This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/uI_1KbkZIzvy3UFDfb5otHjxgXg.roa File: uI_1KbkZIzvy3UFDfb5otHjxgXg.roa (raw, json) Hash identifier: UQMNIvWBKb3xfqjEuaI3AXKNpWm9JLUIJVsw2I/E4EI= Subject key identifier: B8:8F:F5:29:B9:19:23:3B:F2:DD:41:43:7D:BE:68:B4:78:F1:81:78 Certificate issuer: /CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc Certificate serial: 019B77C696063625A5F78E707FA2388DF54A Authority key identifier: 40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/uI_1KbkZIzvy3UFDfb5otHjxgXg.roa Signing time: Thu 01 Jan 2026 04:17:41 +0000 ROA not before: Thu 01 Jan 2026 04:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196621 IP address blocks: 193.5.68.0/23 maxlen: 23 2001:67c:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:96:06:36:25:a5:f7:8e:70:7f:a2:38:8d:f5:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc Validity Not Before: Jan 1 04:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b88ff529b919233bf2dd41437dbe68b478f18178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ae:54:52:8f:81:d2:20:60:73:80:2c:53:b2: b2:b8:30:d3:ab:22:60:a5:9f:a4:5b:85:21:d3:20: d2:91:57:8e:17:38:d9:4f:5e:fe:8e:27:b1:e9:9d: 3e:71:22:cc:6e:12:8f:25:f0:c5:6e:27:dc:9c:e1: 2a:72:0d:66:93:84:86:48:91:ca:02:c7:c4:77:b0: a2:29:44:40:29:12:1f:ef:92:7f:79:b7:00:e6:85: 5b:fa:cc:5d:9a:4d:48:ea:59:8a:51:e3:a7:fe:9e: b5:50:20:e7:16:a7:17:0c:ea:a5:03:7e:86:0a:51: 14:d0:a1:f5:aa:09:e6:e7:e4:5f:d0:04:e5:34:ff: a3:40:ef:48:83:4f:ee:f1:5c:99:c6:49:27:e2:e1: 7a:5d:ea:e9:9c:33:ea:6c:c5:21:ea:49:e0:0a:dc: 5d:a0:42:2f:c3:96:25:a7:69:5a:79:eb:3b:35:b7: c8:5c:b0:ad:71:3d:9d:b6:8a:e5:68:c6:2a:ad:15: 35:7e:40:ba:3b:e4:09:2f:34:0c:17:ce:ae:b5:d3: 3c:b4:17:06:18:81:a7:25:68:79:7a:09:6e:26:01: de:fc:1a:1b:44:db:56:63:03:71:19:38:37:13:c5: c9:46:0b:5b:db:8e:69:b5:01:a7:e4:97:be:68:8c: a7:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8F:F5:29:B9:19:23:3B:F2:DD:41:43:7D:BE:68:B4:78:F1:81:78 X509v3 Authority Key Identifier: keyid:40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/uI_1KbkZIzvy3UFDfb5otHjxgXg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.5.68.0/23 IPv6: 2001:67c:8::/48 Signature Algorithm: sha256WithRSAEncryption 5e:92:d1:27:f4:71:8a:ca:d1:37:e3:22:cc:1d:26:bd:91:d9: 5d:ad:19:49:54:0c:bf:91:11:9f:9e:53:e3:8b:34:63:99:26: 40:0c:63:e9:95:da:5f:6c:c0:2f:e0:d4:98:8d:65:30:e8:e6: 2e:a5:97:df:36:0c:e1:e7:47:51:ab:f0:76:25:50:51:4e:55: fc:d9:3f:8c:2e:bd:95:c0:84:e9:08:7e:08:2c:e9:9a:d1:f2: 4f:0f:19:b0:49:12:a6:4c:71:c6:88:90:eb:66:17:80:59:f5: 54:ed:a1:c5:08:95:4c:7d:84:c6:d5:3e:c1:87:e5:e2:93:73: bd:7b:72:5f:50:33:fa:28:04:36:74:6f:0a:21:c2:15:58:f5: f4:c6:72:62:6e:77:ad:2f:49:33:4a:c2:2e:fe:16:41:a7:bb: 04:b0:02:06:55:97:d3:30:31:9c:8a:18:9f:33:35:10:b6:f7: c1:af:83:6c:5a:f1:6b:5a:fc:63:77:37:32:ba:10:55:95:98: b1:d1:94:b0:85:4e:f0:fd:f4:a4:24:af:88:ea:1c:c9:dd:c9: cc:94:f7:b0:ff:0b:8d:95:51:9e:a2:28:16:62:f7:20:5f:e3: 72:ed:3f:27:4a:33:55:5e:e0:c4:ad:a4:ed:c2:28:1c:bc:72: 32:37:e7:12 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3xpYGNiWl945wf6I4jfVKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZDRlMzNiZTcxZDMzOWYzYmMwY2M2ZGFlNjVlODc5MmZm NGQ1ZGMwHhcNMjYwMTAxMDQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODhmZjUyOWI5MTkyMzNiZjJkZDQxNDM3ZGJlNjhiNDc4ZjE4MTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK5UUo+B0iBgc4AsU7KyuDDTqyJg pZ+kW4Uh0yDSkVeOFzjZT17+jiex6Z0+cSLMbhKPJfDFbifcnOEqcg1mk4SGSJHK AsfEd7CiKURAKRIf75J/ebcA5oVb+sxdmk1I6lmKUeOn/p61UCDnFqcXDOqlA36G ClEU0KH1qgnm5+Rf0ATlNP+jQO9Ig0/u8VyZxkkn4uF6XerpnDPqbMUh6kngCtxd oEIvw5Ylp2laees7NbfIXLCtcT2dtorlaMYqrRU1fkC6O+QJLzQMF86utdM8tBcG GIGnJWh5egluJgHe/BobRNtWYwNxGTg3E8XJRgtb245ptQGn5Je+aIynEwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLiP9Sm5GSM78t1BQ32+aLR48YF4MB8GA1UdIwQY MBaAFEDU4zvnHTOfO8DMba5l6Hkv9NXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU5Uak8tY2RNNTg3d014dHJtWG9lU18wMWR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hYzY5ZDItOTI5OS00OWIwLTkxYzgt MDIzM2I3YjI2ZDVkLzEvdUlfMUtia1pJenZ5M1VGRGZiNW90SGp4Z1hnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9hYzY5ZDItOTI5OS00OWIwLTkxYzgtMDIzM2I3YjI2ZDVk LzEvUU5Uak8tY2RNNTg3d014dHJtWG9lU18wMWR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwQVEMA8E AgACMAkDBwAgAQZ8AAgwDQYJKoZIhvcNAQELBQADggEBAF6S0Sf0cYrK0TfjIswd Jr2R2V2tGUlUDL+REZ+eU+OLNGOZJkAMY+mV2l9swC/g1JiNZTDo5i6ll982DOHn R1Gr8HYlUFFOVfzZP4wuvZXAhOkIfggs6ZrR8k8PGbBJEqZMccaIkOtmF4BZ9VTt ocUIlUx9hMbVPsGH5eKTc717cl9QM/ooBDZ0bwohwhVY9fTGcmJud60vSTNKwi7+ FkGnuwSwAgZVl9MwMZyKGJ8zNRC298Gvg2xa8Wta/GN3NzK6EFWVmLHRlLCFTvD9 9KQkr4jqHMndycyU97D/C42VUZ6iKBZi9yBf43LtPydKM1Ve4MStpO3CKBy8cjI3 5xI= -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:21 2026 by rpki-client