This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/ugVQrwIOiOMJPcA4zFZm9kWmY04.roa File: ugVQrwIOiOMJPcA4zFZm9kWmY04.roa (raw, json) Hash identifier: Q8pDB3SA4JzJaHb+up2jkC0do3Kit4mBYGTJ7TNXFRI= Subject key identifier: BA:05:50:AF:02:0E:88:E3:09:3D:C0:38:CC:56:66:F6:45:A6:63:4E Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Certificate serial: 019BCE0084520E720C5E04D79238B46F553A Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/ugVQrwIOiOMJPcA4zFZm9kWmY04.roa Signing time: Sat 17 Jan 2026 22:08:18 +0000 ROA not before: Sat 17 Jan 2026 22:08:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214976 IP address blocks: 94.154.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ce:00:84:52:0e:72:0c:5e:04:d7:92:38:b4:6f:55:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Validity Not Before: Jan 17 22:08:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba0550af020e88e3093dc038cc5666f645a6634e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:a6:3e:83:dd:50:25:96:9c:cb:03:c7:bb:bf: be:d1:3a:ba:e3:3f:43:3a:ca:ba:0b:ce:ab:16:82: 89:1f:38:88:5e:5b:00:9e:33:de:82:31:b6:da:a6: ba:42:ff:96:37:8d:f7:ce:82:11:7c:8c:3a:70:a0: d4:45:e8:fa:ff:9b:17:84:2b:30:a4:6d:ab:df:c3: 1b:cb:04:b0:79:44:88:10:fe:b1:19:8b:3d:67:37: 24:04:9d:cc:ce:5b:31:80:21:52:38:1b:14:9d:07: 56:b6:4b:0b:86:d4:8e:82:6e:66:07:ce:bd:2f:c9: f0:15:71:48:dc:ff:1f:a7:e5:10:8e:dc:44:5f:71: bd:89:99:05:03:fe:c7:81:9f:09:d6:c4:74:1f:c4: d6:1f:a5:eb:09:d3:f6:f8:e2:f7:62:54:53:45:aa: d3:da:b5:1a:40:a2:23:0e:3c:06:3b:01:22:d4:a5: 5d:78:19:31:c7:c6:6f:aa:88:c0:ec:3d:3b:68:e1: 22:7f:cd:7a:78:96:2d:c9:92:77:e7:b0:e3:e9:98: 67:8c:1e:e5:45:ab:db:4c:3d:df:86:2e:83:6e:bf: 95:0e:f0:c8:d5:5f:fb:04:3e:16:44:b7:57:53:67: 5f:b2:b0:08:9e:f3:4a:78:00:08:b0:97:65:cb:6c: e9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:05:50:AF:02:0E:88:E3:09:3D:C0:38:CC:56:66:F6:45:A6:63:4E X509v3 Authority Key Identifier: keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/ugVQrwIOiOMJPcA4zFZm9kWmY04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.154.35.0/24 Signature Algorithm: sha256WithRSAEncryption 89:78:92:3d:ad:64:6b:b5:c2:48:bc:c3:2e:8a:2d:7b:23:49: 4e:52:e1:16:83:87:ba:54:b0:8a:fd:98:9c:8e:6f:6d:01:ea: c1:36:c2:8c:54:a5:b4:4a:c6:70:c4:e2:dc:e3:e9:5f:b1:17: c4:77:36:40:63:bf:38:7b:bf:47:b5:9c:40:f8:9a:61:d0:c0: e8:ee:86:77:83:c2:f3:7d:34:41:ce:35:ca:72:70:0b:c1:ed: 36:04:0f:4e:3c:f5:6e:4e:03:8e:35:41:4e:6b:dc:e7:a0:9a: 55:3c:ea:8d:e5:e3:db:2f:41:7c:90:30:92:31:b9:14:7b:20: 74:53:a3:bc:5f:42:39:e2:57:ae:8e:e4:ca:25:b3:16:85:86: d8:2d:03:fa:c4:be:ac:76:5e:8b:b5:21:0d:43:18:6c:3e:24: c2:69:60:75:93:25:a0:a5:0f:89:18:c6:1b:2f:f1:b4:80:ca: cd:d6:fc:87:3e:46:0d:80:03:eb:0b:5b:2f:39:2a:df:a2:03: 9f:5b:56:e7:a0:26:56:76:13:4a:51:7f:c8:57:e5:19:dc:e5: 63:a0:1e:9f:67:28:d7:6f:f3:e2:5d:a1:af:f7:55:89:45:9f: 99:a8:4e:91:3c:6d:6a:cd:1c:a4:4b:f5:0e:8a:94:1b:4e:1a: 90:bf:16:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvOAIRSDnIMXgTXkji0b1U6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5 MjFmODgwHhcNMjYwMTE3MjIwODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTA1NTBhZjAyMGU4OGUzMDkzZGMwMzhjYzU2NjZmNjQ1YTY2MzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+qY+g91QJZacywPHu7++0Tq64z9D Osq6C86rFoKJHziIXlsAnjPegjG22qa6Qv+WN433zoIRfIw6cKDURej6/5sXhCsw pG2r38MbywSweUSIEP6xGYs9ZzckBJ3MzlsxgCFSOBsUnQdWtksLhtSOgm5mB869 L8nwFXFI3P8fp+UQjtxEX3G9iZkFA/7HgZ8J1sR0H8TWH6XrCdP2+OL3YlRTRarT 2rUaQKIjDjwGOwEi1KVdeBkxx8ZvqojA7D07aOEif816eJYtyZJ357Dj6ZhnjB7l RavbTD3fhi6Dbr+VDvDI1V/7BD4WRLdXU2dfsrAInvNKeAAIsJdly2zp6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLoFUK8CDojjCT3AOMxWZvZFpmNOMB8GA1UdIwQY MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt YTE4NGYzNTU2ZTQzLzEvdWdWUXJ3SU9pT01KUGNBNHpGWm05a1dtWTA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpojMA0G CSqGSIb3DQEBCwUAA4IBAQCJeJI9rWRrtcJIvMMuii17I0lOUuEWg4e6VLCK/Zic jm9tAerBNsKMVKW0SsZwxOLc4+lfsRfEdzZAY784e79HtZxA+Jph0MDo7oZ3g8Lz fTRBzjXKcnALwe02BA9OPPVuTgOONUFOa9znoJpVPOqN5ePbL0F8kDCSMbkUeyB0 U6O8X0I54leujuTKJbMWhYbYLQP6xL6sdl6LtSENQxhsPiTCaWB1kyWgpQ+JGMYb L/G0gMrN1vyHPkYNgAPrC1svOSrfogOfW1bnoCZWdhNKUX/IV+UZ3OVjoB6fZyjX b/PiXaGv91WJRZ+ZqE6RPG1qzRykS/UOipQbThqQvxbS -----END CERTIFICATE-----Generated at Wed Jan 21 01:08:57 2026 by rpki-client