This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/uYzu2dMQ5_tuSd4HkpHbhuWYkvg.roa File: uYzu2dMQ5_tuSd4HkpHbhuWYkvg.roa (raw, json) Hash identifier: Yo3o6eFVt7LwYw/qBIDLsPZ6WwLjW5OHybSEQ/0IkB8= Subject key identifier: B9:8C:EE:D9:D3:10:E7:FB:6E:49:DE:07:92:91:DB:86:E5:98:92:F8 Certificate issuer: /CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e Certificate serial: 019B7E37DE695221FB6FF8C8ED25E6CD41A1 Authority key identifier: D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/uYzu2dMQ5_tuSd4HkpHbhuWYkvg.roa Signing time: Fri 02 Jan 2026 10:19:09 +0000 ROA not before: Fri 02 Jan 2026 10:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216246 IP address blocks: 178.20.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 10:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:de:69:52:21:fb:6f:f8:c8:ed:25:e6:cd:41:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e Validity Not Before: Jan 2 10:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b98ceed9d310e7fb6e49de079291db86e59892f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fc:9d:42:03:f1:b9:5e:b8:36:24:be:9d:7d: 12:fe:ec:85:1b:68:e8:37:cb:9c:c1:f8:6e:9e:4e: 04:0c:01:48:70:87:96:37:ed:0b:e3:eb:f7:3d:2c: 91:e9:3c:35:a0:c4:70:8a:63:8b:1d:0b:e0:35:e3: e6:9a:9a:a2:17:b6:d9:5e:0f:1a:82:26:91:37:51: d3:24:4c:60:04:b5:16:8c:e9:f0:de:30:47:40:b1: 29:a2:d9:21:2e:5f:36:d6:1c:b7:7f:e0:bb:fc:21: da:4a:84:6b:4a:08:01:d7:82:0e:da:55:69:07:a6: 7e:87:ed:61:3c:1e:cd:84:ca:ac:ba:68:52:0b:58: 38:ba:b6:0e:5a:cd:03:8f:1d:c2:0e:45:39:41:19: 0b:9b:92:a5:9a:89:66:2b:c6:a1:d8:31:09:b0:1d: 0d:4e:1a:38:0a:4b:9a:4d:f7:27:e3:7f:69:ce:26: 40:9e:f9:a2:2d:21:4f:d3:53:6a:70:58:24:46:da: 9e:6b:6c:66:b3:12:35:64:d9:40:cc:f0:ff:73:b1: dc:d3:ae:5d:c0:a4:f0:b5:50:bc:72:67:f9:d5:ea: 39:86:4b:d8:b3:39:d6:c7:d7:36:b7:74:99:b7:0c: ef:05:f1:e7:5b:f6:2e:89:87:70:74:02:70:f6:b1: fc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8C:EE:D9:D3:10:E7:FB:6E:49:DE:07:92:91:DB:86:E5:98:92:F8 X509v3 Authority Key Identifier: keyid:D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/uYzu2dMQ5_tuSd4HkpHbhuWYkvg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.20.208.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:2a:90:52:d6:3f:77:d2:b3:a0:cd:aa:80:76:4a:f8:01:08: 26:89:bf:fc:36:d3:37:a4:e2:00:b0:6a:5a:ef:62:b0:a3:2b: 74:69:50:66:9b:30:ff:98:22:e9:bb:ad:d0:28:9c:f5:4e:77: 16:d0:33:c0:f4:91:e6:fc:39:40:80:b4:92:a4:34:72:6b:2d: e8:34:df:04:b1:6d:3b:0a:b7:79:6a:e7:11:fd:73:87:b7:6e: f7:74:a4:50:01:10:28:26:2f:6f:d6:6b:76:0f:29:f9:e3:1a: a0:bc:76:ae:01:2e:96:8c:f8:a0:73:3c:80:76:95:5c:4a:64: af:53:aa:ab:d5:c3:f0:61:96:f4:d7:81:cb:85:05:9d:a1:3e: f7:c3:74:83:b7:87:5e:da:56:d6:2b:59:85:79:19:9d:8e:17: d2:2c:87:75:f1:af:44:9f:0c:b7:a7:ee:63:be:81:ad:83:c7: dd:35:3e:8c:4f:2d:79:7b:eb:69:7d:d3:5d:a7:1f:a6:2c:37: 24:89:aa:40:53:3e:cf:35:72:9b:d4:e4:21:e5:07:e4:31:80: 3b:86:86:6e:e1:78:58:18:65:68:6f:5a:02:28:ed:0d:1c:9c: 50:cb:29:7f:9c:58:42:ae:71:67:86:4f:09:2c:f7:a7:ba:fb: 82:06:82:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N95pUiH7b/jI7SXmzUGhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5M2E1NGYwMmY0OWY0NWFkNWQ3M2U1NTUxZDA5NjE4MWJj ZTNmNmUwHhcNMjYwMTAyMTAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOThjZWVkOWQzMTBlN2ZiNmU0OWRlMDc5MjkxZGI4NmU1OTg5MmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPydQgPxuV64NiS+nX0S/uyFG2jo N8ucwfhunk4EDAFIcIeWN+0L4+v3PSyR6Tw1oMRwimOLHQvgNePmmpqiF7bZXg8a giaRN1HTJExgBLUWjOnw3jBHQLEpotkhLl821hy3f+C7/CHaSoRrSggB14IO2lVp B6Z+h+1hPB7NhMqsumhSC1g4urYOWs0Djx3CDkU5QRkLm5KlmolmK8ah2DEJsB0N Tho4CkuaTfcn439pziZAnvmiLSFP01NqcFgkRtqea2xmsxI1ZNlAzPD/c7Hc065d wKTwtVC8cmf51eo5hkvYsznWx9c2t3SZtwzvBfHnW/YuiYdwdAJw9rH8AwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLmM7tnTEOf7bkneB5KR24blmJL4MB8GA1UdIwQY MBaAFNk6VPAvSfRa1dc+VVHQlhgbzj9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlRwVThDOUo5RnJWMXo1VlVkQ1dHQnZPUDI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8xNWZmZjQtOTY2Yi00ZTBhLWFiYWMt MDVkNThmMGNiODhjLzEvdVl6dTJkTVE1X3R1U2Q0SGtwSGJodVdZa3ZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8xNWZmZjQtOTY2Yi00ZTBhLWFiYWMtMDVkNThmMGNiODhj LzEvMlRwVThDOUo5RnJWMXo1VlVkQ1dHQnZPUDI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshTQMA0G CSqGSIb3DQEBCwUAA4IBAQAOKpBS1j930rOgzaqAdkr4AQgmib/8NtM3pOIAsGpa 72Kwoyt0aVBmmzD/mCLpu63QKJz1TncW0DPA9JHm/DlAgLSSpDRyay3oNN8EsW07 Crd5aucR/XOHt273dKRQARAoJi9v1mt2Dyn54xqgvHauAS6WjPigczyAdpVcSmSv U6qr1cPwYZb014HLhQWdoT73w3SDt4de2lbWK1mFeRmdjhfSLId18a9Enwy3p+5j voGtg8fdNT6MTy15e+tpfdNdpx+mLDckiapAUz7PNXKb1OQh5QfkMYA7hoZu4XhY GGVob1oCKO0NHJxQyyl/nFhCrnFnhk8JLPenuvuCBoKY -----END CERTIFICATE-----Generated at Tue Jan 20 14:13:50 2026 by rpki-client