This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/uHUXciNeiMgfQC--3f3ZjYg_S4M.roa File: uHUXciNeiMgfQC--3f3ZjYg_S4M.roa (raw, json) Hash identifier: LWy1Cz90YYPLEuiH9yV4EWMjiYzkZdRIieYtqwISn8k= Subject key identifier: B8:75:17:72:23:5E:88:C8:1F:40:2F:BE:DD:FD:D9:8D:88:3F:4B:83 Certificate issuer: /CN=11e2a78ddc7f139f0c22a2a63662b4812ae5132e Certificate serial: 019B7F14200147E3C633F8756B2A890B2AC8 Authority key identifier: 11:E2:A7:8D:DC:7F:13:9F:0C:22:A2:A6:36:62:B4:81:2A:E5:13:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/uHUXciNeiMgfQC--3f3ZjYg_S4M.roa Signing time: Fri 02 Jan 2026 14:19:43 +0000 ROA not before: Fri 02 Jan 2026 14:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 86.54.105.0/24 maxlen: 24 193.32.92.0/24 maxlen: 24 2a13:1000::/29 maxlen: 29 2a13:1000::/48 maxlen: 48 2a13:1002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:20:01:47:e3:c6:33:f8:75:6b:2a:89:0b:2a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11e2a78ddc7f139f0c22a2a63662b4812ae5132e Validity Not Before: Jan 2 14:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8751772235e88c81f402fbeddfdd98d883f4b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:91:ec:4a:f7:3d:74:c2:9f:5e:61:7b:3d:f8: 94:b9:e8:fd:a5:ac:0a:e0:9c:e4:53:14:55:06:5c: dc:64:d6:9f:a7:01:31:90:34:ab:55:1d:a6:43:2a: 16:b5:b2:49:4b:4b:55:30:30:8a:08:6a:f4:d4:69: fd:70:fb:ec:b5:46:33:fb:42:cd:a1:c6:63:0e:6e: 0c:db:30:44:0a:0d:99:64:d2:40:b2:bf:80:3b:23: a8:9c:43:ab:c9:89:96:cc:80:b4:7e:fd:73:9a:70: ca:d7:d7:55:f8:1d:cf:58:8d:f9:d1:63:13:25:72: 43:fb:43:ea:75:49:0a:e5:52:b9:2f:28:99:44:1e: c5:04:5e:21:4a:84:03:2e:6e:ac:8c:b4:25:ba:b9: 3a:f9:a3:46:f6:9e:18:0f:59:e6:25:fd:be:ea:b1: 38:01:cc:04:15:08:ec:bd:fc:1b:b0:8d:60:2d:9a: 17:40:dd:2b:4f:5d:30:71:d0:21:38:e3:d0:07:35: c9:22:55:2f:4a:7a:ae:14:2e:1d:19:c2:17:3d:be: 4c:53:67:f4:88:bd:25:d8:60:73:4e:c5:5b:f6:9e: 89:fc:44:18:3e:ce:e5:ac:75:5e:0f:0a:78:36:66: 6f:ab:bd:21:fd:5d:f1:4e:77:65:bb:b9:1b:28:13: aa:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:75:17:72:23:5E:88:C8:1F:40:2F:BE:DD:FD:D9:8D:88:3F:4B:83 X509v3 Authority Key Identifier: keyid:11:E2:A7:8D:DC:7F:13:9F:0C:22:A2:A6:36:62:B4:81:2A:E5:13:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/uHUXciNeiMgfQC--3f3ZjYg_S4M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.54.105.0/24 193.32.92.0/24 IPv6: 2a13:1000::/29 Signature Algorithm: sha256WithRSAEncryption 44:9e:28:55:62:1c:bd:24:e7:c5:3c:5f:92:05:ce:a0:42:da: 