This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/uXDu77cxLGO111ouG3WizVkTwpM.roa File: uXDu77cxLGO111ouG3WizVkTwpM.roa (raw, json) Hash identifier: jqcMrYd4GN+J0MgnqBXSyT/iy1d2bJSyGgMM3hAUiNY= Subject key identifier: B9:70:EE:EF:B7:31:2C:63:B5:D7:5A:2E:1B:75:A2:CD:59:13:C2:93 Certificate issuer: /CN=8c2289ae0b10629350da0a50e87b389109f16c2e Certificate serial: 019B775903605A0DAE902080C2A6F15A9A21 Authority key identifier: 8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/uXDu77cxLGO111ouG3WizVkTwpM.roa Signing time: Thu 01 Jan 2026 02:18:00 +0000 ROA not before: Thu 01 Jan 2026 02:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43089 IP address blocks: 213.251.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:03:60:5a:0d:ae:90:20:80:c2:a6:f1:5a:9a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c2289ae0b10629350da0a50e87b389109f16c2e Validity Not Before: Jan 1 02:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b970eeefb7312c63b5d75a2e1b75a2cd5913c293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:36:6d:5d:db:6c:a0:b5:6e:7c:40:d2:b2:ec: 4f:33:93:4f:71:4d:e0:08:0d:70:0e:20:f0:a1:4a: d9:29:51:9f:cc:d0:4c:9f:1f:bd:e7:bc:dd:fc:e6: ff:6b:93:15:54:e0:73:42:4d:4b:c0:e3:6e:42:f0: 39:c0:ad:7d:43:5a:3a:31:ad:43:e2:b2:9c:35:c7: bc:71:02:3b:8f:c7:1b:ca:00:ca:69:08:bc:5b:33: 17:59:18:f9:07:73:8c:c2:04:4b:26:32:37:f1:b2: 59:95:91:6c:9f:1d:03:e2:d7:e6:d2:6e:69:2c:4d: b8:3b:b4:18:93:0c:3b:38:a7:d9:fb:aa:4e:04:6c: 9b:f3:21:d6:58:8b:1e:26:a0:96:e3:01:63:fa:09: dc:6b:e0:23:93:0b:20:89:18:f6:36:84:66:6d:c9: 9a:14:71:65:52:9a:f1:3e:dc:a9:ba:ad:e5:87:63: c6:1c:6d:01:73:40:35:42:47:95:60:eb:8c:3a:c5: da:65:84:2f:24:6f:45:5f:d0:1e:fc:2e:f8:ea:46: 80:13:e4:c1:41:02:f1:fd:ff:57:99:c9:bc:23:da: 1e:4a:7e:51:7e:f4:5d:4c:2b:9f:47:46:41:05:5f: 60:ad:fd:e0:27:fe:08:77:0c:45:d2:a0:0a:1b:26: 00:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:70:EE:EF:B7:31:2C:63:B5:D7:5A:2E:1B:75:A2:CD:59:13:C2:93 X509v3 Authority Key Identifier: keyid:8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/uXDu77cxLGO111ouG3WizVkTwpM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.251.215.0/24 Signature Algorithm: sha256WithRSAEncryption 31:03:43:af:b5:c8:cc:e5:52:47:cc:2c:eb:18:bd:62:f3:59: 59:75:95:9e:6a:46:4f:3e:dd:23:7b:3f:19:d8:c4:8d:58:7c: 88:f8:ae:94:b5:d5:2e:94:a4:6e:f7:33:44:2f:20:2d:b2:55: fc:bc:23:5f:6b:4a:fa:2f:0d:7c:51:f5:18:d1:d4:6b:3c:92: d5:42:f3:80:94:d2:70:d6:86:e7:df:1e:f7:e5:18:40:91:73: f5:79:51:7e:b3:e1:e8:11:5f:f2:8e:fd:f9:22:d7:ec:0d:5e: d4:1a:cd:18:14:11:9a:79:75:88:c4:08:c5:c8:ea:61:fd:01: 22:6e:a8:94:8d:da:fe:91:41:dd:c3:07:c0:8f:33:f7:84:3e: 6c:35:5e:43:d7:d8:7b:f1:7d:b3:5e:75:e2:55:7e:2d:07:7a: d6:85:6c:5b:43:f9:c3:85:2e:a2:d3:e5:f2:ee:cc:1c:54:b5: da:0d:08:90:81:93:2c:87:1b:b5:9f:67:73:39:dd:29:dc:ca: 96:fd:e1:12:cf:e1:10:d9:81:20:ff:64:82:0d:87:50:35:98: 6f:2b:cb:c7:cc:51:59:27:f3:84:94:8a:e7:10:ed:7f:41:1c: cb:8d:96:45:65:69:55:5b:0d:57:52:b8:f9:34:08:13:dd:8c: 7d:11:d9:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WQNgWg2ukCCAwqbxWpohMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMjI4OWFlMGIxMDYyOTM1MGRhMGE1MGU4N2IzODkxMDlm MTZjMmUwHhcNMjYwMTAxMDIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTcwZWVlZmI3MzEyYzYzYjVkNzVhMmUxYjc1YTJjZDU5MTNjMjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDZtXdtsoLVufEDSsuxPM5NPcU3g CA1wDiDwoUrZKVGfzNBMnx+957zd/Ob/a5MVVOBzQk1LwONuQvA5wK19Q1o6Ma1D 4rKcNce8cQI7j8cbygDKaQi8WzMXWRj5B3OMwgRLJjI38bJZlZFsnx0D4tfm0m5p LE24O7QYkww7OKfZ+6pOBGyb8yHWWIseJqCW4wFj+gnca+AjkwsgiRj2NoRmbcma FHFlUprxPtypuq3lh2PGHG0Bc0A1QkeVYOuMOsXaZYQvJG9FX9Ae/C746kaAE+TB QQLx/f9Xmcm8I9oeSn5RfvRdTCufR0ZBBV9grf3gJ/4IdwxF0qAKGyYAgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLlw7u+3MSxjtddaLht1os1ZE8KTMB8GA1UdIwQY MBaAFIwiia4LEGKTUNoKUOh7OJEJ8WwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakNLSnJnc1FZcE5RMmdwUTZIczRrUW54YkM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zNDMzNzktZjhlMS00YmU2LWJlMDEt ZjgzOTQ2YzJjODJlLzEvdVhEdTc3Y3hMR08xMTFvdUczV2l6VmtUd3BNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8zNDMzNzktZjhlMS00YmU2LWJlMDEtZjgzOTQ2YzJjODJl LzEvakNLSnJnc1FZcE5RMmdwUTZIczRrUW54YkM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1fvXMA0G CSqGSIb3DQEBCwUAA4IBAQAxA0OvtcjM5VJHzCzrGL1i81lZdZWeakZPPt0jez8Z 2MSNWHyI+K6UtdUulKRu9zNELyAtslX8vCNfa0r6Lw18UfUY0dRrPJLVQvOAlNJw 1obn3x735RhAkXP1eVF+s+HoEV/yjv35ItfsDV7UGs0YFBGaeXWIxAjFyOph/QEi bqiUjdr+kUHdwwfAjzP3hD5sNV5D19h78X2zXnXiVX4tB3rWhWxbQ/nDhS6i0+Xy 7swcVLXaDQiQgZMshxu1n2dzOd0p3MqW/eESz+EQ2YEg/2SCDYdQNZhvK8vHzFFZ J/OElIrnEO1/QRzLjZZFZWlVWw1XUrj5NAgT3Yx9Edmm -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:53 2026 by rpki-client