This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/uj43_HB0cbgfSBJ3pkw5WX0ctlA.roa File: uj43_HB0cbgfSBJ3pkw5WX0ctlA.roa (raw, json) Hash identifier: Qg5heRt3GNKVhwS3i0/2Bg+iUo3g8NAjbX7YvfBxFzY= Subject key identifier: BA:3E:37:FC:70:74:71:B8:1F:48:12:77:A6:4C:39:59:7D:1C:B6:50 Certificate issuer: /CN=a5841cc732ac738dc1e3fe67c12e5104bef863ba Certificate serial: 019B7B36CC3A0F96AFAAF7541C2899DA6630 Authority key identifier: A5:84:1C:C7:32:AC:73:8D:C1:E3:FE:67:C1:2E:51:04:BE:F8:63:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/uj43_HB0cbgfSBJ3pkw5WX0ctlA.roa Signing time: Thu 01 Jan 2026 20:19:07 +0000 ROA not before: Thu 01 Jan 2026 20:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206880 IP address blocks: 109.104.113.0/24 maxlen: 24 193.164.147.0/24 maxlen: 24 2a12:6ac0:5121::/48 maxlen: 48 2a12:6ac0:dc10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft rsync://rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:cc:3a:0f:96:af:aa:f7:54:1c:28:99:da:66:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5841cc732ac738dc1e3fe67c12e5104bef863ba Validity Not Before: Jan 1 20:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba3e37fc707471b81f481277a64c39597d1cb650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b8:87:b9:86:d2:c7:45:a9:b0:6f:f6:fb:9e: df:6f:1f:ce:6a:7f:d5:06:ce:2a:00:8e:eb:1c:ab: 61:b0:95:1c:fb:71:77:e7:f2:0f:28:cc:2d:b8:79: 2a:f0:88:50:bb:47:38:4b:4b:68:53:41:65:eb:da: 06:26:db:2c:8c:5d:28:31:f7:cd:66:78:5a:44:f2: 42:d2:a1:cf:3e:d9:16:03:5f:2e:bf:c3:30:57:23: 30:43:a9:b5:ff:8c:ad:b4:11:a8:85:b4:07:7c:72: a3:8c:c1:8b:0b:4c:b1:e3:4a:d8:38:ff:47:49:75: a9:6a:bf:3a:87:c0:de:ab:15:20:58:c5:5b:86:4e: c0:5f:1f:17:21:44:37:12:d1:d1:34:59:25:96:b4: 63:ae:0e:48:5b:b3:dd:29:46:bb:2d:07:35:3f:1d: df:1b:c9:6e:7d:18:ec:3e:93:b2:56:23:dd:5a:98: 53:7a:3e:ce:93:f6:96:51:1b:ee:83:82:2e:94:e1: 75:4e:4c:b9:75:e9:45:20:01:cb:54:4e:05:9d:47: 5c:bc:a3:02:85:1a:de:76:24:12:63:1e:9c:9b:ef: eb:88:06:92:b1:ed:9b:95:eb:a7:b2:d9:bb:d0:46: 95:74:b9:e6:c0:64:6f:4c:71:bb:6e:52:a6:c9:b3: 91:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:3E:37:FC:70:74:71:B8:1F:48:12:77:A6:4C:39:59:7D:1C:B6:50 X509v3 Authority Key Identifier: keyid:A5:84:1C:C7:32:AC:73:8D:C1:E3:FE:67:C1:2E:51:04:BE:F8:63:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/uj43_HB0cbgfSBJ3pkw5WX0ctlA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.104.113.0/24 193.164.147.0/24 IPv6: 2a12:6ac0:5121::/48 2a12:6ac0:dc10::/48 Signature Algorithm: sha256WithRSAEncryption 