This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/uxR1GROg63TuFHkT2ub5sjQx1uo.roa File: uxR1GROg63TuFHkT2ub5sjQx1uo.roa (raw, json) Hash identifier: uxxuaOGyj8ji4U7WC+Y5iqXpYQLIfiMJzDt4eVekeCo= Subject key identifier: BB:14:75:19:13:A0:EB:74:EE:14:79:13:DA:E6:F9:B2:34:31:D6:EA Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82D422108CAE9ED20DD1D814C9B7FC Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/uxR1GROg63TuFHkT2ub5sjQx1uo.roa Signing time: Fri 02 Jan 2026 16:20:39 +0000 ROA not before: Fri 02 Jan 2026 16:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210715 IP address blocks: 78.108.218.0/24 maxlen: 24 193.31.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:d4:22:10:8c:ae:9e:d2:0d:d1:d8:14:c9:b7:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb14751913a0eb74ee147913dae6f9b23431d6ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f8:a6:8f:c5:a4:fd:16:5d:fa:01:4c:46:b6: 92:3c:d0:14:df:8c:23:44:f3:aa:6c:2d:94:63:01: 71:b1:06:18:2c:94:d7:34:a3:01:30:75:e1:07:0c: 1b:13:ad:25:91:9e:6c:25:4b:4d:af:0a:17:08:d9: d7:e4:3c:58:37:41:d4:4f:00:03:e1:a5:e2:64:6b: 1f:82:fe:c5:4f:9a:c5:c4:62:78:40:54:8d:ad:24: a1:f6:a3:6e:da:9f:55:ad:c4:e3:ad:96:6f:45:76: 90:49:7e:99:a5:a6:82:b2:dc:10:06:ec:57:bd:0e: af:d1:f3:70:62:92:7f:a7:b2:94:87:bb:28:45:9f: 30:32:f7:ab:f9:21:c3:f1:78:7a:ae:5d:e1:f6:cb: bf:60:72:33:53:7d:d8:4e:57:c4:bf:75:72:a7:3d: e4:8f:8f:22:4e:24:d2:f9:4e:f7:97:2e:a8:91:50: 97:22:b1:d7:59:35:de:f4:90:0f:be:68:2f:d7:be: 88:1a:a6:b3:c6:c0:0a:db:b2:cd:33:a5:d7:a5:5c: 08:da:4f:ae:91:61:ce:d2:41:91:b4:cb:c5:9e:3f: 08:a6:0e:91:4c:3d:45:93:6c:b6:e1:c9:60:36:ec: bc:3f:7b:1b:0e:dd:68:87:ce:52:84:a0:8d:d5:c4: 70:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:14:75:19:13:A0:EB:74:EE:14:79:13:DA:E6:F9:B2:34:31:D6:EA X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/uxR1GROg63TuFHkT2ub5sjQx1uo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.108.218.0/24 193.31.31.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:bb:be:16:8f:67:0d:64:be:a8:a4:27:f2:02:9b:8d:86:e2: 0b:d0:9d:fd:2e:1d:c7:4a:01:fb:4c:f1:0d:8d:d7:21:0c:0b: 8f:91:20:0a:db:46:b1:07:c5:7f:bf:6e:73:ac:08:c8:ca:0a: c2:03:a1:97:cd:d9:c4:4c:00:4e:65:1e:48:b0:81:d8:b8:4e: a0:3d:e8:cb:86:f9:a7:00:ac:60:cf:50:58:60:7c:a2:9f:c1: 11:77:e4:b2:6e:0b:4d:b6:a2:d5:22:6f:7f:4a:be:fa:fd:62: 36:f8:dd:bb:81:85:94:0e:b0:bb:89:6b:f8:36:a6:ee:7a:74: 79:e0:3e:2a:e1:d7:9b:e9:be:4d:97:58:6c:93:61:48:b7:db: ad:d4:ec:09:02:7c:4e:d3:c4:67:67:7a:24:98:e8:a8:0a:a0: 18:56:77:b6:38:d8:d8:26:25:ce:79:e1:56:50:61:cb:f0:dd: a4:8c:da:c8:c2:02:bb:f9:43:aa:3a:8c:eb:80:6a:f5:c2:35: 9e:eb:7a:7d:97:5a:f9:54:3a:d3:98:9f:64:60:ba:05:a5:1a: c6:b4:51:b8:bb:05:20:f3:0b:05:19:fa:c4:2d:4a:0a:aa:50: e8:4e:19:9c:25:81:2e:e8:83:80:d3:24:40:6c:1f:71:d3:f4: f1:35:04:7f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/gtQiEIyuntIN0dgUybf8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjE0NzUxOTEzYTBlYjc0ZWUxNDc5MTNkYWU2ZjliMjM0MzFkNmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/imj8Wk/RZd+gFMRraSPNAU34wj RPOqbC2UYwFxsQYYLJTXNKMBMHXhBwwbE60lkZ5sJUtNrwoXCNnX5DxYN0HUTwAD 4aXiZGsfgv7FT5rFxGJ4QFSNrSSh9qNu2p9VrcTjrZZvRXaQSX6ZpaaCstwQBuxX vQ6v0fNwYpJ/p7KUh7soRZ8wMver+SHD8Xh6rl3h9su/YHIzU33YTlfEv3Vypz3k j48iTiTS+U73ly6okVCXIrHXWTXe9JAPvmgv176IGqazxsAK27LNM6XXpVwI2k+u kWHO0kGRtMvFnj8Ipg6RTD1Fk2y24clgNuy8P3sbDt1oh85ShKCN1cRw7QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLsUdRkToOt07hR5E9rm+bI0MdbqMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvdXhSMUdST2c2M1R1RkhrVDJ1YjVzalF4MXVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATmzaAwQA wR8fMA0GCSqGSIb3DQEBCwUAA4IBAQA8u74Wj2cNZL6opCfyApuNhuIL0J39Lh3H SgH7TPENjdchDAuPkSAK20axB8V/v25zrAjIygrCA6GXzdnETABOZR5IsIHYuE6g PejLhvmnAKxgz1BYYHyin8ERd+SybgtNtqLVIm9/Sr76/WI2+N27gYWUDrC7iWv4 NqbuenR54D4q4deb6b5Nl1hsk2FIt9ut1OwJAnxO08RnZ3okmOioCqAYVne2ONjY JiXOeeFWUGHL8N2kjNrIwgK7+UOqOozrgGr1wjWe63p9l1r5VDrTmJ9kYLoFpRrG tFG4uwUg8wsFGfrELUoKqlDoThmcJYEu6IOA0yRAbB9x0/TxNQR/ -----END CERTIFICATE-----Generated at Tue Jan 20 15:20:21 2026 by rpki-client