This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/uCc138TA6I8oKDd9GfZ4DDo3vbk.roa File: uCc138TA6I8oKDd9GfZ4DDo3vbk.roa (raw, json) Hash identifier: 9QywaX+xNWWX8/eIoZHqrPbZhEsxSCi5Zlf0wOs/po0= Subject key identifier: B8:27:35:DF:C4:C0:E8:8F:28:28:37:7D:19:F6:78:0C:3A:37:BD:B9 Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 019B7E38B72BADA5DB900AF9BADA380E554F Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/uCc138TA6I8oKDd9GfZ4DDo3vbk.roa Signing time: Fri 02 Jan 2026 10:20:04 +0000 ROA not before: Fri 02 Jan 2026 10:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397373 IP address blocks: 185.114.206.0/23 maxlen: 23 185.114.206.0/24 maxlen: 24 185.114.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b7:2b:ad:a5:db:90:0a:f9:ba:da:38:0e:55:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: Jan 2 10:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b82735dfc4c0e88f2828377d19f6780c3a37bdb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:85:7c:87:22:a4:cf:75:e6:52:2d:07:50:32: 0e:64:8d:ca:26:cf:b3:f1:aa:ab:34:4f:7b:83:3f: ae:29:dc:d7:40:89:7f:9a:9c:37:51:fb:48:33:af: 67:ab:25:df:01:cb:e3:2f:36:d5:2d:07:36:cd:08: 45:77:29:8d:c1:73:32:39:49:16:0f:9a:9c:26:d5: 06:42:4f:10:a8:0c:e8:cf:f0:35:d9:55:25:f3:8b: c9:9e:8f:81:ec:9d:27:bf:aa:1a:99:13:b3:5b:a9: e7:2e:7e:02:61:0b:c2:92:95:91:09:db:c2:f3:66: df:94:c2:0e:d9:17:ce:bf:58:c3:4f:d6:02:4f:4d: cf:a5:e7:07:4a:29:6a:e9:f3:53:c7:b1:12:8b:72: e8:10:ab:a5:c0:76:3c:10:4a:9f:95:01:1d:ca:6b: 26:e9:a4:6d:95:1d:d6:77:0e:8d:30:01:f8:28:44: d3:db:f4:68:6f:01:da:ce:e6:5d:52:2e:d5:72:fe: 8e:1b:b4:bd:67:8f:c9:d9:cf:58:52:8b:a3:e0:49: 27:72:37:c1:4b:7b:fb:1b:f7:7d:49:e9:bb:c9:fa: 78:a9:0c:d1:27:83:0e:c0:cf:9d:93:8b:e6:45:b2: 16:0d:16:23:9e:19:d1:cd:2f:da:f8:6b:4d:46:26: 14:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:27:35:DF:C4:C0:E8:8F:28:28:37:7D:19:F6:78:0C:3A:37:BD:B9 X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/uCc138TA6I8oKDd9GfZ4DDo3vbk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.114.206.0/23 Signature Algorithm: sha256WithRSAEncryption 43:dd:4c:c3:5e:e9:66:06:44:f0:f9:c4:6d:0a:c7:a3:9d:35: 92:18:97:17:a9:f2:5e:8d:aa:9e:58:bf:d9:03:03:17:90:e4: 62:55:2e:fe:7e:5c:e9:80:57:85:e0:a8:f2:46:53:e1:dc:1f: 16:bd:bb:e6:92:69:7a:8d:69:76:1a:ff:2a:4a:11:46:34:ac: 55:b7:62:40:74:f3:90:eb:85:45:70:91:71:39:3f:74:99:72: 36:99:8b:32:dc:28:5e:7a:c2:73:2b:c9:b9:00:3b:8c:2a:11: 52:91:b2:57:88:4c:da:13:58:b5:aa:df:ef:6f:e5:b1:f8:b2: 89:13:b1:a9:d2:3a:31:f1:e6:39:66:1a:1a:40:77:60:6e:b1: 91:23:f6:88:c6:59:c1:5f:cd:05:39:07:f4:c9:ae:8f:4c:be: 9e:31:5f:3c:dc:ce:e1:74:42:51:5b:51:10:9d:75:c9:c2:46: 95:06:d8:1b:d4:03:cf:c5:19:a1:65:ce:7b:7f:8f:1a:54:fc: eb:0e:46:8e:c1:41:57:c3:ea:6c:3b:01:1c:c9:9e:12:59:dc: b0:6e:88:63:91:19:f3:3b:ea:31:7a:53:06:3a:e7:32:f8:2c: 90:15:b8:aa:5b:ec:1b:28:aa:23:8c:63:40:c6:2f:96:1a:50: 03:a4:cb:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OLcrraXbkAr5uto4DlVPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjYwMTAyMTAyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODI3MzVkZmM0YzBlODhmMjgyODM3N2QxOWY2NzgwYzNhMzdiZGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYV8hyKkz3XmUi0HUDIOZI3KJs+z 8aqrNE97gz+uKdzXQIl/mpw3UftIM69nqyXfAcvjLzbVLQc2zQhFdymNwXMyOUkW D5qcJtUGQk8QqAzoz/A12VUl84vJno+B7J0nv6oamROzW6nnLn4CYQvCkpWRCdvC 82bflMIO2RfOv1jDT9YCT03PpecHSilq6fNTx7ESi3LoEKulwHY8EEqflQEdymsm 6aRtlR3Wdw6NMAH4KETT2/RobwHazuZdUi7Vcv6OG7S9Z4/J2c9YUouj4EkncjfB S3v7G/d9Sem7yfp4qQzRJ4MOwM+dk4vmRbIWDRYjnhnRzS/a+GtNRiYUuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLgnNd/EwOiPKCg3fRn2eAw6N725MB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvdUNjMTM4VEE2SThvS0RkOUdmWjRERG8zdmJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuXLOMA0G CSqGSIb3DQEBCwUAA4IBAQBD3UzDXulmBkTw+cRtCsejnTWSGJcXqfJejaqeWL/Z AwMXkORiVS7+flzpgFeF4KjyRlPh3B8Wvbvmkml6jWl2Gv8qShFGNKxVt2JAdPOQ 64VFcJFxOT90mXI2mYsy3CheesJzK8m5ADuMKhFSkbJXiEzaE1i1qt/vb+Wx+LKJ E7Gp0jox8eY5ZhoaQHdgbrGRI/aIxlnBX80FOQf0ya6PTL6eMV883M7hdEJRW1EQ nXXJwkaVBtgb1APPxRmhZc57f48aVPzrDkaOwUFXw+psOwEcyZ4SWdywbohjkRnz O+oxelMGOucy+CyQFbiqW+wbKKojjGNAxi+WGlADpMt/ -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:35 2026 by rpki-client