This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/uDZTkixEz6zAK6MZ-bDfIGsBon0.roa File: uDZTkixEz6zAK6MZ-bDfIGsBon0.roa (raw, json) Hash identifier: jjgeGrXtby6czGOqPzKNGOqSk4f42a5b485yG1EOigM= Subject key identifier: B8:36:53:92:2C:44:CF:AC:C0:2B:A3:19:F9:B0:DF:20:6B:01:A2:7D Certificate issuer: /CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c Certificate serial: 019B77C6ABF09A475E500F0E36742FE9F365 Authority key identifier: C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/uDZTkixEz6zAK6MZ-bDfIGsBon0.roa Signing time: Thu 01 Jan 2026 04:17:47 +0000 ROA not before: Thu 01 Jan 2026 04:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205672 IP address blocks: 195.137.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ab:f0:9a:47:5e:50:0f:0e:36:74:2f:e9:f3:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c Validity Not Before: Jan 1 04:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b83653922c44cfacc02ba319f9b0df206b01a27d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c2:89:2c:89:71:a9:d3:54:5a:30:c1:1e:2b: 33:05:37:cf:fe:67:57:d9:ab:7d:63:67:63:81:a9: 1c:c1:88:24:a8:ad:29:b2:a3:96:5c:cc:a7:92:5a: d6:94:14:63:43:5a:eb:1a:2c:d1:61:32:f8:0c:1d: 26:28:df:f9:71:12:e9:bf:95:98:6f:1b:78:8d:6a: cc:2e:08:81:22:2f:9a:3c:4d:ea:24:f3:c9:d1:64: 97:55:19:39:52:40:02:14:be:cf:5a:3a:61:10:07: 75:ac:3a:66:da:67:53:a4:8c:19:ca:47:f9:e4:85: ed:6f:a8:61:f4:90:23:be:7f:2c:27:0e:8c:d3:14: 1e:37:1e:c9:1b:1c:1e:31:18:7f:79:7e:ae:2a:86: be:23:68:93:ef:76:90:c6:e6:20:f7:03:70:d9:ca: 20:d7:8b:91:d2:be:c3:f3:db:03:fb:df:7c:a4:3f: 00:56:be:75:b1:a2:04:e0:cc:d0:05:6a:11:74:6e: 00:bd:5d:b7:7c:7a:e0:d9:76:3e:16:e8:34:96:b2: 2f:2e:db:6c:a1:9f:26:f2:a9:bf:d2:ca:5b:c5:5e: 3f:5d:62:d7:68:00:a0:22:ea:05:d6:9b:e0:8b:ff: 4e:9d:a7:1a:e2:cc:bd:d9:30:fc:ff:1c:1a:49:5c: fe:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:36:53:92:2C:44:CF:AC:C0:2B:A3:19:F9:B0:DF:20:6B:01:A2:7D X509v3 Authority Key Identifier: keyid:C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/uDZTkixEz6zAK6MZ-bDfIGsBon0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.137.162.0/24 Signature Algorithm: sha256WithRSAEncryption 36:8e:f4:4d:e3:69:7a:7f:0f:4f:0c:6a:71:c1:1f:de:d1:7d: 37:90:cd:9f:7f:06:f2:8b:67:32:21:6d:5a:93:62:07:da:90: 66:fb:3e:86:7e:bd:d7:1c:1b:8a:64:22:ca:94:60:42:37:1d: 2e:15:2a:b6:b4:8f:a3:5f:b5:90:66:bb:c6:60:37:c7:91:55: bc:ac:f5:58:a8:c2:2f:5f:35:7f:62:42:c6:71:d1:d6:1d:31: 26:c0:5f:df:83:92:cc:76:89:89:99:e0:7e:2a:c0:1d:e3:91: 2c:d2:fd:ff:2e:ec:ab:b3:85:e6:6a:08:11:f4:14:96:c6:9a: b4:70:80:62:b7:39:38:b5:a4:56:22:01:59:77:f5:48:48:3a: 3a:18:80:db:71:a7:0a:06:68:53:58:84:66:7c:b0:9d:11:5c: 39:f2:5e:be:3c:0e:67:bb:b1:d7:36:82:3e:f4:97:7a:69:2c: 85:7b:b3:fb:8c:6b:f7:2a:5c:6f:c7:06:fa:96:30:67:2f:3b: 28:ef:9e:96:34:e3:e6:15:36:5b:3c:57:ac:69:c2:4b:66:db: 00:5a:7f:43:59:53:99:15:44:48:e8:d0:03:fb:75:1a:95:63: ac:d7:e3:5c:0c:5a:f5:7c:83:93:dc:2e:17:66:72:2a:cf:68: 56:0b:65:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xqvwmkdeUA8ONnQv6fNlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MzM4ZWZjZTQ0OTRmNWI5MjVmMGU5YWY3MzY1MWMxY2Jm MWUwNGMwHhcNMjYwMTAxMDQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODM2NTM5MjJjNDRjZmFjYzAyYmEzMTlmOWIwZGYyMDZiMDFhMjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcKJLIlxqdNUWjDBHiszBTfP/mdX 2at9Y2djgakcwYgkqK0psqOWXMynklrWlBRjQ1rrGizRYTL4DB0mKN/5cRLpv5WY bxt4jWrMLgiBIi+aPE3qJPPJ0WSXVRk5UkACFL7PWjphEAd1rDpm2mdTpIwZykf5 5IXtb6hh9JAjvn8sJw6M0xQeNx7JGxweMRh/eX6uKoa+I2iT73aQxuYg9wNw2cog 14uR0r7D89sD+998pD8AVr51saIE4MzQBWoRdG4AvV23fHrg2XY+Fug0lrIvLtts oZ8m8qm/0spbxV4/XWLXaACgIuoF1pvgi/9Onaca4sy92TD8/xwaSVz++wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLg2U5IsRM+swCujGfmw3yBrAaJ9MB8GA1UdIwQY MBaAFMUzjvzkSU9bkl8Omvc2UcHL8eBMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFRPT19PUkpUMXVTWHc2YTl6WlJ3Y3Z4NEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS83YzRlMzItNmMyMC00MWMxLWE4NWYt ZmRkM2E4MTVhYmI4LzEvdURaVGtpeEV6NnpBSzZNWi1iRGZJR3NCb24wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS83YzRlMzItNmMyMC00MWMxLWE4NWYtZmRkM2E4MTVhYmI4 LzEveFRPT19PUkpUMXVTWHc2YTl6WlJ3Y3Z4NEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4miMA0G CSqGSIb3DQEBCwUAA4IBAQA2jvRN42l6fw9PDGpxwR/e0X03kM2ffwbyi2cyIW1a k2IH2pBm+z6Gfr3XHBuKZCLKlGBCNx0uFSq2tI+jX7WQZrvGYDfHkVW8rPVYqMIv XzV/YkLGcdHWHTEmwF/fg5LMdomJmeB+KsAd45Es0v3/Luyrs4XmaggR9BSWxpq0 cIBitzk4taRWIgFZd/VISDo6GIDbcacKBmhTWIRmfLCdEVw58l6+PA5nu7HXNoI+ 9Jd6aSyFe7P7jGv3Klxvxwb6ljBnLzso756WNOPmFTZbPFesacJLZtsAWn9DWVOZ FURI6NAD+3UalWOs1+NcDFr1fIOT3C4XZnIqz2hWC2W1 -----END CERTIFICATE-----Generated at Mon Jan 26 10:24:08 2026 by rpki-client