This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/u0aooYk6vpPtd7DAaqhA5TCwqL8.roa File: u0aooYk6vpPtd7DAaqhA5TCwqL8.roa (raw, json) Hash identifier: jrpZh1EcyK9ynVBjFBbvxMjSEhlJo0Ta8D6EcHF8U7U= Subject key identifier: BB:46:A8:A1:89:3A:BE:93:ED:77:B0:C0:6A:A8:40:E5:30:B0:A8:BF Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Certificate serial: 019B7E37DED9EEBCC5FA214A377C75BA0AE0 Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/u0aooYk6vpPtd7DAaqhA5TCwqL8.roa Signing time: Fri 02 Jan 2026 10:19:09 +0000 ROA not before: Fri 02 Jan 2026 10:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44620 IP address blocks: 62.169.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:de:d9:ee:bc:c5:fa:21:4a:37:7c:75:ba:0a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Validity Not Before: Jan 2 10:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb46a8a1893abe93ed77b0c06aa840e530b0a8bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3f:16:e5:77:a5:93:b7:71:a5:b3:eb:22:4c: 4f:1a:21:52:90:69:7e:31:74:51:ed:25:27:37:a6: 06:e3:36:33:fb:48:82:d5:3a:67:da:5e:d1:89:fa: fb:08:98:0a:09:53:f8:15:b8:80:fd:fa:36:a7:ba: e3:ec:d7:6f:56:ee:46:3f:cf:de:6d:d5:bb:e6:c0: 53:fa:df:d2:9f:26:4a:2b:ba:37:ae:c4:bc:0c:52: 34:cc:f9:74:3c:9d:4a:a5:cf:db:0f:5d:fd:f6:c6: f8:b0:39:ae:7f:b5:f2:dd:9f:54:79:ba:7c:fc:51: 4f:02:25:48:57:33:c5:04:3d:36:7e:22:ca:c7:3c: b0:0b:1d:12:86:cc:ff:4e:bf:3c:40:05:a4:ec:45: ee:34:16:b5:d7:f8:8b:aa:8b:ee:86:a2:57:1b:23: bc:b2:29:29:ee:a7:19:e0:04:9d:28:e3:74:85:1b: e0:f0:6f:45:c1:17:1a:be:01:38:b9:85:4b:b7:4c: 37:0a:61:28:70:9e:12:1e:08:a1:c4:46:23:fe:6e: 61:0f:e8:9b:a8:d2:16:46:09:eb:09:dd:46:88:b1: 2c:31:44:17:9c:61:3d:37:24:02:cf:5a:77:80:06: 8a:67:d5:0a:e5:39:2c:49:10:94:86:c4:a1:f4:1c: 01:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:46:A8:A1:89:3A:BE:93:ED:77:B0:C0:6A:A8:40:E5:30:B0:A8:BF X509v3 Authority Key Identifier: keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/u0aooYk6vpPtd7DAaqhA5TCwqL8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.169.153.0/24 Signature Algorithm: sha256WithRSAEncryption 68:ae:88:cf:7d:a0:e7:11:48:5b:2c:05:e7:04:ec:1b:8b:53: c6:27:aa:09:f8:2e:9f:60:80:07:5e:1f:bd:49:5e:8d:ee:c5: 3d:96:b1:a4:6e:92:97:e1:fd:d9:67:df:40:1f:31:32:6c:c6: 1c:64:a6:57:b8:bd:02:8f:18:a0:58:4f:f1:8f:bc:34:b8:a4: 6a:b1:f1:14:c5:59:c6:32:3d:a5:49:e8:a8:be:da:3e:ee:0c: 1b:e7:dd:94:ac:db:b4:de:04:cb:4f:7b:cc:51:0f:39:1d:6f: 3a:8a:14:d2:95:6e:24:d7:bd:51:5e:2c:82:d8:4f:3f:2e:21: 94:e2:da:b1:92:24:1d:53:5e:67:b8:64:51:f7:ac:62:1b:9c: 0f:2a:d6:5c:7f:0d:df:80:78:77:1f:4a:75:28:9e:40:67:73: fd:7f:9b:65:e2:48:2b:6a:d9:b3:cc:fb:f0:68:6d:d1:ec:07: 39:44:59:56:ca:0b:c2:d5:03:3d:b4:aa:cb:d5:c8:b6:4b:01: 9f:fb:b3:a6:bd:b4:e1:6b:c6:24:4d:5f:70:75:cd:ef:1e:1f: ee:81:ef:a0:69:58:ef:14:d7:2c:a3:9c:34:61:eb:a6:d2:1f: 61:31:42:f1:92:39:21:ca:08:63:35:96:5e:9e:d6:c0:16:d1: f9:c1:30:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N97Z7rzF+iFKN3x1ugrgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx YmM3N2YwHhcNMjYwMTAyMTAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjQ2YThhMTg5M2FiZTkzZWQ3N2IwYzA2YWE4NDBlNTMwYjBhOGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj8W5Xelk7dxpbPrIkxPGiFSkGl+ MXRR7SUnN6YG4zYz+0iC1Tpn2l7Rifr7CJgKCVP4FbiA/fo2p7rj7NdvVu5GP8/e bdW75sBT+t/SnyZKK7o3rsS8DFI0zPl0PJ1Kpc/bD1399sb4sDmuf7Xy3Z9Uebp8 /FFPAiVIVzPFBD02fiLKxzywCx0Shsz/Tr88QAWk7EXuNBa11/iLqovuhqJXGyO8 sikp7qcZ4ASdKON0hRvg8G9FwRcavgE4uYVLt0w3CmEocJ4SHgihxEYj/m5hD+ib qNIWRgnrCd1GiLEsMUQXnGE9NyQCz1p3gAaKZ9UK5TksSRCUhsSh9BwB0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLtGqKGJOr6T7XewwGqoQOUwsKi/MB8GA1UdIwQY MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt YWE2ZWQ0ZGFmYjNiLzEvdTBhb29ZazZ2cFB0ZDdEQWFxaEE1VEN3cUw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPqmZMA0G CSqGSIb3DQEBCwUAA4IBAQBorojPfaDnEUhbLAXnBOwbi1PGJ6oJ+C6fYIAHXh+9 SV6N7sU9lrGkbpKX4f3ZZ99AHzEybMYcZKZXuL0CjxigWE/xj7w0uKRqsfEUxVnG Mj2lSeiovto+7gwb592UrNu03gTLT3vMUQ85HW86ihTSlW4k171RXiyC2E8/LiGU 4tqxkiQdU15nuGRR96xiG5wPKtZcfw3fgHh3H0p1KJ5AZ3P9f5tl4kgratmzzPvw aG3R7Ac5RFlWygvC1QM9tKrL1ci2SwGf+7OmvbTha8YkTV9wdc3vHh/uge+gaVjv FNcso5w0Yeum0h9hMULxkjkhyghjNZZentbAFtH5wTAA -----END CERTIFICATE-----Generated at Wed Jan 21 11:08:28 2026 by rpki-client