This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/UuVkQuPgqTsDeNHD0WgB5nTMv8A.roa File: UuVkQuPgqTsDeNHD0WgB5nTMv8A.roa (raw, json) Hash identifier: UCiMYIlZ0X9O8CD/EF/deQdiqlIkeR8UK6DAGXq5qYE= Subject key identifier: 52:E5:64:42:E3:E0:A9:3B:03:78:D1:C3:D1:68:01:E6:74:CC:BF:C0 Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db Certificate serial: 019B79108AA03D22D91A688F63DFBEF4F545 Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/UuVkQuPgqTsDeNHD0WgB5nTMv8A.roa Signing time: Thu 01 Jan 2026 10:18:05 +0000 ROA not before: Thu 01 Jan 2026 10:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 140947 IP address blocks: 194.163.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:8a:a0:3d:22:d9:1a:68:8f:63:df:be:f4:f5:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db Validity Not Before: Jan 1 10:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52e56442e3e0a93b0378d1c3d16801e674ccbfc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:02:44:6b:ad:5b:25:3d:0b:72:85:6e:cc:25: e5:8d:6f:97:d0:11:4e:6b:85:d9:c1:3b:f9:8b:d5: 2a:c2:01:90:9a:1a:e9:82:61:9a:b6:78:a3:a6:23: 6f:20:0d:4c:2e:a8:ff:cc:e5:91:62:38:5c:f7:ba: 34:83:02:cf:7d:6a:63:e4:bb:d5:f1:f1:39:d8:69: 66:dc:33:d8:6b:09:ea:3d:4c:06:0c:3c:2a:5b:26: 80:d2:cc:5d:bd:5c:9e:25:10:cc:7f:e6:00:73:e5: 1a:92:69:4c:c0:26:06:04:2f:3a:16:8f:81:d8:35: 7e:53:d6:45:fa:6b:62:60:17:3c:66:33:cd:d8:eb: 81:85:60:27:fd:63:13:6e:54:9f:a0:f9:2b:20:e4: 42:5a:4a:cd:a0:f7:e0:76:46:9e:19:3a:94:e2:69: eb:24:5a:60:79:10:b6:38:bf:43:46:9f:6f:73:5b: 2e:38:4a:e9:67:32:80:ca:3e:6d:51:27:e7:81:17: 29:42:65:df:e0:e0:d3:4b:32:2b:36:7a:9c:aa:b5: f9:0a:de:40:ec:18:97:4b:2a:04:b4:10:bb:db:f7: de:ea:93:0c:9a:f8:ac:5f:21:b4:bb:4f:7a:e2:40: 13:5f:fb:cf:20:04:a7:f7:a4:b9:50:da:51:07:13: c9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E5:64:42:E3:E0:A9:3B:03:78:D1:C3:D1:68:01:E6:74:CC:BF:C0 X509v3 Authority Key Identifier: keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/UuVkQuPgqTsDeNHD0WgB5nTMv8A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.163.94.0/24 Signature Algorithm: sha256WithRSAEncryption b7:fa:39:d1:41:27:1b:07:a4:62:0d:30:55:d5:9f:d4:6f:bc: 85:17:9c:8f:62:ac:41:d3:47:f1:ee:a5:d1:25:3e:fa:b2:0c: 9e:b0:53:38:f4:5c:15:f7:60:93:c9:11:aa:98:07:13:ca:6c: 6a:d5:1e:ac:69:6c:dc:7e:41:c1:59:5f:70:12:66:df:32:22: 97:75:6d:5d:c7:44:a9:5a:51:6b:be:f3:17:d7:b5:56:01:99: 54:23:a7:b1:e4:9e:86:13:1c:53:81:ac:67:16:d4:9f:18:9e: a4:ba:e9:ee:27:a5:12:81:6e:c1:48:49:43:b3:b8:7b:ef:11: 36:22:d6:46:91:b3:54:c8:81:85:73:99:e0:86:32:d2:b8:2e: 31:0e:77:cb:54:50:4d:af:d1:5e:4a:98:80:55:1a:a6:d3:d9: 76:2e:61:b7:e2:a3:a0:68:ed:32:ec:cc:98:b5:9f:92:c7:5b: 54:69:10:90:4c:d3:fe:4e:c7:ac:d0:7b:77:83:85:3d:fe:2d: d4:a3:4f:fb:71:36:35:6a:93:a5:e7:bc:67:8f:3b:73:b8:82: 01:92:6d:60:50:0d:8f:f2:82:34:44:ae:27:ea:fd:d2:8d:ea: ec:17:54:27:9d:3a:c1:fd:b8:d9:42:a8:fb:55:00:82:d8:0e: cf:39:2b:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EIqgPSLZGmiPY9++9PVFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk MDk5ZGIwHhcNMjYwMTAxMTAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmU1NjQ0MmUzZTBhOTNiMDM3OGQxYzNkMTY4MDFlNjc0Y2NiZmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwJEa61bJT0LcoVuzCXljW+X0BFO a4XZwTv5i9UqwgGQmhrpgmGatnijpiNvIA1MLqj/zOWRYjhc97o0gwLPfWpj5LvV 8fE52Glm3DPYawnqPUwGDDwqWyaA0sxdvVyeJRDMf+YAc+UakmlMwCYGBC86Fo+B 2DV+U9ZF+mtiYBc8ZjPN2OuBhWAn/WMTblSfoPkrIORCWkrNoPfgdkaeGTqU4mnr JFpgeRC2OL9DRp9vc1suOErpZzKAyj5tUSfngRcpQmXf4ODTSzIrNnqcqrX5Ct5A 7BiXSyoEtBC72/fe6pMMmvisXyG0u0964kATX/vPIASn96S5UNpRBxPJFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFLlZELj4Kk7A3jRw9FoAeZ0zL/AMB8GA1UdIwQY MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt NGYwZThjZTExYTdkLzEvVXVWa1F1UGdxVHNEZU5IRDBXZ0I1blRNdjhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwqNeMA0G CSqGSIb3DQEBCwUAA4IBAQC3+jnRQScbB6RiDTBV1Z/Ub7yFF5yPYqxB00fx7qXR JT76sgyesFM49FwV92CTyRGqmAcTymxq1R6saWzcfkHBWV9wEmbfMiKXdW1dx0Sp WlFrvvMX17VWAZlUI6ex5J6GExxTgaxnFtSfGJ6kuunuJ6USgW7BSElDs7h77xE2 ItZGkbNUyIGFc5nghjLSuC4xDnfLVFBNr9FeSpiAVRqm09l2LmG34qOgaO0y7MyY tZ+Sx1tUaRCQTNP+Tses0Ht3g4U9/i3Uo0/7cTY1apOl57xnjztzuIIBkm1gUA2P 8oI0RK4n6v3SjersF1QnnTrB/bjZQqj7VQCC2A7POSt6 -----END CERTIFICATE-----Generated at Wed Jan 21 18:43:38 2026 by rpki-client