61:21:26:6e:31:21:92:26:2b:ce:e9:d3:6d:18:b7:51:56:bc: 9a:b6:ba:16:fc:aa:e8:ff:7c:78:79:5c:71:30:09:86:1c:a1: 9d:fb:5b:48:1e:65:86:ed:46:86:f9:52:7f:cf:57:92:c5:da: ca:ea:aa:2b:ed:b7:45:b0:bc:64:25:29:1e:0f:46:bd:0f:9c: 6f:1e:13:0f:68:51:80:07:a1:55:4b:0d:1e:b3:67:d6:39:74: ba:45:27:0f:c5:27:fd:4f:04:4d:8f:27:4d:92:3c:bc:10:94: 0e:cf:31:34:39:ce:5e:3b:72:a9:65:cc:a0:0f:4f:60:af:82: 52:d8:2b:7a:6e:70:99:3b:90:7b:ca:c4:39:72:cc:ec:0e:d4: a1:ae:6d:ab:a7:a7:c4:7d:59:9a:0e:b2:8a:75:44:c7:91:d4: 8e:cc:1a:56:ef:f9:cf:07:b6:2c:50:f5:e5:d9:75:7f:5a:56: 79:33:88:af:93:fc:64:eb:c8:8d:16:fd:0b:84:6f:00:d6:1a: 42:9a:3e:28:c4:35:c1:e9:2f:4a:3b:41:e4:2a:1d:63:e8:ed: df:ab:e8:6e:c7:ed:84:96:e0:20:aa:96:3a:2f:eb:c1:a0:ba: 1a:22:58:ca:98:84:3b:13:5a:2f:e6:b9:a1:52:e7:22:be:d7: 81:a0:c0:68 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt7Nsw6D5avqvdUHCiZ2mYwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ODQxY2M3MzJhYzczOGRjMWUzZmU2N2MxMmU1MTA0YmVm ODYzYmEwHhcNMjYwMTAxMjAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTNlMzdmYzcwNzQ3MWI4MWY0ODEyNzdhNjRjMzk1OTdkMWNiNjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27iHuYbSx0WpsG/2+57fbx/Oan/V Bs4qAI7rHKthsJUc+3F35/IPKMwtuHkq8IhQu0c4S0toU0Fl69oGJtssjF0oMffN ZnhaRPJC0qHPPtkWA18uv8MwVyMwQ6m1/4yttBGohbQHfHKjjMGLC0yx40rYOP9H SXWpar86h8DeqxUgWMVbhk7AXx8XIUQ3EtHRNFkllrRjrg5IW7PdKUa7LQc1Px3f G8lufRjsPpOyViPdWphTej7Ok/aWURvug4IulOF1Tky5delFIAHLVE4FnUdcvKMC hRrediQSYx6cm+/riAaSse2bleunstm70EaVdLnmwGRvTHG7blKmybORwwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFLo+N/xwdHG4H0gSd6ZMOVl9HLZQMB8GA1UdIwQY MBaAFKWEHMcyrHONweP+Z8EuUQS++GO6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFlRY3h6S3NjNDNCNF81bndTNVJCTDc0WTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8xNDFhMmEtMTk0Yi00MDJiLTkyZGQt NjY2NjBiMjIyZmIwLzEvdWo0M19IQjBjYmdmU0JKM3BrdzVXWDBjdGxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8xNDFhMmEtMTk0Yi00MDJiLTkyZGQtNjY2NjBiMjIyZmIw LzEvcFlRY3h6S3NjNDNCNF81bndTNVJCTDc0WTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAbWhxAwQA waSTMBgEAgACMBIDBwAqEmrAUSEDBwAqEmrA3BAwDQYJKoZIhvcNAQELBQADggEB AGEhJm4xIZImK87p020Yt1FWvJq2uhb8quj/fHh5XHEwCYYcoZ37W0geZYbtRob5 Un/PV5LF2srqqivtt0WwvGQlKR4PRr0PnG8eEw9oUYAHoVVLDR6zZ9Y5dLpFJw/F J/1PBE2PJ02SPLwQlA7PMTQ5zl47cqllzKAPT2CvglLYK3pucJk7kHvKxDlyzOwO 1KGubaunp8R9WZoOsop1RMeR1I7MGlbv+c8HtixQ9eXZdX9aVnkziK+T/GTryI0W /QuEbwDWGkKaPijENcHpL0o7QeQqHWPo7d+r6G7H7YSW4CCqljov68GguhoiWMqY hDsTWi/muaFS5yK+14GgwGg= -----END CERTIFICATE-----Generated at Tue Feb 10 03:07:15 2026 by rpki-client