This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/UyoOwt_mkkio7rcKttEYqMqc4tE.roa File: UyoOwt_mkkio7rcKttEYqMqc4tE.roa (raw, json) Hash identifier: 3ZPFWtYV3D6s10XCwOHklQ6Iqj8jHJrAUWODxNNBQcY= Subject key identifier: 53:2A:0E:C2:DF:E6:92:48:A8:EE:B7:0A:B6:D1:18:A8:CA:9C:E2:D1 Certificate issuer: /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576 Certificate serial: 019B791104F07ADD273A62900D0769FF54E9 Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/UyoOwt_mkkio7rcKttEYqMqc4tE.roa Signing time: Thu 01 Jan 2026 10:18:37 +0000 ROA not before: Thu 01 Jan 2026 10:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 216.245.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:04:f0:7a:dd:27:3a:62:90:0d:07:69:ff:54:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576 Validity Not Before: Jan 1 10:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=532a0ec2dfe69248a8eeb70ab6d118a8ca9ce2d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b6:6e:3d:d5:0d:6a:4f:82:49:f8:bf:35:55: a9:7f:05:d6:18:2a:1b:31:56:4e:5f:ae:17:b9:f9: 5e:92:62:e6:b8:2b:6f:c9:68:04:25:30:ed:03:7f: 2a:fc:e7:f0:b1:82:92:5b:53:6f:41:3b:e4:6f:d8: d9:fb:63:70:9f:be:f9:cc:0c:67:55:f3:0e:f4:d1: c2:cd:1d:fe:fc:03:bc:ad:b5:90:f6:b7:cd:93:96: 14:e6:dd:f8:fc:99:2e:67:f6:e1:53:ab:e6:7e:9e: 9a:27:4a:58:0e:6a:c2:9a:a2:f7:4d:9e:7b:cc:f3: fb:89:6a:e9:e6:ce:a8:5a:de:52:40:2a:7c:d8:70: 16:6a:3b:92:98:61:d6:2b:79:75:51:d6:00:54:93: 8e:be:4c:fd:3e:20:84:34:c4:a4:9a:60:7f:76:15: f6:16:1d:dd:e5:89:d6:f9:a0:70:ee:f8:44:95:ee: 9f:0a:ed:71:66:ca:1d:af:77:7d:0d:41:f1:80:94: 51:70:7c:4b:c7:47:a5:01:d7:75:27:eb:0a:06:e6: 56:ab:e7:6a:36:da:3d:81:d4:b4:81:0a:7b:15:1a: 8b:c3:16:c4:a3:b3:78:5e:c9:db:e4:97:ec:b3:49: 1c:22:87:ab:33:50:88:a8:96:ef:4b:88:08:c1:d5: fa:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2A:0E:C2:DF:E6:92:48:A8:EE:B7:0A:B6:D1:18:A8:CA:9C:E2:D1 X509v3 Authority Key Identifier: keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/UyoOwt_mkkio7rcKttEYqMqc4tE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.245.80.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:fd:f8:33:9c:99:dc:f0:02:34:9b:ce:59:1c:65:3d:59:3a: bd:54:a9:72:c0:53:8d:e0:48:b3:30:14:15:7f:a8:00:03:e7: f3:5f:c8:96:63:63:ac:e7:58:ab:e0:f0:30:84:3d:36:49:4d: 83:0c:c8:c9:c9:9f:be:e5:b0:ba:8e:2d:94:e9:60:ff:13:08: 36:9c:32:78:f8:37:6c:ac:50:2f:25:6f:42:71:52:2d:38:90: 72:75:b2:7b:05:be:9f:73:92:2c:3e:d5:98:66:42:7b:38:1b: 27:62:fc:63:d1:4c:90:1e:35:e1:8e:e1:1c:e9:1e:b0:15:d0: b1:9f:ec:d6:50:6f:4a:a9:55:5a:2d:1d:2c:18:1e:ae:14:94: b7:95:c2:b5:1b:59:77:1a:4a:94:f9:4b:e5:3c:58:54:dd:05: d7:14:de:f9:37:4f:1d:55:4e:3b:f8:d8:58:58:84:17:fd:87: 75:d4:04:3e:86:b3:e0:35:db:0b:40:ab:43:40:4a:2a:c6:01: cf:c3:23:73:d1:35:ae:1a:65:6b:5c:26:24:cc:ca:44:94:62: 44:3c:84:02:4f:e2:32:c5:da:fa:a0:0e:54:f3:ef:d4:11:ef: 3c:59:69:87:b9:8d:63:6e:ea:50:6d:4d:74:b3:7a:b0:73:77: 36:28:21:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EQTwet0nOmKQDQdp/1TpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZWU3ZWUwZjc1YjcxNjRhYzc1OTYxOTdjN2YxMjFkNmZj YTE1NzYwHhcNMjYwMTAxMTAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzJhMGVjMmRmZTY5MjQ4YThlZWI3MGFiNmQxMThhOGNhOWNlMmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrZuPdUNak+CSfi/NVWpfwXWGCob MVZOX64XuflekmLmuCtvyWgEJTDtA38q/OfwsYKSW1NvQTvkb9jZ+2Nwn775zAxn VfMO9NHCzR3+/AO8rbWQ9rfNk5YU5t34/JkuZ/bhU6vmfp6aJ0pYDmrCmqL3TZ57 zPP7iWrp5s6oWt5SQCp82HAWajuSmGHWK3l1UdYAVJOOvkz9PiCENMSkmmB/dhX2 Fh3d5YnW+aBw7vhEle6fCu1xZsodr3d9DUHxgJRRcHxLx0elAdd1J+sKBuZWq+dq Nto9gdS0gQp7FRqLwxbEo7N4Xsnb5Jfss0kcIoerM1CIqJbvS4gIwdX6RQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFMqDsLf5pJIqO63CrbRGKjKnOLRMB8GA1UdIwQY MBaAFAnufuD3W3FkrHWWGXx/Eh1vyhV2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2U1LTRQZGJjV1NzZFpZWmZIOFNIV19LRlhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kYmU1MGEtMmNhMS00MzYyLWI1ZTct NjY4M2M4ZmM5ZTViLzEvVXlvT3d0X21ra2lvN3JjS3R0RVlxTXFjNHRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9kYmU1MGEtMmNhMS00MzYyLWI1ZTctNjY4M2M4ZmM5ZTVi LzEvQ2U1LTRQZGJjV1NzZFpZWmZIOFNIV19LRlhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PVQMA0G CSqGSIb3DQEBCwUAA4IBAQAv/fgznJnc8AI0m85ZHGU9WTq9VKlywFON4EizMBQV f6gAA+fzX8iWY2Os51ir4PAwhD02SU2DDMjJyZ++5bC6ji2U6WD/Ewg2nDJ4+Dds rFAvJW9CcVItOJBydbJ7Bb6fc5IsPtWYZkJ7OBsnYvxj0UyQHjXhjuEc6R6wFdCx n+zWUG9KqVVaLR0sGB6uFJS3lcK1G1l3GkqU+UvlPFhU3QXXFN75N08dVU47+NhY WIQX/Yd11AQ+hrPgNdsLQKtDQEoqxgHPwyNz0TWuGmVrXCYkzMpElGJEPIQCT+Iy xdr6oA5U8+/UEe88WWmHuY1jbupQbU10s3qwc3c2KCE/ -----END CERTIFICATE-----Generated at Fri Jan 2 11:04:03 2026 by rpki-client