This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/uZC2Oolvh10fjGcoJmlzCJ379EA.roa File: uZC2Oolvh10fjGcoJmlzCJ379EA.roa (raw, json) Hash identifier: UJyNhQ5Ff8oDI5Ix+vNwgvmwA/IA7Tv/YFbcLrBBXmg= Subject key identifier: B9:90:B6:3A:89:6F:87:5D:1F:8C:67:28:26:69:73:08:9D:FB:F4:40 Certificate issuer: /CN=8636a4e14a71ddd510164b8631ad99bbfc75953a Certificate serial: 019B7C124330276065BEE00ED2B535F2B94C Authority key identifier: 86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/uZC2Oolvh10fjGcoJmlzCJ379EA.roa Signing time: Fri 02 Jan 2026 00:18:50 +0000 ROA not before: Fri 02 Jan 2026 00:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59909 IP address blocks: 159.255.147.0/24 maxlen: 24 185.148.92.0/22 maxlen: 22 199.255.112.0/22 maxlen: 22 206.225.20.0/22 maxlen: 22 212.24.116.0/22 maxlen: 22 2a0d:d100::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:43:30:27:60:65:be:e0:0e:d2:b5:35:f2:b9:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8636a4e14a71ddd510164b8631ad99bbfc75953a Validity Not Before: Jan 2 00:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b990b63a896f875d1f8c6728266973089dfbf440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ff:b4:c2:ff:a1:a1:75:dd:07:56:4b:69:7b: a1:30:28:ed:0c:34:44:dd:90:47:8f:13:73:d6:48: 43:9f:4c:ee:68:30:dc:46:cc:51:17:ff:b2:61:16: 07:a0:5a:6c:7a:b5:3a:20:d2:f7:59:b5:8b:99:5b: 56:65:e2:ea:30:c9:40:ad:f8:d0:29:69:76:fc:98: 55:02:dc:15:45:d8:2e:55:49:02:f3:a9:80:f8:1d: 46:b9:cc:2d:5e:81:06:50:c5:ec:0e:d3:b5:f4:0e: 65:e9:9e:ca:9c:35:56:da:51:b0:d6:39:a4:bf:10: 02:6f:99:9e:d2:d2:33:2b:23:36:f2:e9:38:7a:f3: 75:93:ea:b2:85:8d:aa:ed:9b:cf:ce:77:67:8c:95: f5:8f:01:ec:99:37:40:13:fb:76:fa:53:74:18:62: cf:fb:bc:05:5e:38:8b:3a:d8:6e:e1:e9:c1:2d:34: df:16:6f:5a:0e:80:15:33:cb:fd:ce:93:f2:fc:4a: d6:75:eb:bf:0f:05:c1:1f:90:87:ac:08:01:e4:ec: fd:99:16:d4:c5:77:74:09:31:15:83:fb:c9:5a:5b: 33:ba:a6:36:ff:d0:d7:89:39:93:89:54:5d:c6:4d: f5:a9:1d:69:22:9c:23:a4:35:13:0d:34:d3:59:67: 1e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:90:B6:3A:89:6F:87:5D:1F:8C:67:28:26:69:73:08:9D:FB:F4:40 X509v3 Authority Key Identifier: keyid:86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/uZC2Oolvh10fjGcoJmlzCJ379EA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.255.147.0/24 185.148.92.0/22 199.255.112.0/22 206.225.20.0/22 212.24.116.0/22 IPv6: 2a0d:d100::/32 Signature