This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/uBozqFCRP6q6-fMqqEdxvia5s2w.roa
File: uBozqFCRP6q6-fMqqEdxvia5s2w.roa (raw, json)
Hash identifier: 7my1TEAY49gz3OCc/3WBB7kXgHGx+R9z5VTiKjlGzfs=
Subject key identifier: B8:1A:33:A8:50:91:3F:AA:BA:F9:F3:2A:A8:47:71:BE:26:B9:B3:6C
Certificate issuer: /CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Certificate serial: 019B7BA3CF57953C5528E2487F92EB089A04
Authority key identifier: F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/uBozqFCRP6q6-fMqqEdxvia5s2w.roa
Signing time: Thu 01 Jan 2026 22:18:11 +0000
ROA not before: Thu 01 Jan 2026 22:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197320
IP address blocks: 195.20.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:cf:57:95:3c:55:28:e2:48:7f:92:eb:08:9a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Validity
Not Before: Jan 1 22:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b81a33a850913faabaf9f32aa84771be26b9b36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:e3:90:9c:71:33:4e:4a:7d:dc:d8:fe:8d:
13:25:1a:6b:8a:b1:01:0e:6d:2e:9e:8b:5c:ae:c3:
d7:38:93:b2:b0:d9:53:25:ea:ac:c2:cd:75:b7:b2:
f9:39:80:4b:cd:5a:6d:ba:bb:f6:91:c7:8e:ec:04:
03:a3:41:2c:3c:b5:77:9c:8b:4f:55:e2:ce:ac:85:
24:4d:e2:04:02:6e:b0:7a:ff:76:43:4b:08:b2:cc:
84:1d:02:e2:4f:ad:f5:a1:3e:61:8e:93:a6:8a:61:
d0:f0:b2:1f:1b:fe:ee:4e:65:86:45:bf:d4:0f:ef:
3f:d8:d7:33:35:01:a1:84:29:78:d7:6a:b4:d2:d5:
ea:4f:f5:72:9a:0c:e5:67:ec:5e:cc:2e:5c:f1:d6:
6d:6e:dd:0c:a7:52:bb:df:30:e5:68:55:be:44:bc:
2d:2a:c4:2a:d1:1e:4b:86:46:f7:6d:f2:fe:27:72:
bb:dc:7b:d4:5e:5c:33:81:bf:46:5a:8b:29:01:d7:
df:5d:a2:fe:44:cd:00:25:18:b7:ca:55:15:d3:5d:
89:ea:e6:b3:06:e0:ee:21:25:0c:fd:65:6e:ef:43:
0e:3c:62:35:06:3b:85:18:0d:f0:82:67:a1:7d:08:
15:c0:b9:95:f2:a7:e8:c9:16:2f:de:b0:34:b0:e2:
70:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1A:33:A8:50:91:3F:AA:BA:F9:F3:2A:A8:47:71:BE:26:B9:B3:6C
X509v3 Authority Key Identifier:
keyid:F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/uBozqFCRP6q6-fMqqEdxvia5s2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.155.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:ac:3a:54:89:e5:06:6c:b2:86:f6:55:11:c7:d9:4f:24:8c:
9e:d0:52:cc:40:a6:5b:43:41:ac:21:9c:52:e1:fb:c6:6e:f6:
af:4e:cc:5f:62:6e:40:66:01:91:f0:ce:4c:54:00:39:9c:8a:
77:0c:57:d9:76:14:49:cc:51:2d:54:30:6b:23:42:09:0d:0e:
96:85:a4:08:16:b8:67:43:b8:3c:07:61:97:2c:ce:4e:5f:21:
0d:b6:46:02:2b:d0:c2:56:5d:f3:15:b8:5a:67:ff:0c:67:05:
25:da:47:7d:06:e4:21:53:73:a8:f4:84:72:03:1a:f0:9b:da:
c2:a3:73:38:79:e1:62:5f:a0:ca:4d:12:8c:34:36:44:81:a3:
df:ad:78:6f:37:a9:7c:7a:b0:09:7a:61:57:86:f6:a1:d0:cb:
ee:7e:13:4a:35:93:85:3b:45:f4:ae:28:dd:a0:7d:87:f5:44:
6b:17:80:dd:f4:82:91:b3:ab:2f:67:31:56:54:40:78:ea:44:
61:25:c2:32:de:3d:15:55:b3:f5:3f:07:7d:ca:28:37:57:89:
78:6e:4b:20:df:cc:24:24:fb:bc:58:bf:93:93:4e:41:60:90:
2f:cf:b9:9d:22:6d:da:40:33:14:ce:1c:84:99:10:55:0c:6c:
a6:48:70:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:00:17 2026 by rpki-client