This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/uK_wPVcqKP0jy9R-MgLC2-CoJWI.roa File: uK_wPVcqKP0jy9R-MgLC2-CoJWI.roa (raw, json) Hash identifier: wUN+v284pRIdx3/1i/zxf53vr2oGEP7/MlFstJJg9go= Subject key identifier: B8:AF:F0:3D:57:2A:28:FD:23:CB:D4:7E:32:02:C2:DB:E0:A8:25:62 Certificate issuer: /CN=5188c94b8bedeecc6a59bdc44c6fd5157abe4b67 Certificate serial: 019B7F158B7BC987D210C708AA1878B58CAB Authority key identifier: 51:88:C9:4B:8B:ED:EE:CC:6A:59:BD:C4:4C:6F:D5:15:7A:BE:4B:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/uK_wPVcqKP0jy9R-MgLC2-CoJWI.roa Signing time: Fri 02 Jan 2026 14:21:16 +0000 ROA not before: Fri 02 Jan 2026 14:21:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198126 IP address blocks: 217.197.110.0/24 maxlen: 24 2a13:a240::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.mft rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:8b:7b:c9:87:d2:10:c7:08:aa:18:78:b5:8c:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5188c94b8bedeecc6a59bdc44c6fd5157abe4b67 Validity Not Before: Jan 2 14:21:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8aff03d572a28fd23cbd47e3202c2dbe0a82562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1b:6f:c5:86:9e:9d:62:4f:96:69:78:00:72: d8:f7:1b:d2:46:68:39:cb:d0:4c:41:58:c2:c5:04: f1:86:6b:4b:97:74:2e:31:dc:8a:67:5f:e4:0e:ba: 79:b8:e8:18:ab:fa:84:80:d1:00:f2:87:c9:aa:01: 4e:99:e4:d4:ea:a1:e2:71:a2:c7:d6:b3:68:b1:9d: 05:1f:da:d8:d0:1a:48:20:24:5f:77:d7:4a:79:54: 4d:f4:a9:8b:da:d1:22:75:61:a2:69:bf:9d:9e:d1: e1:f0:44:3c:9e:db:0c:ee:b1:0f:6d:1e:d1:55:7a: e1:b3:e9:c3:31:07:ee:da:11:d9:60:77:92:9c:6f: 53:06:19:2c:61:c7:af:43:52:f9:21:e6:d5:ef:34: c2:ad:82:68:36:ff:86:4d:43:78:b1:69:82:7c:23: b9:a9:dc:c4:f2:61:f1:0f:b9:66:36:7d:a9:fc:52: 7d:e5:86:58:ed:25:33:a4:8d:79:a9:4f:77:56:e6: d8:4e:5a:47:19:0e:12:47:fa:75:3d:a6:81:cf:59: b3:95:e2:f2:98:c8:83:22:93:a1:f0:51:4f:cf:e6: af:61:b7:c5:7c:22:af:9c:74:fe:92:0d:65:63:4d: 69:b5:4e:ad:73:ad:f6:41:68:8a:b0:0b:13:db:a1: e2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AF:F0:3D:57:2A:28:FD:23:CB:D4:7E:32:02:C2:DB:E0:A8:25:62 X509v3 Authority Key Identifier: keyid:51:88:C9:4B:8B:ED:EE:CC:6A:59:BD:C4:4C:6F:D5:15:7A:BE:4B:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYjJS4vt7sxqWb3ETG_VFXq-S2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/uK_wPVcqKP0jy9R-MgLC2-CoJWI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbd141-1645-42de-9a7b-0fe55ca10f8f/1/UYjJS4vt7sxqWb3ETG_VFXq-S2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.197.110.0/24 IPv6: 2a13:a240::/29 