This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/uoQLE-swTh85hiFVPsKl5eVWOQ4.roa File: uoQLE-swTh85hiFVPsKl5eVWOQ4.roa (raw, json) Hash identifier: K1SsR7agoiH69i/sTMUIc8R2fXxdtnIpRcWvPv/Q/3M= Subject key identifier: BA:84:0B:13:EB:30:4E:1F:39:86:21:55:3E:C2:A5:E5:E5:56:39:0E Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Certificate serial: 019B7EA58EB1B20D45051BEA1F9C09CA8775 Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/uoQLE-swTh85hiFVPsKl5eVWOQ4.roa Signing time: Fri 02 Jan 2026 12:18:57 +0000 ROA not before: Fri 02 Jan 2026 12:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28753 IP address blocks: 5.61.32.0/20 maxlen: 20 37.1.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 09:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:8e:b1:b2:0d:45:05:1b:ea:1f:9c:09:ca:87:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Validity Not Before: Jan 2 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba840b13eb304e1f398621553ec2a5e5e556390e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fd:6d:a0:61:d1:28:4c:eb:c7:f8:02:4d:08: c6:30:26:c2:d1:e1:63:5b:7b:87:c5:4d:a3:fe:2d: fe:91:5c:2b:0a:22:ab:a2:2b:66:4c:31:8c:d6:83: 76:5f:ca:a7:e3:7e:27:36:8c:8a:04:37:a5:b0:98: df:24:ac:04:3d:49:8a:76:b1:36:bf:33:e5:89:85: 60:90:5c:e8:91:69:51:54:62:c7:2d:20:c5:0d:c9: b1:91:db:78:fb:df:94:67:ca:92:e6:fa:7d:c8:b9: d6:2b:07:7c:c2:0f:4a:8c:5a:d4:6b:b2:6b:fc:0d: c7:dd:f9:0b:40:e1:55:c5:4b:68:ad:15:8b:43:95: de:8a:7d:a9:21:de:af:ab:c0:e0:eb:e5:65:ae:fe: 99:2f:dc:a0:cf:e4:f9:5e:9e:76:55:86:0c:12:76: 77:9a:6c:9b:c8:a6:bd:a8:72:6a:92:5e:b1:e3:7c: 3a:5d:39:8c:74:82:1f:31:e9:b7:08:d4:15:c2:9c: ff:24:36:b7:6a:af:b3:dc:5f:71:9f:81:fb:82:1b: 13:d8:95:4f:91:6b:fd:f8:fe:95:31:12:47:9f:0c: f4:f7:51:0d:c0:d4:26:3b:52:97:23:06:c3:9b:6b: 25:f5:af:35:97:d4:75:0e:2b:95:95:46:6c:bf:44: f1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:84:0B:13:EB:30:4E:1F:39:86:21:55:3E:C2:A5:E5:E5:56:39:0E X509v3 Authority Key Identifier: keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/uoQLE-swTh85hiFVPsKl5eVWOQ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.61.32.0/20 37.1.192.0/21 Signature Algorithm: sha256WithRSAEncryption 22:ed:2f:f6:a5:2c:13:4a:4a:ca:81:92:9a:e2:e7:72:96:25: 1b:58:9e:a4:ba:8b:80:40:54:f8:61:56:ca:9c:52:78:0e:b5: 31:6a:3c:83:11:29:4a:f8:6e:ed:4d:5a:cc:58:a7:96:6b:0d: 81:14:34:4c:e7:c7:af:87:61:d2:2e:6b:8c:b3:b0:cc:0c:10: 3d:cb:3d:8c:0c:44:f8:4e:bc:65:f3:82:04:3c:ba:dd:9b:b0: 94:3c:ea:f4:ae:e7:22:26:59:19:bc:41:f4:d6:4c:01:74:81: f3:21:14:92:2d:e9:3f:38:c5:1e:0c:57:b1:97:b8:7e:83:ca: b8:e4:cc:8a:2d:b7:99:ae:ce:99:34:ed:1f:09:5f:25:51:74: 8d:98:12:09:de:b4:ac:d5:33:93:d0:8d:3f:4c:dc:f9:44:0d: 5f:1c:a1:9b:62:3b:40:63:82:03:3c:3b:a0:d3:33:c0:1c:31: 14:e5:74:9f:85:1a:5c:2d:ea:c6:be:c1:06:cf:3b:94:29:5d: ef:dc:4a:2c:f0:09:eb:e9:9a:33:45:ce:9f:67:ef:7a:89:f7: 2c:ec:12:21:35:94:1b:b4:40:38:0f:c2:3a:e9:12:44:c4:bd: 78:eb:77:ba:8a:88:6e:ea:0e:63:51:dc:7f:58:24:92:dd:38: a6:6d:1f:7f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pY6xsg1FBRvqH5wJyod1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGRjMjI1OTVmYzFmNTg4ZmJjNGRkZTA3YzFjMzk0OTk4 ZjMzYTcwHhcNMjYwMTAyMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTg0MGIxM2ViMzA0ZTFmMzk4NjIxNTUzZWMyYTVlNWU1NTYzOTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf1toGHRKEzrx/gCTQjGMCbC0eFj W3uHxU2j/i3+kVwrCiKroitmTDGM1oN2X8qn434nNoyKBDelsJjfJKwEPUmKdrE2 vzPliYVgkFzokWlRVGLHLSDFDcmxkdt4+9+UZ8qS5vp9yLnWKwd8wg9KjFrUa7Jr /A3H3fkLQOFVxUtorRWLQ5Xein2pId6vq8Dg6+Vlrv6ZL9ygz+T5Xp52VYYMEnZ3 mmybyKa9qHJqkl6x43w6XTmMdIIfMem3CNQVwpz/JDa3aq+z3F9xn4H7ghsT2JVP kWv9+P6VMRJHnwz091ENwNQmO1KXIwbDm2sl9a81l9R1DiuVlUZsv0Tx0wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLqECxPrME4fOYYhVT7CpeXlVjkOMB8GA1UdIwQY MBaAFBpNwiWV/B9Yj7xN3gfBw5SZjzOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYt MmI3OGIxOWI1YTg3LzEvdW9RTEUtc3dUaDg1aGlGVlBzS2w1ZVZXT1E0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYtMmI3OGIxOWI1YTg3 LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEBT0gAwQD JQHAMA0GCSqGSIb3DQEBCwUAA4IBAQAi7S/2pSwTSkrKgZKa4udyliUbWJ6kuouA QFT4YVbKnFJ4DrUxajyDESlK+G7tTVrMWKeWaw2BFDRM58evh2HSLmuMs7DMDBA9 yz2MDET4Trxl84IEPLrdm7CUPOr0ruciJlkZvEH01kwBdIHzIRSSLek/OMUeDFex l7h+g8q45MyKLbeZrs6ZNO0fCV8lUXSNmBIJ3rSs1TOT0I0/TNz5RA1fHKGbYjtA Y4IDPDug0zPAHDEU5XSfhRpcLerGvsEGzzuUKV3v3Eos8Anr6ZozRc6fZ+96ifcs 7BIhNZQbtEA4D8I66RJExL1463e6iohu6g5jUdx/WCSS3TimbR9/ -----END CERTIFICATE-----Generated at Wed Jan 7 17:16:21 2026 by rpki-client