This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/uSf8YpQ-0ch8yPbVC8hW_1UaI7E.roa File: uSf8YpQ-0ch8yPbVC8hW_1UaI7E.roa (raw, json) Hash identifier: TdBQBjgQL2vkXRlnvGccZPDz+o0AOBvhUDV7Uw/d7z0= Subject key identifier: B9:27:FC:62:94:3E:D1:C8:7C:C8:F6:D5:0B:C8:56:FF:55:1A:23:B1 Certificate issuer: /CN=5dc67c6be367ab9e941d1427d050449447b8865c Certificate serial: 019B7A5B14BBE54C5835633886D941E5DB36 Authority key identifier: 5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/uSf8YpQ-0ch8yPbVC8hW_1UaI7E.roa Signing time: Thu 01 Jan 2026 16:19:07 +0000 ROA not before: Thu 01 Jan 2026 16:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205240 IP address blocks: 193.218.204.0/24 maxlen: 24 193.218.222.0/24 maxlen: 24 193.219.0.0/24 maxlen: 24 2a0f:99c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:14:bb:e5:4c:58:35:63:38:86:d9:41:e5:db:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dc67c6be367ab9e941d1427d050449447b8865c Validity Not Before: Jan 1 16:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b927fc62943ed1c87cc8f6d50bc856ff551a23b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3b:7a:9a:5d:ec:59:90:c7:f5:e2:19:29:5b: 0f:54:63:b2:f0:48:66:d6:eb:50:c6:7e:82:41:35: de:5a:09:a3:0a:c8:42:8e:c1:4e:8a:ed:9a:87:ec: 54:a9:28:9a:be:b0:2b:96:5b:f9:20:82:a4:63:3b: 8e:25:99:69:14:0e:0f:ae:ab:0c:9f:30:27:d0:07: 46:94:56:25:38:ca:85:02:3a:b9:ea:82:de:a6:b1: 1f:e0:b1:f5:29:6c:0d:50:92:65:c4:fa:ce:b0:8f: 07:0e:e6:8c:3b:ea:24:61:ed:1e:e7:34:92:5a:1c: 05:20:df:81:00:f9:ba:95:a3:96:a8:50:1f:0b:5f: 99:6c:6b:b4:26:5f:c0:28:2a:06:02:d5:d2:21:74: 07:b7:dc:21:67:07:39:a9:26:36:a5:10:43:fd:96: c2:41:cc:5d:f7:7b:86:5d:bc:7e:09:06:07:76:f5: 63:c4:cd:72:c2:fe:3e:f1:f7:dc:6b:d8:39:c4:d9: a9:71:e6:02:d9:f4:f3:8c:b5:47:32:c6:ef:2f:d2: 83:af:b5:a4:60:59:ea:c2:17:ad:6f:f5:b3:f7:3b: c4:ad:6f:fd:88:2a:1c:e0:2d:58:b5:cb:be:91:03: 3d:c7:ca:99:d1:57:7b:66:de:4b:4d:36:50:38:d2: db:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:27:FC:62:94:3E:D1:C8:7C:C8:F6:D5:0B:C8:56:FF:55:1A:23:B1 X509v3 Authority Key Identifier: keyid:5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/uSf8YpQ-0ch8yPbVC8hW_1UaI7E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.218.204.0/24 193.218.222.0/24 193.219.0.0/24 IPv6: 2a0f:99c0::/32 Signature Algorithm: sha256WithRSAEncryption 02:6d:e9:a8:c5:df:3a:df:e0:66:6b:a2:66:b7:40:8c:68:4e: fd:9c:2f:47:fb:11:ab:22:70:67:99:cd:2d:80:af:25:a8:33: