This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/Uh4uTq1FmEUdWP7hsXi1z1ca8so.roa File: Uh4uTq1FmEUdWP7hsXi1z1ca8so.roa (raw, json) Hash identifier: 2MKeNx3VVKWB5Bm0D78lgQPDmL1MTSmwmG6xslMz+Ew= Subject key identifier: 52:1E:2E:4E:AD:45:98:45:1D:58:FE:E1:B1:78:B5:CF:57:1A:F2:CA Certificate issuer: /CN=ffa019a5c196bbd1cc17d1a8d36c4d657f3816a0 Certificate serial: 019B7EA707537EBF7D2402AF2C6E12D59728 Authority key identifier: FF:A0:19:A5:C1:96:BB:D1:CC:17:D1:A8:D3:6C:4D:65:7F:38:16:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/Uh4uTq1FmEUdWP7hsXi1z1ca8so.roa Signing time: Fri 02 Jan 2026 12:20:34 +0000 ROA not before: Fri 02 Jan 2026 12:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203656 IP address blocks: 193.32.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.crl rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:07:53:7e:bf:7d:24:02:af:2c:6e:12:d5:97:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffa019a5c196bbd1cc17d1a8d36c4d657f3816a0 Validity Not Before: Jan 2 12:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=521e2e4ead4598451d58fee1b178b5cf571af2ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3b:bc:c7:c7:d1:fd:51:8c:f8:ef:9d:d3:b8: 0e:b6:a9:0a:fc:70:32:a6:44:81:98:bb:3c:e3:76: 49:1a:3d:d8:49:f5:3a:47:1e:b1:41:d3:ea:d1:00: a0:96:97:01:ee:5c:26:54:c3:a9:a3:35:3a:60:82: 4f:ad:57:89:02:83:56:8c:d6:c3:03:75:f0:9a:65: 9d:15:83:be:a3:7c:dd:10:5f:92:63:a1:bb:10:09: 3d:27:cc:75:9f:51:3c:3b:f4:e5:1d:f0:88:ba:41: 56:71:e7:e9:ca:01:83:f5:2c:54:2d:90:0d:b0:1c: 7c:b9:6c:4b:ef:21:e6:43:4d:da:62:8e:bd:68:c5: 99:ef:6c:9f:4c:2f:f8:53:26:ca:43:f3:2f:55:92: c6:91:ad:9b:5d:05:a3:b3:75:c8:61:bc:04:aa:59: 47:5f:20:1d:ce:3a:f1:65:6b:ef:46:87:5d:61:d4: 94:f0:c2:16:f3:e3:b2:af:35:5a:b7:74:73:c0:15: 33:a1:d8:bd:c7:ff:a9:32:37:b0:bb:d2:d6:1f:84: fc:62:57:bf:e1:24:cc:d9:fc:7d:3d:e6:54:09:e8: db:75:63:e1:cd:ff:21:da:9a:34:e4:97:c1:12:d0: d2:b8:1d:74:c7:88:b0:fd:61:ab:a5:a2:a3:ed:8f: ef:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1E:2E:4E:AD:45:98:45:1D:58:FE:E1:B1:78:B5:CF:57:1A:F2:CA X509v3 Authority Key Identifier: keyid:FF:A0:19:A5:C1:96:BB:D1:CC:17:D1:A8:D3:6C:4D:65:7F:38:16:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/Uh4uTq1FmEUdWP7hsXi1z1ca8so.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.32.115.