This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/uoOfCKkTnW2JzFJRrSJDBT5bTzc.roa File: uoOfCKkTnW2JzFJRrSJDBT5bTzc.roa (raw, json) Hash identifier: jS+d7zXHIn78Fh4bwNdoOL3BSqCzsjrWEmoa3PN6ng4= Subject key identifier: BA:83:9F:08:A9:13:9D:6D:89:CC:52:51:AD:22:43:05:3E:5B:4F:37 Certificate issuer: /CN=846cd7bc19142056acaf9573caa1af8de8718156 Certificate serial: 019B7CED7F1E9C96D476321C118C23F0F12A Authority key identifier: 84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/uoOfCKkTnW2JzFJRrSJDBT5bTzc.roa Signing time: Fri 02 Jan 2026 04:18:17 +0000 ROA not before: Fri 02 Jan 2026 04:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60781 IP address blocks: 92.249.24.0/24 maxlen: 24 2a14:6881::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:7f:1e:9c:96:d4:76:32:1c:11:8c:23:f0:f1:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846cd7bc19142056acaf9573caa1af8de8718156 Validity Not Before: Jan 2 04:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba839f08a9139d6d89cc5251ad2243053e5b4f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:07:fa:75:6e:da:a7:a4:a2:9d:89:d6:fc:21: 5e:29:38:8f:cd:44:a5:34:75:e2:51:9a:2b:04:bf: 4d:aa:85:76:bd:34:d0:25:dc:ce:94:8d:5f:52:c7: 66:b4:0c:40:10:45:e0:38:22:8f:9e:c9:fa:f0:75: e1:50:b6:cf:8b:04:87:63:e6:36:33:e2:4f:a5:2c: e3:1c:f9:74:1c:a3:db:cd:1c:0f:73:87:5e:04:4c: 8f:cf:19:5e:b5:57:6d:76:68:2b:38:a8:d3:01:8a: 6e:4d:7d:88:22:8d:5b:9e:7f:34:b2:0b:7a:e6:6f: d3:ce:c5:f4:29:6d:5c:d3:0f:19:74:f8:f9:c4:ba: d0:c5:c6:55:5c:af:54:be:cb:2a:c7:58:d9:02:2b: f6:b8:7e:19:f5:43:b9:9f:bf:06:cb:f4:e9:f3:97: dd:49:19:b5:69:94:d6:4c:eb:4b:14:4d:4b:df:bc: c5:f7:fe:3f:3f:fe:fe:88:e1:ac:9c:30:52:6e:de: 09:47:2c:e6:da:fe:17:63:dd:90:49:fa:61:cc:a4: 3b:95:6b:3b:3a:f4:92:c6:b3:ba:5a:ef:c3:19:25: c1:b8:85:83:36:2b:d0:44:2f:33:60:f7:95:3b:d6: c6:c1:da:51:11:cd:d3:e8:7d:2e:89:2f:d0:52:02: 32:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:83:9F:08:A9:13:9D:6D:89:CC:52:51:AD:22:43:05:3E:5B:4F:37 X509v3 Authority Key Identifier: keyid:84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/uoOfCKkTnW2JzFJRrSJDBT5bTzc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.249.24.0/24 IPv6: 2a14:6881::/32 Signature Algorithm: sha256WithRSAEncryption 03:67:2a:e3:b5:f1:24:be:00:74:06:92:af:48:b6:a7:5f:7b: f9:75:1e:a0:57:0f:85:aa:70:6e:ac:60:25:e2:3b:27:1b:e7: 