This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/uTcv-a7G_8gWRUCdg15b3oG2Foc.roa File: uTcv-a7G_8gWRUCdg15b3oG2Foc.roa (raw, json) Hash identifier: 5elOUx8UPBAPRqF/fo6uzxQhCWyH1l9Otl5TjweK9Rw= Subject key identifier: B9:37:2F:F9:AE:C6:FF:C8:16:45:40:9D:83:5E:5B:DE:81:B6:16:87 Certificate issuer: /CN=45ccbbeb3b37abca1afaa4e79177667b5cd8e7a6 Certificate serial: 019B7F858F929EA6BF77797C013BC5B2761D Authority key identifier: 45:CC:BB:EB:3B:37:AB:CA:1A:FA:A4:E7:91:77:66:7B:5C:D8:E7:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rcy76zs3q8oa-qTnkXdme1zY56Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/uTcv-a7G_8gWRUCdg15b3oG2Foc.roa Signing time: Fri 02 Jan 2026 16:23:38 +0000 ROA not before: Fri 02 Jan 2026 16:23:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202507 IP address blocks: 193.47.64.0/24 maxlen: 24 193.47.65.0/24 maxlen: 24 193.47.66.0/24 maxlen: 24 193.47.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.mft rsync://rpki.ripe.net/repository/DEFAULT/Rcy76zs3q8oa-qTnkXdme1zY56Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:8f:92:9e:a6:bf:77:79:7c:01:3b:c5:b2:76:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45ccbbeb3b37abca1afaa4e79177667b5cd8e7a6 Validity Not Before: Jan 2 16:23:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9372ff9aec6ffc81645409d835e5bde81b61687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:79:77:c5:ce:98:3b:f6:6e:35:1f:1d:e2:a7: cc:e5:d9:3e:64:aa:17:8c:1f:48:e9:cc:47:6e:48: 6f:0a:bd:55:3c:00:93:db:c1:cb:31:da:2a:ed:e9: ae:c1:b8:dc:9c:44:a3:ee:d4:17:04:cf:0c:ba:5f: e6:65:10:cc:18:15:21:ef:9e:89:47:31:f8:04:a4: b0:e4:41:d1:3c:98:8c:47:2f:4b:60:e0:e2:2a:99: ba:7e:3d:95:4e:88:9f:f6:7e:10:c5:c9:2e:4b:b5: 82:3b:f5:d4:e6:04:a3:4f:bb:06:be:a7:e0:5a:e4: 37:15:3a:1b:20:51:c6:0e:e5:7a:18:ee:f9:cd:7a: 7e:47:eb:4a:2e:e8:ac:e6:ee:68:9b:ab:e4:8d:72: 62:bc:cf:e4:1f:40:15:18:84:18:82:a3:38:61:b1: 43:4f:da:ba:f8:34:31:5a:97:f7:36:94:c7:da:c1: 28:d7:f0:4f:ab:c7:a2:5a:89:df:86:b4:8e:f4:f9: dd:50:d6:7b:f4:fb:43:4c:b4:f8:85:94:e1:01:8b: 2f:03:e0:94:a8:c2:21:c1:b5:2b:2b:4f:5d:a4:53: 4d:82:4d:d8:82:73:27:da:35:4a:7e:d5:fc:71:43: d1:db:3c:68:e8:ff:99:c8:c2:0c:2c:a4:e0:f4:d4: 7f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:37:2F:F9:AE:C6:FF:C8:16:45:40:9D:83:5E:5B:DE:81:B6:16:87 X509v3 Authority Key Identifier: keyid:45:CC:BB:EB:3B:37:AB:CA:1A:FA:A4:E7:91:77:66:7B:5C:D8:E7:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rcy76zs3q8oa-qTnkXdme1zY56Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/uTcv-a7G_8gWRUCdg15b3oG2Foc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b7f5cc-53ab-45a8-aad6-f5116bc11067/1/Rcy76zs3q8oa-qTnkXdme1zY56Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.47.64.0/22 