This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/uPXsHfVse8rlnzUbj2UoRMWOq8g.roa File: uPXsHfVse8rlnzUbj2UoRMWOq8g.roa (raw, json) Hash identifier: SCLabx4GN4AnmWRb1f32gO5dZZyqhDCGfjhfHlPlGlM= Subject key identifier: B8:F5:EC:1D:F5:6C:7B:CA:E5:9F:35:1B:8F:65:28:44:C5:8E:AB:C8 Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 019B7AC82D3024C5D5D574767B7BEAA3BC11 Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/uPXsHfVse8rlnzUbj2UoRMWOq8g.roa Signing time: Thu 01 Jan 2026 18:18:17 +0000 ROA not before: Thu 01 Jan 2026 18:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48753 IP address blocks: 193.84.71.0/24 maxlen: 24 195.20.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:2d:30:24:c5:d5:d5:74:76:7b:7b:ea:a3:bc:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Jan 1 18:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8f5ec1df56c7bcae59f351b8f652844c58eabc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bb:c7:5d:ce:15:0e:bb:62:a2:65:5e:f2:10: ed:f9:a9:7c:11:f5:3a:10:a4:55:60:7f:28:78:ca: b4:83:b3:55:7c:64:f6:3c:fd:04:a7:5f:88:80:4d: d3:64:9c:7e:26:66:3f:54:41:03:10:69:e9:06:cd: 71:7a:10:5b:32:d3:b4:98:1b:36:d2:2c:11:00:3b: 2c:59:9a:a5:d5:f8:9d:d3:4a:70:a3:fe:09:c9:32: 6d:18:a0:a1:94:1f:c2:17:a7:82:f8:13:80:57:01: 34:54:86:1a:76:9e:6b:80:e7:e9:be:f1:99:20:95: 8c:cb:55:ab:1a:46:2c:eb:9b:85:fe:66:7b:22:13: c2:8a:59:01:53:1c:b9:10:b6:11:a2:88:ef:65:49: af:35:81:60:c1:11:df:45:34:81:84:98:87:41:33: 88:54:d4:fa:ec:06:a4:73:4a:11:90:0b:69:b8:22: 0e:53:69:3a:ae:b4:f0:7a:e2:05:70:6e:7d:7e:66: 1e:1c:96:9f:66:bd:31:73:50:29:61:1f:1f:92:d5: 3d:2e:71:02:32:58:43:a8:1e:a9:bf:12:85:fe:75: 90:61:f3:d9:44:0f:04:95:4d:1d:72:65:62:44:97: 4e:22:03:1f:30:71:d0:d9:67:04:c0:16:5e:06:0b: 75:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F5:EC:1D:F5:6C:7B:CA:E5:9F:35:1B:8F:65:28:44:C5:8E:AB:C8 X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/uPXsHfVse8rlnzUbj2UoRMWOq8g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.84.71.0/24 195.20.18.0/24 Signature Algorithm: sha256WithRSAEncryption 34:7e:fe:ba:cb:a1:ca:a4:18:f5:1f:52:ab:57:1b:d7:52:e4: f8:cb:c7:64:1e:1c:17:12:db:f0:48:2f:f3:a2:51:fb:06:ab: 35:8e:3f:5f:a1:32:30:bc:c4:23:a4:fc:75:3b:56:44:a9:3b: f7:19:c6:8f:ae:8d:47:0f:a2:af:65:1f:67:b1:0a:5e:65:00: 17:9f:42:26:1f:52:3b:94:1e:de:11:61:40:d6:b3:75:7b:62: 75:e6:38:72:30:43:bc:a3:85:6f:00:1f:13:73:93:0c:c3:b9: 8f:da:b9:e8:be:0b:e1:63:c7:8d:42:9d:71:67:cb:bb:42:1a: 43:3a:63:65:73:1d:f8:5e:ee:28:e3:67:6a:f5:2f:16:3d:61: f1:0c:34:b9:35:8c:01:2f:e7:f5:73:eb:99:85:0e:11:8b:68: 7e:b8:cd:b7:c3:0e:84:8a:24:4a:f3:00:02:68:e6:71:8d:5b: 96:28:b7:07:62:27:5a:66:be:bf:d9:cd:d4:27:79:ee:11:80: 09:c4:ad:b9:b7:90:0b:e0:03:f2:22:24:ac:21:eb:ca:a9:13: bd:53:50:6e:05:2c:5e:61:02:ea:28:b7:3c:db:37:5e:9d:5c: 54:21:24:b1:23:76:c9:85:0d:dd:b2:65:e4:8f:d1:2a:6d:1a: af:0c:94:8e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yC0wJMXV1XR2e3vqo7wRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjYwMTAxMTgxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGY1ZWMxZGY1NmM3YmNhZTU5ZjM1MWI4ZjY1Mjg0NGM1OGVhYmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rvHXc4VDrtiomVe8hDt+al8EfU6 EKRVYH8oeMq0g7NVfGT2PP0Ep1+IgE3TZJx+JmY/VEEDEGnpBs1xehBbMtO0mBs2 0iwRADssWZql1fid00pwo/4JyTJtGKChlB/CF6eC+BOAVwE0VIYadp5rgOfpvvGZ IJWMy1WrGkYs65uF/mZ7IhPCilkBUxy5ELYRoojvZUmvNYFgwRHfRTSBhJiHQTOI VNT67Aakc0oRkAtpuCIOU2k6rrTweuIFcG59fmYeHJafZr0xc1ApYR8fktU9LnEC MlhDqB6pvxKF/nWQYfPZRA8ElU0dcmViRJdOIgMfMHHQ2WcEwBZeBgt1OQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLj17B31bHvK5Z81G49lKETFjqvIMB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvdVBYc0hmVnNlOHJsbnpVYmoyVW9STVdPcThnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwVRHAwQA wxQSMA0GCSqGSIb3DQEBCwUAA4IBAQA0fv66y6HKpBj1H1KrVxvXUuT4y8dkHhwX EtvwSC/zolH7Bqs1jj9foTIwvMQjpPx1O1ZEqTv3GcaPro1HD6KvZR9nsQpeZQAX n0ImH1I7lB7eEWFA1rN1e2J15jhyMEO8o4VvAB8Tc5MMw7mP2rnovgvhY8eNQp1x Z8u7QhpDOmNlcx34Xu4o42dq9S8WPWHxDDS5NYwBL+f1c+uZhQ4Ri2h+uM23ww6E iiRK8wACaOZxjVuWKLcHYidaZr6/2c3UJ3nuEYAJxK25t5AL4APyIiSsIevKqRO9 U1BuBSxeYQLqKLc82zdenVxUISSxI3bJhQ3dsmXkj9EqbRqvDJSO -----END CERTIFICATE-----Generated at Wed Jan 21 12:44:26 2026 by rpki-client