This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/uoe5Gtg5RLHmca7orVX_kgMJ6LA.roa
File: uoe5Gtg5RLHmca7orVX_kgMJ6LA.roa (raw, json)
Hash identifier: fAkGAUFUUGm9PtxJMnL3fGCs6QplpIcm9Vtk+9FgVDg=
Subject key identifier: BA:87:B9:1A:D8:39:44:B1:E6:71:AE:E8:AD:55:FF:92:03:09:E8:B0
Certificate issuer: /CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
Certificate serial: 019B797E544D76355A71E084F699AE5B9304
Authority key identifier: 66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/uoe5Gtg5RLHmca7orVX_kgMJ6LA.roa
Signing time: Thu 01 Jan 2026 12:18:00 +0000
ROA not before: Thu 01 Jan 2026 12:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205718
IP address blocks: 185.226.168.0/22 maxlen: 22
2a09:fbc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:54:4d:76:35:5a:71:e0:84:f6:99:ae:5b:93:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
Validity
Not Before: Jan 1 12:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba87b91ad83944b1e671aee8ad55ff920309e8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2a:c0:19:1a:03:93:66:7b:0d:1d:d4:2b:95:
e5:cd:c0:c6:fb:06:78:21:4b:40:22:99:ec:49:da:
be:68:f2:8d:41:06:34:73:29:ab:1f:a2:ac:c9:f0:
24:59:31:b4:8f:4e:31:3d:86:ef:a2:72:68:64:e9:
0c:29:65:47:a1:3a:90:95:d0:ba:dd:b5:3b:35:21:
ef:72:59:c7:67:8d:af:b6:f3:da:a3:ce:13:e2:14:
41:12:a0:08:ee:2d:01:26:c4:89:9b:82:87:9b:1e:
10:8e:4f:da:1f:29:9a:c1:2e:fe:a6:0e:b6:0e:8d:
23:9e:c0:c3:8e:9b:45:a8:da:b5:8a:22:47:50:a4:
0e:d5:36:5f:78:15:2d:dd:c4:bf:af:2b:b5:a3:bc:
b9:e3:b5:f1:52:88:65:cf:65:96:8e:e6:35:60:d6:
e9:3b:18:21:eb:44:d5:45:e8:76:1a:47:ad:1f:87:
7a:d7:f6:55:6f:f5:5a:a5:8c:4f:18:f1:20:35:da:
6c:76:3a:93:8f:03:bb:c6:3c:89:69:f5:9c:e7:74:
71:75:d0:28:ac:03:c5:77:0a:27:dc:24:d2:5e:f8:
81:5a:bb:34:e0:f4:d6:7e:5f:86:e4:6a:9b:78:71:
1b:ff:a6:14:b3:e5:7c:ac:c3:3b:60:e4:1c:6b:72:
f5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:87:B9:1A:D8:39:44:B1:E6:71:AE:E8:AD:55:FF:92:03:09:E8:B0
X509v3 Authority Key Identifier:
keyid:66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/uoe5Gtg5RLHmca7orVX_kgMJ6LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.168.0/22
IPv6:
2a09:fbc0::/32
Signature Algorithm: sha256WithRSAEncryption
85:8b:c8:e8:3c:11:39:8d:1b:6e:b6:e8:27:51:b1:6d:7f:41:
26:af:d7:a5:c6:2f:5f:fa:7a:b9:e4:0a:a9:13:b3:ce:73:1d:
3d:a2:5c:6c:5b:a1:9f:2e:c4:7c:da:02:58:aa:c3:3e:67:b3:
ec:29:66:40:0e:dc:4b:29:ad:f2:55:aa:31:68:d1:04:69:90:
d6:31:5b:24:6e:e8:c0:9c:13:45:d6:83:61:0f:85:ca:49:db:
a0:57:18:20:91:4a:90:47:78:e7:85:32:c4:eb:53:3f:ba:30:
d6:ab:f4:63:51:7d:c8:db:f7:e8:83:8c:8d:f6:0b:c6:0c:8c:
1c:ce:d1:f0:8e:98:a6:69:8f:0d:20:91:3e:2e:bd:05:be:07:
1e:e7:5b:f3:f7:03:07:7c:6d:0f:97:17:55:d4:1b:20:ff:a5:
43:7f:ed:83:32:26:a7:66:b4:1b:97:0b:6b:83:14:6a:ea:b6:
c9:9b:72:50:51:94:fa:7b:d6:f2:19:15:f0:6b:fb:f7:44:8c:
1a:e2:85:df:ee:60:73:fc:42:94:af:d8:7f:84:17:0d:17:d8:
33:af:0d:a6:e2:d0:e5:b6:ec:7d:68:61:a8:9e:0a:ec:94:1a:
0d:e4:fa:09:85:f2:8d:7a:f0:3c:b1:b5:10:fc:42:d7:97:6f:
83:be:d3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:11:12 2026 by rpki-client