This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/UqWiGwSKWqyJRdGttOAL9pdFqF0.roa File: UqWiGwSKWqyJRdGttOAL9pdFqF0.roa (raw, json) Hash identifier: EcAPWWCFosb1c66v05znaxCwziIYlAJXvCZC4C9hAJM= Subject key identifier: 52:A5:A2:1B:04:8A:5A:AC:89:45:D1:AD:B4:E0:0B:F6:97:45:A8:5D Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257 Certificate serial: 019BDB9D5CC94DAD01D761A6E6E541886C67 Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/UqWiGwSKWqyJRdGttOAL9pdFqF0.roa Signing time: Tue 20 Jan 2026 13:34:41 +0000 ROA not before: Tue 20 Jan 2026 13:34:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53294 IP address blocks: 31.99.0.0/24 maxlen: 24 213.161.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 22:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:9d:5c:c9:4d:ad:01:d7:61:a6:e6:e5:41:88:6c:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257 Validity Not Before: Jan 20 13:34:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52a5a21b048a5aac8945d1adb4e00bf69745a85d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:38:1e:3b:e7:60:72:d2:f8:ff:a0:bf:4d:81: 65:a1:34:ac:75:24:34:fa:7d:6c:2b:74:1c:27:1c: 65:d6:75:90:84:51:49:f0:e7:69:3d:2e:3e:ed:0d: c5:d1:c5:a1:cd:42:2e:62:38:99:61:8e:7f:71:bf: d3:a2:05:38:7b:ce:27:53:47:0b:3b:ee:84:0e:e8: e3:ea:10:fb:10:db:69:0b:5d:0d:a9:c3:cf:76:07: 93:64:69:24:35:16:c9:f9:11:bb:11:62:41:53:cb: 88:db:ab:67:f5:c4:95:49:e1:ce:6e:32:f7:51:02: 8f:bc:ba:72:e4:45:16:87:98:85:06:65:99:14:76: 93:df:77:13:91:e3:c6:86:3a:aa:c8:c8:04:26:cc: b9:c3:2d:4d:da:cf:1c:1e:79:2b:00:19:85:fa:37: ee:37:85:56:a3:60:91:ac:72:bd:00:41:db:a7:91: ba:78:dd:9a:32:46:7c:13:40:18:0f:76:1d:2b:57: 7d:4d:2e:98:bb:38:17:aa:93:5c:5b:6d:32:df:10: 93:e6:29:c7:5f:f8:9c:cc:52:21:a7:6d:4a:81:6e: 51:f7:bf:ef:f1:86:7f:c2:44:2d:cc:85:d9:af:c4: 57:86:0a:fd:10:49:f9:d5:37:77:cb:02:2a:dc:7a: 0e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A5:A2:1B:04:8A:5A:AC:89:45:D1:AD:B4:E0:0B:F6:97:45:A8:5D X509v3 Authority Key Identifier: keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/UqWiGwSKWqyJRdGttOAL9pdFqF0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.99.0.0/24 213.161.86.0/24 Signature Algorithm: sha256WithRSAEncryption 07:1e:90:50:f2:98:00:bb:24:3f:31:aa:55:d2:fd:03:a0:7f: 4a:ad:fc:80:30:33:fc:b7:5f:5b:2c:18:81:30:19:ca:fc:d8: 0f:d0:b1:9f:68:ed:0b:9f:1b:2f:b7:ae:ec:d5:93:25:df:d7: 3c:ab:66:32:0e:40:07:f4:b2:73:89:cc:42:42:4f:66:5d:de: f0:e3:39:cd:1f:a5:72:d5:70:d4:c4:c6:b4:5e:6f:9b:04:50: ff:c0:bd:d2:07:89:02:c5:90:77:2f:ef:8c:f0:f3:fd:e2:5a: b8:c6:56:1a:cb:54:ed:5b:77:fd:7e:de:9d:29:53:76:46:f5: f7:57:09:70:cc:68:55:80:19:44:01:5b:41:70:fc:da:69:48: c2:ea:d7:0f:18:02:f1:78:0d:c8:f9:48:ba:a0:70:d5:db:a3: cf:9d:01:45:15:af:85:bc:16:8d:e1:f9:4e:df:12:54:d4:e4: d8:3f:07:02:70:f1:e8:b4:7b:f2:63:6e:4d:57:a1:a7:81:f3: d2:2c:f6:c7:49:82:3e:32:7f:ce:8a:0b:d8:4c:89:fa:b8:85: 45:c2:44:1e:f2:81:34:f3:23:c5:13:50:5f:71:80:57:19:30: 82:7f:bf:94:f6:cb:22:2a:8a:54:ba:61:53:42:d4:98:be:e9: ef:3d:14:17 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvbnVzJTa0B12Gm5uVBiGxnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMGNjOTQyOWI2MzM4MmU5YjE3MTRkMjFiM2M5NmQyZTVl YmUyNTcwHhcNMjYwMTIwMTMzNDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmE1YTIxYjA0OGE1YWFjODk0NWQxYWRiNGUwMGJmNjk3NDVhODVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTgeO+dgctL4/6C/TYFloTSsdSQ0 +n1sK3QcJxxl1nWQhFFJ8OdpPS4+7Q3F0cWhzUIuYjiZYY5/cb/TogU4e84nU0cL O+6EDujj6hD7ENtpC10NqcPPdgeTZGkkNRbJ+RG7EWJBU8uI26tn9cSVSeHObjL3 UQKPvLpy5EUWh5iFBmWZFHaT33cTkePGhjqqyMgEJsy5wy1N2s8cHnkrABmF+jfu N4VWo2CRrHK9AEHbp5G6eN2aMkZ8E0AYD3YdK1d9TS6YuzgXqpNcW20y3xCT5inH X/iczFIhp21KgW5R97/v8YZ/wkQtzIXZr8RXhgr9EEn51Td3ywIq3HoO1wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFKlohsEilqsiUXRrbTgC/aXRahdMB8GA1UdIwQY MBaAFOMMyUKbYzgumxcU0hs8ltLl6+JXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUt ZGI0ZjM1MmU5YWQzLzEvVXFXaUd3U0tXcXlKUmRHdHRPQUw5cGRGcUYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUtZGI0ZjM1MmU5YWQz LzEvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAH2MAAwQA 1aFWMA0GCSqGSIb3DQEBCwUAA4IBAQAHHpBQ8pgAuyQ/MapV0v0DoH9KrfyAMDP8 t19bLBiBMBnK/NgP0LGfaO0Lnxsvt67s1ZMl39c8q2YyDkAH9LJzicxCQk9mXd7w 4znNH6Vy1XDUxMa0Xm+bBFD/wL3SB4kCxZB3L++M8PP94lq4xlYay1TtW3f9ft6d KVN2RvX3VwlwzGhVgBlEAVtBcPzaaUjC6tcPGALxeA3I+Ui6oHDV26PPnQFFFa+F vBaN4flO3xJU1OTYPwcCcPHotHvyY25NV6GngfPSLPbHSYI+Mn/OigvYTIn6uIVF wkQe8oE08yPFE1BfcYBXGTCCf7+U9ssiKopUumFTQtSYvunvPRQX -----END CERTIFICATE-----Generated at Wed Jan 21 03:48:28 2026 by rpki-client