af:ea:a9:e9:59:a1:45:20:19:ec:70:0d:91:9c:ed:76:75:81: ea:c2:81:a0:7f:20:af:9f:b8:36:91:2d:c3:83:7d:17:84:ac: 59:fc:89:c1:64:79:56:8e:de:0a:8f:3a:a3:40:bc:37:f4:5d: 4a:6d:a5:e0:a9:68:79:c8:c0:61:c3:c2:94:01:ee:82:d9:e6: 73:8a:d0:d6:80:88:f0:1b:76:5a:c8:bf:a7:ad:a9:b2:83:13: 3b:e2:16:51:8f:67:ba:ec:09:5e:08:16:5b:1e:44:ae:a0:b4: 10:d9:43:b5:26:da:08:c4:c1:15:ab:4e:18:00:98:9a:8d:f3: 1d:b3:1c:32:0f:05:d2:26:8f:b8:99:e3:fb:39:a4:ff:98:69: 3a:e5:ca:94:78:21:b1:64:89:87:c3:be:ca:df:f4:5f:10:a0: a9:cf:bf:bb:bd:55:93:22:db:a3:9f:f6:45:64:08:fe:ea:2f: 3a:26:0a:3b:b0:cb:fc:f5:cb:69:a3:dc:dd:b7:29:f5:da:7b: 19:eb:3f:d2:8f:5e:3b:82:ea:23:7a:d5:a0:93:9e:05:44:d9: 57:9a:bb:3a -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6WxS75UxYNWM4htlB5ds2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYzY3YzZiZTM2N2FiOWU5NDFkMTQyN2QwNTA0NDk0NDdi ODg2NWMwHhcNMjYwMTAxMTYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTI3ZmM2Mjk0M2VkMWM4N2NjOGY2ZDUwYmM4NTZmZjU1MWEyM2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDt6ml3sWZDH9eIZKVsPVGOy8Ehm 1utQxn6CQTXeWgmjCshCjsFOiu2ah+xUqSiavrArllv5IIKkYzuOJZlpFA4PrqsM nzAn0AdGlFYlOMqFAjq56oLeprEf4LH1KWwNUJJlxPrOsI8HDuaMO+okYe0e5zSS WhwFIN+BAPm6laOWqFAfC1+ZbGu0Jl/AKCoGAtXSIXQHt9whZwc5qSY2pRBD/ZbC Qcxd93uGXbx+CQYHdvVjxM1ywv4+8ffca9g5xNmpceYC2fTzjLVHMsbvL9KDr7Wk YFnqwhetb/Wz9zvErW/9iCoc4C1Ytcu+kQM9x8qZ0Vd7Zt5LTTZQONLbJwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFLkn/GKUPtHIfMj21QvIVv9VGiOxMB8GA1UdIwQY MBaAFF3GfGvjZ6uelB0UJ9BQRJRHuIZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGNaOGEtTm5xNTZVSFJRbjBGQkVsRWU0aGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83NjI3NWEtNmY0MS00ODA0LTgzN2It ODk3OTlkZWFkYzQ3LzEvdVNmOFlwUS0wY2g4eVBiVkM4aFdfMVVhSTdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy83NjI3NWEtNmY0MS00ODA0LTgzN2ItODk3OTlkZWFkYzQ3 LzEvWGNaOGEtTm5xNTZVSFJRbjBGQkVsRWU0aGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAwdrMAwQA wdreAwQAwdsAMA0EAgACMAcDBQAqD5nAMA0GCSqGSIb3DQEBCwUAA4IBAQACbemo xd863+Bma6Jmt0CMaE79nC9H+xGrInBnmc0tgK8lqDOv6qnpWaFFIBnscA2RnO12 dYHqwoGgfyCvn7g2kS3Dg30XhKxZ/InBZHlWjt4KjzqjQLw39F1KbaXgqWh5yMBh w8KUAe6C2eZzitDWgIjwG3ZayL+nramygxM74hZRj2e67AleCBZbHkSuoLQQ2UO1 JtoIxMEVq04YAJiajfMdsxwyDwXSJo+4meP7OaT/mGk65cqUeCGxZImHw77K3/Rf EKCpz7+7vVWTItujn/ZFZAj+6i86Jgo7sMv89ctpo9zdtyn12nsZ6z/Sj147guoj etWgk54FRNlXmrs6 -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:41 2026 by rpki-client