This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uUjUGv9utD18KADDrtkgSzIInNY.roa File: uUjUGv9utD18KADDrtkgSzIInNY.roa (raw, json) Hash identifier: M3n4Kob4HplCYxBSz+UScgKQ2W+abgRAejeU4ttUv44= Subject key identifier: B9:48:D4:1A:FF:6E:B4:3D:7C:28:00:C3:AE:D9:20:4B:32:08:9C:D6 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12D504FBC0B3CB75BAAF177A70645B Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uUjUGv9utD18KADDrtkgSzIInNY.roa Signing time: Fri 02 Jan 2026 00:19:27 +0000 ROA not before: Fri 02 Jan 2026 00:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47670 IP address blocks: 94.249.152.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:d5:04:fb:c0:b3:cb:75:ba:af:17:7a:70:64:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b948d41aff6eb43d7c2800c3aed9204b32089cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f0:b6:05:33:b0:5c:c7:80:76:51:18:37:f5: d3:e7:41:60:62:d4:62:5c:48:57:91:e9:b2:64:f4: c3:77:eb:45:17:05:9e:ee:48:27:9f:a2:bf:8a:28: d2:ef:5b:52:6c:28:4c:04:4e:c9:86:d5:e9:1b:ea: 2a:94:6c:bf:1c:79:17:68:bd:7f:42:d3:e5:56:92: a1:1a:e1:19:c9:76:4f:bd:1d:05:be:01:f4:62:82: 0b:2e:42:e2:26:d2:a9:a9:93:f5:3a:ef:fd:cd:79: 68:ce:02:ef:5a:2b:b5:8b:fa:ad:71:88:35:e9:ef: a2:ce:c8:a3:99:f8:e1:48:f5:c4:81:d0:e7:78:a6: 09:bb:c4:40:ea:cb:b4:eb:a4:a1:e6:5e:71:81:64: 35:19:97:1a:04:dc:2f:d0:4c:62:6d:52:47:aa:b9: 2b:8a:af:92:70:51:bf:5b:3f:26:40:51:8b:6c:3e: 76:5a:a3:22:1e:c3:da:e4:c1:2d:d6:c6:0d:68:7e: c2:3a:de:41:d6:05:fd:d0:5f:3e:08:97:2c:75:a5: 5a:ac:7d:55:5a:79:7b:97:b5:8e:15:9c:03:80:8f: 38:9b:6c:f8:ce:37:b5:ec:1c:32:e1:b1:a6:fd:ab: a5:43:ef:0e:fd:2b:e3:03:e2:a5:49:77:c0:82:57: 95:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:48:D4:1A:FF:6E:B4:3D:7C:28:00:C3:AE:D9:20:4B:32:08:9C:D6 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uUjUGv9utD18KADDrtkgSzIInNY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.249.152.0/24 Signature Algorithm: sha256WithRSAEncryption bb:16:5c:07:7d:92:d1:a9:1c:75:65:4b:ce:b6:51:b4:48:fa: 00:b1:48:4e:8d:e0:05:a2:6c:6f:68:0e:e1:76:b4:ed:41:99: ef:28:a1:ab:74:33:f9:4b:06:88:c4:8b:2d:55:26:c1:e1:ba: 05:f2:7e:94:d3:ae:37:e4:af:c5:bc:a7:a6:17:21:77:59:fb: 85:4c:c2:8b:7f:63:05:ff:f9:87:fd:77:14:da:da:8e:59:1d: fb:7d:3c:55:5b:01:85:88:8f:44:6d:bd:0d:66:e2:00:b2:2d: 64:0b:db:5d:db:10:16:9f:b6:cf:91:5e:10:e2:55:24:b4:94: f0:c2:64:39:9a:17:7a:30:0e:80:a6:68:7a:92:0b:40:9a:ad: 6c:9a:9c:7d:0b:aa:b5:0f:1a:55:fc:9a:90:95:d7:3f:50:44: 46:10:2d:a9:d2:11:8e:e1:2c:b8:5c:dc:e5:a1:17:8c:15:f3: 9f:77:50:55:41:1e:2d:de:f0:1b:17:72:f8:07:7c:3a:cc:de: 41:23:ad:77:b0:29:bb:0b:8a:92:2c:23:a2:bd:61:69:48:bc: 26:84:a8:af:8a:8a:2d:0d:9c:6b:4f:f3:f5:ba:1f:b8:be:dd: 5d:d9:ef:ec:ce:7a:97:23:63:38:bc:19:00:c6:30:cf:8c:58: 7b:29:97:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EtUE+8Czy3W6rxd6cGRbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTQ4ZDQxYWZmNmViNDNkN2MyODAwYzNhZWQ5MjA0YjMyMDg5Y2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/C2BTOwXMeAdlEYN/XT50FgYtRi XEhXkemyZPTDd+tFFwWe7kgnn6K/iijS71tSbChMBE7JhtXpG+oqlGy/HHkXaL1/ QtPlVpKhGuEZyXZPvR0FvgH0YoILLkLiJtKpqZP1Ou/9zXlozgLvWiu1i/qtcYg1 6e+izsijmfjhSPXEgdDneKYJu8RA6su066Sh5l5xgWQ1GZcaBNwv0ExibVJHqrkr iq+ScFG/Wz8mQFGLbD52WqMiHsPa5MEt1sYNaH7COt5B1gX90F8+CJcsdaVarH1V Wnl7l7WOFZwDgI84m2z4zje17Bwy4bGm/aulQ+8O/SvjA+KlSXfAgleVzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLlI1Br/brQ9fCgAw67ZIEsyCJzWMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvdVVqVUd2OXV0RDE4S0FERHJ0a2dTeklJbk5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXvmYMA0G CSqGSIb3DQEBCwUAA4IBAQC7FlwHfZLRqRx1ZUvOtlG0SPoAsUhOjeAFomxvaA7h drTtQZnvKKGrdDP5SwaIxIstVSbB4boF8n6U06435K/FvKemFyF3WfuFTMKLf2MF //mH/XcU2tqOWR37fTxVWwGFiI9Ebb0NZuIAsi1kC9td2xAWn7bPkV4Q4lUktJTw wmQ5mhd6MA6Apmh6kgtAmq1smpx9C6q1DxpV/JqQldc/UERGEC2p0hGO4Sy4XNzl oReMFfOfd1BVQR4t3vAbF3L4B3w6zN5BI613sCm7C4qSLCOivWFpSLwmhKivioot DZxrT/P1uh+4vt1d2e/sznqXI2M4vBkAxjDPjFh7KZfj -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:08 2026 by rpki-client