0b:e6:28:c3:30:05:bf:99:1d:83:8b:ce:aa:85:0e:ed:e3:6f: 0a:f8:0d:5b:f5:6a:50:b9:1e:bd:c4:e2:f9:c6:aa:3a:d8:ae: 1f:69:85:f0:ab:be:78:07:3c:53:03:81:a4:c9:df:2e:2f:09: 0c:af:d0:8a:44:82:a0:60:04:da:f0:50:3a:60:87:10:b4:88: b5:81:9c:ff:f7:3e:c0:20:0d:44:fa:25:e2:ed:17:19:89:6a: c8:65:b9:bf:57:f1:f8:4c:b7:a8:49:8d:28:52:b4:0c:dd:1a: 38:72:c1:26:1c:c5:52:55:20:77:bd:ed:6e:7b:db:be:f5:c8: 60:3e:d4:89:8c:7d:4d:8b:08:70:f3:aa:ee:52:a0:b9:bb:f8: 28:9f:c8:e1:c1:74:a9:79:f1:72:18:a4:59:18:a8:68:f8:c1: 0e:95:43:0b:58:22:9d:df:be:6d:29:3b:90:22:00:05:be:de: ed:3d:a4:51:80:dc:6a:f9:2e:6c:82:20:23:54:aa:ff:66:9b: 33:c4:b8:2a:66:f0:f9:d7:e0:b9:87:1a:26:e1:e1:8e:5f:a4: 8e:d8:cd:37 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87X8enJbUdjIcEYwj8PEqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NmNkN2JjMTkxNDIwNTZhY2FmOTU3M2NhYTFhZjhkZTg3 MTgxNTYwHhcNMjYwMTAyMDQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTgzOWYwOGE5MTM5ZDZkODljYzUyNTFhZDIyNDMwNTNlNWI0ZjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Qf6dW7ap6SinYnW/CFeKTiPzUSl NHXiUZorBL9NqoV2vTTQJdzOlI1fUsdmtAxAEEXgOCKPnsn68HXhULbPiwSHY+Y2 M+JPpSzjHPl0HKPbzRwPc4deBEyPzxletVdtdmgrOKjTAYpuTX2IIo1bnn80sgt6 5m/TzsX0KW1c0w8ZdPj5xLrQxcZVXK9Uvssqx1jZAiv2uH4Z9UO5n78Gy/Tp85fd SRm1aZTWTOtLFE1L37zF9/4/P/7+iOGsnDBSbt4JRyzm2v4XY92QSfphzKQ7lWs7 OvSSxrO6Wu/DGSXBuIWDNivQRC8zYPeVO9bGwdpREc3T6H0uiS/QUgIykwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLqDnwipE51ticxSUa0iQwU+W083MB8GA1UdIwQY MBaAFIRs17wZFCBWrK+Vc8qhr43ocYFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEd6WHZCa1VJRmFzcjVWenlxR3ZqZWh4Z1ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85OTA1OTAtNGE2My00YjJmLWE5MzMt ZDE5NTlmM2UyZjc2LzEvdW9PZkNLa1RuVzJKekZKUnJTSkRCVDViVHpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy85OTA1OTAtNGE2My00YjJmLWE5MzMtZDE5NTlmM2UyZjc2 LzEvaEd6WHZCa1VJRmFzcjVWenlxR3ZqZWh4Z1ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAXPkYMA0E AgACMAcDBQAqFGiBMA0GCSqGSIb3DQEBCwUAA4IBAQADZyrjtfEkvgB0BpKvSLan X3v5dR6gVw+FqnBurGAl4jsnG+cL5ijDMAW/mR2Di86qhQ7t428K+A1b9WpQuR69 xOL5xqo62K4faYXwq754BzxTA4Gkyd8uLwkMr9CKRIKgYATa8FA6YIcQtIi1gZz/ 9z7AIA1E+iXi7RcZiWrIZbm/V/H4TLeoSY0oUrQM3Ro4csEmHMVSVSB3ve1ue9u+ 9chgPtSJjH1Niwhw86ruUqC5u/gon8jhwXSpefFyGKRZGKho+MEOlUMLWCKd375t KTuQIgAFvt7tPaRRgNxq+S5sgiAjVKr/ZpszxLgqZvD51+C5hxom4eGOX6SO2M03 -----END CERTIFICATE-----Generated at Mon Jan 19 16:52:07 2026 by rpki-client