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:9e:29:e6:ef:53:25:73:45:45:c3:8e:db:7c:8f:c5:dd:5f: 23:f1:b3:47:bf:f1:74:87:c3:56:1a:79:fb:18:ff:37:eb:2e: d0:fc:06:b0:c8:d8:d6:5e:16:5a:49:ea:41:a1:a0:ec:b0:69: 2d:aa:2d:7a:b0:ff:4e:7f:d1:62:3e:3e:e7:ea:68:ab:b7:60: dc:02:ba:a5:e6:be:4d:79:4b:d8:b8:fc:4e:be:b2:15:db:bb: d8:60:98:f5:c5:3b:60:f2:97:a4:68:95:34:c7:14:03:e3:f7: 7f:69:84:29:13:8b:5c:6d:1c:35:5a:68:c1:0c:6f:e2:ea:9e: c3:42:68:1c:fd:c5:0a:8e:01:d6:0c:14:ef:dc:31:e7:94:ab: 15:c6:b5:03:97:2a:40:a1:9f:0e:e1:02:2c:8b:7c:f4:07:40: 71:60:40:9b:5e:3f:99:08:ce:09:09:ee:91:f4:ba:ea:9a:71: 68:7e:dd:9c:c8:54:4f:84:de:8d:db:5a:fa:00:cc:68:c1:2c: 97:97:f8:65:50:35:3f:32:1d:c3:01:20:76:df:61:c1:38:4a: b6:f0:ab:88:29:2b:3e:b7:53:1c:6b:6f:16:8d:1d:e4:ef:ef: 43:f2:a4:c7:ad:b3:2a:b3:a2:63:0a:59:e1:d9:85:9d:c3:d8: 8d:9d:d5:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pwdTfr99JAKvLG4S1ZcoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYTAxOWE1YzE5NmJiZDFjYzE3ZDFhOGQzNmM0ZDY1N2Yz ODE2YTAwHhcNMjYwMTAyMTIyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjFlMmU0ZWFkNDU5ODQ1MWQ1OGZlZTFiMTc4YjVjZjU3MWFmMmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDu8x8fR/VGM+O+d07gOtqkK/HAy pkSBmLs843ZJGj3YSfU6Rx6xQdPq0QCglpcB7lwmVMOpozU6YIJPrVeJAoNWjNbD A3XwmmWdFYO+o3zdEF+SY6G7EAk9J8x1n1E8O/TlHfCIukFWcefpygGD9SxULZAN sBx8uWxL7yHmQ03aYo69aMWZ72yfTC/4UybKQ/MvVZLGka2bXQWjs3XIYbwEqllH XyAdzjrxZWvvRoddYdSU8MIW8+OyrzVat3RzwBUzodi9x/+pMjewu9LWH4T8Yle/ 4STM2fx9PeZUCejbdWPhzf8h2po05JfBEtDSuB10x4iw/WGrpaKj7Y/vEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFIeLk6tRZhFHVj+4bF4tc9XGvLKMB8GA1UdIwQY MBaAFP+gGaXBlrvRzBfRqNNsTWV/OBagMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzZBWnBjR1d1OUhNRjlHbzAyeE5aWDg0RnFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9jMDkwNWUtOTFiZC00MWIwLTlkNzct OWU1NmY5NzVkN2U2LzEvVWg0dVRxMUZtRVVkV1A3aHNYaTF6MWNhOHNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9jMDkwNWUtOTFiZC00MWIwLTlkNzctOWU1NmY5NzVkN2U2 LzEvXzZBWnBjR1d1OUhNRjlHbzAyeE5aWDg0RnFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSBzMA0G CSqGSIb3DQEBCwUAA4IBAQArninm71Mlc0VFw47bfI/F3V8j8bNHv/F0h8NWGnn7 GP836y7Q/AawyNjWXhZaSepBoaDssGktqi16sP9Of9FiPj7n6mirt2DcArql5r5N eUvYuPxOvrIV27vYYJj1xTtg8pekaJU0xxQD4/d/aYQpE4tcbRw1WmjBDG/i6p7D Qmgc/cUKjgHWDBTv3DHnlKsVxrUDlypAoZ8O4QIsi3z0B0BxYECbXj+ZCM4JCe6R 9LrqmnFoft2cyFRPhN6N21r6AMxowSyXl/hlUDU/Mh3DASB232HBOEq28KuIKSs+ t1Mca28WjR3k7+9D8qTHrbMqs6JjClnh2YWdw9iNndXD -----END CERTIFICATE-----Generated at Tue Jan 20 02:31:29 2026 by rpki-client