This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/uTCFSvHAVz3nHa6P5YM7-F9EAsA.roa File: uTCFSvHAVz3nHa6P5YM7-F9EAsA.roa (raw, json) Hash identifier: D2HXyv3dNbtL36RxmhvbXscG1YPOLW06VIlL+wCmVag= Subject key identifier: B9:30:85:4A:F1:C0:57:3D:E7:1D:AE:8F:E5:83:3B:F8:5F:44:02:C0 Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 019BCEB138E2A1C687A8E0D1740ADA709072 Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/uTCFSvHAVz3nHa6P5YM7-F9EAsA.roa Signing time: Sun 18 Jan 2026 01:21:19 +0000 ROA not before: Sun 18 Jan 2026 01:21:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63199 IP address blocks: 147.185.196.0/24 maxlen: 24 207.244.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ce:b1:38:e2:a1:c6:87:a8:e0:d1:74:0a:da:70:90:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Jan 18 01:21:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b930854af1c0573de71dae8fe5833bf85f4402c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:10:13:35:f7:c4:08:39:c2:08:35:5c:a7:02: 11:4b:e7:4b:75:b6:a0:4a:23:8f:64:86:4c:1e:d4: d7:ee:c6:01:23:5d:02:df:f2:9e:67:bd:50:9a:b9: 67:8c:ed:b3:68:b2:b1:10:34:a1:11:23:b0:7c:eb: c4:58:3b:01:c2:87:b6:e1:70:6a:23:8f:be:4b:6e: 32:78:03:ee:a6:6f:3d:fa:fa:0d:2a:85:d7:3f:2c: 00:ac:a8:91:4d:aa:b0:f3:8f:89:74:d3:5c:d5:f2: 0f:0b:d3:c7:10:bd:7f:e8:6e:24:15:27:e4:f6:8f: 97:28:f7:62:10:c9:b9:fc:94:e9:25:3c:1f:f2:4c: 18:a3:e6:c3:74:d7:aa:8d:a1:1a:93:ed:7d:bf:c9: 3b:b3:c0:d0:36:38:e2:f3:cf:2b:12:c3:68:a7:98: f5:ca:42:ad:0f:1a:07:3a:4c:c5:e9:25:b4:79:a8: c6:be:c0:19:5b:ae:f2:83:c2:d4:e3:86:1f:ed:40: 1f:b6:e7:22:60:49:39:e2:fe:30:c8:59:de:17:05: 94:57:4d:7c:bd:b5:59:ee:30:2e:17:0a:84:6e:d3: f9:05:24:9a:33:11:c6:a3:c2:2c:77:18:16:50:9c: d5:7a:2e:84:59:26:17:dd:2c:88:44:b5:24:c9:b6: 8b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:30:85:4A:F1:C0:57:3D:E7:1D:AE:8F:E5:83:3B:F8:5F:44:02:C0 X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/uTCFSvHAVz3nHa6P5YM7-F9EAsA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.185.196.0/24 207.244.198.0/24 Signature Algorithm: sha256WithRSAEncryption 87:6f:6f:de:27:cc:e1:be:8f:18:15:fc:e5:eb:07:c0:fb:94: 6b:15:59:30:e3:f2:0c:d2:bb:ac:54:19:93:80:9a:39:f5:f4: f4:33:e7:78:bf:e1:1c:52:b4:97:5e:fb:75:78:7b:0e:0d:ad: 27:94:63:92:c4:55:b8:c6:4e:08:f6:05:d6:f0:27:03:4d:cd: 9a:8a:c6:1d:f3:b8:22:f3:d3:5b:20:85:6e:da:64:da:33:8e: 16:d4:56:91:c8:1b:23:13:75:90:c8:4b:0c:07:8f:99:d2:dc: 88:96:00:ce:6e:05:f2:75:87:64:87:a7:cc:bb:f6:c3:71:c7: 02:f3:31:94:22:54:bf:51:89:1c:c7:52:fe:a3:7f:19:31:c4: 1f:ab:ca:06:e7:15:22:cc:bf:93:72:a2:c0:e7:47:20:35:c4: be:5b:0e:28:83:f3:7a:cf:d0:67:96:a7:ee:38:1a:67:a4:47: ae:67:d2:14:37:8f:1c:ba:5f:c4:04:2c:f6:17:3a:ae:0a:a0: d0:46:97:2a:ab:12:33:07:0d:3d:00:25:ae:73:ba:38:33:7f: f9:17:68:1b:ac:02:6b:2f:e4:b2:8f:fd:b7:f9:07:16:a5:25: 69:40:06:14:43:f0:a4:81:28:c0:86:f8:7e:2d:58:b0:61:68: df:5b:6a:65 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvOsTjiocaHqODRdAracJByMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjYwMTE4MDEyMTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTMwODU0YWYxYzA1NzNkZTcxZGFlOGZlNTgzM2JmODVmNDQwMmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBATNffECDnCCDVcpwIRS+dLdbag SiOPZIZMHtTX7sYBI10C3/KeZ71QmrlnjO2zaLKxEDShESOwfOvEWDsBwoe24XBq I4++S24yeAPupm89+voNKoXXPywArKiRTaqw84+JdNNc1fIPC9PHEL1/6G4kFSfk 9o+XKPdiEMm5/JTpJTwf8kwYo+bDdNeqjaEak+19v8k7s8DQNjji888rEsNop5j1 ykKtDxoHOkzF6SW0eajGvsAZW67yg8LU44Yf7UAftuciYEk54v4wyFneFwWUV018 vbVZ7jAuFwqEbtP5BSSaMxHGo8IsdxgWUJzVei6EWSYX3SyIRLUkybaLHwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLkwhUrxwFc95x2uj+WDO/hfRALAMB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvdVRDRlN2SEFWejNuSGE2UDVZTTctRjlFQXNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAk7nEAwQA z/TGMA0GCSqGSIb3DQEBCwUAA4IBAQCHb2/eJ8zhvo8YFfzl6wfA+5RrFVkw4/IM 0rusVBmTgJo59fT0M+d4v+EcUrSXXvt1eHsODa0nlGOSxFW4xk4I9gXW8CcDTc2a isYd87gi89NbIIVu2mTaM44W1FaRyBsjE3WQyEsMB4+Z0tyIlgDObgXydYdkh6fM u/bDcccC8zGUIlS/UYkcx1L+o38ZMcQfq8oG5xUizL+TcqLA50cgNcS+Ww4og/N6 z9BnlqfuOBpnpEeuZ9IUN48cul/EBCz2FzquCqDQRpcqqxIzBw09ACWuc7o4M3/5 F2gbrAJrL+Syj/23+QcWpSVpQAYUQ/CkgSjAhvh+LViwYWjfW2pl -----END CERTIFICATE-----Generated at Mon Jan 19 14:37:26 2026 by rpki-client