This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/uecVeJQRs_BN6Djr0u6Ge1udZ80.roa File: uecVeJQRs_BN6Djr0u6Ge1udZ80.roa (raw, json) Hash identifier: FRfMOut6ccdt0L9ml9WddidM813JHcrO1vInq1+Nlsg= Subject key identifier: B9:E7:15:78:94:11:B3:F0:4D:E8:38:EB:D2:EE:86:7B:5B:9D:67:CD Certificate issuer: /CN=7de98f48e988790d0e0793537941b413d2e60306 Certificate serial: 019B79112D3F845B980338F12ECDA84D7E18 Authority key identifier: 7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/uecVeJQRs_BN6Djr0u6Ge1udZ80.roa Signing time: Thu 01 Jan 2026 10:18:47 +0000 ROA not before: Thu 01 Jan 2026 10:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41849 IP address blocks: 5.252.44.0/22 maxlen: 22 5.252.44.0/23 maxlen: 23 91.102.128.0/21 maxlen: 21 91.102.128.0/22 maxlen: 22 91.102.130.0/24 maxlen: 24 91.102.134.0/23 maxlen: 23 91.102.134.0/24 maxlen: 24 91.102.135.0/24 maxlen: 24 2a01:7140::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.mft rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:2d:3f:84:5b:98:03:38:f1:2e:cd:a8:4d:7e:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7de98f48e988790d0e0793537941b413d2e60306 Validity Not Before: Jan 1 10:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9e715789411b3f04de838ebd2ee867b5b9d67cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f9:79:c2:51:8f:da:07:27:3b:2b:34:c2:0a: a9:a6:4a:13:e9:81:67:bc:e6:ac:56:a4:c4:69:ad: 82:23:45:07:16:e5:d5:4a:15:54:0f:7f:1f:27:aa: f9:c9:73:d9:f3:cb:88:4f:8e:5e:31:c5:e3:e7:d2: e4:2c:b4:40:fd:00:33:ec:39:8c:09:de:83:b7:03: dc:92:47:b1:e1:49:a3:2d:d2:a2:ee:1a:d9:17:99: 1f:bb:f7:7c:34:5e:a3:67:c5:d0:db:a8:8d:56:b1: cc:de:48:1b:4f:a5:42:19:b5:16:47:4c:82:09:4e: 8f:05:36:4e:c1:c2:96:15:11:8e:b6:34:f9:ef:ed: aa:0e:dd:c6:47:31:6d:ed:73:e8:c4:2d:77:9d:b0: 70:5b:1b:51:fc:f8:ee:4d:fb:b4:d8:0d:d7:b5:7c: 17:57:e6:42:36:86:43:de:59:bb:90:a8:30:bd:2c: c0:2f:b8:9b:f3:76:f4:d3:b5:4b:f3:6f:75:cd:bb: d9:53:e4:7c:9b:4f:81:f2:ae:85:cb:df:46:3f:7d: 77:ad:a1:d2:06:82:eb:4c:6b:4a:11:49:52:ee:44: 3f:9e:b7:b6:cf:1e:ea:2f:b2:a3:d8:87:dc:10:b4: f5:aa:70:27:2d:09:17:5f:84:24:15:d6:88:6c:d3: fe:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E7:15:78:94:11:B3:F0:4D:E8:38:EB:D2:EE:86:7B:5B:9D:67:CD X509v3 Authority Key Identifier: keyid:7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/uecVeJQRs_BN6Djr0u6Ge1udZ80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.44.0/22 91.102.128.0/21 IPv6: 2a01:7140::/32 Signature Algorithm: sha256WithRSAEncryption 