This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/uNSx4hWRVP3fKKs64Lp6WI3uaVs.roa File: uNSx4hWRVP3fKKs64Lp6WI3uaVs.roa (raw, json) Hash identifier: zVkALHO/eizkLv+esnlztVcjRzvGtYoCejf9vSgdAPE= Subject key identifier: B8:D4:B1:E2:15:91:54:FD:DF:28:AB:3A:E0:BA:7A:58:8D:EE:69:5B Certificate issuer: /CN=64b59ae521952da55e03f779b885031c0c809cf9 Certificate serial: 019B797EAC7BA8F56B6564CF2A0834D12178 Authority key identifier: 64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/uNSx4hWRVP3fKKs64Lp6WI3uaVs.roa Signing time: Thu 01 Jan 2026 12:18:23 +0000 ROA not before: Thu 01 Jan 2026 12:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210897 IP address blocks: 103.56.172.0/24 maxlen: 24 193.23.125.0/24 maxlen: 24 194.8.135.0/24 maxlen: 24 2a11:2b80::/48 maxlen: 48 2a11:2b80:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ac:7b:a8:f5:6b:65:64:cf:2a:08:34:d1:21:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64b59ae521952da55e03f779b885031c0c809cf9 Validity Not Before: Jan 1 12:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8d4b1e2159154fddf28ab3ae0ba7a588dee695b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d1:7f:75:f3:8e:b3:6e:41:ed:fc:18:23:f8: a8:ea:7f:66:5a:11:5e:e7:9d:84:ca:2f:fb:55:73: 31:55:ae:05:4c:5f:57:36:b6:5d:5b:91:8d:01:4e: 65:8b:52:3e:33:42:37:0e:87:89:c4:8d:9c:1c:56: a0:b9:3e:e0:27:00:03:0b:ae:e9:bc:69:2f:41:f5: 9d:3c:8f:5b:41:cd:d2:4d:4d:41:d0:cd:22:4a:32: ff:b9:d2:e3:74:87:1e:78:71:a3:5b:d8:41:83:18: 17:d8:0e:29:a6:1a:82:87:94:a1:b0:4f:e9:28:e9: 24:71:88:84:4b:aa:d5:f2:b8:33:ff:76:08:d8:ce: 12:11:ff:29:00:53:f8:61:f8:90:93:9b:a4:a4:4a: 08:0e:3a:70:0f:f0:e4:b5:99:6a:b5:8b:6d:ee:79: 1f:43:91:e7:25:bd:fa:94:a5:53:98:05:ed:e3:a2: ad:8d:62:f0:13:ca:d8:2f:17:ce:8d:4c:16:b9:a0: 5f:63:33:d8:76:6c:10:6c:15:f1:64:85:da:95:5e: 74:7c:d0:21:bf:8a:4c:03:c2:ca:6a:59:1a:64:42: 60:b1:59:af:18:1d:27:8b:8c:3d:3e:4b:df:52:de: fb:5d:c6:6a:b8:d3:ec:e2:c4:0c:24:8c:b9:78:22: f2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D4:B1:E2:15:91:54:FD:DF:28:AB:3A:E0:BA:7A:58:8D:EE:69:5B X509v3 Authority Key Identifier: keyid:64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/uNSx4hWRVP3fKKs64Lp6WI3uaVs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.56.172.0/24 193.23.125.0/24 194.8.135.0/24 IPv6: 2a11:2b80::/47 Signature Algorithm: sha256WithRSAEncryption 15:0c:44:93:a6:db:97:89:b4:d4:fd:2d:2b:60:ff:04:04:35: f0:31:b3:8e:b9:86:9b:58:bf:7f:ea:55:04:8c:0e:49:2f:5d: