This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/UQttblox4YqbtmcdrnTNUlIXUrA.roa File: UQttblox4YqbtmcdrnTNUlIXUrA.roa (raw, json) Hash identifier: Kp4mizWB09vMj96WX2Mw1hMJlxG7gErBxSdQDtVOWsI= Subject key identifier: 51:0B:6D:6E:5A:31:E1:8A:9B:B6:67:1D:AE:74:CD:52:52:17:52:B0 Certificate issuer: /CN=58788f38426e0362b34dd567343fe8461a58babe Certificate serial: 019B7910FAB183233B4EDBFAB6207F73C024 Authority key identifier: 58:78:8F:38:42:6E:03:62:B3:4D:D5:67:34:3F:E8:46:1A:58:BA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/UQttblox4YqbtmcdrnTNUlIXUrA.roa Signing time: Thu 01 Jan 2026 10:18:34 +0000 ROA not before: Thu 01 Jan 2026 10:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205837 IP address blocks: 185.203.160.0/24 maxlen: 24 185.203.161.0/24 maxlen: 24 185.203.162.0/24 maxlen: 24 185.203.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.crl rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:fa:b1:83:23:3b:4e:db:fa:b6:20:7f:73:c0:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58788f38426e0362b34dd567343fe8461a58babe Validity Not Before: Jan 1 10:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=510b6d6e5a31e18a9bb6671dae74cd52521752b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:15:28:e5:5f:b4:d0:4e:86:96:b6:6e:47:e6: 6d:06:2a:18:55:4d:02:4d:72:b1:f9:06:02:09:d4: 94:46:36:5b:cd:c1:25:43:84:01:a7:db:d5:55:1a: ef:1a:a6:4b:a6:31:8f:5b:d9:ce:8b:56:18:d6:4b: f2:2c:bb:e3:35:4f:9d:0e:a6:d8:a4:94:03:3e:a3: 1c:d0:9c:23:7e:f3:e8:24:71:bb:d2:c4:51:cd:40: 99:b1:7b:8d:ad:fd:55:22:38:03:28:f9:33:06:f8: 18:fe:83:8b:cf:45:e8:0e:79:6b:d0:aa:c5:2f:78: 9b:27:6f:4a:32:f9:c9:13:1e:a6:4e:1a:fb:de:1f: 73:54:84:28:8b:93:b9:c0:8b:9f:63:c8:0a:13:df: bd:18:0a:8f:31:a4:81:2d:91:cb:63:6d:26:5b:22: 3f:8d:38:ff:51:da:f8:f8:66:74:3d:8c:c5:06:e5: e8:58:f7:01:8c:53:d5:1d:87:ca:1d:9d:3d:12:49: 2d:01:0f:9c:7e:59:aa:f8:c7:99:1c:1a:ed:c8:2a: 8a:3a:52:69:37:5b:cf:87:e6:cb:e1:4d:77:a0:1a: 8c:6a:94:68:d0:89:ef:28:b3:98:c2:1b:bf:13:7b: f9:f9:f9:92:56:84:f3:fa:68:d4:8a:6a:8c:be:99: 67:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0B:6D:6E:5A:31:E1:8A:9B:B6:67:1D:AE:74:CD:52:52:17:52:B0 X509v3 Authority Key Identifier: keyid:58:78:8F:38:42:6E:03:62:B3:4D:D5:67:34:3F:E8:46:1A:58:BA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/UQttblox4YqbtmcdrnTNUlIXUrA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.203.160.0/22 Signature Algorithm: sha256WithRSAEncryption