This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/uQrZ_yUBE4r4HRpNEnf5ncfmIRM.roa File: uQrZ_yUBE4r4HRpNEnf5ncfmIRM.roa (raw, json) Hash identifier: Vok0pTUTuPIBNEYR0bFFmqBSBPO0up5rHjQDf8u916Y= Subject key identifier: B9:0A:D9:FF:25:01:13:8A:F8:1D:1A:4D:12:77:F9:9D:C7:E6:21:13 Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C1303F73DFA68158994A9D754D98993 Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/uQrZ_yUBE4r4HRpNEnf5ncfmIRM.roa Signing time: Fri 02 Jan 2026 00:19:39 +0000 ROA not before: Fri 02 Jan 2026 00:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205492 IP address blocks: 194.209.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:03:f7:3d:fa:68:15:89:94:a9:d7:54:d9:89:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b90ad9ff2501138af81d1a4d1277f99dc7e62113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6d:68:c8:16:4d:c1:03:b0:57:63:18:1f:8e: e9:db:34:18:d7:01:12:82:05:e5:f0:87:a0:bf:4a: 69:d1:25:8c:c4:bb:1e:f5:b1:61:09:4c:ee:a6:b8: 79:93:93:08:ab:b6:f3:b6:e7:0f:ca:38:95:89:8f: 39:81:77:55:23:41:9a:55:97:b0:da:ac:e8:b2:b3: 32:1d:af:de:35:10:c4:b0:2b:9e:bc:93:a7:b1:8e: 42:61:60:7d:25:ff:df:63:e3:5e:df:7b:e5:de:28: 31:25:1f:61:b8:e9:7d:ea:47:cd:d5:12:a5:1b:92: b4:fd:88:ae:ff:cd:93:83:32:9d:45:32:6c:06:19: cb:80:e4:a5:09:36:8d:30:c2:cf:1c:aa:fe:80:45: e3:9e:14:80:9b:2d:eb:bd:07:b1:29:f7:d0:43:b4: 47:a3:a8:a1:56:81:df:bd:ac:5a:1d:55:38:bd:0c: 9a:60:fe:f9:34:b7:a8:f2:6c:79:ad:01:2a:13:98: 13:12:81:12:20:86:4c:63:ad:4a:67:34:38:f8:b1: 0a:c7:36:ac:a6:7d:b0:6d:94:f8:bf:45:c2:84:72: a2:2e:1a:98:0f:9a:69:32:44:0f:88:4c:d4:10:8f: 1d:24:d5:0c:5a:bd:a4:a1:25:2b:96:05:ec:c4:42: c1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0A:D9:FF:25:01:13:8A:F8:1D:1A:4D:12:77:F9:9D:C7:E6:21:13 X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/uQrZ_yUBE4r4HRpNEnf5ncfmIRM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.209.80.0/24 Signature Algorithm: sha256WithRSAEncryption b2:c1:c4:ef:f7:0c:b1:e2:da:66:ef:45:dd:0c:c1:44:7e:6e: 2f:76:25:32:0b:ff:e1:61:33:c7:0c:8b:3f:df:27:8b:cb:86: aa:26:0e:df:9e:51:76:f3:65:88:2b:91:a7:71:fa:d1:9c:d4: d3:8b:ae:cf:a4:57:d3:19:dc:88:6f:f5:90:4d:c5:53:0d:48: fd:48:18:fd:a6:f8:cb:38:db:0b:4a:2c:3f:b2:36:8c:26:7e: d8:09:e1:9a:99:9c:fb:74:b3:cd:ad:52:69:84:87:52:3e:bd: 94:eb:9d:36:0b:18:5b:f5:f3:75:35:cf:61:fb:f1:23:6f:06: e3:be:29:4e:43:c7:2f:f0:dd:4e:f5:9c:b4:04:7b:51:47:f4: aa:b4:ea:2e:a1:fb:f9:ed:7c:7b:49:44:0d:28:9c:f7:59:ee: 55:ac:b1:d8:76:aa:4a:f4:3d:c4:01:73:9d:b8:13:6d:ed:be: d4:87:1a:10:42:ba:6d:29:e4:c9:e7:f5:6f:08:db:00:a2:69: 0f:f1:01:ef:b2:eb:cb:ec:4b:82:83:e2:0e:b9:cd:1a:b2:8f: 9d:a6:ac:0d:29:a9:74:50:84:46:71:7d:d7:52:82:c0:f7:ac: a5:cd:88:8f:39:9a:e8:ba:a4:46:51:ef:62:6a:87:52:34:4e: 87:d9:4f:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EwP3PfpoFYmUqddU2YmTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTBhZDlmZjI1MDExMzhhZjgxZDFhNGQxMjc3Zjk5ZGM3ZTYyMTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm1oyBZNwQOwV2MYH47p2zQY1wES ggXl8Iegv0pp0SWMxLse9bFhCUzuprh5k5MIq7bztucPyjiViY85gXdVI0GaVZew 2qzosrMyHa/eNRDEsCuevJOnsY5CYWB9Jf/fY+Ne33vl3igxJR9huOl96kfN1RKl G5K0/Yiu/82TgzKdRTJsBhnLgOSlCTaNMMLPHKr+gEXjnhSAmy3rvQexKffQQ7RH o6ihVoHfvaxaHVU4vQyaYP75NLeo8mx5rQEqE5gTEoESIIZMY61KZzQ4+LEKxzas pn2wbZT4v0XChHKiLhqYD5ppMkQPiEzUEI8dJNUMWr2koSUrlgXsxELBlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLkK2f8lAROK+B0aTRJ3+Z3H5iETMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvdVFyWl95VUJFNHI0SFJwTkVuZjVuY2ZtSVJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwtFQMA0G CSqGSIb3DQEBCwUAA4IBAQCywcTv9wyx4tpm70XdDMFEfm4vdiUyC//hYTPHDIs/ 3yeLy4aqJg7fnlF282WIK5GncfrRnNTTi67PpFfTGdyIb/WQTcVTDUj9SBj9pvjL ONsLSiw/sjaMJn7YCeGamZz7dLPNrVJphIdSPr2U6502Cxhb9fN1Nc9h+/Ejbwbj vilOQ8cv8N1O9Zy0BHtRR/SqtOouofv57Xx7SUQNKJz3We5VrLHYdqpK9D3EAXOd uBNt7b7UhxoQQrptKeTJ5/VvCNsAomkP8QHvsuvL7EuCg+IOuc0aso+dpqwNKal0 UIRGcX3XUoLA96ylzYiPOZrouqRGUe9iaodSNE6H2U9C -----END CERTIFICATE-----Generated at Mon Jan 26 17:46:31 2026 by rpki-client