This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/uICc5XRh06cVWGSCd3zD2mE8MyE.roa File: uICc5XRh06cVWGSCd3zD2mE8MyE.roa (raw, json) Hash identifier: 4JsLV2oEO2910mihUaMvXNeKfCRpoSGKQU3GmEptyxc= Subject key identifier: B8:80:9C:E5:74:61:D3:A7:15:58:64:82:77:7C:C3:DA:61:3C:33:21 Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056 Certificate serial: 019B7EA613013579608B6E19B510BCA90A12 Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/uICc5XRh06cVWGSCd3zD2mE8MyE.roa Signing time: Fri 02 Jan 2026 12:19:31 +0000 ROA not before: Fri 02 Jan 2026 12:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204798 IP address blocks: 194.127.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:13:01:35:79:60:8b:6e:19:b5:10:bc:a9:0a:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056 Validity Not Before: Jan 2 12:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8809ce57461d3a715586482777cc3da613c3321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:60:95:6a:ca:f0:56:c1:1f:8e:d7:f3:c0:63: 84:e8:c0:c4:f6:ed:2f:f3:ae:a2:8c:13:53:e8:5d: 63:38:d0:1e:2c:17:22:c0:63:85:93:e6:22:e3:98: 10:0a:28:16:0d:44:9a:32:64:c5:f8:af:b5:8d:86: 6a:f3:f1:15:2a:00:ce:46:6c:69:33:91:10:87:8f: a1:ff:a7:48:9d:9e:7e:f6:16:d9:98:76:a6:0c:0a: c2:d2:5c:b9:44:40:08:d7:9f:bc:9d:1f:00:ea:7d: 97:79:87:1a:28:4d:e3:b5:b6:42:47:24:03:5d:db: 0f:0d:61:18:d6:cb:6e:5e:d1:10:9c:9f:35:41:7e: 63:7c:c3:8f:47:12:5d:9b:a6:11:36:74:39:fd:cd: ca:b8:75:78:a3:15:85:4c:41:e8:80:32:8e:df:c0: 2d:74:65:7d:61:60:59:ae:78:b7:6b:08:4b:6a:e0: a1:34:5d:b8:7b:52:24:9e:41:33:c7:17:5c:21:49: 06:35:0f:40:37:8b:18:7a:cb:47:c5:0e:10:de:c4: f2:23:5f:c9:25:2f:34:13:95:0e:55:cc:ed:c8:58: ea:50:f7:53:a7:f8:bb:07:70:ad:fd:e6:2a:1c:5f: 84:d7:a8:15:da:53:b7:b8:7b:ec:53:45:11:74:a6: 06:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:80:9C:E5:74:61:D3:A7:15:58:64:82:77:7C:C3:DA:61:3C:33:21 X509v3 Authority Key Identifier: keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/uICc5XRh06cVWGSCd3zD2mE8MyE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.127.111.0/24 Signature Algorithm: sha256WithRSAEncryption 09:b1:70:a7:75:f0:18:ec:2d:2b:3a:7d:4f:25:0b:60:7c:20: d1:fe:c0:1d:1e:77:93:55:69:d2:65:5d:b0:81:7b:b9:98:ac: dc:7f:a9:69:83:b6:d4:e7:fa:6f:8d:cf:34:a4:1d:3f:fc:57: 20:23:2d:54:4a:be:af:fc:fa:fe:53:7d:a4:3d:72:5b:09:b8: 96:47:6c:fa:27:cc:19:75:83:21:23:1b:c3:6c:95:45:fb:1d: 9b:45:e4:c9:16:ee:fc:d6:de:9c:11:f5:5a:29:a3:62:6b:de: de:70:30:de:35:96:c3:fa:e7:22:39:dd:4b:88:6f:36:b9:26: f4:d6:c7:d1:dd:ce:2c:9d:14:70:3d:0b:72:e7:74:02:30:8e: 75:ff:0a:38:77:5e:ab:d9:b4:ae:d7:c9:17:43:fe:be:7a:54: 15:cc:b8:a0:85:2e:d3:ca:4c:cc:21:86:d3:9c:c4:9b:e0:ad: ac:5c:63:7f:87:0e:07:a7:49:af:f0:ab:94:bb:02:9e:d1:e4: 33:46:b5:fa:d6:28:66:c3:fe:0e:a5:15:fc:d6:47:e8:06:87: a3:a7:ac:95:06:06:ad:23:27:b2:87:2a:1a:29:62:70:6b:a2: 71:cc:19:44:64:46:43:39:34:64:1d:e9:c4:95:f4:45:ec:3d: fa:79:73:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+phMBNXlgi24ZtRC8qQoSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZTYyM2UyYWZmN2IwM2FmZWI5NDI2MDM0OGMxNjMzYjU0 ZDkwNTYwHhcNMjYwMTAyMTIxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODgwOWNlNTc0NjFkM2E3MTU1ODY0ODI3NzdjYzNkYTYxM2MzMzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmCVasrwVsEfjtfzwGOE6MDE9u0v 866ijBNT6F1jONAeLBciwGOFk+Yi45gQCigWDUSaMmTF+K+1jYZq8/EVKgDORmxp M5EQh4+h/6dInZ5+9hbZmHamDArC0ly5REAI15+8nR8A6n2XeYcaKE3jtbZCRyQD XdsPDWEY1stuXtEQnJ81QX5jfMOPRxJdm6YRNnQ5/c3KuHV4oxWFTEHogDKO38At dGV9YWBZrni3awhLauChNF24e1IknkEzxxdcIUkGNQ9AN4sYestHxQ4Q3sTyI1/J JS80E5UOVcztyFjqUPdTp/i7B3Ct/eYqHF+E16gV2lO3uHvsU0URdKYGPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLiAnOV0YdOnFVhkgnd8w9phPDMhMB8GA1UdIwQY MBaAFN7mI+Kv97A6/rlCYDSMFjO1TZBWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQt NmNjMWQzZWE4MzJlLzEvdUlDYzVYUmgwNmNWV0dTQ2QzekQybUU4TXlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQtNmNjMWQzZWE4MzJl LzEvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwn9vMA0G CSqGSIb3DQEBCwUAA4IBAQAJsXCndfAY7C0rOn1PJQtgfCDR/sAdHneTVWnSZV2w gXu5mKzcf6lpg7bU5/pvjc80pB0//FcgIy1USr6v/Pr+U32kPXJbCbiWR2z6J8wZ dYMhIxvDbJVF+x2bReTJFu781t6cEfVaKaNia97ecDDeNZbD+uciOd1LiG82uSb0 1sfR3c4snRRwPQty53QCMI51/wo4d16r2bSu18kXQ/6+elQVzLighS7TykzMIYbT nMSb4K2sXGN/hw4Hp0mv8KuUuwKe0eQzRrX61ihmw/4OpRX81kfoBoejp6yVBgat IyeyhyoaKWJwa6JxzBlEZEZDOTRkHenElfRF7D36eXPn -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:07 2026 by rpki-client