bf:2f:69:78:59:e4:78:0d:57:a5:71:fc:0c:9a:9a:1c:30:6b: b6:b0:62:d9:85:aa:fd:c0:92:8a:5e:f5:48:28:6c:53:fc:8e: 30:4f:9a:10:d5:1e:ec:76:a5:17:46:06:c3:95:77:08:39:3b: d1:64:ca:d4:a4:0e:09:54:12:a5:40:c4:ab:c9:c0:e2:43:fe: a9:06:a0:94:f8:7c:44:0a:54:3f:fb:2b:25:a3:df:6f:6b:d4: 4d:2d:5f:4f:fe:a5:67:3c:bd:da:48:4a:13:6a:f9:3d:3f:dd: 94:ca:28:7d:d3:b1:67:7f:4d:2d:dc:fa:ac:ea:b0:9d:16:d9: c7:30:23:84:ab:4a:7f:90:2e:8a:5e:a6:9d:d0:12:4e:e3:87: eb:91:4d:f1:29:70:55:e2:66:84:77:e2:20:a8:7c:71:2f:77: e1:64:60:e2:eb:74:92:4b:f8:d9:f5:00:af:45:b2:fc:e9:81: f7:e1:68:a0:86:db:f8:b7:14:9e:64:fc:7a:29:94:bc:48:45: 15:0f:43:ec:fc:e6:96:b4:ff:ed:32:f8:a8:b4:9d:ee:12:c0: 6e:8c:b7:2c:08:4a:b1:f5:35:5f:18:b2:17:e0:9c:89:a6:fa: 3d:d0:f4:6a:7c:8f:dc:9d:df:e4:5f:58:6e:aa:ee:ff:c1:b1: 16:da:4c:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EPqxgyM7Ttv6tiB/c8AkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4Nzg4ZjM4NDI2ZTAzNjJiMzRkZDU2NzM0M2ZlODQ2MWE1 OGJhYmUwHhcNMjYwMTAxMTAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTBiNmQ2ZTVhMzFlMThhOWJiNjY3MWRhZTc0Y2Q1MjUyMTc1MmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xUo5V+00E6GlrZuR+ZtBioYVU0C TXKx+QYCCdSURjZbzcElQ4QBp9vVVRrvGqZLpjGPW9nOi1YY1kvyLLvjNU+dDqbY pJQDPqMc0JwjfvPoJHG70sRRzUCZsXuNrf1VIjgDKPkzBvgY/oOLz0XoDnlr0KrF L3ibJ29KMvnJEx6mThr73h9zVIQoi5O5wIufY8gKE9+9GAqPMaSBLZHLY20mWyI/ jTj/Udr4+GZ0PYzFBuXoWPcBjFPVHYfKHZ09EkktAQ+cflmq+MeZHBrtyCqKOlJp N1vPh+bL4U13oBqMapRo0InvKLOYwhu/E3v5+fmSVoTz+mjUimqMvplntwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFELbW5aMeGKm7ZnHa50zVJSF1KwMB8GA1UdIwQY MBaAFFh4jzhCbgNis03VZzQ/6EYaWLq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0hpUE9FSnVBMkt6VGRWbk5EX29SaHBZdXI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8zZDNiMjctZjc4Ni00MWUwLWFjNTQt YmZjMGZmOTdhMTkwLzEvVVF0dGJsb3g0WXFidG1jZHJuVE5VbElYVXJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8zZDNiMjctZjc4Ni00MWUwLWFjNTQtYmZjMGZmOTdhMTkw LzEvV0hpUE9FSnVBMkt6VGRWbk5EX29SaHBZdXI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucugMA0G CSqGSIb3DQEBCwUAA4IBAQC/L2l4WeR4DVelcfwMmpocMGu2sGLZhar9wJKKXvVI KGxT/I4wT5oQ1R7sdqUXRgbDlXcIOTvRZMrUpA4JVBKlQMSrycDiQ/6pBqCU+HxE ClQ/+yslo99va9RNLV9P/qVnPL3aSEoTavk9P92Uyih907Fnf00t3Pqs6rCdFtnH MCOEq0p/kC6KXqad0BJO44frkU3xKXBV4maEd+IgqHxxL3fhZGDi63SSS/jZ9QCv RbL86YH34Wightv4txSeZPx6KZS8SEUVD0Ps/OaWtP/tMviotJ3uEsBujLcsCEqx 9TVfGLIX4JyJpvo90PRqfI/cnd/kX1huqu7/wbEW2kxW -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:44 2026 by rpki-client