wMGM3MTEtMGMyOS00MzAxLTk0YmMt ZWE1N2NiZTM2ODExLzEvdUV6cjM0R0kyRHI1aHdoRVZ0NHhaZlBDOEVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8wMGM3MTEtMGMyOS00MzAxLTk0YmMtZWE1N2NiZTM2ODEx LzEvdi1iOGRvclVlNWFPQ2lXZjdNaWoyakw2eGVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAufeWMA8E AgACMAkDBwAqAyoAABAwDQYJKoZIhvcNAQELBQADggEBAEGbhYK7tkLCewMAgWkG McVfbc0L4OH0FhqoyHm43HbZ9k+9RTSrjqYwyP4k9gtaQs562TSF1qc9G2M25rTR c1oQuvrY+jiBdLEtIznqlAn3452NYqnrWD8gqFPZPAJkszW3O5Czb3GIefE1Xo5V UAXSBUmISHcrj8RHqyGWJkkzDsMRzaiuygoKS56H9LBoQR2Q5Hnq6DEupRFTw43k oeZ9Xhn2FD0lXAKYvTQsidqwtHXKwB2n9rihh4Siv7nu0JVzNvviYEuZn0TvqL4F 2AP6Nds3NcWlt8Tj+0EzFOCZ4IypIk/0d2mm/6hIBnvbd8TIGJaW3M5AzHPREfI5 n44= -----END CERTIFICATE-----Generated at Mon Jan 26 09:25:51 2026 by rpki-client