This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/Uzq6jnjiBmJhQ77sdYIGU3rtoW8.roa File: Uzq6jnjiBmJhQ77sdYIGU3rtoW8.roa (raw, json) Hash identifier: TaYrbh565HuhRP+MsEApRFlphctYPIuvYOeurCpD+fA= Subject key identifier: 53:3A:BA:8E:78:E2:06:62:61:43:BE:EC:75:82:06:53:7A:ED:A1:6F Certificate issuer: /CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b Certificate serial: 019B7AC7B8C58B6E047C847345153FF15B47 Authority key identifier: EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/Uzq6jnjiBmJhQ77sdYIGU3rtoW8.roa Signing time: Thu 01 Jan 2026 18:17:47 +0000 ROA not before: Thu 01 Jan 2026 18:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34308 IP address blocks: 84.246.248.0/21 maxlen: 24 185.63.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:b8:c5:8b:6e:04:7c:84:73:45:15:3f:f1:5b:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b Validity Not Before: Jan 1 18:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=533aba8e78e206626143beec758206537aeda16f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ba:0b:f0:65:69:ef:6f:81:33:7b:31:2d:7c: ac:5d:35:8d:9b:25:1f:7f:8c:93:72:9f:0d:9a:2a: 62:c3:d0:78:22:eb:81:b1:0d:32:26:45:cb:9a:2c: 0b:be:12:4f:b7:b7:c9:ea:e2:24:66:bf:46:48:70: 19:3d:e5:8f:fb:88:7f:85:35:7d:50:fe:17:f4:67: af:8e:2a:b7:9c:94:24:93:bf:a4:23:e4:6e:63:e3: 2a:ad:ab:72:a5:0a:85:cd:17:5d:87:e7:36:17:0c: ee:11:0c:d6:38:00:1a:ee:c7:24:de:98:ef:01:80: 8c:7f:b9:5c:78:4e:6b:5f:48:95:34:a7:7a:b7:a0: 73:00:b3:49:64:29:b4:db:24:59:2d:11:aa:17:90: 66:e7:4b:23:9a:31:41:82:b4:9a:fc:83:62:48:6b: e3:b7:7e:01:91:64:fa:46:d8:62:0b:80:80:fb:6c: ea:6e:e9:22:46:78:58:e8:01:ec:c2:bd:68:93:e4: 48:d6:48:a7:d4:ca:95:e6:97:5c:8b:75:54:86:a5: 59:7d:43:33:d7:04:a5:d7:8b:c4:05:a5:b8:60:c2: d4:6a:d8:f3:34:64:6f:95:dc:c0:4a:5a:7a:36:fe: 55:f4:95:31:bc:58:4a:ba:0f:87:44:77:5e:b2:ea: 5f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:3A:BA:8E:78:E2:06:62:61:43:BE:EC:75:82:06:53:7A:ED:A1:6F X509v3 Authority Key Identifier: keyid:EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/Uzq6jnjiBmJhQ77sdYIGU3rtoW8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.246.248.0/21 185.63.212.0/22 Signature Algorithm: sha256WithRSAEncryption 34:3e:54:54:69:a1:29:6d:ff:cd:63:ef:af:32:1d:5c:24:54: 21:34:4c:15:ff:e1:d3:f1:8b:cc:ef:9d:d3:76:d2:65:15:6b: 65:5e:e6:b0:34:02:94:4c:9c:7e:1e:87:6a:b9:6a:0a:ad:ce: 96:3b:9e:56:54:bb:8f:d5:f6:40:19:23:db:72:8d:6e:a7:a0: f9:b1:fe:55:7e:9c:32:03:8f:54:8d:87:12:8f:c9:94:43:5f: 37:02:8c:9a:54:82:9d:3c:0a:d5:aa:f8:ee:d2:aa:57:5b:d0: d0:77:fc:a3:99:03:93:27:82:ff:3a:cb:dd:bc:8f:e0:6e:e2: 42:b8:20:8c:ed:d4:09:ef:f2:75:28:f4:46:44:3d:e5:bb:11: ad:45:24:e0:f7:46:30:1a:1f:43:bd:65:e6:b8:c9:d7:8d:9a: ec:fe:05:92:0c:10:f7:52:84:3b:18:ac:0d:a4:fb:57:8a:77: f0:e0:64:2a:6c:0f:7f:10:d7:7c:62:15:94:f0:97:01:0c:2f: 23:0a:13:5b:07:29:c6:59:c2:66:7b:6e:d7:c3:a4:0d:11:2b: e2:4e:30:c6:03:e7:07:1f:5b:41:64:07:ec:a0:d2:dc:6c:da: 63:81:40:ef:b6:d0:3f:9d:7b:d0:a3:5a:70:1c:b8:04:91:7e: 25:43:83:f2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6x7jFi24EfIRzRRU/8VtHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYTQ3NWQwOGI2ZjhiNzhlZDExYjBjYTRkMTM2ZGViMzhi Yzk5MWIwHhcNMjYwMTAxMTgxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzNhYmE4ZTc4ZTIwNjYyNjE0M2JlZWM3NTgyMDY1MzdhZWRhMTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LoL8GVp72+BM3sxLXysXTWNmyUf f4yTcp8Nmipiw9B4IuuBsQ0yJkXLmiwLvhJPt7fJ6uIkZr9GSHAZPeWP+4h/hTV9 UP4X9Gevjiq3nJQkk7+kI+RuY+MqratypQqFzRddh+c2FwzuEQzWOAAa7sck3pjv AYCMf7lceE5rX0iVNKd6t6BzALNJZCm02yRZLRGqF5Bm50sjmjFBgrSa/INiSGvj t34BkWT6RthiC4CA+2zqbukiRnhY6AHswr1ok+RI1kin1MqV5pdci3VUhqVZfUMz 1wSl14vEBaW4YMLUatjzNGRvldzASlp6Nv5V9JUxvFhKug+HRHdesupfOQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFM6uo544gZiYUO+7HWCBlN67aFvMB8GA1UdIwQY MBaAFO6kddCLb4t47RGwyk0Tbes4vJkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3FSMTBJdHZpM2p0RWJES1RSTnQ2emk4bVJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zY2NhZmYtNzFmMi00OTgyLWI1MzQt MzZlMzlmZWQ3YmVkLzEvVXpxNmpuamlCbUpoUTc3c2RZSUdVM3J0b1c4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zY2NhZmYtNzFmMi00OTgyLWI1MzQtMzZlMzlmZWQ3YmVk LzEvN3FSMTBJdHZpM2p0RWJES1RSTnQ2emk4bVJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDVPb4AwQC uT/UMA0GCSqGSIb3DQEBCwUAA4IBAQA0PlRUaaEpbf/NY++vMh1cJFQhNEwV/+HT 8YvM753TdtJlFWtlXuawNAKUTJx+HodquWoKrc6WO55WVLuP1fZAGSPbco1up6D5 sf5VfpwyA49UjYcSj8mUQ183AoyaVIKdPArVqvju0qpXW9DQd/yjmQOTJ4L/Osvd vI/gbuJCuCCM7dQJ7/J1KPRGRD3luxGtRSTg90YwGh9DvWXmuMnXjZrs/gWSDBD3 UoQ7GKwNpPtXinfw4GQqbA9/ENd8YhWU8JcBDC8jChNbBynGWcJme27Xw6QNESvi TjDGA+cHH1tBZAfsoNLcbNpjgUDvttA/nXvQo1pwHLgEkX4lQ4Py -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:35 2026 by rpki-client