This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/uVfVl5jLdxjs4w4RV6Bgx3icYLM.roa File: uVfVl5jLdxjs4w4RV6Bgx3icYLM.roa (raw, json) Hash identifier: nLTZvLVH6Dns0Nlwm7jbQLERdg9l8ZpxJhvVlNsa8jA= Subject key identifier: B9:57:D5:97:98:CB:77:18:EC:E3:0E:11:57:A0:60:C7:78:9C:60:B3 Certificate issuer: /CN=a1f7882861c29ed599be4a937480c4d13e25bfc2 Certificate serial: 019B7834684E50D1DF39392B690780864884 Authority key identifier: A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/uVfVl5jLdxjs4w4RV6Bgx3icYLM.roa Signing time: Thu 01 Jan 2026 06:17:39 +0000 ROA not before: Thu 01 Jan 2026 06:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206459 IP address blocks: 5.181.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:68:4e:50:d1:df:39:39:2b:69:07:80:86:48:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1f7882861c29ed599be4a937480c4d13e25bfc2 Validity Not Before: Jan 1 06:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b957d59798cb7718ece30e1157a060c7789c60b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b1:9b:8f:6b:b0:a7:6c:76:47:18:6a:f6:15: d5:5c:37:a9:b9:f5:f0:a9:fa:a9:f3:38:19:fd:46: a8:0d:11:d6:77:33:d2:c9:d2:e2:45:c1:da:38:a1: 24:1d:b3:b1:f0:62:7e:37:7b:7a:e4:86:24:25:df: c6:fa:ab:de:8c:c1:62:af:76:50:0e:57:26:d0:05: 8c:0a:28:be:e7:c4:4c:e3:4c:6c:17:4a:d9:a6:a3: 22:a2:0a:73:88:d3:15:f8:40:ec:f4:71:44:87:fc: d1:e0:73:3f:39:a0:4b:86:0a:30:50:7a:87:16:a7: 05:a9:b7:77:f5:0f:b5:33:0a:00:13:ef:ea:b1:61: 7f:74:79:50:1e:7e:c3:0f:53:85:eb:34:09:79:ce: 80:64:fe:00:1b:10:46:10:63:ba:03:71:14:d2:44: 4c:da:5a:7c:4f:7e:e1:ce:e1:93:b8:f9:29:42:46: 3e:21:f6:ad:66:2f:8b:d7:fd:77:5f:ad:f1:95:a1: 44:c4:09:06:d8:24:81:bf:dd:f6:43:f3:3c:5c:57: 78:f4:77:b5:f0:e0:21:2f:90:97:9a:d2:37:23:b7: c8:3d:17:52:be:cf:85:9e:b5:2a:6c:05:04:9d:ed: d8:b7:f2:d4:e4:03:da:78:dd:bf:80:ec:c6:74:9a: 40:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:57:D5:97:98:CB:77:18:EC:E3:0E:11:57:A0:60:C7:78:9C:60:B3 X509v3 Authority Key Identifier: keyid:A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/uVfVl5jLdxjs4w4RV6Bgx3icYLM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.160.0/24 Signature Algorithm: sha256WithRSAEncryption a2:83:d1:fd:31:7b:32:a1:56:c9:11:e9:e6:ed:37:41:93:7b: 4c:c0:b3:c5:08:62:b3:5d:c2:69:94:bd:bf:34:d4:02:4f:13: e1:37:eb:aa:e4:50:67:7c:70:51:9c:84:c9:bf:98:f5:d7:c7: 41:b1:b7:99:a3:37:3f:a0:71:22:48:97:57:b5:cc:47:00:c8: f3:e9:f2:24:9c:38:7a:05:7f:f2:dc:70:36:5f:b1:95:ac:b2: 41:91:b0:6b:71:5f:8f:b8:97:1d:97:71:05:80:3c:c6:dd:28: 56:24:21:45:8a:15:c9:ce:30:ec:b2:e9:00:20:e2:b8:f4:6f: 5c:bc:41:29:b4:47:71:a5:10:91:bc:f5:97:ac:20:41:52:cd: 59:39:6a:4c:46:f0:e5:b5:36:1d:04:b5:cb:aa:91:1f:5e:63: 0f:c5:6d:10:d8:85:97:95:fa:14:aa:33:4d:49:b4:74:76:08: 8d:3b:64:d0:ba:b2:51:5f:a3:77:ba:ea:3c:03:aa:14:cb:8a: ce:fc:8e:40:6f:e7:3d:d9:b3:3f:5d:a4:68:1e:fd:50:98:7f: 25:5b:57:3f:d7:2d:f0:c1:ca:e5:5a:29:64:77:e5:7b:be:8b: 58:05:eb:47:b7:d7:ec:bf:52:d9:43:65:39:2f:7d:30:2a:cc: 51:10:27:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NGhOUNHfOTkraQeAhkiEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExZjc4ODI4NjFjMjllZDU5OWJlNGE5Mzc0ODBjNGQxM2Uy NWJmYzIwHhcNMjYwMTAxMDYxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTU3ZDU5Nzk4Y2I3NzE4ZWNlMzBlMTE1N2EwNjBjNzc4OWM2MGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8LGbj2uwp2x2Rxhq9hXVXDepufXw qfqp8zgZ/UaoDRHWdzPSydLiRcHaOKEkHbOx8GJ+N3t65IYkJd/G+qvejMFir3ZQ Dlcm0AWMCii+58RM40xsF0rZpqMiogpziNMV+EDs9HFEh/zR4HM/OaBLhgowUHqH FqcFqbd39Q+1MwoAE+/qsWF/dHlQHn7DD1OF6zQJec6AZP4AGxBGEGO6A3EU0kRM 2lp8T37hzuGTuPkpQkY+IfatZi+L1/13X63xlaFExAkG2CSBv932Q/M8XFd49He1 8OAhL5CXmtI3I7fIPRdSvs+FnrUqbAUEne3Yt/LU5APaeN2/gOzGdJpANQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLlX1ZeYy3cY7OMOEVegYMd4nGCzMB8GA1UdIwQY MBaAFKH3iChhwp7Vmb5Kk3SAxNE+Jb/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wM2JhYjgtNmM0My00YTIwLWE5NjAt YzM3YTU5ODJmNDY2LzEvdVZmVmw1akxkeGpzNHc0UlY2Qmd4M2ljWUxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8wM2JhYjgtNmM0My00YTIwLWE5NjAtYzM3YTU5ODJmNDY2 LzEvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbWgMA0G CSqGSIb3DQEBCwUAA4IBAQCig9H9MXsyoVbJEenm7TdBk3tMwLPFCGKzXcJplL2/ NNQCTxPhN+uq5FBnfHBRnITJv5j118dBsbeZozc/oHEiSJdXtcxHAMjz6fIknDh6 BX/y3HA2X7GVrLJBkbBrcV+PuJcdl3EFgDzG3ShWJCFFihXJzjDssukAIOK49G9c vEEptEdxpRCRvPWXrCBBUs1ZOWpMRvDltTYdBLXLqpEfXmMPxW0Q2IWXlfoUqjNN SbR0dgiNO2TQurJRX6N3uuo8A6oUy4rO/I5Ab+c92bM/XaRoHv1QmH8lW1c/1y3w wcrlWilkd+V7votYBetHt9fsv1LZQ2U5L30wKsxRECcO -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:43 2026 by rpki-client