This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UeCq7M7DnZBKksC9yMZyobwrfgI.roa File: UeCq7M7DnZBKksC9yMZyobwrfgI.roa (raw, json) Hash identifier: 8qWC45ZHazQFS4hBkj7jEVu+N+NId1YH6De4c9WE/mU= Subject key identifier: 51:E0:AA:EC:CE:C3:9D:90:4A:92:C0:BD:C8:C6:72:A1:BC:2B:7E:02 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797E10BC93F22C849B750B9851F77BAE Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UeCq7M7DnZBKksC9yMZyobwrfgI.roa Signing time: Thu 01 Jan 2026 12:17:43 +0000 ROA not before: Thu 01 Jan 2026 12:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400950 IP address blocks: 212.192.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:10:bc:93:f2:2c:84:9b:75:0b:98:51:f7:7b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51e0aaeccec39d904a92c0bdc8c672a1bc2b7e02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:65:45:4d:8f:1e:68:e0:58:40:70:52:b9:f7: ca:d0:6b:c3:9b:87:6c:1f:80:7f:a2:d1:42:d0:4d: 9d:7e:22:e6:af:56:69:83:ac:7c:80:b7:42:4b:b1: 50:11:35:93:77:bb:68:b2:71:07:39:4d:17:f5:1a: 1e:f3:d4:61:2b:f3:ff:97:84:bf:be:3b:71:79:1d: 22:a7:34:1f:25:15:61:9f:d7:3d:2f:02:cc:78:e6: d9:1a:78:71:fb:4f:71:67:95:53:39:ca:72:15:4f: 6f:a9:24:f8:5d:39:27:ef:01:4c:dd:1a:f5:18:70: ca:cc:84:ce:34:66:2d:7b:6c:8f:71:3e:c0:a3:ec: 42:d6:63:63:08:14:d4:5f:f2:cf:ad:66:d5:25:96: f3:91:55:58:a6:7f:cc:8b:d8:15:53:f8:f6:5f:da: 77:62:fb:8a:89:e0:07:bb:44:51:32:af:40:3c:6c: a3:20:ca:ef:c7:14:4f:a6:d0:0c:5e:b0:a6:54:90: 4d:e2:49:c8:69:e5:c3:30:b0:29:5d:89:33:84:b2: c0:ce:f6:8a:6c:e0:23:04:75:a9:e6:59:0b:1c:95: 33:16:db:74:20:4f:ea:fa:76:b7:05:bd:c5:63:eb: 8b:1f:9e:60:62:80:8d:51:5a:3b:2c:eb:d9:f1:d2: c4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E0:AA:EC:CE:C3:9D:90:4A:92:C0:BD:C8:C6:72:A1:BC:2B:7E:02 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UeCq7M7DnZBKksC9yMZyobwrfgI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.192.209.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:b6:6a:34:cf:3d:d7:3d:fe:02:10:58:a9:e9:12:97:18:1d: f7:61:1f:35:c5:b9:a5:0c:22:bf:30:0c:14:ef:90:0a:7b:e9: 82:3c:e0:bc:a1:b9:b3:48:75:1b:9a:fb:88:2d:8f:40:99:2d: 69:55:6a:04:b1:3a:ec:32:a4:cc:6e:5e:a1:a8:56:2a:2b:7f: 58:6f:bf:8f:38:fd:e9:dc:7f:09:40:a1:40:e8:ed:78:a2:d0: 22:49:b1:78:1a:8c:37:f4:b4:94:3b:16:e5:14:20:10:e1:f4: a6:e3:2a:7d:e3:81:cf:49:e8:7d:c7:c0:e5:3f:40:7d:f4:90: 77:8b:cb:c9:8f:ec:0b:70:98:1b:c3:cd:57:a8:ff:1f:06:26: 1d:2e:fb:f9:7c:eb:6a:42:ae:ca:e3:20:5a:fa:1a:8c:c7:06: 5c:2e:d7:57:83:59:5f:7b:cc:38:5e:87:5b:e9:44:d2:0c:99: 04:1c:c1:03:a3:02:40:41:22:f9:76:0e:c2:e7:e8:1f:57:a8: 01:51:f1:37:83:0d:07:75:2d:f3:d8:d7:c1:4f:a3:b1:db:09: fc:a1:83:2f:e9:88:55:b9:8b:85:0a:97:2b:52:ac:d6:b3:b7: 8d:b7:00:a6:d1:37:cd:f2:84:07:9f:5f:5a:c9:c7:86:79:e9: 2a:61:a6:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fhC8k/IshJt1C5hR93uuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWUwYWFlY2NlYzM5ZDkwNGE5MmMwYmRjOGM2NzJhMWJjMmI3ZTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GVFTY8eaOBYQHBSuffK0GvDm4ds H4B/otFC0E2dfiLmr1Zpg6x8gLdCS7FQETWTd7tosnEHOU0X9Roe89RhK/P/l4S/ vjtxeR0ipzQfJRVhn9c9LwLMeObZGnhx+09xZ5VTOcpyFU9vqST4XTkn7wFM3Rr1 GHDKzITONGYte2yPcT7Ao+xC1mNjCBTUX/LPrWbVJZbzkVVYpn/Mi9gVU/j2X9p3 YvuKieAHu0RRMq9APGyjIMrvxxRPptAMXrCmVJBN4knIaeXDMLApXYkzhLLAzvaK bOAjBHWp5lkLHJUzFtt0IE/q+na3Bb3FY+uLH55gYoCNUVo7LOvZ8dLEYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFHgquzOw52QSpLAvcjGcqG8K34CMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvVWVDcTdNN0RuWkJLa3NDOXlNWnlvYndyZmdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1MDRMA0G CSqGSIb3DQEBCwUAA4IBAQA/tmo0zz3XPf4CEFip6RKXGB33YR81xbmlDCK/MAwU 75AKe+mCPOC8obmzSHUbmvuILY9AmS1pVWoEsTrsMqTMbl6hqFYqK39Yb7+POP3p 3H8JQKFA6O14otAiSbF4Gow39LSUOxblFCAQ4fSm4yp944HPSeh9x8DlP0B99JB3 i8vJj+wLcJgbw81XqP8fBiYdLvv5fOtqQq7K4yBa+hqMxwZcLtdXg1lfe8w4Xodb 6UTSDJkEHMEDowJAQSL5dg7C5+gfV6gBUfE3gw0HdS3z2NfBT6Ox2wn8oYMv6YhV uYuFCpcrUqzWs7eNtwCm0TfN8oQHn19ayceGeekqYaZA -----END CERTIFICATE-----Generated at Mon Jan 19 14:39:46 2026 by rpki-client