09:bf:19:06:25:5a:57:8c:74:76:66:2b:af:06:97:c0:ba:89: a1:46:b5:26:a1:e5:72:a4:54:d2:ed:8c:42:a3:e0:6e:0b:70: ab:a6:1e:61:c8:fc:ab:62:87:e8:cf:6f:8f:5a:64:16:3f:75: 84:80:cf:d3:c4:3d:d7:1d:ea:df:de:d0:27:b1:12:60:32:01: 86:e1:0e:13:ce:f8:da:2c:7b:9c:aa:96:d9:12:e3:ec:e2:0f: 4b:3b:3e:d5:7d:2a:f0:14:38:a4:09:db:c8:cf:0d:c5:77:80: a9:84:1f:bd:a6:7e:2f:1d:28:f6:8a:e1:43:2d:9d:54:d0:51: 36:d1:62:9b:2c:8e:14:ce:6c:a8:d1:02:12:92:ab:79:c9:c5: d5:75:34:75:bb:97:91:18:70:51:bd:48:6a:8f:43:95:91:0e: a2:0a:ed:88:6e:6a:7a:e1:6d:4d:b3:70:53:34:33:6f:fe:f1: 4c:db:9c:08:c1:98:d6:a4:18:34:3d:40:5e:d9:3e:1a:e3:41: f2:1c:1b:b5:cf:4d:58:46:c7:97:14:cc:67:b6:bd:5d:f4:8a: 74:05:a9:b6:86:36:db:62:f5:d1:d7:b2:8f:e5:75:94:21:b1: 86:d7:0d:dc -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/FCABR+PGM/h1ayqJCyrIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZTJhNzhkZGM3ZjEzOWYwYzIyYTJhNjM2NjJiNDgxMmFl NTEzMmUwHhcNMjYwMTAyMTQxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODc1MTc3MjIzNWU4OGM4MWY0MDJmYmVkZGZkZDk4ZDg4M2Y0YjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZHsSvc9dMKfXmF7PfiUuej9pawK 4JzkUxRVBlzcZNafpwExkDSrVR2mQyoWtbJJS0tVMDCKCGr01Gn9cPvstUYz+0LN ocZjDm4M2zBECg2ZZNJAsr+AOyOonEOryYmWzIC0fv1zmnDK19dV+B3PWI350WMT JXJD+0PqdUkK5VK5LyiZRB7FBF4hSoQDLm6sjLQlurk6+aNG9p4YD1nmJf2+6rE4 AcwEFQjsvfwbsI1gLZoXQN0rT10wcdAhOOPQBzXJIlUvSnquFC4dGcIXPb5MU2f0 iL0l2GBzTsVb9p6J/EQYPs7lrHVeDwp4NmZvq70h/V3xTndlu7kbKBOqBwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFLh1F3IjXojIH0Avvt392Y2IP0uDMB8GA1UdIwQY MBaAFBHip43cfxOfDCKipjZitIEq5RMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWVLbmpkeF9FNThNSXFLbU5tSzBnU3JsRXk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jZDE1YzctNDc2YS00YzU3LWJhZjQt ZGU1ZjdiZjU5ODM5LzEvdUhVWGNpTmVpTWdmUUMtLTNmM1pqWWdfUzRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jZDE1YzctNDc2YS00YzU3LWJhZjQtZGU1ZjdiZjU5ODM5 LzEvRWVLbmpkeF9FNThNSXFLbU5tSzBnU3JsRXk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAVjZpAwQA wSBcMA0EAgACMAcDBQMqExAAMA0GCSqGSIb3DQEBCwUAA4IBAQBEnihVYhy9JOfF PF+SBc6gQtoJvxkGJVpXjHR2ZiuvBpfAuomhRrUmoeVypFTS7YxCo+BuC3Crph5h yPyrYofoz2+PWmQWP3WEgM/TxD3XHerf3tAnsRJgMgGG4Q4TzvjaLHucqpbZEuPs 4g9LOz7VfSrwFDikCdvIzw3Fd4CphB+9pn4vHSj2iuFDLZ1U0FE20WKbLI4Uzmyo 0QISkqt5ycXVdTR1u5eRGHBRvUhqj0OVkQ6iCu2Ibmp64W1Ns3BTNDNv/vFM25wI wZjWpBg0PUBe2T4a40HyHBu1z01YRseXFMxntr1d9Ip0Bam2hjbbYvXR17KP5XWU IbGG1w3c -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:29 2026 by rpki-client