This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/UaDGeJWsIXI8NDyfXgRgg0KcJv4.roa File: UaDGeJWsIXI8NDyfXgRgg0KcJv4.roa (raw, json) Hash identifier: G/op3Q8p3v4tlB5sWD/LQVTf6+Xz6sN8yv1KW42vf5Q= Subject key identifier: 51:A0:C6:78:95:AC:21:72:3C:34:3C:9F:5E:04:60:83:42:9C:26:FE Certificate issuer: /CN=b712b25a2304f7ba44c38d0395ddf2ed04f5c7ef Certificate serial: 019B7EA714CF4EEC744DD16337D9505CB2E9 Authority key identifier: B7:12:B2:5A:23:04:F7:BA:44:C3:8D:03:95:DD:F2:ED:04:F5:C7:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txKyWiME97pEw40Dld3y7QT1x-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/UaDGeJWsIXI8NDyfXgRgg0KcJv4.roa Signing time: Fri 02 Jan 2026 12:20:37 +0000 ROA not before: Fri 02 Jan 2026 12:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204140 IP address blocks: 185.138.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft rsync://rpki.ripe.net/repository/DEFAULT/txKyWiME97pEw40Dld3y7QT1x-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:14:cf:4e:ec:74:4d:d1:63:37:d9:50:5c:b2:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b712b25a2304f7ba44c38d0395ddf2ed04f5c7ef Validity Not Before: Jan 2 12:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51a0c67895ac21723c343c9f5e046083429c26fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9f:e8:ce:63:89:de:50:68:f3:85:f0:e7:ce: 27:5e:79:92:2f:81:b0:61:04:05:2b:7a:90:08:5a: 3d:4e:b4:ad:a6:af:ed:56:6f:4f:a8:62:98:bc:5a: e1:30:f7:26:b2:a3:45:92:4c:00:84:fe:d2:20:fb: df:42:50:8f:68:fb:dc:92:1a:0b:17:bd:df:cc:79: 5b:cb:3f:75:a6:b2:97:90:85:ec:6b:ab:07:ab:b3: 91:bc:51:42:79:e1:ee:87:c8:e4:c7:c9:35:93:73: 3c:2f:5d:21:78:35:bf:0b:f4:d2:fb:df:ba:76:2a: 2e:05:2c:60:f9:a1:a8:ed:03:ca:8e:77:e4:6e:33: af:6f:10:8d:62:f6:5a:c2:ba:d3:1c:9e:5a:a8:55: 1d:9a:fd:fc:97:a8:41:47:4d:5d:de:e4:08:37:b8: 34:29:6e:c4:a4:20:9e:45:11:4f:d5:74:5b:d3:9a: 6f:d6:98:b0:4c:8f:88:b5:89:23:63:3f:57:a4:83: 83:51:21:d0:91:f2:7b:1b:bb:9b:bd:03:20:43:93: 88:82:4d:61:88:9d:4e:03:cf:bb:d6:35:77:ca:18: 3f:3c:d8:fc:26:5c:c1:84:91:b6:5a:0a:16:7e:ff: ca:0a:78:80:64:8e:67:ab:6b:d2:af:16:aa:0d:5a: a8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A0:C6:78:95:AC:21:72:3C:34:3C:9F:5E:04:60:83:42:9C:26:FE X509v3 Authority Key Identifier: keyid:B7:12:B2:5A:23:04:F7:BA:44:C3:8D:03:95:DD:F2:ED:04:F5:C7:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txKyWiME97pEw40Dld3y7QT1x-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/UaDGeJWsIXI8NDyfXgRgg0KcJv4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.138.148.0/22 