bd:8d:87:1f:49:89:96:01:bd:f2:49:37:e8:6f:9f:76:f1:c0: ff:0f:d0:c4:29:0f:16:21:ac:ce:58:ad:a5:04:42:c4:c2:2b: f1:ad:55:a4:ff:3b:cb:89:44:a7:54:43:d1:c8:db:46:9f:6c: 22:89:49:e3:29:19:4b:3a:18:c8:90:89:e1:00:8c:b2:33:39: 62:ee:f8:96:4e:74:0c:be:6e:ab:7a:cf:99:4c:36:f3:37:c8: bd:a6:0b:c4:c5:b8:08:1c:04:f7:dd:b9:4a:07:5d:a4:27:54: 03:30:7f:fd:a0:b4:2b:10:82:41:d1:80:26:10:01:87:66:eb: 40:db:38:43:f1:cb:1e:26:55:51:07:82:f4:9c:d9:10:60:3d: 96:1f:a1:8f:37:6f:79:9e:6b:ca:92:23:d5:12:c8:c6:8b:89: f2:2b:ae:04:23:fb:f8:3a:e5:ff:3f:94:cb:36:44:b9:ed:34: 17:de:32:73:18:e4:73:93:6d:35:6f:78:f7:b2:c7:74:f7:9f: 2d:8c:9e:d8:94:2e:1e:8e:b6:2c:6c:bb:b7:7a:43:71:91:b3: 96:d3:75:76 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt5fqx7qPVrZWTPKgg00SF4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YjU5YWU1MjE5NTJkYTU1ZTAzZjc3OWI4ODUwMzFjMGM4 MDljZjkwHhcNMjYwMTAxMTIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGQ0YjFlMjE1OTE1NGZkZGYyOGFiM2FlMGJhN2E1ODhkZWU2OTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdF/dfOOs25B7fwYI/io6n9mWhFe 552Eyi/7VXMxVa4FTF9XNrZdW5GNAU5li1I+M0I3DoeJxI2cHFaguT7gJwADC67p vGkvQfWdPI9bQc3STU1B0M0iSjL/udLjdIceeHGjW9hBgxgX2A4pphqCh5ShsE/p KOkkcYiES6rV8rgz/3YI2M4SEf8pAFP4YfiQk5ukpEoIDjpwD/DktZlqtYtt7nkf Q5HnJb36lKVTmAXt46KtjWLwE8rYLxfOjUwWuaBfYzPYdmwQbBXxZIXalV50fNAh v4pMA8LKalkaZEJgsVmvGB0ni4w9PkvfUt77XcZquNPs4sQMJIy5eCLyswIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFLjUseIVkVT93yirOuC6eliN7mlbMB8GA1UdIwQY MBaAFGS1muUhlS2lXgP3ebiFAxwMgJz5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkxXYTVTR1ZMYVZlQV9kNXVJVURIQXlBblBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi82YTZiMjItZmU2Ny00MjAyLWFjOTQt NTFhZDAwZTU0MzMyLzEvdU5TeDRoV1JWUDNmS0tzNjRMcDZXSTN1YVZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi82YTZiMjItZmU2Ny00MjAyLWFjOTQtNTFhZDAwZTU0MzMy LzEvWkxXYTVTR1ZMYVZlQV9kNXVJVURIQXlBblBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAZzisAwQA wRd9AwQAwgiHMA8EAgACMAkDBwEqESuAAAAwDQYJKoZIhvcNAQELBQADggEBABUM RJOm25eJtNT9LStg/wQENfAxs465hptYv3/qVQSMDkkvXb2Nhx9JiZYBvfJJN+hv n3bxwP8P0MQpDxYhrM5YraUEQsTCK/GtVaT/O8uJRKdUQ9HI20afbCKJSeMpGUs6 GMiQieEAjLIzOWLu+JZOdAy+bqt6z5lMNvM3yL2mC8TFuAgcBPfduUoHXaQnVAMw f/2gtCsQgkHRgCYQAYdm60DbOEPxyx4mVVEHgvSc2RBgPZYfoY83b3mea8qSI9US yMaLifIrrgQj+/g65f8/lMs2RLntNBfeMnMY5HOTbTVvePeyx3T3ny2MntiULh6O tixsu7d6Q3GRs5bTdXY= -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:40 2026 by rpki-client