This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/uVyWlFLKciqrsAXXjZQjx39QcNU.roa File: uVyWlFLKciqrsAXXjZQjx39QcNU.roa (raw, json) Hash identifier: jEDtg9ux39nelJUaz7u7+ZJxoa/PnUqwfRMuyqZC6j0= Subject key identifier: B9:5C:96:94:52:CA:72:2A:AB:B0:05:D7:8D:94:23:C7:7F:50:70:D5 Certificate issuer: /CN=d3adbb6123781ff0e35413446ac7931cff4a490d Certificate serial: 019B7BA3F076A47E23F90670A6A0F15DE5A2 Authority key identifier: D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/uVyWlFLKciqrsAXXjZQjx39QcNU.roa Signing time: Thu 01 Jan 2026 22:18:19 +0000 ROA not before: Thu 01 Jan 2026 22:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6805 IP address blocks: 212.94.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:f0:76:a4:7e:23:f9:06:70:a6:a0:f1:5d:e5:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3adbb6123781ff0e35413446ac7931cff4a490d Validity Not Before: Jan 1 22:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b95c969452ca722aabb005d78d9423c77f5070d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cb:f4:4e:41:e1:c5:36:f1:cc:ea:9d:b7:5a: c0:f4:a0:7d:f0:61:3f:cf:89:6e:6d:47:23:7d:17: 72:43:b0:69:c6:02:e3:e9:4e:af:94:cf:9f:b2:ab: 65:5b:1d:6e:90:54:e9:5d:cd:db:2d:2c:1d:c2:83: 1f:21:a1:34:d6:ed:2b:cb:c0:fa:56:6d:75:88:33: 56:2f:16:e6:db:cb:c8:95:d4:39:1e:5a:f6:0e:d4: ed:4b:05:cc:ef:c7:68:f5:de:e7:e1:9f:56:b7:87: f3:08:30:a1:07:08:09:27:23:89:ee:c8:c1:0c:ff: ec:3b:8e:3f:0b:e7:7c:8d:c0:eb:f9:86:b2:cf:db: b9:38:cc:be:af:73:f9:8c:ff:dd:2d:9d:95:f1:35: 48:f6:12:c4:de:95:10:92:ed:92:52:88:eb:55:a8: c9:79:b5:02:a4:98:1a:4b:8f:47:28:bc:21:ec:09: 05:4b:81:df:1a:b6:c3:b8:3b:4b:70:72:3c:e3:ff: c4:2b:1c:41:83:e8:78:7c:29:3d:b5:c0:d2:f9:02: e8:40:9a:fe:b7:65:6a:a5:14:c8:79:7a:9e:04:24: f0:3a:03:6c:10:eb:a7:8e:61:ea:cb:7b:66:70:6c: 5e:c8:55:b5:b4:c9:87:3f:cf:59:d6:f8:36:cb:4d: 34:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:5C:96:94:52:CA:72:2A:AB:B0:05:D7:8D:94:23:C7:7F:50:70:D5 X509v3 Authority Key Identifier: keyid:D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/uVyWlFLKciqrsAXXjZQjx39QcNU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.94.224.0/19 Signature Algorithm: sha256WithRSAEncryption 8b:d2:09:69:d9:0c:8f:b3:45:21:11:f2:09:9e:08:41:87:29: ef:6f:c8:f4:b6:90:4c:8f:7a:3e:ca:29:c7:25:8f:2e:d7:97: d8:31:b9:5b:f9:88:78:e7:ba:f3:2d:13:29:31:a0:a4:3b:cd: 4e:2c:01:0d:a6:5b:2a:4b:6c:ae:87:2b:ba:26:30:8d:80:42: 7d:43:4f:50:12:c3:9c:8c:24:1d:fb:92:f4:23:fc:9a:1e:bf: 50:87:70:e7:82:26:b6:8f:a4:2e:dc:fe:f6:64:bd:42:f1:0b: 8c:f3:70:97:8c:19:2e:83:46:fa:7a:28:73:7f:17:31:07:bb: 3f:23:60:42:61:13:4d:a5:7a:d8:35:4a:c8:2c:89:34:cc:b9: 8e:3c:56:04:cc:24:e6:a2:78:d4:9f:fb:f9:72:fd:e7:f5:e2: c2:c8:10:dd:bf:2b:65:d0:e5:b9:11:90:48:23:7e:06:ad:09: 5d:81:07:2d:86:e8:65:49:69:33:1e:f3:db:e8:6b:e3:97:8a: 7e:cf:c9:91:43:49:88:7c:d1:27:4f:fd:04:89:09:d6:e3:91: af:2d:24:fe:19:8a:c6:fb:3d:99:3d:6f:f2:91:b3:fb:5d:ac: db:f8:df:33:01:fd:96:95:a8:a8:90:11:48:f9:07:6d:31:67: 99:05:7b:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o/B2pH4j+QZwpqDxXeWiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYWRiYjYxMjM3ODFmZjBlMzU0MTM0NDZhYzc5MzFjZmY0 YTQ5MGQwHhcNMjYwMTAxMjIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTVjOTY5NDUyY2E3MjJhYWJiMDA1ZDc4ZDk0MjNjNzdmNTA3MGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcv0TkHhxTbxzOqdt1rA9KB98GE/ z4lubUcjfRdyQ7BpxgLj6U6vlM+fsqtlWx1ukFTpXc3bLSwdwoMfIaE01u0ry8D6 Vm11iDNWLxbm28vIldQ5Hlr2DtTtSwXM78do9d7n4Z9Wt4fzCDChBwgJJyOJ7sjB DP/sO44/C+d8jcDr+Yayz9u5OMy+r3P5jP/dLZ2V8TVI9hLE3pUQku2SUojrVajJ ebUCpJgaS49HKLwh7AkFS4HfGrbDuDtLcHI84//EKxxBg+h4fCk9tcDS+QLoQJr+ t2VqpRTIeXqeBCTwOgNsEOunjmHqy3tmcGxeyFW1tMmHP89Z1vg2y0004QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLlclpRSynIqq7AF142UI8d/UHDVMB8GA1UdIwQY MBaAFNOtu2EjeB/w41QTRGrHkxz/SkkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDYyN1lTTjRIX0RqVkJORWFzZVRIUDlLU1EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84YTNlZTktNGYzNy00NWJlLThhYWMt Nzk4YWI3NzNlYWZhLzEvdVZ5V2xGTEtjaXFyc0FYWGpaUWp4MzlRY05VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS84YTNlZTktNGYzNy00NWJlLThhYWMtNzk4YWI3NzNlYWZh LzEvMDYyN1lTTjRIX0RqVkJORWFzZVRIUDlLU1EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1F7gMA0G CSqGSIb3DQEBCwUAA4IBAQCL0glp2QyPs0UhEfIJnghBhynvb8j0tpBMj3o+yinH JY8u15fYMblb+Yh457rzLRMpMaCkO81OLAENplsqS2yuhyu6JjCNgEJ9Q09QEsOc jCQd+5L0I/yaHr9Qh3Dngia2j6Qu3P72ZL1C8QuM83CXjBkug0b6eihzfxcxB7s/ I2BCYRNNpXrYNUrILIk0zLmOPFYEzCTmonjUn/v5cv3n9eLCyBDdvytl0OW5EZBI I34GrQldgQcthuhlSWkzHvPb6Gvjl4p+z8mRQ0mIfNEnT/0EiQnW45GvLST+GYrG +z2ZPW/ykbP7Xazb+N8zAf2WlaiokBFI+QdtMWeZBXvZ -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:59 2026 by rpki-client