This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/uzUF1iytiBjIXaGoXYbb89U983Q.roa File: uzUF1iytiBjIXaGoXYbb89U983Q.roa (raw, json) Hash identifier: GmwJF+if9a4Li6CDW3Ardtoa/NUyQLlBVKRkV0wDIP0= Subject key identifier: BB:35:05:D6:2C:AD:88:18:C8:5D:A1:A8:5D:86:DB:F3:D5:3D:F3:74 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 019B7AC7E5645661078166C46C1439D8D302 Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/uzUF1iytiBjIXaGoXYbb89U983Q.roa Signing time: Thu 01 Jan 2026 18:17:59 +0000 ROA not before: Thu 01 Jan 2026 18:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204504 IP address blocks: 185.227.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e5:64:56:61:07:81:66:c4:6c:14:39:d8:d3:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: Jan 1 18:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb3505d62cad8818c85da1a85d86dbf3d53df374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7a:bf:7f:35:0e:29:17:de:eb:5e:4f:fe:55: 01:cc:91:87:2e:d1:8a:50:63:09:4f:e3:42:a1:f1: a1:8c:3a:30:c1:75:7f:41:d9:a1:db:db:cd:d8:e8: 02:40:66:bc:75:d3:e1:e4:89:8b:65:4e:84:97:44: 2a:e4:4e:8c:3b:f4:de:07:04:0c:4a:09:12:2a:e9: c5:bc:f3:72:a4:24:d2:27:2b:89:56:a4:53:08:47: b5:76:5c:51:40:f2:d2:2f:21:f6:69:3d:66:bc:7e: 4d:bd:fa:37:5c:41:88:13:2e:98:57:62:02:e8:ba: 82:d8:f0:06:2c:06:91:3d:e3:6b:f9:6a:c8:c3:85: b4:56:17:b2:56:4d:ef:f4:b9:f7:10:15:68:a7:c7: a6:56:13:7b:bf:23:2a:aa:80:45:f8:17:6d:08:79: 36:8f:17:08:66:24:79:75:7d:b9:01:d5:01:e8:f6: ae:2e:46:f7:9f:c3:a6:48:5f:f2:ce:12:0b:89:1a: ec:6f:9f:48:b1:f4:20:c6:a4:85:23:b4:97:2a:bc: 49:05:ec:58:c2:a9:f0:01:99:be:95:8e:11:f4:de: a8:8e:36:35:44:78:eb:f8:73:92:e4:89:94:ed:ed: a7:9e:d0:df:bb:03:68:f1:da:46:3c:bb:9d:96:c6: df:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:35:05:D6:2C:AD:88:18:C8:5D:A1:A8:5D:86:DB:F3:D5:3D:F3:74 X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/uzUF1iytiBjIXaGoXYbb89U983Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.227.244.0/22 Signature Algorithm: sha256WithRSAEncryption 35:4e:f1:09:cb:23:c2:a9:31:de:75:ab:98:71:f0:2e:53:d1: dc:03:cf:ad:ff:0a:92:a5:cb:b3:2e:50:49:20:b0:89:71:55: 8b:ab:67:ea:1a:f0:a7:4d:f6:ac:3a:a8:75:3a:2b:68:52:ec: b4:1e:12:21:28:0a:15:b0:a2:b1:4e:7b:8e:10:c6:0b:37:de: 2e:3c:a1:a5:f2:88:04:91:a3:ca:d2:7a:37:a9:77:36:a0:cc: c1:1e:2a:f5:f6:c5:a4:7a:df:b9:8f:61:bb:9e:ba:19:90:43: 6a:0a:5a:29:14:63:6b:33:a1:b1:20:62:f5:87:29:3f:e4:3d: 21:da:99:77:74:2e:70:7b:df:10:2a:0b:7a:04:2d:17:64:6c: 2e:29:d3:51:ba:c8:3e:23:2b:60:e6:f2:96:87:02:94:3e:8f: a2:d0:93:f4:6f:f7:39:28:ad:fb:2f:08:d7:4b:62:37:c6:7b: 5a:b3:72:70:c5:44:2c:07:5d:e8:b5:e7:55:a3:bd:34:ac:a2: 8a:c0:72:e1:9e:8e:47:ad:b8:74:7d:14:fc:dc:04:fa:78:69: 2e:b0:39:b0:da:12:18:6a:70:ab:00:a7:58:52:71:12:f9:9b: d2:f2:ce:1a:63:93:11:6a:50:1b:5a:07:d2:f8:42:1f:fb:49: 8a:70:5f:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x+VkVmEHgWbEbBQ52NMCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjYwMTAxMTgxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjM1MDVkNjJjYWQ4ODE4Yzg1ZGExYTg1ZDg2ZGJmM2Q1M2RmMzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3q/fzUOKRfe615P/lUBzJGHLtGK UGMJT+NCofGhjDowwXV/Qdmh29vN2OgCQGa8ddPh5ImLZU6El0Qq5E6MO/TeBwQM SgkSKunFvPNypCTSJyuJVqRTCEe1dlxRQPLSLyH2aT1mvH5Nvfo3XEGIEy6YV2IC 6LqC2PAGLAaRPeNr+WrIw4W0VheyVk3v9Ln3EBVop8emVhN7vyMqqoBF+BdtCHk2 jxcIZiR5dX25AdUB6PauLkb3n8OmSF/yzhILiRrsb59IsfQgxqSFI7SXKrxJBexY wqnwAZm+lY4R9N6ojjY1RHjr+HOS5ImU7e2nntDfuwNo8dpGPLudlsbfTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLs1BdYsrYgYyF2hqF2G2/PVPfN0MB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvdXpVRjFpeXRpQmpJWGFHb1hZYmI4OVU5ODNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueP0MA0G CSqGSIb3DQEBCwUAA4IBAQA1TvEJyyPCqTHedauYcfAuU9HcA8+t/wqSpcuzLlBJ ILCJcVWLq2fqGvCnTfasOqh1OitoUuy0HhIhKAoVsKKxTnuOEMYLN94uPKGl8ogE kaPK0no3qXc2oMzBHir19sWket+5j2G7nroZkENqClopFGNrM6GxIGL1hyk/5D0h 2pl3dC5we98QKgt6BC0XZGwuKdNRusg+Iytg5vKWhwKUPo+i0JP0b/c5KK37LwjX S2I3xntas3JwxUQsB13otedVo700rKKKwHLhno5Hrbh0fRT83AT6eGkusDmw2hIY anCrAKdYUnES+ZvS8s4aY5MRalAbWgfS+EIf+0mKcF+5 -----END CERTIFICATE-----Generated at Mon Jan 26 01:52:42 2026 by rpki-client