This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/UKjE1pTZntp5XJ0LkIvSm1AM4Ho.roa File: UKjE1pTZntp5XJ0LkIvSm1AM4Ho.roa (raw, json) Hash identifier: H1SamunUnJmGWMd+mnC6zCfE97JuUVFIkS729mOu4kA= Subject key identifier: 50:A8:C4:D6:94:D9:9E:DA:79:5C:9D:0B:90:8B:D2:9B:50:0C:E0:7A Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 019B7FF1679135CD4CB67CE3C3A39C9B4C37 Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/UKjE1pTZntp5XJ0LkIvSm1AM4Ho.roa Signing time: Fri 02 Jan 2026 18:21:25 +0000 ROA not before: Fri 02 Jan 2026 18:21:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 207.244.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:67:91:35:cd:4c:b6:7c:e3:c3:a3:9c:9b:4c:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Jan 2 18:21:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50a8c4d694d99eda795c9d0b908bd29b500ce07a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8c:a4:c6:d5:e9:bf:7a:b6:b9:c1:c6:65:86: 8e:26:66:b7:0f:58:13:e3:2e:b5:cf:7c:3d:39:41: bf:a5:28:37:42:32:14:b6:8d:fa:84:45:9c:f2:5e: b0:ec:57:bb:a6:bd:6b:13:56:07:fe:09:cd:6b:95: 3d:ce:b1:08:83:84:12:66:6d:cf:a1:1d:19:ec:de: af:4b:b3:03:c1:8f:47:ac:90:16:06:72:ba:e4:7e: b2:69:9e:b0:67:f8:11:68:c3:d1:9c:fe:31:fd:ad: bc:ba:3f:44:85:8a:1b:83:d8:08:91:b8:4f:90:68: c7:db:17:63:5c:14:8c:81:bc:fa:ec:3e:80:dc:b8: 52:d8:88:26:e9:ce:25:9c:14:d4:bc:2f:02:53:b0: 3f:81:a8:ad:df:69:6f:5c:fa:f3:49:c1:dd:83:c7: fe:9b:3f:56:22:17:3e:81:da:c3:9c:96:62:fd:dd: 38:d8:ac:4d:b8:a4:2b:25:89:1d:a1:db:62:49:df: 1f:0e:51:f2:96:e6:f7:56:93:5d:10:cc:2a:5a:f0: be:75:fc:97:53:ed:db:18:be:f1:a5:94:0a:66:c1: 50:1b:b6:c2:28:88:e2:20:99:31:28:68:e3:de:ae: 73:bb:ff:01:74:c7:4c:5c:66:8e:55:7a:78:24:4c: e0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A8:C4:D6:94:D9:9E:DA:79:5C:9D:0B:90:8B:D2:9B:50:0C:E0:7A X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/UKjE1pTZntp5XJ0LkIvSm1AM4Ho.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 207.244.197.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:ec:ff:83:38:34:f2:27:b9:3d:cf:da:13:0a:e3:38:7d:0e: b0:44:fb:23:4c:b3:32:a3:39:7f:3a:73:d8:6d:a8:21:94:88: 2b:6d:4d:4b:e7:de:5c:e5:ee:09:d1:4c:c9:4a:82:c4:42:bb: 9e:e9:4a:04:57:85:7c:4c:99:3f:d4:df:cc:30:01:bd:57:ad: f3:5d:df:74:7b:3d:8e:2c:ca:13:2e:86:09:10:94:b8:98:d6: 3c:8a:49:04:25:f0:df:12:37:b5:f7:f8:ea:3f:f5:bb:ce:b1: 73:1e:fc:f8:d2:8e:5b:f4:f2:55:52:43:43:7c:6d:d5:36:85: 93:39:0c:fe:5d:8b:b3:0c:5e:1d:f1:2f:0c:f7:ae:ba:43:2d: b4:d9:76:e7:78:9a:b0:43:cb:da:22:af:9d:f9:90:6f:a8:5f: 72:eb:59:8e:27:5d:31:60:d1:8c:3b:7e:a2:14:9d:2a:64:ec: a9:50:d6:76:0d:cf:0a:ec:b6:96:6a:fc:ee:33:46:3b:9c:3e: 12:c4:6b:34:5c:53:57:bd:68:8f:b9:01:cf:43:17:9d:6b:d5: 31:92:81:c0:98:ac:e8:ab:88:9c:22:67:a0:11:9e:3e:de:e8: 52:8e:d7:de:c0:92:79:c6:ad:ed:ba:6a:cf:a2:35:0e:35:d2: 13:4c:1f:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8WeRNc1Mtnzjw6Ocm0w3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjYwMTAyMTgyMTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGE4YzRkNjk0ZDk5ZWRhNzk1YzlkMGI5MDhiZDI5YjUwMGNlMDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4ykxtXpv3q2ucHGZYaOJma3D1gT 4y61z3w9OUG/pSg3QjIUto36hEWc8l6w7Fe7pr1rE1YH/gnNa5U9zrEIg4QSZm3P oR0Z7N6vS7MDwY9HrJAWBnK65H6yaZ6wZ/gRaMPRnP4x/a28uj9EhYobg9gIkbhP kGjH2xdjXBSMgbz67D6A3LhS2Igm6c4lnBTUvC8CU7A/gait32lvXPrzScHdg8f+ mz9WIhc+gdrDnJZi/d042KxNuKQrJYkdodtiSd8fDlHylub3VpNdEMwqWvC+dfyX U+3bGL7xpZQKZsFQG7bCKIjiIJkxKGjj3q5zu/8BdMdMXGaOVXp4JEzgIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFCoxNaU2Z7aeVydC5CL0ptQDOB6MB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvVUtqRTFwVFpudHA1WEowTGtJdlNtMUFNNEhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/TFMA0G CSqGSIb3DQEBCwUAA4IBAQAq7P+DODTyJ7k9z9oTCuM4fQ6wRPsjTLMyozl/OnPY baghlIgrbU1L595c5e4J0UzJSoLEQrue6UoEV4V8TJk/1N/MMAG9V63zXd90ez2O LMoTLoYJEJS4mNY8ikkEJfDfEje19/jqP/W7zrFzHvz40o5b9PJVUkNDfG3VNoWT OQz+XYuzDF4d8S8M9666Qy202XbneJqwQ8vaIq+d+ZBvqF9y61mOJ10xYNGMO36i FJ0qZOypUNZ2Dc8K7LaWavzuM0Y7nD4SxGs0XFNXvWiPuQHPQxeda9UxkoHAmKzo q4icImegEZ4+3uhSjtfewJJ5xq3tumrPojUONdITTB9s -----END CERTIFICATE-----Generated at Fri Jan 9 00:56:54 2026 by rpki-client