This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/uzgAI7hlsT6K2Lvcaksi6ldtZag.roa File: uzgAI7hlsT6K2Lvcaksi6ldtZag.roa (raw, json) Hash identifier: dI/B0kk5Noti3Cu9uZ1OWU7GUEx5+dx7Iuukl1B+l+U= Subject key identifier: BB:38:00:23:B8:65:B1:3E:8A:D8:BB:DC:6A:4B:22:EA:57:6D:65:A8 Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Certificate serial: 019BC2046612BCF96610A9A9A380D916B3A7 Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/uzgAI7hlsT6K2Lvcaksi6ldtZag.roa Signing time: Thu 15 Jan 2026 14:17:06 +0000 ROA not before: Thu 15 Jan 2026 14:17:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213542 IP address blocks: 31.40.192.0/24 maxlen: 24 45.152.136.0/24 maxlen: 24 45.152.137.0/24 maxlen: 24 85.31.52.0/24 maxlen: 24 193.56.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c2:04:66:12:bc:f9:66:10:a9:a9:a3:80:d9:16:b3:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Validity Not Before: Jan 15 14:17:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb380023b865b13e8ad8bbdc6a4b22ea576d65a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c1:9f:d1:42:12:cc:bc:4b:c1:d2:17:7b:92: 7f:fb:08:ae:30:04:6b:ea:90:1e:8b:69:55:06:dc: 36:39:2b:2e:ed:fe:34:71:b3:02:62:9f:53:bf:82: 6d:02:e4:1d:c2:fe:2f:81:a5:52:e3:79:e0:12:50: f0:e4:d2:36:f5:37:f2:b6:89:9d:30:dc:07:d7:bb: 3c:ff:4b:ff:be:8d:e1:7e:62:0f:78:26:6e:ac:92: 4f:a1:a6:d4:8a:3c:11:38:64:9a:b8:7d:93:6f:70: e1:88:6a:86:4c:4b:01:af:a1:de:7c:bc:ae:6d:18: bf:3a:f9:f5:55:f5:55:d5:ae:c1:c6:68:a9:6c:28: c8:0d:5e:a3:02:d4:40:cd:4a:5c:85:ea:20:9c:58: 8d:08:0e:7d:a7:45:63:fc:02:fc:e6:25:98:62:9b: 96:cb:29:65:8f:aa:d1:05:be:bd:4c:21:87:de:95: af:92:62:ab:1a:ca:43:4f:44:4a:d5:8d:c3:7c:2e: 5a:c2:c4:4e:f4:4d:9f:ea:9b:55:59:ed:9d:38:cb: 46:4d:bd:9f:37:11:48:69:d5:29:9e:51:b8:1d:a4: 76:96:af:61:dd:fa:f8:2c:2d:ae:4d:96:81:74:36: e7:f5:51:fc:78:c3:47:8d:ae:6b:bc:ff:20:4b:e0: 0c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:38:00:23:B8:65:B1:3E:8A:D8:BB:DC:6A:4B:22:EA:57:6D:65:A8 X509v3 Authority Key Identifier: keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/uzgAI7hlsT6K2Lvcaksi6ldtZag.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.192.0/24 45.152.136.0/23 85.31.52.0/24 193.56.22.0/24 Signature Algorithm: sha256WithRSAEncryption 99:62:ae:0a:fe:d9:83:ea:bd:62:fe:01:0f:d8:4f:8c:cc:e3: a8:3f:d4:d2:1d:0f:0c:e3:bf:7f:90:af:39:5d:88:6b:97:c7: aa:a6:84:b7:7d:0e:8e:fc:75:50:bc:5a:9a:83:85:f6:8a:cb: 46:47:f0:aa:1f:73:f2:ee:92:c9:54:b5:69:ed:b8:96:8a:e1: 76:bd:df:94:38:07:e2:09:44:5f:5d:e0:da:cd:aa:ea:d5:c6: 8c:a1:8c:8b:5c:fe:5f:3e:0f:38:e6:f9:36:46:2d:cd:22:c8: d1:8d:61:f2:3e:08:85:2e:76:55:6b:5b:81:fe:48:c6:1b:1a: ce:73:92:5d:c9:ae:da:9e:fd:6e:83:4b:d2:83:7a:1a:5f:6a: 63:b4:f6:03:d5:aa:bb:1f:18:df:88:3c:82:fd:e5:c4:cd:53: a0:d1:02:e2:05:7e:7f:49:31:bf:d3:62:b8:f6:0d:3f:72:7e: 17:41:e4:bc:89:86:79:93:b4:03:b6:99:b0:88:77:4d:6e:24: 58:21:6a:b2:79:94:a8:a3:51:3d:57:cf:3b:73:df:8f:76:ad: e8:82:5f:48:9a:45:0d:50:d2:44:9a:73:1b:c4:a8:97:6f:1a: e9:ad:e9:44:2e:25:16:95:d1:c5:3b:37:b8:71:83:3f:3f:df: fc:dd:3f:d7 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZvCBGYSvPlmEKmpo4DZFrOnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2 OWExZmQwHhcNMjYwMTE1MTQxNzA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjM4MDAyM2I4NjViMTNlOGFkOGJiZGM2YTRiMjJlYTU3NmQ2NWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8Gf0UISzLxLwdIXe5J/+wiuMARr 6pAei2lVBtw2OSsu7f40cbMCYp9Tv4JtAuQdwv4vgaVS43ngElDw5NI29Tfytomd MNwH17s8/0v/vo3hfmIPeCZurJJPoabUijwROGSauH2Tb3DhiGqGTEsBr6HefLyu bRi/Ovn1VfVV1a7BxmipbCjIDV6jAtRAzUpcheognFiNCA59p0Vj/AL85iWYYpuW yyllj6rRBb69TCGH3pWvkmKrGspDT0RK1Y3DfC5awsRO9E2f6ptVWe2dOMtGTb2f NxFIadUpnlG4HaR2lq9h3fr4LC2uTZaBdDbn9VH8eMNHja5rvP8gS+AMOQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLs4ACO4ZbE+iti73GpLIupXbWWoMB8GA1UdIwQY MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et OTk0ODA2ZjA4MWYwLzEvdXpnQUk3aGxzVDZLMkx2Y2Frc2k2bGR0WmFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAHyjAAwQB LZiIAwQAVR80AwQAwTgWMA0GCSqGSIb3DQEBCwUAA4IBAQCZYq4K/tmD6r1i/gEP 2E+MzOOoP9TSHQ8M479/kK85XYhrl8eqpoS3fQ6O/HVQvFqag4X2istGR/CqH3Py 7pLJVLVp7biWiuF2vd+UOAfiCURfXeDazarq1caMoYyLXP5fPg845vk2Ri3NIsjR jWHyPgiFLnZVa1uB/kjGGxrOc5Jdya7anv1ug0vSg3oaX2pjtPYD1aq7HxjfiDyC /eXEzVOg0QLiBX5/STG/02K49g0/cn4XQeS8iYZ5k7QDtpmwiHdNbiRYIWqyeZSo o1E9V887c9+Pdq3ogl9ImkUNUNJEmnMbxKiXbxrprelELiUWldHFOze4cYM/P9/8 3T/X -----END CERTIFICATE-----Generated at Mon Jan 19 21:24:05 2026 by rpki-client