This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/UQ_wWuxjEH_i-EsTzboOrvqKKdI.roa File: UQ_wWuxjEH_i-EsTzboOrvqKKdI.roa (raw, json) Hash identifier: Air+llXQa0kzhSEgpdLcOpS9VOOfK46rRYbvpqiD8fs= Subject key identifier: 51:0F:F0:5A:EC:63:10:7F:E2:F8:4B:13:CD:BA:0E:AE:FA:8A:29:D2 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E3923460A95A798C6178B7A94679F9E Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/UQ_wWuxjEH_i-EsTzboOrvqKKdI.roa Signing time: Fri 02 Jan 2026 10:20:32 +0000 ROA not before: Fri 02 Jan 2026 10:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53394 IP address blocks: 163.5.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 04:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:23:46:0a:95:a7:98:c6:17:8b:7a:94:67:9f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=510ff05aec63107fe2f84b13cdba0eaefa8a29d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a6:e8:28:5e:31:ad:32:a4:f3:f4:af:7b:9d: 81:03:46:a4:d6:33:86:22:fd:1f:da:a3:d7:a6:c9: 2b:90:e3:63:e9:c3:60:aa:c4:f6:2d:8b:66:a1:44: 82:00:d1:d6:57:69:9f:aa:25:88:57:b2:0c:69:e7: 46:62:7e:09:27:71:bd:49:20:77:cf:41:fb:9d:54: 7e:cc:fc:8a:70:dd:c1:a7:ce:52:85:72:3e:a7:56: 3f:cc:d9:c1:88:93:c6:d6:a0:87:68:0a:62:1c:43: c0:b9:08:79:cf:a0:60:57:04:a1:13:59:bd:f5:ea: bc:8d:08:b6:a2:32:c3:71:63:d2:e2:35:86:0e:71: b2:6e:c7:19:be:18:85:14:1f:62:79:cd:fe:98:32: 4c:95:ad:25:e5:59:d1:db:cb:9b:06:96:d6:92:85: f7:06:0b:5a:da:89:0f:23:09:63:79:b5:eb:4c:cc: 41:86:0a:2a:da:09:cf:ce:03:51:5b:28:6d:5e:f5: 17:52:ca:6d:0a:68:c7:87:ab:1f:61:42:0f:1b:b5: 1c:f2:64:d2:03:51:07:fb:f6:6b:96:b6:35:bf:6b: 36:6c:af:14:a3:7c:52:29:f5:0d:ed:39:dd:b3:01: f6:0d:94:f2:24:aa:3c:78:c8:6a:c8:35:8e:6c:db: b8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0F:F0:5A:EC:63:10:7F:E2:F8:4B:13:CD:BA:0E:AE:FA:8A:29:D2 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/UQ_wWuxjEH_i-EsTzboOrvqKKdI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.212.0/24 Signature Algorithm: sha256WithRSAEncryption 09:6f:57:6a:6a:a5:93:a4:0b:2f:5e:fd:f9:e3:61:76:ca:e7: 8f:ca:6c:cd:0f:f3:5e:a3:17:46:62:e3:39:33:5e:a9:e5:55: 28:fa:b4:15:f9:1e:62:64:5e:83:88:f5:5b:2b:42:b2:1e:1e: 32:78:49:ee:89:3d:4c:99:29:78:6c:30:a5:b5:a1:23:c4:6a: 52:8d:6c:65:64:c6:ad:59:08:5e:1b:9c:53:9f:30:b8:c0:b0: 8e:50:cb:3f:20:78:f1:0b:7d:61:fc:e4:d1:bc:4e:a1:1f:27: 54:6c:9a:7e:42:78:d1:8d:0b:7f:fe:4d:7a:bc:3d:ef:9a:24: b6:41:c6:d3:1d:80:07:85:45:1b:56:ff:49:d9:43:ea:06:26: 32:32:1e:77:12:c0:e6:b7:e4:1c:ad:27:f6:4b:c7:eb:c7:be: bb:2d:46:f9:54:e9:68:2e:2c:87:2d:60:2f:ea:a3:0f:38:dd: 52:a7:66:85:ac:11:77:3e:61:51:f5:87:3e:f1:8a:15:d0:ec: e2:2c:10:e4:68:73:c4:3e:c4:d1:f3:31:80:f0:62:f8:12:dd: 51:33:d2:de:af:ad:73:0d:a8:4f:db:ef:d5:49:a4:36:8b:aa: 63:2e:7b:56:bd:9f:2c:b6:72:e3:86:3a:19:7b:31:d3:1c:59: b4:dc:b2:f4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OSNGCpWnmMYXi3qUZ5+eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTBmZjA1YWVjNjMxMDdmZTJmODRiMTNjZGJhMGVhZWZhOGEyOWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaboKF4xrTKk8/Sve52BA0ak1jOG Iv0f2qPXpskrkONj6cNgqsT2LYtmoUSCANHWV2mfqiWIV7IMaedGYn4JJ3G9SSB3 z0H7nVR+zPyKcN3Bp85ShXI+p1Y/zNnBiJPG1qCHaApiHEPAuQh5z6BgVwShE1m9 9eq8jQi2ojLDcWPS4jWGDnGybscZvhiFFB9iec3+mDJMla0l5VnR28ubBpbWkoX3 Bgta2okPIwljebXrTMxBhgoq2gnPzgNRWyhtXvUXUsptCmjHh6sfYUIPG7Uc8mTS A1EH+/ZrlrY1v2s2bK8Uo3xSKfUN7TndswH2DZTyJKo8eMhqyDWObNu4nwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFEP8FrsYxB/4vhLE826Dq76iinSMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvVVFfd1d1eGpFSF9pLUVzVHpib09ydnFLS2RJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowXUMA0G CSqGSIb3DQEBCwUAA4IBAQAJb1dqaqWTpAsvXv3542F2yuePymzND/NeoxdGYuM5 M16p5VUo+rQV+R5iZF6DiPVbK0KyHh4yeEnuiT1MmSl4bDCltaEjxGpSjWxlZMat WQheG5xTnzC4wLCOUMs/IHjxC31h/OTRvE6hHydUbJp+QnjRjQt//k16vD3vmiS2 QcbTHYAHhUUbVv9J2UPqBiYyMh53EsDmt+QcrSf2S8frx767LUb5VOloLiyHLWAv 6qMPON1Sp2aFrBF3PmFR9Yc+8YoV0OziLBDkaHPEPsTR8zGA8GL4Et1RM9Ler61z DahP2+/VSaQ2i6pjLntWvZ8stnLjhjoZezHTHFm03LL0 -----END CERTIFICATE-----Generated at Mon Jan 19 11:51:15 2026 by rpki-client