This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/UZVrrBy0u-DY7K3mLv8hQItQARA.roa File: UZVrrBy0u-DY7K3mLv8hQItQARA.roa (raw, json) Hash identifier: N2Coy+OANDE2hMhG0YweFsd7/8ekVGzo/9IEO+AG3N0= Subject key identifier: 51:95:6B:AC:1C:B4:BB:E0:D8:EC:AD:E6:2E:FF:21:40:8B:50:01:10 Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019BD6E4DDE865C412E88B039ABEB5B26ABD Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/UZVrrBy0u-DY7K3mLv8hQItQARA.roa Signing time: Mon 19 Jan 2026 15:34:41 +0000 ROA not before: Mon 19 Jan 2026 15:34:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6830 IP address blocks: 88.148.21.0/24 maxlen: 24 88.148.104.0/24 maxlen: 24 89.32.167.0/24 maxlen: 24 93.115.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 18:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:e4:dd:e8:65:c4:12:e8:8b:03:9a:be:b5:b2:6a:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 19 15:34:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51956bac1cb4bbe0d8ecade62eff21408b500110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:33:5d:b1:6e:2f:1b:47:ea:0d:7f:c1:25:99: a1:cf:3b:a2:5a:79:07:ec:d0:73:db:7b:06:bf:d8: a9:35:bd:38:25:b2:c5:61:8b:7f:bf:0c:15:9b:93: 6c:ff:25:bd:90:39:3a:68:1f:fd:45:6d:df:3a:5f: 53:83:66:10:87:99:a4:68:8a:52:c5:83:f3:21:b7: 7d:dc:7b:ce:59:03:ee:a5:da:ad:7d:5f:20:fb:89: 13:73:31:ed:3e:b0:2f:9e:f7:fb:87:d2:e2:ca:13: 86:78:c0:33:5b:ca:d7:e0:75:7c:ae:ba:bd:a9:e0: 83:09:c0:e9:5c:85:65:b8:87:29:cb:26:04:23:95: 57:92:b2:7d:fb:42:9c:af:4f:44:17:c0:6a:33:b8: 22:a0:48:89:0c:3d:a4:ff:f1:3c:6f:e2:1c:ae:f0: 4f:89:7a:ad:7e:54:53:a5:ce:55:9f:c7:de:6c:b2: ae:e5:40:d6:1a:e0:80:ec:9e:8c:25:71:48:64:3c: 1a:67:f4:b6:bb:f8:6b:91:c2:38:7c:a8:36:bf:0d: b1:f3:ed:15:25:3e:91:c3:18:a5:8a:3e:d4:ac:65: 81:ce:0d:ae:89:87:a9:ee:c3:e2:b0:d3:71:39:ff: 39:f6:51:c1:d6:26:1e:73:5b:3d:74:0e:ef:f7:af: 5f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:95:6B:AC:1C:B4:BB:E0:D8:EC:AD:E6:2E:FF:21:40:8B:50:01:10 X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/UZVrrBy0u-DY7K3mLv8hQItQARA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.148.21.0/24 88.148.104.0/24 89.32.167.0/24 93.115.157.0/24 Signature Algorithm: sha256WithRSAEncryption 20:cc:70:39:9e:56:35:62:e0:c0:61:d9:b1:a0:a4:5e:bc:64: b4:d3:7d:1e:a4:5a:31:61:1d:c2:22:6f:41:ee:b5:b2:bc:23: 17:3b:78:86:72:15:82:1d:43:86:f4:c0:4c:2a:2c:26:b9:37: f5:63:85:cd:99:25:61:8f:2d:d9:e6:bb:a0:78:52:a3:f3:17: 47:37:8e:3e:f4:3e:fd:c1:90:78:1f:cd:fb:0d:ba:27:36:b7: 5e:ad:a7:cc:cf:f2:6f:b6:bc:aa:ae:29:d3:85:2f:78:f3:cb: f4:53:d4:8a:f1:0c:ba:b5:98:7c:3d:19:98:5c:c9:85:f8:f3: a3:73:0f:c1:dd:0f:ef:24:e9:15:a2:45:8f:33:ed:af:41:95: 31:c0:31:8a:24:9a:1e:86:18:d3:f0:b9:58:aa:89:85:e4:17: 97:f8:8e:04:8c:3c:d6:5c:1d:7b:29:2f:d3:f9:c0:b7:92:4e: d3:95:62:95:1b:99:01:83:bb:92:9b:cb:6d:1b:b1:b3:01:2c: 96:b1:b6:9b:4a:52:67:a4:46:85:67:05:7c:03:b5:ed:c5:55: ab:b4:3f:0d:5c:41:2a:1e:39:7b:e5:e6:a1:80:22:bc:1f:23: ab:54:40:1d:06:ff:74:0c:71:58:60:67:32:a9:6e:a2:e4:0d: 9d:34:0a:ef -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZvW5N3oZcQS6IsDmr61smq9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTE5MTUzNDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTk1NmJhYzFjYjRiYmUwZDhlY2FkZTYyZWZmMjE0MDhiNTAwMTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjNdsW4vG0fqDX/BJZmhzzuiWnkH 7NBz23sGv9ipNb04JbLFYYt/vwwVm5Ns/yW9kDk6aB/9RW3fOl9Tg2YQh5mkaIpS xYPzIbd93HvOWQPupdqtfV8g+4kTczHtPrAvnvf7h9LiyhOGeMAzW8rX4HV8rrq9 qeCDCcDpXIVluIcpyyYEI5VXkrJ9+0Kcr09EF8BqM7gioEiJDD2k//E8b+IcrvBP iXqtflRTpc5Vn8febLKu5UDWGuCA7J6MJXFIZDwaZ/S2u/hrkcI4fKg2vw2x8+0V JT6Rwxilij7UrGWBzg2uiYep7sPisNNxOf859lHB1iYec1s9dA7v969fVwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFFGVa6wctLvg2Oyt5i7/IUCLUAEQMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvVVpWcnJCeTB1LURZN0szbUx2OGhRSXRRQVJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWJQVAwQA WJRoAwQAWSCnAwQAXXOdMA0GCSqGSIb3DQEBCwUAA4IBAQAgzHA5nlY1YuDAYdmx oKRevGS0030epFoxYR3CIm9B7rWyvCMXO3iGchWCHUOG9MBMKiwmuTf1Y4XNmSVh jy3Z5rugeFKj8xdHN44+9D79wZB4H837DbonNrderafMz/JvtryqrinThS9488v0 U9SK8Qy6tZh8PRmYXMmF+POjcw/B3Q/vJOkVokWPM+2vQZUxwDGKJJoehhjT8LlY qomF5BeX+I4EjDzWXB17KS/T+cC3kk7TlWKVG5kBg7uSm8ttG7GzASyWsbabSlJn pEaFZwV8A7XtxVWrtD8NXEEqHjl75eahgCK8HyOrVEAdBv90DHFYYGcyqW6i5A2d NArv -----END CERTIFICATE-----Generated at Wed Jan 21 04:59:24 2026 by rpki-client