This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ugHbkmXdGua5f0y0Vs2Xemi0uH0.roa File: ugHbkmXdGua5f0y0Vs2Xemi0uH0.roa (raw, json) Hash identifier: pZtYRYjW92Xkn2YfI/y6vsMVwr2lyxUOL1/g29RbFzs= Subject key identifier: BA:01:DB:92:65:DD:1A:E6:B9:7F:4C:B4:56:CD:97:7A:68:B4:B8:7D Certificate issuer: /CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa Certificate serial: 019B77593309ED940BBFD0567806C14D066D Authority key identifier: A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ugHbkmXdGua5f0y0Vs2Xemi0uH0.roa Signing time: Thu 01 Jan 2026 02:18:13 +0000 ROA not before: Thu 01 Jan 2026 02:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207063 IP address blocks: 193.177.128.0/22 maxlen: 24 193.177.128.0/24 maxlen: 24 193.177.129.0/24 maxlen: 24 2a0c:dec0::/29 maxlen: 48 2a0c:dec0:3008::/48 maxlen: 48 2a0c:dec0:f100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:33:09:ed:94:0b:bf:d0:56:78:06:c1:4d:06:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa Validity Not Before: Jan 1 02:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba01db9265dd1ae6b97f4cb456cd977a68b4b87d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b0:0f:17:35:69:0a:da:e2:1f:76:a9:25:cc: 94:3c:94:81:9b:4b:6a:c6:82:82:2b:86:f2:6a:8f: 1e:b9:44:d5:3e:cd:aa:d8:37:2f:99:13:df:2c:3a: 67:32:69:4a:db:52:2f:54:1c:04:98:8d:6a:5e:69: 13:c3:4a:25:ad:6a:5b:64:3c:d3:68:f5:ad:50:26: 40:a6:8f:96:0c:b6:b2:1c:9d:28:a1:c9:21:bc:41: 7d:83:8e:0f:5f:80:aa:35:60:fb:dc:23:87:e0:86: b5:82:b0:0b:7d:00:80:77:85:cc:28:d4:65:07:ef: fc:aa:5f:24:7a:3b:c4:f7:ed:f8:86:cd:ba:47:2a: 4e:df:f4:88:57:37:3f:fa:5b:0c:5d:99:34:9d:16: aa:f8:49:44:1c:e2:38:53:b2:2d:8e:65:82:1e:9e: cf:6c:ac:ee:87:79:83:f2:47:8f:cd:4a:4f:5d:66: 34:aa:74:dc:27:69:de:d3:6e:34:de:40:0e:13:83: 7a:94:c0:78:5a:e8:b9:f2:32:a7:4f:ed:cf:91:a0: 64:ae:69:01:74:ef:58:0f:7b:dc:5f:65:bf:61:2c: c6:bd:f0:67:9f:44:6a:4e:02:6e:89:3e:11:eb:af: 25:d2:35:90:2c:43:8c:83:2e:ed:41:6d:2f:27:9c: 35:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:01:DB:92:65:DD:1A:E6:B9:7F:4C:B4:56:CD:97:7A:68:B4:B8:7D X509v3 Authority Key Identifier: keyid:A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ugHbkmXdGua5f0y0Vs2Xemi0uH0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.177.128.0/22 IPv6: 2a0c:dec0::/29 Signature Algorithm: sha256WithRSAEncryption 4d:2d:9a:bc:f0:fc:d3:c8:fe:61:c0:d9:6b:d9:ea:f5:54:2f: 83:d3:f8:24:00:e2:7b:d7:77:4e:50:66:5e:95:2d:79:67:88: