This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/uGnD4olvWwb-IxQgtMlpkYc5Ygc.roa File: uGnD4olvWwb-IxQgtMlpkYc5Ygc.roa (raw, json) Hash identifier: 3grRGp9lhYOmkty3bAIcup/fw2wObERf8v9hgQgL3a8= Subject key identifier: B8:69:C3:E2:89:6F:5B:06:FE:23:14:20:B4:C9:69:91:87:39:62:07 Certificate issuer: /CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e Certificate serial: 019B7B36DAE7EB233DDFD2759CEC815D7078 Authority key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/uGnD4olvWwb-IxQgtMlpkYc5Ygc.roa Signing time: Thu 01 Jan 2026 20:19:11 +0000 ROA not before: Thu 01 Jan 2026 20:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5416 IP address blocks: 193.188.12.0/23 maxlen: 23 193.188.12.0/24 maxlen: 24 193.188.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:da:e7:eb:23:3d:df:d2:75:9c:ec:81:5d:70:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e Validity Not Before: Jan 1 20:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b869c3e2896f5b06fe231420b4c9699187396207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:11:9d:cd:e4:41:ad:b6:47:f1:fd:7c:3a:bf: 52:06:d1:69:d4:6e:a3:63:74:bd:5f:81:72:47:a8: d1:2d:a0:a2:77:2b:c0:ef:47:86:bc:5b:9c:49:7c: 79:75:5d:4b:f6:8d:c0:6b:61:ab:e3:aa:99:80:61: 51:fc:70:97:31:a4:fd:54:c3:00:bb:db:77:2e:2b: 54:3c:0d:8a:a0:2d:a5:3d:da:41:f7:1a:d5:d4:20: 7e:08:70:3e:61:1b:fa:52:df:bc:3d:0d:0e:4a:12: e3:73:7e:8e:1a:33:f6:90:fe:2c:18:f4:ac:ed:34: 82:d1:a9:7e:cb:7d:44:32:6d:a8:4a:39:09:e8:a3: c1:09:00:c5:20:db:05:ab:a1:18:30:80:28:b4:4b: 58:f6:55:6e:13:35:34:68:58:65:e4:63:e0:15:9a: 57:a2:85:6b:d8:ce:6f:87:8e:2b:cc:32:51:23:ed: e6:50:38:c6:34:18:9d:a9:5f:58:49:26:04:fa:24: 53:ee:bc:64:f1:5d:a0:d3:53:de:8c:13:a9:f4:5e: 26:26:31:7d:aa:ee:c9:b8:26:17:85:84:34:f1:f8: 41:fc:14:ee:c5:99:50:d4:92:c9:b1:e7:5d:74:29: 9d:6a:40:10:7a:52:d8:00:24:2c:9c:bf:90:4c:92: f1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:69:C3:E2:89:6F:5B:06:FE:23:14:20:B4:C9:69:91:87:39:62:07 X509v3 Authority Key Identifier: keyid:D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/uGnD4olvWwb-IxQgtMlpkYc5Ygc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.188.12.0/23 Signature Algorithm: sha256WithRSAEncryption 04:59:a6:8d:a8:7c:13:dd:da:9f:6b:12:25:86:48:85:e2:1a: 61:23:83:a4:b6:5f:db:8c:5f:8d:6e:fc:9f:5b:b0:32:78:2b: 8b:bb:37:a4:8a:2b:ab:1c:26:bc:01:47:d9:f2:21:d9:92:dd: 98:af:dc:cb:0e:e5:64:d9:65:eb:f2:47:91:ef:eb:f8:74:aa: 5e:fb:7c:5b:4c:cf:cc:b1:be:53:f2:74:f2:9c:fe:fe:26:52: 46:16:7f:cd:50:0b:a5:6a:5e:bc:76:55:ca:d1:a2:30:00:30: 85:2e:c2:4a:8f:92:8c:56:97:fb:15:4b:0d:97:57:00:4f:3c: a2:e3:76:a7:dc:c1:d6:bc:88:f2:db:1a:41:e5:95:af:8a:c3: f5:29:d2:19:25:85:ec:77:b1:3e:33:22:4d:01:ec:b9:02:0a: 93:7f:f1:00:a9:50:77:04:5b:50:2e:27:a0:b2:d8:b7:93:1e: 02:89:7a:b9:63:7f:38:d8:6c:2d:3b:bb:fa:55:14:29:4b:de: dd:23:79:6a:5c:c7:e8:58:1c:17:63:59:c7:29:c9:a2:9d:e2: 32:6e:8a:f8:59:3f:ee:82:75:3a:d7:18:6a:09:0d:4b:9a:a9: d4:3b:01:89:7d:d0:39:f9:b1:52:e8:1f:01:fc:25:68:d9:8e: 45:0a:77:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Ntrn6yM939J1nOyBXXB4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OWQ4NTZhYWE5ZWFkMTJmNzVjYjY4Y2RhZTk2YTBkMmM4 ZGRlMWUwHhcNMjYwMTAxMjAxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODY5YzNlMjg5NmY1YjA2ZmUyMzE0MjBiNGM5Njk5MTg3Mzk2MjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshGdzeRBrbZH8f18Or9SBtFp1G6j Y3S9X4FyR6jRLaCidyvA70eGvFucSXx5dV1L9o3Aa2Gr46qZgGFR/HCXMaT9VMMA u9t3LitUPA2KoC2lPdpB9xrV1CB+CHA+YRv6Ut+8PQ0OShLjc36OGjP2kP4sGPSs 7TSC0al+y31EMm2oSjkJ6KPBCQDFINsFq6EYMIAotEtY9lVuEzU0aFhl5GPgFZpX ooVr2M5vh44rzDJRI+3mUDjGNBidqV9YSSYE+iRT7rxk8V2g01PejBOp9F4mJjF9 qu7JuCYXhYQ08fhB/BTuxZlQ1JLJsedddCmdakAQelLYACQsnL+QTJLxKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLhpw+KJb1sG/iMUILTJaZGHOWIHMB8GA1UdIwQY MBaAFNedhWqqnq0S91y2jNrpag0sjd4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hNWJhYTItMmEzNS00Yzc2LWE5NDAt NTk5MGNkNGRlODhiLzEvdUduRDRvbHZXd2ItSXhRZ3RNbHBrWWM1WWdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9hNWJhYTItMmEzNS00Yzc2LWE5NDAtNTk5MGNkNGRlODhi LzEvMTUyRmFxcWVyUkwzWExhTTJ1bHFEU3lOM2g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwbwMMA0G CSqGSIb3DQEBCwUAA4IBAQAEWaaNqHwT3dqfaxIlhkiF4hphI4Oktl/bjF+Nbvyf W7AyeCuLuzekiiurHCa8AUfZ8iHZkt2Yr9zLDuVk2WXr8keR7+v4dKpe+3xbTM/M sb5T8nTynP7+JlJGFn/NUAulal68dlXK0aIwADCFLsJKj5KMVpf7FUsNl1cATzyi 43an3MHWvIjy2xpB5ZWvisP1KdIZJYXsd7E+MyJNAey5AgqTf/EAqVB3BFtQLieg sti3kx4CiXq5Y3842GwtO7v6VRQpS97dI3lqXMfoWBwXY1nHKcmineIybor4WT/u gnU61xhqCQ1LmqnUOwGJfdA5+bFS6B8B/CVo2Y5FCndR -----END CERTIFICATE-----Generated at Wed Jan 21 19:34:51 2026 by rpki-client