This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/UuW1O9t31mYYBcd4UO1-xvN5zh8.roa File: UuW1O9t31mYYBcd4UO1-xvN5zh8.roa (raw, json) Hash identifier: RX6+wNPoRb6R28FQxmWIsPDZHRHik920qlXN4wEVis0= Subject key identifier: 52:E5:B5:3B:DB:77:D6:66:18:05:C7:78:50:ED:7E:C6:F3:79:CE:1F Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37C4A5BE3CFEB0109EC160146DCE1A Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/UuW1O9t31mYYBcd4UO1-xvN5zh8.roa Signing time: Fri 02 Jan 2026 10:19:02 +0000 ROA not before: Fri 02 Jan 2026 10:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206092 IP address blocks: 203.188.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:c4:a5:be:3c:fe:b0:10:9e:c1:60:14:6d:ce:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52e5b53bdb77d6661805c77850ed7ec6f379ce1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:69:a7:3a:d8:a0:df:16:13:c7:80:fb:13:6d: 6a:0c:20:dc:24:e5:c9:5b:94:65:41:b4:94:8d:09: ad:d4:3d:06:be:fc:07:26:ce:ae:a4:d8:ea:8d:8f: 6c:b4:e1:41:90:67:80:53:d5:4d:e3:e4:2c:87:42: e9:8a:41:18:37:77:11:aa:fe:a3:63:bb:d5:09:b2: bb:64:33:d2:a0:43:b7:5c:90:02:cf:1e:55:53:13: b1:c1:09:19:72:6f:e6:17:66:db:8c:b4:6f:2e:cf: 06:91:d8:86:c7:5e:bf:82:1e:9f:17:2e:12:ac:a0: 4f:50:3c:05:f6:98:6b:7a:81:dd:3e:9a:24:82:a7: 9e:cb:22:8d:c4:36:d0:68:33:04:72:3b:90:b2:87: 06:81:d1:6a:44:cc:d3:7b:ee:3c:65:f6:86:8a:6b: b3:9d:3d:f0:fa:38:be:dd:60:0f:bc:f9:53:7c:da: da:eb:32:ae:67:9d:68:76:1c:eb:16:38:71:b8:c8: 9d:d3:35:89:f0:29:ab:24:2f:57:16:49:47:73:e1: db:7d:62:a8:ed:67:05:6d:ce:ec:a1:4e:69:d3:6e: f8:cb:56:e1:ba:1f:31:61:02:e6:43:e9:e1:ae:5d: 65:37:fa:98:65:1f:14:00:44:f1:60:6c:bc:f7:0f: 04:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E5:B5:3B:DB:77:D6:66:18:05:C7:78:50:ED:7E:C6:F3:79:CE:1F X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/UuW1O9t31mYYBcd4UO1-xvN5zh8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.188.168.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:ce:a1:4c:3e:d0:d8:8c:f0:ec:43:b6:7e:30:e6:2a:62:0f: ff:09:7c:37:52:e6:dc:8d:3f:6c:c0:03:8e:05:71:23:a0:77: 1f:19:a1:fa:60:68:e3:18:6e:29:9f:e6:90:54:47:53:57:ac: e4:33:31:ca:d1:66:b3:3c:4a:52:90:0e:d9:11:6f:06:22:b5: 4c:0a:17:cd:3e:e0:f0:bf:55:ab:17:0b:75:90:c0:e1:16:12: 4c:ca:93:da:4e:65:dd:39:cb:56:3c:db:1d:36:5a:88:f7:ad: 2b:72:c9:cf:f0:0f:e9:e2:14:b8:7c:6e:4a:b8:f7:e6:37:04: 24:aa:1a:8e:49:7a:18:5b:0e:db:5f:88:67:61:3b:03:4b:13: cd:6e:d9:2b:9b:12:a2:c1:29:84:b5:4d:5d:0a:fb:f8:3d:75: eb:e4:bc:b8:0a:bd:ac:a5:3f:72:cd:0a:50:5f:3e:91:38:fe: 94:e1:d0:b7:00:d1:d7:85:e5:f4:ee:55:b1:20:83:e5:81:59: 7b:99:34:7c:dd:33:86:e3:ae:f0:dc:59:15:c8:5b:80:35:e2: 01:fe:21:ee:a8:4c:3d:5c:53:36:a7:24:7a:58:4e:32:ef:4d: c4:54:df:6b:b7:62:77:c0:7c:57:fc:db:83:25:eb:e6:d5:c9: a0:d4:fe:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N8Slvjz+sBCewWAUbc4aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmU1YjUzYmRiNzdkNjY2MTgwNWM3Nzg1MGVkN2VjNmYzNzljZTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGmnOtig3xYTx4D7E21qDCDcJOXJ W5RlQbSUjQmt1D0GvvwHJs6upNjqjY9stOFBkGeAU9VN4+Qsh0LpikEYN3cRqv6j Y7vVCbK7ZDPSoEO3XJACzx5VUxOxwQkZcm/mF2bbjLRvLs8GkdiGx16/gh6fFy4S rKBPUDwF9phreoHdPpokgqeeyyKNxDbQaDMEcjuQsocGgdFqRMzTe+48ZfaGimuz nT3w+ji+3WAPvPlTfNra6zKuZ51odhzrFjhxuMid0zWJ8CmrJC9XFklHc+HbfWKo 7WcFbc7soU5p0274y1bhuh8xYQLmQ+nhrl1lN/qYZR8UAETxYGy89w8EwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFLltTvbd9ZmGAXHeFDtfsbzec4fMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvVXVXMU85dDMxbVlZQmNkNFVPMS14dk41emg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy7yoMA0G CSqGSIb3DQEBCwUAA4IBAQA6zqFMPtDYjPDsQ7Z+MOYqYg//CXw3UubcjT9swAOO BXEjoHcfGaH6YGjjGG4pn+aQVEdTV6zkMzHK0WazPEpSkA7ZEW8GIrVMChfNPuDw v1WrFwt1kMDhFhJMypPaTmXdOctWPNsdNlqI960rcsnP8A/p4hS4fG5KuPfmNwQk qhqOSXoYWw7bX4hnYTsDSxPNbtkrmxKiwSmEtU1dCvv4PXXr5Ly4Cr2spT9yzQpQ Xz6ROP6U4dC3ANHXheX07lWxIIPlgVl7mTR83TOG467w3FkVyFuANeIB/iHuqEw9 XFM2pyR6WE4y703EVN9rt2J3wHxX/NuDJevm1cmg1P5n -----END CERTIFICATE-----Generated at Fri Jan 23 04:39:23 2026 by rpki-client