This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/uimPsZybZq-yrSLpRKTm-vYNNYc.roa File: uimPsZybZq-yrSLpRKTm-vYNNYc.roa (raw, json) Hash identifier: wtZLQDeZDb+XPOKiWpCpOdMamv2X0LhZ3Xo+KoH23rc= Subject key identifier: BA:29:8F:B1:9C:9B:66:AF:B2:AD:22:E9:44:A4:E6:FA:F6:0D:35:87 Certificate issuer: /CN=3044e60bb97132ea849a53fc554bbbc63948b016 Certificate serial: 019B7F843854E3B283A21AFCDE6E464C9CD3 Authority key identifier: 30:44:E6:0B:B9:71:32:EA:84:9A:53:FC:55:4B:BB:C6:39:48:B0:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/METmC7lxMuqEmlP8VUu7xjlIsBY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/uimPsZybZq-yrSLpRKTm-vYNNYc.roa Signing time: Fri 02 Jan 2026 16:22:10 +0000 ROA not before: Fri 02 Jan 2026 16:22:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207543 IP address blocks: 193.227.242.0/24 maxlen: 24 193.227.243.0/24 maxlen: 24 193.228.10.0/24 maxlen: 24 193.228.11.0/24 maxlen: 24 2a0a:e940::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft rsync://rpki.ripe.net/repository/DEFAULT/METmC7lxMuqEmlP8VUu7xjlIsBY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:38:54:e3:b2:83:a2:1a:fc:de:6e:46:4c:9c:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3044e60bb97132ea849a53fc554bbbc63948b016 Validity Not Before: Jan 2 16:22:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba298fb19c9b66afb2ad22e944a4e6faf60d3587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fa:22:34:7d:a5:0a:77:1b:af:f6:47:f7:98: f9:04:30:0b:c4:6d:67:82:66:ce:fc:46:28:e3:d7: c8:25:d3:4b:b2:7a:83:26:1f:87:51:ff:64:ac:a5: 16:26:a7:b0:2a:68:6e:11:59:24:8f:e2:7f:ca:71: 5c:ff:93:bb:9e:02:0b:b9:6b:94:fb:9e:be:0f:94: 38:35:b5:b2:74:77:40:60:6d:34:c4:6c:fa:e2:a4: 18:df:31:38:d2:24:a5:6b:ae:64:b8:07:6d:70:59: c3:00:45:87:9b:a6:9c:cd:50:2c:7b:8b:92:35:b0: 43:0e:af:c7:d2:16:17:af:a4:bb:6f:5d:00:f9:fa: 53:45:15:6a:63:9c:2c:0a:ad:c2:d4:ad:a8:42:5f: 55:3a:25:0e:36:13:41:47:05:72:ea:22:b8:63:fb: 98:2c:d3:08:d3:52:f2:49:8a:b0:f5:57:ec:8b:a3: 57:24:77:d3:ef:e5:0f:68:74:71:c7:62:20:60:63: 2f:32:06:2b:f3:52:3a:14:9d:1a:d3:bf:0d:2a:fc: 93:c8:da:2d:da:35:41:8a:26:fc:df:e6:1d:bc:fc: af:cf:f8:25:c3:60:d9:a3:93:18:17:00:19:46:d9: 8a:e3:0b:9c:d6:ae:54:f4:b0:85:54:80:0a:5a:62: e1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:29:8F:B1:9C:9B:66:AF:B2:AD:22:E9:44:A4:E6:FA:F6:0D:35:87 X509v3 Authority Key Identifier: keyid:30:44:E6:0B:B9:71:32:EA:84:9A:53:FC:55:4B:BB:C6:39:48:B0:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/METmC7lxMuqEmlP8VUu7xjlIsBY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/uimPsZybZq-yrSLpRKTm-vYNNYc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.227.242.0/23 