This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/uJRDK81LaOJPqwaMH3aOr8mzVc0.roa File: uJRDK81LaOJPqwaMH3aOr8mzVc0.roa (raw, json) Hash identifier: kDLHQO0Rz/R4i/HPTjDis1WgRXCxP6QcVEL1nIljmbc= Subject key identifier: B8:94:43:2B:CD:4B:68:E2:4F:AB:06:8C:1F:76:8E:AF:C9:B3:55:CD Certificate issuer: /CN=00adba4b4074de13d98d64819a6ec85f812a79e9 Certificate serial: 019B7C80CB4C21A0564F930A769006A9547A Authority key identifier: 00:AD:BA:4B:40:74:DE:13:D9:8D:64:81:9A:6E:C8:5F:81:2A:79:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/uJRDK81LaOJPqwaMH3aOr8mzVc0.roa Signing time: Fri 02 Jan 2026 02:19:34 +0000 ROA not before: Fri 02 Jan 2026 02:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48608 IP address blocks: 46.34.96.0/19 maxlen: 19 46.34.96.0/20 maxlen: 20 46.34.96.0/21 maxlen: 21 46.34.104.0/21 maxlen: 21 46.34.112.0/20 maxlen: 20 46.34.112.0/21 maxlen: 21 46.34.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.crl rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:cb:4c:21:a0:56:4f:93:0a:76:90:06:a9:54:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00adba4b4074de13d98d64819a6ec85f812a79e9 Validity Not Before: Jan 2 02:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b894432bcd4b68e24fab068c1f768eafc9b355cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f1:fd:e8:ef:6d:b4:f1:66:87:1c:03:4b:7d: e0:9b:9f:c9:44:3a:e8:dd:3a:5f:93:28:12:8a:57: 68:20:87:c2:6c:4e:05:cc:ec:ac:df:84:9c:76:ae: 09:71:e1:c2:a1:0a:9d:77:8f:1d:ce:b9:b9:c9:72: 8e:f9:a3:0a:bf:61:b6:e7:c3:66:cb:25:13:36:6f: 60:a5:52:1c:77:36:57:d0:dc:31:7e:31:b4:4e:f0: 94:97:a5:59:f9:06:07:47:2a:24:eb:39:e2:89:26: a6:0b:87:ed:48:04:92:fd:3a:43:4c:d9:79:85:af: e4:a6:ca:ce:33:20:e1:a0:a9:5c:90:03:fc:6a:a9: f4:0b:d8:23:4b:52:40:f8:67:f6:b8:dc:0f:05:e0: a9:69:42:1b:16:16:b7:78:5e:a5:c4:f4:b4:4f:12: c9:e9:bb:38:c8:93:fc:d5:fc:e6:83:f7:ad:97:63: 8a:e1:a1:ed:e0:38:cd:99:b2:05:bc:5f:46:70:21: 49:4e:a9:ba:ad:28:e6:53:de:92:86:b4:97:d1:f8: 05:62:8f:f6:8d:82:97:90:4c:44:95:9f:2f:00:5f: 9f:84:46:b6:19:bb:18:b9:fb:3a:66:ea:1b:b5:74: 4c:d1:93:57:7d:9c:c8:41:2d:41:99:ca:a6:67:6d: d5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:94:43:2B:CD:4B:68:E2:4F:AB:06:8C:1F:76:8E:AF:C9:B3:55:CD X509v3 Authority Key Identifier: keyid:00:AD:BA:4B:40:74:DE:13:D9:8D:64:81:9A:6E:C8:5F:81:2A:79:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/uJRDK81LaOJPqwaMH3aOr8mzVc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.34.96.0/19 Signature Algorithm: sha256WithRSAEncryption 