This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/uTsU6Mnw9DaqmrDw2a85FI0gVOo.roa File: uTsU6Mnw9DaqmrDw2a85FI0gVOo.roa (raw, json) Hash identifier: QxKS8bSN/E8e24rYpMJlqnlvbfWN9J/AEQcwrR8l3P4= Subject key identifier: B9:3B:14:E8:C9:F0:F4:36:AA:9A:B0:F0:D9:AF:39:14:8D:20:54:EA Certificate issuer: /CN=852f70c0ec21010dbd6fe915f3326300fe314b23 Certificate serial: 019B7BA4CA8FD54B1B8885B32142A816B818 Authority key identifier: 85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/uTsU6Mnw9DaqmrDw2a85FI0gVOo.roa Signing time: Thu 01 Jan 2026 22:19:15 +0000 ROA not before: Thu 01 Jan 2026 22:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50350 IP address blocks: 193.104.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:ca:8f:d5:4b:1b:88:85:b3:21:42:a8:16:b8:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=852f70c0ec21010dbd6fe915f3326300fe314b23 Validity Not Before: Jan 1 22:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b93b14e8c9f0f436aa9ab0f0d9af39148d2054ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b9:91:cd:5f:df:72:71:ff:fc:c2:f8:cf:7f: 1a:96:58:32:46:ec:61:12:0f:d3:b0:30:4a:a6:d7: a7:41:60:ac:c7:8d:ad:44:62:b0:dd:d4:0f:cf:21: 4e:3d:f3:89:fb:06:cd:d4:cb:64:a2:db:bd:04:f1: f3:71:9c:a8:57:91:ea:56:e9:ef:63:f5:d4:3a:9e: 53:01:98:41:b5:1d:a6:8f:32:5d:75:61:98:66:7c: 1d:f2:98:51:d8:ad:e4:7c:f2:ff:a2:bd:b2:85:6c: 87:77:87:cd:45:fd:f4:2f:75:f2:d5:d9:28:a6:9d: b8:51:aa:f9:d3:fc:de:09:8c:01:81:b5:7c:af:92: b5:7a:cc:d9:8a:2a:1b:eb:3e:50:6a:ce:f7:34:cf: 75:d4:3d:f9:68:25:be:fa:da:9c:b5:03:3c:28:53: 4f:dc:d4:ab:e7:3d:87:c8:8e:da:97:0a:f2:87:2c: c7:25:10:5d:bd:a9:7a:bf:4e:10:24:63:f4:04:d6: 83:ca:75:a0:d9:e5:47:f4:69:66:7c:9b:45:32:0b: 5d:a0:d6:5a:ec:99:6f:30:0d:02:75:87:6a:72:87: 42:7a:9c:58:09:c1:fd:86:d2:0b:99:a1:2b:69:dc: 80:b8:58:93:94:ec:b0:2a:c0:a3:1c:1f:b3:87:7c: 2e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3B:14:E8:C9:F0:F4:36:AA:9A:B0:F0:D9:AF:39:14:8D:20:54:EA X509v3 Authority Key Identifier: keyid:85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/uTsU6Mnw9DaqmrDw2a85FI0gVOo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.238.0/24 Signature Algorithm: sha256WithRSAEncryption 59:22:ec:e1:7c:ed:45:62:36:c1:2f:6d:89:5b:51:a4:67:1d: b4:27:14:ff:b9:5a:08:a6:50:56:6e:7c:78:5d:8b:62:1e:f8: 45:e5:48:a5:2e:00:16:4b:3d:de:39:a2:35:71:e9:34:3c:5c: f8:74:4a:a4:dd:bf:24:4a:ea:5b:60:63:28:7f:90:d0:b8:6a: 06:3d:43:a5:5d:c7:a0:31:7f:5b:9a:ce:80:fd:36:b1:e0:1d: 6c:0e:dd:1a:7f:38:a4:78:00:2b:9a:5d:0a:9d:0b:48:da:57: ce:1e:9c:b1:ce:95:f0:e6:c7:34:ca:95:4a:6c:ad:ea:5c:af: d8:65:fb:e6:22:13:8b:1c:8b:44:5c:16:65:f8:f6:0d:2b:08: c8:f5:53:21:7e:8b:bd:2e:21:1a:fa:15:83:59:88:2e:82:58: 91:da:5b:5e:af:ce:c9:79:d2:95:01:50:6b:7f:1e:5f:da:bd: 57:6a:91:0e:0e:4a:0a:8d:07:30:90:5d:cb:3d:76:b3:a1:62: f4:8c:fc:3d:c8:04:c3:ac:dc:48:69:17:cb:1c:fe:4a:63:73: 3d:e0:22:c8:ca:42:f1:7b:11:2c:35:f9:4b:48:b8:07:27:b4: b1:91:50:42:b0:3b:8d:88:e9:75:1b:c5:4b:0f:a5:55:2e:36: ee:49:c8:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pMqP1UsbiIWzIUKoFrgYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MmY3MGMwZWMyMTAxMGRiZDZmZTkxNWYzMzI2MzAwZmUz MTRiMjMwHhcNMjYwMTAxMjIxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTNiMTRlOGM5ZjBmNDM2YWE5YWIwZjBkOWFmMzkxNDhkMjA1NGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LmRzV/fcnH//ML4z38allgyRuxh Eg/TsDBKptenQWCsx42tRGKw3dQPzyFOPfOJ+wbN1Mtkotu9BPHzcZyoV5HqVunv Y/XUOp5TAZhBtR2mjzJddWGYZnwd8phR2K3kfPL/or2yhWyHd4fNRf30L3Xy1dko pp24Uar50/zeCYwBgbV8r5K1eszZiiob6z5Qas73NM911D35aCW++tqctQM8KFNP 3NSr5z2HyI7alwryhyzHJRBdval6v04QJGP0BNaDynWg2eVH9GlmfJtFMgtdoNZa 7JlvMA0CdYdqcodCepxYCcH9htILmaEradyAuFiTlOywKsCjHB+zh3wuywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLk7FOjJ8PQ2qpqw8NmvORSNIFTqMB8GA1UdIwQY MBaAFIUvcMDsIQENvW/pFfMyYwD+MUsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFM5d3dPd2hBUTI5Yi1rVjh6SmpBUDR4U3lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9jNGYwY2YtNzgyZC00Y2I0LTkyNWYt ZmIyMzVhZmY0NjE4LzEvdVRzVTZNbnc5RGFxbXJEdzJhODVGSTBnVk9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9jNGYwY2YtNzgyZC00Y2I0LTkyNWYtZmIyMzVhZmY0NjE4 LzEvaFM5d3dPd2hBUTI5Yi1rVjh6SmpBUDR4U3lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWjuMA0G CSqGSIb3DQEBCwUAA4IBAQBZIuzhfO1FYjbBL22JW1GkZx20JxT/uVoIplBWbnx4 XYtiHvhF5UilLgAWSz3eOaI1cek0PFz4dEqk3b8kSupbYGMof5DQuGoGPUOlXceg MX9bms6A/Tax4B1sDt0afzikeAArml0KnQtI2lfOHpyxzpXw5sc0ypVKbK3qXK/Y ZfvmIhOLHItEXBZl+PYNKwjI9VMhfou9LiEa+hWDWYgugliR2lter87JedKVAVBr fx5f2r1XapEODkoKjQcwkF3LPXazoWL0jPw9yATDrNxIaRfLHP5KY3M94CLIykLx exEsNflLSLgHJ7SxkVBCsDuNiOl1G8VLD6VVLjbuScgs -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:28 2026 by rpki-client