Signature Algorithm: sha256WithRSAEncryption a0:63:05:d4:1d:b5:63:a6:26:2f:96:ea:33:33:97:92:27:f1: 02:52:e2:5f:f5:f7:dc:05:db:97:e8:bd:b4:e7:53:6a:bc:64: 42:e6:b0:d3:32:4e:95:c5:a4:4d:ca:ee:22:58:4e:10:3b:0a: 00:14:f3:f8:eb:90:8c:40:31:0c:1f:f1:6e:35:bf:39:96:ff: 97:0f:4b:a7:49:c9:28:f2:84:ee:fe:d5:ec:90:ed:7a:82:16: 1c:7e:29:20:dd:f9:3a:10:28:90:d9:23:f8:98:b0:23:bb:33: 4e:aa:ad:2b:d3:16:1d:3d:11:17:c1:b0:29:42:d0:91:fe:bd: 39:dc:a2:dd:dc:51:1e:0e:bf:a9:9d:6c:ac:f5:05:2d:20:4b: d6:31:5e:5a:2d:e9:de:8e:05:06:b5:24:f7:6c:cf:a3:e6:1b: c6:2f:a3:f6:7e:51:96:44:70:95:62:d0:3a:46:98:b2:74:09: ec:bb:df:53:68:4a:96:80:83:58:a9:ba:4e:62:ca:ad:b2:61: 6e:e1:0d:fe:f6:7d:40:2f:33:8b:8a:02:51:6a:6e:01:40:93: 03:ef:62:87:cd:7d:3b:c2:90:f7:93:dd:1d:b5:27:04:76:83: 77:f6:de:2a:ed:9b:24:53:46:13:98:46:05:aa:0d:89:71:96: d1:57:d1:68 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pxTPTux0TdFjN9lQXLLpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MTJiMjVhMjMwNGY3YmE0NGMzOGQwMzk1ZGRmMmVkMDRm NWM3ZWYwHhcNMjYwMTAyMTIyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWEwYzY3ODk1YWMyMTcyM2MzNDNjOWY1ZTA0NjA4MzQyOWMyNmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Z/ozmOJ3lBo84Xw584nXnmSL4Gw YQQFK3qQCFo9TrStpq/tVm9PqGKYvFrhMPcmsqNFkkwAhP7SIPvfQlCPaPvckhoL F73fzHlbyz91prKXkIXsa6sHq7ORvFFCeeHuh8jkx8k1k3M8L10heDW/C/TS+9+6 diouBSxg+aGo7QPKjnfkbjOvbxCNYvZawrrTHJ5aqFUdmv38l6hBR01d3uQIN7g0 KW7EpCCeRRFP1XRb05pv1piwTI+ItYkjYz9XpIODUSHQkfJ7G7ubvQMgQ5OIgk1h iJ1OA8+71jV3yhg/PNj8JlzBhJG2WgoWfv/KCniAZI5nq2vSrxaqDVqoHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFGgxniVrCFyPDQ8n14EYINCnCb+MB8GA1UdIwQY MBaAFLcSslojBPe6RMONA5Xd8u0E9cfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHhLeVdpTUU5N3BFdzQwRGxkM3k3UVQxeC04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi85YWVhZTctZGYxMC00MGE3LWI5MzMt MDgxY2I3Y2I4OGYzLzEvVWFER2VKV3NJWEk4TkR5ZlhnUmdnMEtjSnY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi85YWVhZTctZGYxMC00MGE3LWI5MzMtMDgxY2I3Y2I4OGYz LzEvdHhLeVdpTUU5N3BFdzQwRGxkM3k3UVQxeC04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYqUMA0G CSqGSIb3DQEBCwUAA4IBAQCgYwXUHbVjpiYvluozM5eSJ/ECUuJf9ffcBduX6L20 51NqvGRC5rDTMk6VxaRNyu4iWE4QOwoAFPP465CMQDEMH/FuNb85lv+XD0unScko 8oTu/tXskO16ghYcfikg3fk6ECiQ2SP4mLAjuzNOqq0r0xYdPREXwbApQtCR/r05 3KLd3FEeDr+pnWys9QUtIEvWMV5aLenejgUGtST3bM+j5hvGL6P2flGWRHCVYtA6 RpiydAnsu99TaEqWgINYqbpOYsqtsmFu4Q3+9n1ALzOLigJRam4BQJMD72KHzX07 wpD3k90dtScEdoN39t4q7ZskU0YTmEYFqg2JcZbRV9Fo -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:06 2026 by rpki-client