193.228.10.0/23 IPv6: 2a0a:e940::/29 Signature Algorithm: sha256WithRSAEncryption 1c:de:27:a9:a8:aa:a4:e6:30:1f:d6:aa:c7:6f:d8:ff:c5:37: 64:f7:63:2d:29:89:b7:3e:f8:f0:39:81:fc:ca:0b:2e:3d:73: d1:2a:c6:57:30:45:75:86:aa:fc:e8:f2:af:c1:8c:7a:73:84: 0c:ed:10:db:6a:25:ad:01:c6:66:62:fc:e6:40:22:48:ba:e9: 50:d3:96:3f:26:fd:bc:e9:0c:f0:21:b0:6e:74:94:6a:eb:69: 4c:d3:e6:77:cb:5c:30:00:b7:6f:dd:d2:e3:fd:31:5c:21:08: 2b:7e:4b:b8:4e:99:a9:52:9b:6c:95:fd:26:21:22:3b:85:43: e3:b6:87:d1:a7:88:6c:5b:8d:de:89:45:4c:67:f5:a5:c5:eb: 14:3e:ca:26:fc:9e:28:dd:e3:ca:f5:20:eb:ed:c7:1b:99:18: f9:d8:de:e2:52:c9:ac:c1:41:64:41:6e:45:b4:7d:cb:cf:5b: 14:db:3d:2a:a7:cd:7a:20:37:1a:77:18:1c:e0:35:38:8a:33: 94:f8:e8:ef:64:73:bb:cf:f3:6b:54:97:60:32:1e:0b:5a:33: 35:6a:f8:5a:8e:3f:9a:dd:57:b7:fd:df:fc:ef:8e:31:18:27: b7:55:a5:e0:e5:d4:80:88:60:a9:17:f8:40:2b:e8:f3:a3:73: 19:bb:16:56 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/hDhU47KDohr83m5GTJzTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNDRlNjBiYjk3MTMyZWE4NDlhNTNmYzU1NGJiYmM2Mzk0 OGIwMTYwHhcNMjYwMTAyMTYyMjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTI5OGZiMTljOWI2NmFmYjJhZDIyZTk0NGE0ZTZmYWY2MGQzNTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfoiNH2lCncbr/ZH95j5BDALxG1n gmbO/EYo49fIJdNLsnqDJh+HUf9krKUWJqewKmhuEVkkj+J/ynFc/5O7ngILuWuU +56+D5Q4NbWydHdAYG00xGz64qQY3zE40iSla65kuAdtcFnDAEWHm6aczVAse4uS NbBDDq/H0hYXr6S7b10A+fpTRRVqY5wsCq3C1K2oQl9VOiUONhNBRwVy6iK4Y/uY LNMI01LySYqw9Vfsi6NXJHfT7+UPaHRxx2IgYGMvMgYr81I6FJ0a078NKvyTyNot 2jVBiib83+YdvPyvz/glw2DZo5MYFwAZRtmK4wuc1q5U9LCFVIAKWmLhPwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFLopj7Gcm2avsq0i6USk5vr2DTWHMB8GA1UdIwQY MBaAFDBE5gu5cTLqhJpT/FVLu8Y5SLAWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUVUbUM3bHhNdXFFbWxQOFZVdTd4amxJc0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lZWY3MGUtODIwYy00NWIxLWFiMTkt NDMxZjkxZGE0ZTI4LzEvdWltUHNaeWJacS15clNMcFJLVG0tdllOTlljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9lZWY3MGUtODIwYy00NWIxLWFiMTktNDMxZjkxZGE0ZTI4 LzEvTUVUbUM3bHhNdXFFbWxQOFZVdTd4amxJc0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBwePyAwQB weQKMA0EAgACMAcDBQMqCulAMA0GCSqGSIb3DQEBCwUAA4IBAQAc3iepqKqk5jAf 1qrHb9j/xTdk92MtKYm3PvjwOYH8ygsuPXPRKsZXMEV1hqr86PKvwYx6c4QM7RDb aiWtAcZmYvzmQCJIuulQ05Y/Jv286QzwIbBudJRq62lM0+Z3y1wwALdv3dLj/TFc IQgrfku4TpmpUptslf0mISI7hUPjtofRp4hsW43eiUVMZ/WlxesUPsom/J4o3ePK 9SDr7ccbmRj52N7iUsmswUFkQW5FtH3Lz1sU2z0qp816IDcadxgc4DU4ijOU+Ojv ZHO7z/NrVJdgMh4LWjM1avhajj+a3Ve3/d/8744xGCe3VaXg5dSAiGCpF/hAK+jz o3MZuxZW -----END CERTIFICATE-----Generated at Tue Feb 10 01:02:04 2026 by rpki-client