This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/uWjzpGpmdiGDuOP3RuF3k0JpRzI.roa File: uWjzpGpmdiGDuOP3RuF3k0JpRzI.roa (raw, json) Hash identifier: feZaV8ykSWDhxYFCGXR1xId5z2ls9ece6Z9cvczsEoE= Subject key identifier: B9:68:F3:A4:6A:66:76:21:83:B8:E3:F7:46:E1:77:93:42:69:47:32 Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Certificate serial: 019B7CEE32238E2F1DFE3A4A4C53C396047A Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/uWjzpGpmdiGDuOP3RuF3k0JpRzI.roa Signing time: Fri 02 Jan 2026 04:19:03 +0000 ROA not before: Fri 02 Jan 2026 04:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5065 IP address blocks: 130.255.68.0/22 maxlen: 24 188.215.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:32:23:8e:2f:1d:fe:3a:4a:4c:53:c3:96:04:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Validity Not Before: Jan 2 04:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b968f3a46a66762183b8e3f746e1779342694732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f8:40:74:53:07:37:4d:7b:92:25:87:22:5a: d7:4e:dd:d5:3f:84:9a:00:2a:16:bd:14:94:73:9f: d1:33:cd:5c:13:31:d1:0f:df:77:66:e1:cb:62:ff: bc:73:7e:f5:09:86:b0:75:ef:29:0c:a0:69:9d:28: ad:8f:4a:80:b3:01:6c:56:77:f8:32:fc:8c:73:5c: 49:c5:c4:71:f1:72:27:73:5e:5e:97:c0:d1:62:af: 75:b4:2f:4b:04:b5:05:51:e4:41:12:86:12:b5:9c: 5a:8f:15:86:04:45:0a:b6:37:28:69:99:1d:bb:66: 30:0d:25:23:10:d3:3a:01:5c:55:df:29:cb:c7:ec: 1c:46:8a:b4:8f:03:79:a5:80:12:fe:65:74:9d:19: b8:49:29:88:d9:08:8b:11:68:4b:b5:f9:95:76:e6: 62:5f:11:a0:9c:1b:f1:4e:37:2a:bd:00:a0:aa:f1: 87:3c:43:87:7d:d3:69:c0:b6:e3:80:8d:6f:14:a7: 26:36:93:9d:de:9a:dc:a0:b8:5d:9b:f4:ec:3a:67: c6:20:2a:f6:b4:96:2f:16:bc:aa:5f:ec:a1:e7:b5: 3d:80:22:76:12:69:e3:29:0c:68:48:70:57:bc:e6: 2a:0d:01:82:d3:9b:9f:22:fe:4d:03:43:00:a6:c2: 66:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:68:F3:A4:6A:66:76:21:83:B8:E3:F7:46:E1:77:93:42:69:47:32 X509v3 Authority Key Identifier: keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/uWjzpGpmdiGDuOP3RuF3k0JpRzI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.255.68.0/22 188.215.120.0/22 Signature Algorithm: sha256WithRSAEncryption 69:a4:a7:34:29:bf:7e:e1:08:ea:6c:7c:c8:73:0c:e6:82:04: 09:bd:f4:e5:0b:23:7f:7b:00:17:c7:41:17:55:36:7c:16:d5: e6:d1:03:43:14:b6:fc:1d:ff:55:fe:f4:0e:29:d9:50:9b:62: 2d:a4:29:f9:b9:f6:3e:96:f0:2a:4a:4d:c0:c0:5d:e6:d5:5b: ca:4f:9b:97:46:b5:81:4c:9c:81:fb:a4:c9:e5:6d:09:32:11: 6d:78:8d:2a:d1:de:19:2c:95:a9:39:7c:63:e9:46:59:9d:f2: c0:02:b4:50:86:74:3d:3f:94:cb:83:49:a8:ea:bc:98:88:39: 10:9c:70:05:e1:76:49:45:1d:fe:53:b0:19:85:dd:ec:46:8c: 28:c5:c7:ba:82:61:18:95:d8:8b:a1:3f:a3:c2:d1:ed:a6:f6: 6d:cc:44:f8:a0:f9:c3:71:6d:f9:58:52:94:a0:96:08:bd:da: 69:f4:20:76:6c:8d:b2:88:02:2c:36:a8:d3:07:81:81:34:73: e1:e7:5e:c3:3b:24:9e:8c:55:29:23:fa:ad:62:68:7a:b9:85: 77:34:b2:82:c7:a8:4f:e5:51:a1:bb:85:a1:0c:1f:b2:ab:b5: ff:69:1b:13:23:d4:a0:fa:07:7e:4a:37:4b:81:bb:44:24:5b: 3d:d6:55:92 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87jIjji8d/jpKTFPDlgR6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2 N2IxZTQwHhcNMjYwMTAyMDQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTY4ZjNhNDZhNjY3NjIxODNiOGUzZjc0NmUxNzc5MzQyNjk0NzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/hAdFMHN017kiWHIlrXTt3VP4Sa ACoWvRSUc5/RM81cEzHRD993ZuHLYv+8c371CYawde8pDKBpnSitj0qAswFsVnf4 MvyMc1xJxcRx8XInc15el8DRYq91tC9LBLUFUeRBEoYStZxajxWGBEUKtjcoaZkd u2YwDSUjENM6AVxV3ynLx+wcRoq0jwN5pYAS/mV0nRm4SSmI2QiLEWhLtfmVduZi XxGgnBvxTjcqvQCgqvGHPEOHfdNpwLbjgI1vFKcmNpOd3prcoLhdm/TsOmfGICr2 tJYvFryqX+yh57U9gCJ2EmnjKQxoSHBXvOYqDQGC05ufIv5NA0MApsJmHwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLlo86RqZnYhg7jj90bhd5NCaUcyMB8GA1UdIwQY MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut ODk3MTRhN2U4ZDU4LzEvdVdqenBHcG1kaUdEdU9QM1J1RjNrMEpwUnpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4 LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCgv9EAwQC vNd4MA0GCSqGSIb3DQEBCwUAA4IBAQBppKc0Kb9+4QjqbHzIcwzmggQJvfTlCyN/ ewAXx0EXVTZ8FtXm0QNDFLb8Hf9V/vQOKdlQm2ItpCn5ufY+lvAqSk3AwF3m1VvK T5uXRrWBTJyB+6TJ5W0JMhFteI0q0d4ZLJWpOXxj6UZZnfLAArRQhnQ9P5TLg0mo 6ryYiDkQnHAF4XZJRR3+U7AZhd3sRowoxce6gmEYldiLoT+jwtHtpvZtzET4oPnD cW35WFKUoJYIvdpp9CB2bI2yiAIsNqjTB4GBNHPh517DOySejFUpI/qtYmh6uYV3 NLKCx6hP5VGhu4WhDB+yq7X/aRsTI9Sg+gd+SjdLgbtEJFs91lWS -----END CERTIFICATE-----Generated at Mon Jan 19 11:25:04 2026 by rpki-client