17:90:c4:b8:a8:75:27:dd:7d:66:74:dd:fd:f8:5e:f7:3f:0f: 1f:c6:5f:c8:75:70:0e:1f:c5:6b:b8:5d:c8:0e:89:22:f9:48: 1f:70:28:ce:8f:ec:4a:2b:77:f4:8b:3e:27:26:d3:7e:b7:29: 8e:2b:ca:b8:59:be:b9:b9:2b:ae:57:73:96:d7:43:83:30:d2: 27:6b:14:71:fb:27:a8:7a:f8:c8:5b:a4:13:16:40:8f:37:6e: 10:b5:e2:cc:0f:b8:0c:0a:e2:31:97:57:50:6c:a5:ab:76:4a: 3f:05:75:0e:23:1d:a4:f5:c7:67:8c:14:b4:1a:50:30:68:a2: 19:06:20:99:28:02:5c:d5:3a:29:33:bd:8d:5a:64:f3:3e:26: d2:27:4a:3c:e6:a5:7f:43:b7:5d:5a:9f:75:2e:30:61:06:0d: d7:ea:6d:98:7c:4b:67:54:49:07:b8:a6:87:86:b2:36:54:1d: a9:22:67:53:1e:92:86:cc:64:b8:69:a8:7b:48:d9:db:a9:5b: 3f:0f:e4:b0:46:61:1e:d3:89:d4:6d:c4:af:e3:d0:ac:8c:ec: 4f:2c:9f:98:23:b4:69:9e:f8:e6:17:2d:8d:4a:d2:d8:68:f7: 3a:c8:8f:a8:14:c8:33:e4:8b:b6:d1:68:9c:5a:43:b1:73:d5: 7b:37:2c:8a -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5ES0/hFuYAzjxLs2oTX4YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZTk4ZjQ4ZTk4ODc5MGQwZTA3OTM1Mzc5NDFiNDEzZDJl NjAzMDYwHhcNMjYwMTAxMTAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWU3MTU3ODk0MTFiM2YwNGRlODM4ZWJkMmVlODY3YjViOWQ2N2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPl5wlGP2gcnOys0wgqppkoT6YFn vOasVqTEaa2CI0UHFuXVShVUD38fJ6r5yXPZ88uIT45eMcXj59LkLLRA/QAz7DmM Cd6DtwPckkex4UmjLdKi7hrZF5kfu/d8NF6jZ8XQ26iNVrHM3kgbT6VCGbUWR0yC CU6PBTZOwcKWFRGOtjT57+2qDt3GRzFt7XPoxC13nbBwWxtR/PjuTfu02A3XtXwX V+ZCNoZD3lm7kKgwvSzAL7ib83b007VL8291zbvZU+R8m0+B8q6Fy99GP313raHS BoLrTGtKEUlS7kQ/nre2zx7qL7Kj2IfcELT1qnAnLQkXX4QkFdaIbNP+VQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFLnnFXiUEbPwTeg469LuhntbnWfNMB8GA1UdIwQY MBaAFH3pj0jpiHkNDgeTU3lBtBPS5gMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmVtUFNPbUllUTBPQjVOVGVVRzBFOUxtQXdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jMGZjMGEtMTVkNC00NmNjLWE4Yjkt NDc2MzJjYjViODU0LzEvdWVjVmVKUVJzX0JONkRqcjB1NkdlMXVkWjgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jMGZjMGEtMTVkNC00NmNjLWE4YjktNDc2MzJjYjViODU0 LzEvZmVtUFNPbUllUTBPQjVOVGVVRzBFOUxtQXdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCBfwsAwQD W2aAMA0EAgACMAcDBQAqAXFAMA0GCSqGSIb3DQEBCwUAA4IBAQAXkMS4qHUn3X1m dN39+F73Pw8fxl/IdXAOH8VruF3IDoki+UgfcCjOj+xKK3f0iz4nJtN+tymOK8q4 Wb65uSuuV3OW10ODMNInaxRx+yeoevjIW6QTFkCPN24QteLMD7gMCuIxl1dQbKWr dko/BXUOIx2k9cdnjBS0GlAwaKIZBiCZKAJc1TopM72NWmTzPibSJ0o85qV/Q7dd Wp91LjBhBg3X6m2YfEtnVEkHuKaHhrI2VB2pImdTHpKGzGS4aah7SNnbqVs/D+Sw RmEe04nUbcSv49CsjOxPLJ+YI7RpnvjmFy2NStLYaPc6yI+oFMgz5Iu20WicWkOx c9V7NyyK -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:15 2026 by rpki-client