This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/uNBCqgPm9OGK31TBmTo_MAC1yZU.roa File: uNBCqgPm9OGK31TBmTo_MAC1yZU.roa (raw, json) Hash identifier: QNpQXcsFAXHCdiWuXRp1NnyNLbpNgci4N8tXC8HHacM= Subject key identifier: B8:D0:42:AA:03:E6:F4:E1:8A:DF:54:C1:99:3A:3F:30:00:B5:C9:95 Certificate issuer: /CN=597a01de87e011803f890ae17749020f995f140c Certificate serial: 019C241848282A998AD7B54C4BDCE66D6D96 Authority key identifier: 59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/uNBCqgPm9OGK31TBmTo_MAC1yZU.roa Signing time: Tue 03 Feb 2026 15:21:36 +0000 ROA not before: Tue 03 Feb 2026 15:21:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204527 IP address blocks: 164.18.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:24:18:48:28:2a:99:8a:d7:b5:4c:4b:dc:e6:6d:6d:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597a01de87e011803f890ae17749020f995f140c Validity Not Before: Feb 3 15:21:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8d042aa03e6f4e18adf54c1993a3f3000b5c995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b7:a7:33:f1:dc:7a:b2:4c:90:f8:1e:b1:72: 20:c8:f5:aa:cc:65:fe:91:ba:ac:77:9e:ca:52:ba: fc:5f:93:2d:cd:60:e2:a3:2d:30:7d:d9:0d:12:fb: ba:a4:7f:9e:0b:41:8e:69:b8:0b:c8:8f:9f:37:57: 9b:1a:8e:76:81:c3:2c:5f:f8:25:30:e9:bf:a5:d9: 31:2a:2f:d1:08:25:fb:29:3e:74:4b:31:53:c6:26: 80:df:b6:c7:5c:f2:d9:c9:b3:67:91:79:74:90:35: 05:2a:aa:bb:54:03:f7:e4:e6:18:d3:66:f3:a7:e8: c1:c5:e0:a7:47:0b:45:3e:23:21:a7:ab:19:16:1c: af:37:49:af:32:37:12:60:48:33:04:f2:c8:4e:9f: 48:1a:ab:06:f9:ea:df:8f:d9:6e:62:b8:72:6a:db: 82:38:c1:0e:42:af:aa:c0:0f:25:d1:bc:1a:b4:39: e3:b3:e5:1c:04:5e:20:80:4d:36:34:e6:f3:87:bd: 1d:24:43:22:97:79:6b:00:ce:d2:20:74:b0:86:40: c7:41:94:07:df:58:09:28:7c:13:f4:62:a1:9c:2c: ba:68:cd:5b:8e:5c:3f:bc:6b:4b:2a:1c:97:50:f8: 73:43:3b:85:3b:f2:87:f3:4a:81:9c:c3:e5:e1:e9: b0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D0:42:AA:03:E6:F4:E1:8A:DF:54:C1:99:3A:3F:30:00:B5:C9:95 X509v3 Authority Key Identifier: keyid:59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/uNBCqgPm9OGK31TBmTo_MAC1yZU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.18.240.0/24 Signature Algorithm: sha256WithRSAEncryption a2:ba:f2:83:a9:25:19:6f:58:ed:ab:65:07:4b:a5:df:3c:fe: ff:81:24:c8:7e:52:81:f4:e9:d8:2d:05:af:56:9f:12:b1:7d: 3f:95:ab:99:f4:72:00:34:b9:6b:b7:73:ba:ce:3b:b1:4c:69: db:8f:c1:a1:3a:49:42:42:99:7c:a0:c8:d7:85:90:86:80:3e: 7b:c7:ee:45:30:95:f2:3a:3c:bf:56:c0:e0:19:47:a2:77:e6: 12:01:98:77:b4:3c:40:79:ae:ef:50:0a:d2:3c:53:b9:4c:98: 91:27:3c:a3:27:ce:87:8f:f0:fa:a4:23:ab:5f:d3:a3:a6:6d: 1a:79:f0:69:d9:2c:7e:0c:30:35:b7:b9:e9:3b:32:28:a5:f1: cf:09:75:04:9d:67:b7:05:5d:bf:c0:d6:87:93:bc:ec:cf:d0: e9:59:c0:b5:d7:62:f3:83:aa:95:ab:d1:25:ec:fc:6d:c2:cd: 1d:73:e4:41:a6:e6:ef:fe:c7:9b:7f:cf:aa:c3:06:12:e0:a5: 6f:14:67:09:3a:1e:e6:2b:76:80:9a:6b:a1:65:06:08:a5:24: 3e:cd:f4:ff:16:56:9a:7c:cc:7c:b6:14:e5:66:b2:97:d1:29: 17:15:e0:8a:86:95:f5:48:83:87:a9:2d:a4:30:cb:80:9d:26: 28:01:2d:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwkGEgoKpmK17VMS9zmbW2WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5N2EwMWRlODdlMDExODAzZjg5MGFlMTc3NDkwMjBmOTk1 ZjE0MGMwHhcNMjYwMjAzMTUyMTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGQwNDJhYTAzZTZmNGUxOGFkZjU0YzE5OTNhM2YzMDAwYjVjOTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7enM/HcerJMkPgesXIgyPWqzGX+ kbqsd57KUrr8X5MtzWDioy0wfdkNEvu6pH+eC0GOabgLyI+fN1ebGo52gcMsX/gl MOm/pdkxKi/RCCX7KT50SzFTxiaA37bHXPLZybNnkXl0kDUFKqq7VAP35OYY02bz p+jBxeCnRwtFPiMhp6sZFhyvN0mvMjcSYEgzBPLITp9IGqsG+erfj9luYrhyatuC OMEOQq+qwA8l0bwatDnjs+UcBF4ggE02NObzh70dJEMil3lrAM7SIHSwhkDHQZQH 31gJKHwT9GKhnCy6aM1bjlw/vGtLKhyXUPhzQzuFO/KH80qBnMPl4emwjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLjQQqoD5vThit9UwZk6PzAAtcmVMB8GA1UdIwQY MBaAFFl6Ad6H4BGAP4kK4XdJAg+ZXxQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hvQjNvZmdFWUFfaVFyaGQwa0NENWxmRkF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8yM2VkOWEtMWNhNS00NWVhLTliOGMt NzM1MzNkZTA5OWMzLzEvdU5CQ3FnUG05T0dLMzFUQm1Ub19NQUMxeVpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8yM2VkOWEtMWNhNS00NWVhLTliOGMtNzM1MzNkZTA5OWMz LzEvV1hvQjNvZmdFWUFfaVFyaGQwa0NENWxmRkF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApBLwMA0G CSqGSIb3DQEBCwUAA4IBAQCiuvKDqSUZb1jtq2UHS6XfPP7/gSTIflKB9OnYLQWv Vp8SsX0/lauZ9HIANLlrt3O6zjuxTGnbj8GhOklCQpl8oMjXhZCGgD57x+5FMJXy Ojy/VsDgGUeid+YSAZh3tDxAea7vUArSPFO5TJiRJzyjJ86Hj/D6pCOrX9Ojpm0a efBp2Sx+DDA1t7npOzIopfHPCXUEnWe3BV2/wNaHk7zsz9DpWcC112Lzg6qVq9El 7Pxtws0dc+RBpubv/sebf8+qwwYS4KVvFGcJOh7mK3aAmmuhZQYIpSQ+zfT/Flaa fMx8thTlZrKX0SkXFeCKhpX1SIOHqS2kMMuAnSYoAS13 -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:39 2026 by rpki-client