Signature Algorithm: sha256WithRSAEncryption 71:c9:e5:67:d4:6c:1d:b5:f4:9d:41:c5:1d:27:a5:04:1e:78: ae:ea:51:18:8a:a2:6b:2b:f1:fe:b6:99:7e:60:d7:92:11:73: 36:e7:ca:aa:88:2c:7d:07:4e:8a:d5:59:cb:39:b5:ec:ec:23: a8:8b:be:1b:39:8a:f0:d6:95:30:fa:04:11:49:85:bf:ad:51: b7:2e:4d:fd:a7:42:00:ed:68:eb:66:90:2f:8e:cb:39:68:05: 65:ed:42:c4:0b:0e:a6:6d:ed:92:d0:e6:3a:2b:98:fc:d4:48: 30:9e:fc:20:b8:42:31:41:75:4e:ff:f2:d3:72:60:5f:ff:c2: 64:d5:97:fb:56:f0:f8:b1:30:15:58:b1:a9:e9:9a:16:93:2b: b2:5c:3e:ff:71:af:50:38:16:89:14:88:ad:c9:84:74:7d:2e: f7:25:aa:a7:e2:bf:1e:e7:a6:ff:c9:d1:97:29:46:40:f8:c6: 99:a3:2a:00:6d:a8:f9:14:ff:0f:b4:83:28:34:fc:01:22:65: 47:02:8c:7b:6e:27:24:e2:f2:64:d7:b4:56:86:6d:30:07:32: 13:11:2d:80:27:8a:e5:fd:82:c9:b4:df:02:69:46:34:1c:f2: 89:2a:9d:2b:b8:1b:5b:43:81:24:74:a5:89:b6:a6:2b:ca:10: 7e:b3:cb:ed -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FYt7yYfSEMcIqhh4tYyrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxODhjOTRiOGJlZGVlY2M2YTU5YmRjNDRjNmZkNTE1N2Fi ZTRiNjcwHhcNMjYwMTAyMTQyMTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGFmZjAzZDU3MmEyOGZkMjNjYmQ0N2UzMjAyYzJkYmUwYTgyNTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBtvxYaenWJPlml4AHLY9xvSRmg5 y9BMQVjCxQTxhmtLl3QuMdyKZ1/kDrp5uOgYq/qEgNEA8ofJqgFOmeTU6qHicaLH 1rNosZ0FH9rY0BpIICRfd9dKeVRN9KmL2tEidWGiab+dntHh8EQ8ntsM7rEPbR7R VXrhs+nDMQfu2hHZYHeSnG9TBhksYcevQ1L5IebV7zTCrYJoNv+GTUN4sWmCfCO5 qdzE8mHxD7lmNn2p/FJ95YZY7SUzpI15qU93VubYTlpHGQ4SR/p1PaaBz1mzleLy mMiDIpOh8FFPz+avYbfFfCKvnHT+kg1lY01ptU6tc632QWiKsAsT26HiLwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLiv8D1XKij9I8vUfjICwtvgqCViMB8GA1UdIwQY MBaAFFGIyUuL7e7Malm9xExv1RV6vktnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVlqSlM0dnQ3c3hxV2IzRVRHX1ZGWHEtUzJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9mYmQxNDEtMTY0NS00MmRlLTlhN2It MGZlNTVjYTEwZjhmLzEvdUtfd1BWY3FLUDBqeTlSLU1nTEMyLUNvSldJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9mYmQxNDEtMTY0NS00MmRlLTlhN2ItMGZlNTVjYTEwZjhm LzEvVVlqSlM0dnQ3c3hxV2IzRVRHX1ZGWHEtUzJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA2cVuMA0E AgACMAcDBQMqE6JAMA0GCSqGSIb3DQEBCwUAA4IBAQBxyeVn1GwdtfSdQcUdJ6UE Hniu6lEYiqJrK/H+tpl+YNeSEXM258qqiCx9B06K1VnLObXs7COoi74bOYrw1pUw +gQRSYW/rVG3Lk39p0IA7WjrZpAvjss5aAVl7ULECw6mbe2S0OY6K5j81Egwnvwg uEIxQXVO//LTcmBf/8Jk1Zf7VvD4sTAVWLGp6ZoWkyuyXD7/ca9QOBaJFIityYR0 fS73Jaqn4r8e56b/ydGXKUZA+MaZoyoAbaj5FP8PtIMoNPwBImVHAox7bick4vJk 17RWhm0wBzITES2AJ4rl/YLJtN8CaUY0HPKJKp0ruBtbQ4EkdKWJtqYryhB+s8vt -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:04 2026 by rpki-client