This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uZU9uIokUlIa4xDsM0fJM258xCg.roa File: uZU9uIokUlIa4xDsM0fJM258xCg.roa (raw, json) Hash identifier: 54mAaVbJOXsvtEZHcQnSsg48YM2myKVEx2JJGW2rgC0= Subject key identifier: B9:95:3D:B8:8A:24:52:52:1A:E3:10:EC:33:47:C9:33:6E:7C:C4:28 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A324B4689979D7C48126D30783348D Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uZU9uIokUlIa4xDsM0fJM258xCg.roa Signing time: Thu 01 Jan 2026 08:18:36 +0000 ROA not before: Thu 01 Jan 2026 08:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200019 IP address blocks: 84.54.51.0/24 maxlen: 24 185.216.68.0/24 maxlen: 24 194.48.248.0/24 maxlen: 24 2a00:1728:3e::/48 maxlen: 48 2a00:1728:3f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:24:b4:68:99:79:d7:c4:81:26:d3:07:83:34:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9953db88a2452521ae310ec3347c9336e7cc428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:76:9f:fc:6d:18:6d:01:e3:30:b0:d4:8d:c1: cf:67:68:81:f1:21:1f:18:69:d0:5c:31:0c:f5:94: 47:ce:b0:be:c1:1d:40:15:1d:d6:df:53:71:c3:3c: 3e:d4:63:48:be:06:9a:83:c3:fc:8a:be:2f:b7:19: 01:b2:c8:0f:c6:d0:ec:08:c3:ed:b9:fb:ef:b0:e6: 87:2c:b1:8b:4d:d6:08:c3:20:95:dc:40:fd:e9:bf: c5:d9:38:ed:77:6b:da:16:47:80:f1:41:b2:c7:ec: 2d:2e:52:37:8d:fc:d0:a0:c4:e8:91:0e:b6:ea:79: 65:92:1a:56:51:0f:f6:4b:ea:bf:d7:cf:48:96:17: 7e:6a:ba:4f:e4:20:72:09:df:e6:77:05:7c:94:a8: 27:d3:e6:56:5a:6c:14:1a:49:a7:e2:8b:3e:c3:71: 7b:f2:d9:26:f8:57:1d:bc:6c:ac:8d:c7:9a:d4:b6: c4:0a:77:6a:f5:17:93:b6:01:69:82:81:af:32:d5: 78:6b:46:d8:f8:90:3d:18:20:b6:5d:03:aa:3a:82: d2:f3:58:d5:d3:b0:40:a7:93:36:05:f1:8a:57:02: b0:6b:29:00:6a:1a:16:14:01:47:1e:71:3d:a6:10: 7f:f7:8d:1b:3d:38:09:d4:22:89:03:bc:2d:3a:57: b4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:95:3D:B8:8A:24:52:52:1A:E3:10:EC:33:47:C9:33:6E:7C:C4:28 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uZU9uIokUlIa4xDsM0fJM258xCg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.54.51.0/24 185.216.68.0/24 194.48.248.0/24 IPv6: 2a00:1728:3e::/47 Signature Algorithm: sha256WithRSAEncryption 84:7b:f2:14:ea:51:a5:e3:b1:b1:b3:d1:f7:34:98:02:a5:14: 2d:0e:b1:03:94:ad:43:8f:54:bf:29:a8:34:67:c4:45:d6:17: 65:80:31:38:bc:aa:65:94:52:11:ec:08:99:01:7e:0e:ec:71: 45:6f:dd:18:1a:eb:5b:2f:fe:3e:ae:ee:ff:fb:da:64:b7:92: d1:5d:90:f3:04:aa:b6:53:92:cc:2d:5c:07:4c:c5:44:de:6d: 49:df:b0:a6:97:ae:02:0a:12:d8:fb:ee:f3:2d:50:71:78:d7: 24:92:77:7d:9c:c0:73:21:46:64:79:7c:ee:a3:ee:37:f5:89: 82:ce:9b:97:b5:56:63:6c:2b:35:25:07:97:a4:71:60:50:e7: da:9f:b8:e5:35:43:a9:0d:c9:61:4a:61:e4:cb:ca:e8:f0:75: c3:08:4f:08:91:2d:cf:f4:6f:83:82:a0:8a:c0:56:5d:24:45: 59:c0:c4:7a:56:2d:a8:f7:46:b3:e4:0d:09:7a:1f:ad:f7:c4: 39:b5:da:09:0b:f1:18:4a:82:f6:a9:f3:33:3e:03:d3:66:b6: a0:e8:77:a8:f0:90:98:62:01:ec:01:f3:88:d9:32:6c:75:27: 38:55:94:56:ee:37:45:3c:4d:7e:cd:6f:fa:d4:ce:f2:b9:b8: 38:c7:6f:4e -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt4oyS0aJl518SBJtMHgzSNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTk1M2RiODhhMjQ1MjUyMWFlMzEwZWMzMzQ3YzkzMzZlN2NjNDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHaf/G0YbQHjMLDUjcHPZ2iB8SEf GGnQXDEM9ZRHzrC+wR1AFR3W31Nxwzw+1GNIvgaag8P8ir4vtxkBssgPxtDsCMPt ufvvsOaHLLGLTdYIwyCV3ED96b/F2Tjtd2vaFkeA8UGyx+wtLlI3jfzQoMTokQ62 6nllkhpWUQ/2S+q/189Ilhd+arpP5CByCd/mdwV8lKgn0+ZWWmwUGkmn4os+w3F7 8tkm+FcdvGysjcea1LbECndq9ReTtgFpgoGvMtV4a0bY+JA9GCC2XQOqOoLS81jV 07BAp5M2BfGKVwKwaykAahoWFAFHHnE9phB/940bPTgJ1CKJA7wtOle0AwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFLmVPbiKJFJSGuMQ7DNHyTNufMQoMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvdVpVOXVJb2tVbElhNHhEc00wZkpNMjU4eENnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAVDYzAwQA udhEAwQAwjD4MA8EAgACMAkDBwEqABcoAD4wDQYJKoZIhvcNAQELBQADggEBAIR7 8hTqUaXjsbGz0fc0mAKlFC0OsQOUrUOPVL8pqDRnxEXWF2WAMTi8qmWUUhHsCJkB fg7scUVv3Rga61sv/j6u7v/72mS3ktFdkPMEqrZTkswtXAdMxUTebUnfsKaXrgIK Etj77vMtUHF41ySSd32cwHMhRmR5fO6j7jf1iYLOm5e1VmNsKzUlB5ekcWBQ59qf uOU1Q6kNyWFKYeTLyujwdcMITwiRLc/0b4OCoIrAVl0kRVnAxHpWLaj3RrPkDQl6 H633xDm12gkL8RhKgvap8zM+A9NmtqDod6jwkJhiAewB84jZMmx1JzhVlFbuN0U8 TX7Nb/rUzvK5uDjHb04= -----END CERTIFICATE-----Generated at Fri Jan 2 12:05:20 2026 by rpki-client