This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/uwfODHuSXZ-A23Wr5tmyEG0mjkI.roa File: uwfODHuSXZ-A23Wr5tmyEG0mjkI.roa (raw, json) Hash identifier: wBzrRXxWTC037AZARRRefO3kxnGzL7xL06CRAA2tkOQ= Subject key identifier: BB:07:CE:0C:7B:92:5D:9F:80:DB:75:AB:E6:D9:B2:10:6D:26:8E:42 Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f Certificate serial: 019B7EA7170C99FB05EB4B58822DD4EE9AD8 Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/uwfODHuSXZ-A23Wr5tmyEG0mjkI.roa Signing time: Fri 02 Jan 2026 12:20:38 +0000 ROA not before: Fri 02 Jan 2026 12:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44599 IP address blocks: 5.252.232.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:17:0c:99:fb:05:eb:4b:58:82:2d:d4:ee:9a:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f Validity Not Before: Jan 2 12:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb07ce0c7b925d9f80db75abe6d9b2106d268e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:88:62:ae:6c:b2:ff:7e:d3:14:55:67:e1:f2: ce:bc:21:88:d9:93:5b:d1:2f:5e:4c:c5:fa:a0:4f: 19:ad:33:4c:65:13:3e:ef:f1:b4:45:65:80:a8:c6: 3b:ae:83:ef:fd:8c:65:a7:3c:a4:6f:b6:15:72:44: 79:82:03:dd:ce:28:cc:fc:1f:6e:35:15:7b:86:e1: f2:9d:db:b9:f1:1c:22:fb:17:95:67:b6:45:41:41: 67:65:75:0b:ea:38:12:fe:cc:d2:0a:09:36:da:62: 4d:1e:31:0a:1e:e3:00:49:66:fe:29:9e:2d:fe:bc: b2:f7:4e:9e:5b:76:0b:6f:71:cc:a3:a7:ac:e0:66: ec:b6:b7:f5:f2:eb:12:16:98:64:07:9e:ba:07:48: 1a:f6:2f:a0:26:36:ee:0d:ce:58:97:3f:57:0f:3b: 83:90:4f:47:59:8b:ba:bc:98:c1:bc:a3:a8:a4:ee: 22:7f:1c:f2:49:c9:39:9a:c8:26:03:00:2b:1e:32: a6:2f:0b:61:f4:e2:d4:1c:94:49:cf:50:a1:9d:24: 73:34:db:ab:70:6e:85:c0:9c:8e:92:10:56:8d:6b: 0e:f6:a9:4c:e3:1b:83:3e:ed:de:83:60:ad:84:fc: 87:8c:b0:68:b5:f9:18:ec:b0:02:20:fe:89:6f:bd: 1d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:07:CE:0C:7B:92:5D:9F:80:DB:75:AB:E6:D9:B2:10:6D:26:8E:42 X509v3 Authority Key Identifier: keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/uwfODHuSXZ-A23Wr5tmyEG0mjkI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.232.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:5b:b7:81:8f:0e:a4:7a:31:37:09:e0:d4:73:04:41:e0:6f: eb:46:83:77:92:9f:45:88:01:c9:14:14:01:77:ad:58:07:74: b4:1e:fd:6b:d1:b0:b5:af:65:16:48:fd:56:6b:80:37:31:e2: 69:aa:49:a5:5b:19:fd:f8:01:db:60:73:87:cc:cb:ed:5f:60: 95:16:61:5a:d0:58:9f:96:4d:61:d8:49:40:64:4b:d1:1b:d1: ef:79:c1:24:ba:ab:ea:c7:f6:30:4a:83:84:c2:82:9c:ee:84: 3f:0f:fd:88:39:64:8c:43:7e:11:cf:18:5d:f5:ef:17:8d:09: dc:a6:c8:c2:9d:48:6b:cc:9c:f9:13:67:be:c8:8a:54:d5:61: a4:9f:a5:f8:63:a0:4d:4b:d9:cc:bb:d2:92:aa:d5:44:dd:1e: a5:a7:ea:8c:16:05:28:b6:11:51:e3:61:6a:a4:5a:82:9b:a1: 91:c7:13:7f:34:1b:69:50:6d:12:e4:c3:14:c0:be:fc:ad:03: a8:f7:fc:d0:37:8b:13:9d:b7:ce:81:dc:b2:08:28:af:32:58: a2:a0:87:98:b3:21:f1:30:7b:10:12:8c:0f:f5:35:6a:a1:b5: 6a:81:9e:7d:cd:0a:db:3e:e9:25:69:6e:ed:6d:fc:de:de:cb: aa:b3:2b:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pxcMmfsF60tYgi3U7prYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm YzAyNWYwHhcNMjYwMTAyMTIyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjA3Y2UwYzdiOTI1ZDlmODBkYjc1YWJlNmQ5YjIxMDZkMjY4ZTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsohirmyy/37TFFVn4fLOvCGI2ZNb 0S9eTMX6oE8ZrTNMZRM+7/G0RWWAqMY7roPv/Yxlpzykb7YVckR5ggPdzijM/B9u NRV7huHyndu58Rwi+xeVZ7ZFQUFnZXUL6jgS/szSCgk22mJNHjEKHuMASWb+KZ4t /ryy906eW3YLb3HMo6es4Gbstrf18usSFphkB566B0ga9i+gJjbuDc5Ylz9XDzuD kE9HWYu6vJjBvKOopO4ifxzySck5msgmAwArHjKmLwth9OLUHJRJz1ChnSRzNNur cG6FwJyOkhBWjWsO9qlM4xuDPu3eg2CthPyHjLBotfkY7LACIP6Jb70dDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLsHzgx7kl2fgNt1q+bZshBtJo5CMB8GA1UdIwQY MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt NzBlODk4YmIzOGRkLzEvdXdmT0RIdVNYWi1BMjNXcjV0bXlFRzBtamtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBfzoMA0G CSqGSIb3DQEBCwUAA4IBAQA6W7eBjw6kejE3CeDUcwRB4G/rRoN3kp9FiAHJFBQB d61YB3S0Hv1r0bC1r2UWSP1Wa4A3MeJpqkmlWxn9+AHbYHOHzMvtX2CVFmFa0Fif lk1h2ElAZEvRG9HvecEkuqvqx/YwSoOEwoKc7oQ/D/2IOWSMQ34Rzxhd9e8XjQnc psjCnUhrzJz5E2e+yIpU1WGkn6X4Y6BNS9nMu9KSqtVE3R6lp+qMFgUothFR42Fq pFqCm6GRxxN/NBtpUG0S5MMUwL78rQOo9/zQN4sTnbfOgdyyCCivMliioIeYsyHx MHsQEowP9TVqobVqgZ59zQrbPuklaW7tbfze3suqsytB -----END CERTIFICATE-----Generated at Wed Jan 21 12:19:14 2026 by rpki-client