This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/_ui81FBBiuw7bXFjjAu-AlY8ago.roa File: _ui81FBBiuw7bXFjjAu-AlY8ago.roa (raw, json) Hash identifier: +W47PKSUEyOgp5p8G/Toro+Z87dMONYhdZgP4gDGUPI= Subject key identifier: FE:E8:BC:D4:50:41:8A:EC:3B:6D:71:63:8C:0B:BE:02:56:3C:6A:0A Certificate issuer: /CN=533802e62965d4584e598d59b76a928be5afd971 Certificate serial: 019B7A5A0EA3DC7D12EC529958C33F356FEF Authority key identifier: 53:38:02:E6:29:65:D4:58:4E:59:8D:59:B7:6A:92:8B:E5:AF:D9:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/_ui81FBBiuw7bXFjjAu-AlY8ago.roa Signing time: Thu 01 Jan 2026 16:18:00 +0000 ROA not before: Thu 01 Jan 2026 16:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43366 IP address blocks: 141.98.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.mft rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:0e:a3:dc:7d:12:ec:52:99:58:c3:3f:35:6f:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=533802e62965d4584e598d59b76a928be5afd971 Validity Not Before: Jan 1 16:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fee8bcd450418aec3b6d71638c0bbe02563c6a0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:37:56:61:ef:fe:99:84:af:34:72:a7:a1:25: a4:83:e3:a5:97:84:c0:b7:c5:d1:e7:b1:bd:83:a5: 55:1a:a4:2c:43:be:0d:cf:00:a5:79:4a:a9:1c:6b: 80:cb:20:5e:50:00:5f:e2:1e:8c:f7:29:f5:65:91: 87:26:52:e9:24:32:a9:4f:14:8d:c9:96:83:0c:c5: 41:49:c2:a6:8e:c4:78:25:39:24:9f:a8:52:1b:2c: c2:b1:73:27:1e:f9:6f:2e:46:0d:11:62:1d:5f:99: d4:75:e8:59:bf:5f:d1:c0:60:be:04:4b:de:6e:68: 39:c9:54:f5:8f:a1:e5:23:9f:61:d8:66:6c:2d:c9: 56:ed:19:e4:f7:1d:59:90:4d:5c:e8:49:6a:32:a1: c4:3c:5a:54:a6:f7:a8:45:c2:6c:65:0c:df:e4:9a: 1d:68:91:8a:c2:6d:b0:4f:69:68:be:1c:56:1c:59: 1d:c6:b0:52:ce:b9:2c:9f:1d:10:f9:15:66:a6:84: 67:62:31:51:a2:52:06:fa:a4:a7:a9:2a:59:ce:38: 4c:bf:14:73:94:55:cf:6f:c2:28:50:47:1a:32:67: 99:57:f8:cd:f7:47:52:a1:44:b9:5d:39:84:fc:de: e5:10:71:34:5d:83:f8:a9:5d:cf:6f:bf:fa:96:16: fc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E8:BC:D4:50:41:8A:EC:3B:6D:71:63:8C:0B:BE:02:56:3C:6A:0A X509v3 Authority Key Identifier: keyid:53:38:02:E6:29:65:D4:58:4E:59:8D:59:B7:6A:92:8B:E5:AF:D9:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/_ui81FBBiuw7bXFjjAu-AlY8ago.