d7:15:ef:6b:b1:e8:a0:82:42:3b:4a:1c:07:2f:05:99:25:df: 36:f8:e4:71:dc:7e:cc:9c:1b:cd:a4:30:bb:71:13:82:7d:3a: a9:4d:26:8d:e0:1d:99:c3:de:a5:a3:07:4b:40:56:a3:64:6a: 35:a9:19:2b:4a:9b:57:8d:7e:20:67:45:20:aa:ce:a2:52:ab: da:39:0e:78:d6:a7:60:5e:4d:fc:8b:1e:cf:a2:4b:dd:a0:9d: 37:3c:3d:d0:d3:08:ea:9a:f7:11:b0:b6:aa:b6:40:0a:ae:ba: ed:30:68:bb:59:2a:6f:6a:4c:eb:46:3a:cd:8d:3f:b9:3b:63: ec:4b:03:72:3f:3a:83:ab:c9:96:87:0c:f4:03:02:e4:11:f5: 4a:c0:0f:43:bf:7f:7c:53:5c:8e:47:a7:44:9f:c6:c9:80:42: 34:4f:42:07:9e:78:55:d0:e6:83:f2:91:b7:b3:11:58:d1:46: 40:77:67:0b:f0:4e:72:92:b6:b6:52:34:3d:44:87:96:71:23: 83:ab:2a:93:b7:d2:3b:f7:3c:ad:e7:72:9f:ef:d9:20:f1:b9: a8:29:3c:05 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WTMJ7ZQLv9BWeAbBTQZtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMGY2ZmI2ZjVjODBjYTRhNjAzODI3Yzk2YjNiZGY2MGFk NTYzYWEwHhcNMjYwMTAxMDIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTAxZGI5MjY1ZGQxYWU2Yjk3ZjRjYjQ1NmNkOTc3YTY4YjRiODdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubAPFzVpCtriH3apJcyUPJSBm0tq xoKCK4byao8euUTVPs2q2DcvmRPfLDpnMmlK21IvVBwEmI1qXmkTw0olrWpbZDzT aPWtUCZApo+WDLayHJ0oockhvEF9g44PX4CqNWD73COH4Ia1grALfQCAd4XMKNRl B+/8ql8kejvE9+34hs26RypO3/SIVzc/+lsMXZk0nRaq+ElEHOI4U7ItjmWCHp7P bKzuh3mD8kePzUpPXWY0qnTcJ2ne02403kAOE4N6lMB4Wui58jKnT+3PkaBkrmkB dO9YD3vcX2W/YSzGvfBnn0RqTgJuiT4R668l0jWQLEOMgy7tQW0vJ5w1sQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLoB25Jl3RrmuX9MtFbNl3potLh9MB8GA1UdIwQY MBaAFKMPb7b1yAykpgOCfJazvfYK1WOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3c5dnR2WElES1NtQTRKOGxyTzk5Z3JWWTZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kN2U2NjgtZjA3ZS00MzhiLTlmYTgt ODBhYjc3OWVlZDEwLzEvdWdIYmttWGRHdWE1ZjB5MFZzMlhlbWkwdUgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9kN2U2NjgtZjA3ZS00MzhiLTlmYTgtODBhYjc3OWVlZDEw LzEvb3c5dnR2WElES1NtQTRKOGxyTzk5Z3JWWTZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwbGAMA0E AgACMAcDBQMqDN7AMA0GCSqGSIb3DQEBCwUAA4IBAQBNLZq88PzTyP5hwNlr2er1 VC+D0/gkAOJ713dOUGZelS15Z4jXFe9rseiggkI7ShwHLwWZJd82+ORx3H7MnBvN pDC7cROCfTqpTSaN4B2Zw96lowdLQFajZGo1qRkrSptXjX4gZ0Ugqs6iUqvaOQ54 1qdgXk38ix7PokvdoJ03PD3Q0wjqmvcRsLaqtkAKrrrtMGi7WSpvakzrRjrNjT+5 O2PsSwNyPzqDq8mWhwz0AwLkEfVKwA9Dv398U1yOR6dEn8bJgEI0T0IHnnhV0OaD 8pG3sxFY0UZAd2cL8E5ykra2UjQ9RIeWcSODqyqTt9I79zyt53Kf79kg8bmoKTwF -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:54 2026 by rpki-client