This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/uC5G2J1uFoQpbj52LY6UceHLpew.roa File: uC5G2J1uFoQpbj52LY6UceHLpew.roa (raw, json) Hash identifier: RgVFYrDjA/OnL5fjqz7JnHmRDhJzD4i7HvU2sqRJEzE= Subject key identifier: B8:2E:46:D8:9D:6E:16:84:29:6E:3E:76:2D:8E:94:71:E1:CB:A5:EC Certificate issuer: /CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566 Certificate serial: 019B77C741CDE9A10F5F127836E94A9D37AB Authority key identifier: AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/uC5G2J1uFoQpbj52LY6UceHLpew.roa Signing time: Thu 01 Jan 2026 04:18:25 +0000 ROA not before: Thu 01 Jan 2026 04:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212318 IP address blocks: 88.218.112.0/22 maxlen: 24 93.179.88.0/22 maxlen: 24 178.57.65.0/24 maxlen: 24 178.57.66.0/23 maxlen: 24 178.57.68.0/24 maxlen: 24 185.217.37.0/24 maxlen: 24 2a0f:52c1::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:41:cd:e9:a1:0f:5f:12:78:36:e9:4a:9d:37:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566 Validity Not Before: Jan 1 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b82e46d89d6e1684296e3e762d8e9471e1cba5ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:83:c1:a3:cd:40:93:36:c9:44:e9:65:cb:7d: 13:7b:06:8c:a8:f0:bb:0f:9c:41:88:4a:3f:e6:72: e8:72:2b:2b:63:cd:c2:1f:65:86:b0:81:f5:22:1c: de:8e:99:54:0b:5a:cb:f2:a6:a5:ac:28:40:ca:f0: 80:13:49:94:50:46:3e:85:68:4e:3d:56:ce:6e:89: 96:5f:ee:de:7f:89:84:93:e4:8a:76:23:10:37:ba: ed:7c:cf:a7:d9:b9:54:60:10:71:2b:4e:79:0d:65: 58:aa:68:0b:98:7b:22:16:81:86:c2:22:11:46:d1: 36:34:38:0c:c1:bd:75:5f:e1:fd:e4:2d:60:f0:72: 3f:c7:79:a5:1a:ec:f8:a1:6b:ec:9f:1e:8a:b6:c3: 90:9a:2d:25:58:c6:84:f2:9e:6c:4a:58:1d:32:61: f1:ef:65:9c:1a:45:d5:1b:f4:b1:b5:b8:59:68:19: 63:b7:5f:26:34:2a:e3:34:a0:ed:b0:c8:2c:a1:12: 68:23:8c:b3:3e:b3:a1:9d:03:4d:7d:18:5a:dd:f8: 78:4f:73:07:96:de:cb:73:e8:1c:01:08:c1:8e:47: 61:26:c3:d8:26:aa:de:cc:b7:fa:34:47:3c:e7:e7: 4e:15:72:b8:dd:87:e0:56:1c:a9:fc:68:a0:b6:8a: 84:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:2E:46:D8:9D:6E:16:84:29:6E:3E:76:2D:8E:94:71:E1:CB:A5:EC X509v3 Authority Key Identifier: keyid:AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/uC5G2J1uFoQpbj52LY6UceHLpew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.218.112.0/22 93.179.88.0/22 178.57.65.0-178.57.68.255 185.217.37.0/24 IPv6: 2a0f:52c1::/46 Signature Algorithm: sha256WithRSAEncryption a3:e4:e3:e0:67:5e:a8:74:d0:d8:3b:76:50:92:80:9d:ca:cf: d0:71:8f:58:ed:5f:fb:95:92:07:1b:11:5f:c1:82:9b:1f:6a: 10:89:30:fb:46:c6:22:27:93:e7:c8:4d:37:da:12:53:81:3f: 3d:c5:23:a2:c8:27:43:11:95:43:b1:65:8f:31:d6:a8:41:bf: c3:66:cc:71:08:35:81:d6:b3:1b:63:14:dd:f7:fd:90:63:ad: 6c:72:de:cc:11:8f:a4:ef:6e:14:e2:14:b9:e2:aa:24:4d:68: cd:10:e0:41:b9:ce:b8:71:da:34:14:cf:a0:f3:54:32:b4:db: f1:c7:97:d1:c3:a3:a1:d5:c5:5d:eb:74:1b:ab:93:a7:07:b4: 4c:aa:92:e9:de:d8:81:7c:4f:9d:54:21:7c:33:a2:a1:12:ba: b4:dd:d6:86:7e:27:93:c2:bc:53:e6:54:1c:9f:39:62:2f:5b: 75:64:29:4c:ef:77:c9:71:a1:17:92:31:ab:7c:1c:b4:5f:3f: 6d:5d:0f:dd:25:26:65:25:bd:a7:79:fb:d8:34:c4:30:51:a5: 6d:50:30:3e:d3:03:5b:b5:fa:7a:d2:d8:97:60:eb:86:29:f3: a6:f5:32:95:e5:42:20:c7:e6:b9:b4:1d:8e:e4:a4:30:7a:c7: 69:d8:95:48 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgISAZt3x0HN6aEPXxJ4NulKnTerMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiN2FhYWJiMjNjZDI0NWJmYTgyOGZiMDI1MjFkNjQ0YzZk NWI1NjYwHhcNMjYwMTAxMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODJlNDZkODlkNmUxNjg0Mjk2ZTNlNzYyZDhlOTQ3MWUxY2JhNWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooPBo81AkzbJROlly30TewaMqPC7 D5xBiEo/5nLocisrY83CH2WGsIH1IhzejplUC1rL8qalrChAyvCAE0mUUEY+hWhO PVbObomWX+7ef4mEk+SKdiMQN7rtfM+n2blUYBBxK055DWVYqmgLmHsiFoGGwiIR RtE2NDgMwb11X+H95C1g8HI/x3mlGuz4oWvsnx6KtsOQmi0lWMaE8p5sSlgdMmHx 72WcGkXVG/SxtbhZaBljt18mNCrjNKDtsMgsoRJoI4yzPrOhnQNNfRha3fh4T3MH lt7Lc+gcAQjBjkdhJsPYJqrezLf6NEc85+dOFXK43YfgVhyp/GigtoqEjQIDAQAB o4ICNDCCAjAwHQYDVR0OBBYEFLguRtidbhaEKW4+di2OlHHhy6XsMB8GA1UdIwQY MBaAFKt6qrsjzSRb+oKPsCUh1kTG1bVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTNxcXV5UE5KRnY2Z28td0pTSFdSTWJWdFdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS80NmRlYzUtYzM4ZC00YzFkLTljZWMt OWVhZDgxZGEyZTQ0LzEvdUM1RzJKMXVGb1FwYmo1MkxZNlVjZUhMcGV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS80NmRlYzUtYzM4ZC00YzFkLTljZWMtOWVhZDgxZGEyZTQ0 LzEvcTNxcXV5UE5KRnY2Z28td0pTSFdSTWJWdFdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAmBAIAATAgAwQCWNpwAwQC XbNYMAwDBACyOUEDBACyOUQDBAC52SUwDwQCAAIwCQMHAioPUsEAADANBgkqhkiG 9w0BAQsFAAOCAQEAo+Tj4GdeqHTQ2Dt2UJKAncrP0HGPWO1f+5WSBxsRX8GCmx9q EIkw+0bGIieT58hNN9oSU4E/PcUjosgnQxGVQ7FljzHWqEG/w2bMcQg1gdazG2MU 3ff9kGOtbHLezBGPpO9uFOIUueKqJE1ozRDgQbnOuHHaNBTPoPNUMrTb8ceX0cOj odXFXet0G6uTpwe0TKqS6d7YgXxPnVQhfDOioRK6tN3Whn4nk8K8U+ZUHJ85Yi9b dWQpTO93yXGhF5Ixq3wctF8/bV0P3SUmZSW9p3n72DTEMFGlbVAwPtMDW7X6etLY l2DrhinzpvUyleVCIMfmubQdjuSkMHrHadiVSA== -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:19 2026 by rpki-client