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/UzgC5ill1FhOWY1Zt2qSi-Wv2XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.228.0/22 Signature Algorithm: sha256WithRSAEncryption 87:1c:b6:f6:d4:a1:d7:e2:35:42:dd:3e:3b:91:b8:ac:43:c4: e0:11:f3:b3:ed:83:7f:54:77:3e:08:d3:2e:a3:bb:d2:5c:a1: df:fc:1d:05:f5:97:14:3b:aa:89:ee:86:47:05:e7:84:58:06: 64:38:dd:9b:40:b4:d5:ce:29:ba:1c:3c:80:8b:2d:9e:8d:8c: 08:2d:32:3b:31:52:f6:ec:9c:13:63:7b:db:ff:40:0d:a5:f7: 79:67:13:d0:da:d8:2a:df:ce:ba:11:a9:52:db:d0:50:be:fe: 7a:d6:12:f5:15:a1:59:61:d2:6a:5a:d9:8b:da:34:1f:d2:75: e0:54:78:4f:aa:b8:b7:f1:de:19:e3:ac:25:77:98:51:ea:53: f7:f7:2b:9d:6e:85:5b:82:b7:6c:9f:b5:85:af:e5:2e:ed:48: a0:27:19:5e:b4:5b:9b:c1:11:4a:fb:6d:f0:14:1b:da:25:7d: 5b:6d:1c:ea:89:9e:79:2a:54:c5:b6:bf:85:f1:58:44:9e:7b: 84:85:21:9e:26:c4:69:68:61:e2:cc:ee:a6:35:34:e8:6a:e3: 8c:54:0d:3b:ae:7e:d4:2f:8d:34:5a:5c:19:ed:a3:13:44:2e: 22:82:3d:4b:14:1e:ca:ec:86:cf:d0:d0:4f:bd:d4:5e:60:36: 5f:f2:c0:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wg6j3H0S7FKZWMM/NW/vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMzgwMmU2Mjk2NWQ0NTg0ZTU5OGQ1OWI3NmE5MjhiZTVh ZmQ5NzEwHhcNMjYwMTAxMTYxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWU4YmNkNDUwNDE4YWVjM2I2ZDcxNjM4YzBiYmUwMjU2M2M2YTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjdWYe/+mYSvNHKnoSWkg+Oll4TA t8XR57G9g6VVGqQsQ74NzwCleUqpHGuAyyBeUABf4h6M9yn1ZZGHJlLpJDKpTxSN yZaDDMVBScKmjsR4JTkkn6hSGyzCsXMnHvlvLkYNEWIdX5nUdehZv1/RwGC+BEve bmg5yVT1j6HlI59h2GZsLclW7Rnk9x1ZkE1c6ElqMqHEPFpUpveoRcJsZQzf5Jod aJGKwm2wT2lovhxWHFkdxrBSzrksnx0Q+RVmpoRnYjFRolIG+qSnqSpZzjhMvxRz lFXPb8IoUEcaMmeZV/jN90dSoUS5XTmE/N7lEHE0XYP4qV3Pb7/6lhb8DQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP7ovNRQQYrsO21xY4wLvgJWPGoKMB8GA1UdIwQY MBaAFFM4AuYpZdRYTlmNWbdqkovlr9lxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXpnQzVpbGwxRmhPV1kxWnQycVNpLVd2MlhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wMWE3M2EtOGRhMC00OGI5LWFhZWQt YTIzYzEzMWMwZDM4LzEvX3VpODFGQkJpdXc3YlhGampBdS1BbFk4YWdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8wMWE3M2EtOGRhMC00OGI5LWFhZWQtYTIzYzEzMWMwZDM4 LzEvVXpnQzVpbGwxRmhPV1kxWnQycVNpLVd2MlhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjWLkMA0G CSqGSIb3DQEBCwUAA4IBAQCHHLb21KHX4jVC3T47kbisQ8TgEfOz7YN/VHc+CNMu o7vSXKHf/B0F9ZcUO6qJ7oZHBeeEWAZkON2bQLTVzim6HDyAiy2ejYwILTI7MVL2 7JwTY3vb/0ANpfd5ZxPQ2tgq3866EalS29BQvv561hL1FaFZYdJqWtmL2jQf0nXg VHhPqri38d4Z46wld5hR6lP39yudboVbgrdsn7WFr+Uu7UigJxletFubwRFK+23w FBvaJX1bbRzqiZ55KlTFtr+F8VhEnnuEhSGeJsRpaGHizO6mNTToauOMVA07rn7U L400WlwZ7aMTRC4igj1LFB7K7IbP0NBPvdReYDZf8sDP -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:08 2026 by rpki-client