0b:60:de:30:0a:fa:33:09:43:8e:25:42:6a:7b:0a:a2:e8:a6: 0d:24:c9:73:de:2f:87:3a:4d:f4:74:95:2f:b1:d6:23:ed:7b: 0a:42:9e:9a:c8:86:4b:b4:93:4f:49:db:b1:fc:ec:b9:78:5d: fc:9a:4a:a2:f1:4b:94:3d:d5:6b:a2:b8:9c:58:99:fe:a5:bd: 24:25:8d:4a:32:e9:79:2e:10:ed:bb:b3:ee:e7:a9:fa:57:89: cc:57:09:43:70:9b:e9:67:fc:df:89:b9:96:9c:d1:1e:d8:60: eb:08:90:84:0e:57:7d:b1:bd:12:7e:8f:af:1f:4c:5e:6b:ac: a5:93:4a:62:3a:fa:bc:8b:55:07:ea:6d:15:a8:3f:59:3a:df: 86:2f:dd:f8:ac:43:cb:95:50:40:aa:f1:4a:86:06:ba:e8:8f: a2:da:31:22:66:eb:66:8c:77:b5:a4:03:2d:3e:ce:1b:95:f2: bb:49:43:09:4c:94:65:2d:5c:79:1b:dc:0f:72:d5:3e:7b:16: d5:c5:54:9e:11:e8:82:7c:92:5f:93:33:a6:05:d4:7f:00:4d: 61:0b:57:eb:65:30:95:0c:4f:a3:1b:ba:60:c4:8a:1a:94:91: a0:e6:82:c9:66:5e:1d:19:ba:f1:e9:33:e1:af:cd:eb:17:59: 6d:aa:d3:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gMtMIaBWT5MKdpAGqVR6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwYWRiYTRiNDA3NGRlMTNkOThkNjQ4MTlhNmVjODVmODEy YTc5ZTkwHhcNMjYwMTAyMDIxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODk0NDMyYmNkNGI2OGUyNGZhYjA2OGMxZjc2OGVhZmM5YjM1NWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PH96O9ttPFmhxwDS33gm5/JRDro 3TpfkygSildoIIfCbE4FzOys34Scdq4JceHCoQqdd48dzrm5yXKO+aMKv2G258Nm yyUTNm9gpVIcdzZX0NwxfjG0TvCUl6VZ+QYHRyok6zniiSamC4ftSASS/TpDTNl5 ha/kpsrOMyDhoKlckAP8aqn0C9gjS1JA+Gf2uNwPBeCpaUIbFha3eF6lxPS0TxLJ 6bs4yJP81fzmg/etl2OK4aHt4DjNmbIFvF9GcCFJTqm6rSjmU96ShrSX0fgFYo/2 jYKXkExElZ8vAF+fhEa2GbsYufs6ZuobtXRM0ZNXfZzIQS1BmcqmZ23VnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLiUQyvNS2jiT6sGjB92jq/Js1XNMB8GA1UdIwQY MBaAFACtuktAdN4T2Y1kgZpuyF+BKnnpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUsyNlMwQjAzaFBaaldTQm1tN0lYNEVxZWVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMTRhMGYtYzFkMi00MzRjLTg3MWUt YjM4OTViOTYyYzUyLzEvdUpSREs4MUxhT0pQcXdhTUgzYU9yOG16VmMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zMTRhMGYtYzFkMi00MzRjLTg3MWUtYjM4OTViOTYyYzUy LzEvQUsyNlMwQjAzaFBaaldTQm1tN0lYNEVxZWVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLiJgMA0G CSqGSIb3DQEBCwUAA4IBAQALYN4wCvozCUOOJUJqewqi6KYNJMlz3i+HOk30dJUv sdYj7XsKQp6ayIZLtJNPSdux/Oy5eF38mkqi8UuUPdVroricWJn+pb0kJY1KMul5 LhDtu7Pu56n6V4nMVwlDcJvpZ/zfibmWnNEe2GDrCJCEDld9sb0Sfo+vH0xea6yl k0piOvq8i1UH6m0VqD9ZOt+GL934rEPLlVBAqvFKhga66I+i2jEiZutmjHe1pAMt Ps4blfK7SUMJTJRlLVx5G9wPctU+exbVxVSeEeiCfJJfkzOmBdR/AE1hC1frZTCV DE+jG7pgxIoalJGg5oLJZl4dGbrx6TPhr83rF1ltqtOa -----END CERTIFICATE-----Generated at Mon Feb 9 22:24:18 2026 by rpki-client