Signature Algorithm: sha256WithRSAEncryption 31:be:c5:83:ed:10:15:f3:ce:c7:f3:2b:ca:e3:6c:bf:87:a2: 66:0b:46:12:aa:ee:a8:9b:45:1d:8d:57:d1:e5:9d:e8:7c:42: 2f:87:db:42:87:94:f0:b5:43:1a:80:54:3c:f9:dd:96:fd:4d: 47:3c:76:65:21:7c:56:c4:90:eb:5f:ad:92:8e:41:69:8e:50: ea:30:9f:5c:f4:04:b5:3b:a3:bd:4a:13:ed:11:7d:21:a0:7a: 46:6c:22:c4:a7:ae:f5:0b:83:83:92:df:f0:db:0b:0e:d1:61: 2f:4e:42:40:85:66:c8:c4:f1:68:bc:d5:89:78:ee:10:cb:b5: 31:21:b7:11:d8:8a:3f:a6:0f:69:7c:9b:10:c0:99:1d:ab:b6: 76:56:f7:d2:e4:2c:68:e6:f3:91:0a:bd:5f:dc:55:d1:8c:91: 17:62:6a:3f:ac:fa:5e:8e:8d:76:56:29:06:a7:98:0f:6f:a9: ee:14:f1:62:dc:7b:bd:39:6e:6a:97:86:33:46:ae:eb:13:ae: 50:47:b2:2e:9d:41:23:ff:67:38:d5:18:92:df:85:1b:67:0c: 0e:80:51:e0:44:59:73:35:4d:40:18:18:05:ae:f1:e1:16:9f: ad:4b:5e:76:f5:8f:0e:ae:3e:ae:6f:09:ae:13:4a:73:50:4d: 1d:f4:79:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hY+Snqa/d3l8ATvFsnYdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1Y2NiYmViM2IzN2FiY2ExYWZhYTRlNzkxNzc2NjdiNWNk OGU3YTYwHhcNMjYwMTAyMTYyMzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTM3MmZmOWFlYzZmZmM4MTY0NTQwOWQ4MzVlNWJkZTgxYjYxNjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3l3xc6YO/ZuNR8d4qfM5dk+ZKoX jB9I6cxHbkhvCr1VPACT28HLMdoq7emuwbjcnESj7tQXBM8Mul/mZRDMGBUh756J RzH4BKSw5EHRPJiMRy9LYODiKpm6fj2VToif9n4QxckuS7WCO/XU5gSjT7sGvqfg WuQ3FTobIFHGDuV6GO75zXp+R+tKLuis5u5om6vkjXJivM/kH0AVGIQYgqM4YbFD T9q6+DQxWpf3NpTH2sEo1/BPq8eiWonfhrSO9PndUNZ79PtDTLT4hZThAYsvA+CU qMIhwbUrK09dpFNNgk3YgnMn2jVKftX8cUPR2zxo6P+ZyMIMLKTg9NR/8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLk3L/muxv/IFkVAnYNeW96BthaHMB8GA1UdIwQY MBaAFEXMu+s7N6vKGvqk55F3Zntc2OemMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmN5NzZ6czNxOG9hLXFUbmtYZG1lMXpZNTZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iN2Y1Y2MtNTNhYi00NWE4LWFhZDYt ZjUxMTZiYzExMDY3LzEvdVRjdi1hN0dfOGdXUlVDZGcxNWIzb0cyRm9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iN2Y1Y2MtNTNhYi00NWE4LWFhZDYtZjUxMTZiYzExMDY3 LzEvUmN5NzZ6czNxOG9hLXFUbmtYZG1lMXpZNTZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwS9AMA0G CSqGSIb3DQEBCwUAA4IBAQAxvsWD7RAV887H8yvK42y/h6JmC0YSqu6om0UdjVfR 5Z3ofEIvh9tCh5TwtUMagFQ8+d2W/U1HPHZlIXxWxJDrX62SjkFpjlDqMJ9c9AS1 O6O9ShPtEX0hoHpGbCLEp671C4ODkt/w2wsO0WEvTkJAhWbIxPFovNWJeO4Qy7Ux IbcR2Io/pg9pfJsQwJkdq7Z2VvfS5Cxo5vORCr1f3FXRjJEXYmo/rPpejo12VikG p5gPb6nuFPFi3Hu9OW5ql4YzRq7rE65QR7IunUEj/2c41RiS34UbZwwOgFHgRFlz NU1AGBgFrvHhFp+tS1529Y8Orj6ubwmuE0pzUE0d9HkV -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:09 2026 by rpki-client