Algorithm: sha256WithRSAEncryption 38:a0:a9:42:8e:6b:dd:cf:b8:3c:37:63:c4:ce:ca:27:a0:a0: e3:7f:9c:b0:03:53:31:76:2e:ef:51:50:0d:ed:34:58:33:9a: 79:7d:0f:da:22:9b:eb:61:34:19:55:8a:a9:b8:e8:6d:a5:82: 95:d1:71:18:1a:16:f5:71:9c:8c:ca:78:6e:99:a5:57:0c:54: 9b:67:91:06:9a:14:28:e4:b1:5c:5e:1d:90:e0:bf:4f:5c:11: 79:85:50:10:6e:fe:8c:d3:cb:12:cb:71:df:4b:f4:ae:99:f9: fe:ea:35:f7:fb:dd:77:2b:8f:9e:fd:52:37:ed:3f:ac:da:d3: b3:a3:c4:e2:09:8c:db:b7:a0:de:9c:f0:f0:05:11:8c:cf:0c: 15:07:59:39:b9:f6:45:0b:e7:8f:30:00:e4:db:fd:2e:00:bf: 02:ee:00:87:21:f3:be:37:45:80:dc:70:db:ca:b9:36:32:fe: b9:a8:fd:c6:af:a4:26:10:01:a5:24:3a:f2:c6:e8:47:34:5e: 0f:6f:38:f7:81:df:cd:6a:c5:45:fa:21:96:5a:2a:a6:74:06: 8a:97:1b:28:8f:02:5a:ce:6e:8d:06:f1:20:83:79:0b:c3:09: 7e:a6:24:05:c5:e2:ba:89:35:98:ba:a9:db:2b:1c:63:cd:a0: 31:03:01:93 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt8EkMwJ2BlvuAO0rU18rlMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2MzZhNGUxNGE3MWRkZDUxMDE2NGI4NjMxYWQ5OWJiZmM3 NTk1M2EwHhcNMjYwMTAyMDAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTkwYjYzYTg5NmY4NzVkMWY4YzY3MjgyNjY5NzMwODlkZmJmNDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf+0wv+hoXXdB1ZLaXuhMCjtDDRE 3ZBHjxNz1khDn0zuaDDcRsxRF/+yYRYHoFpserU6INL3WbWLmVtWZeLqMMlArfjQ KWl2/JhVAtwVRdguVUkC86mA+B1GucwtXoEGUMXsDtO19A5l6Z7KnDVW2lGw1jmk vxACb5me0tIzKyM28uk4evN1k+qyhY2q7ZvPzndnjJX1jwHsmTdAE/t2+lN0GGLP +7wFXjiLOthu4enBLTTfFm9aDoAVM8v9zpPy/ErWdeu/DwXBH5CHrAgB5Oz9mRbU xXd0CTEVg/vJWlszuqY2/9DXiTmTiVRdxk31qR1pIpwjpDUTDTTTWWceUQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFLmQtjqJb4ddH4xnKCZpcwid+/RAMB8GA1UdIwQY MBaAFIY2pOFKcd3VEBZLhjGtmbv8dZU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGphazRVcHgzZFVRRmt1R01hMlp1X3gxbFRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jZGVjYTMtNGVmMS00NWFkLTg5MjIt MmY3Y2Y4NDQ2YTMxLzEvdVpDMk9vbHZoMTBmakdjb0ptbHpDSjM3OUVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9jZGVjYTMtNGVmMS00NWFkLTg5MjItMmY3Y2Y4NDQ2YTMx LzEvaGphazRVcHgzZFVRRmt1R01hMlp1X3gxbFRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAn/+TAwQC uZRcAwQCx/9wAwQCzuEUAwQC1Bh0MA0EAgACMAcDBQAqDdEAMA0GCSqGSIb3DQEB CwUAA4IBAQA4oKlCjmvdz7g8N2PEzsonoKDjf5ywA1Mxdi7vUVAN7TRYM5p5fQ/a IpvrYTQZVYqpuOhtpYKV0XEYGhb1cZyMynhumaVXDFSbZ5EGmhQo5LFcXh2Q4L9P XBF5hVAQbv6M08sSy3HfS/Sumfn+6jX3+913K4+e/VI37T+s2tOzo8TiCYzbt6De nPDwBRGMzwwVB1k5ufZFC+ePMADk2/0uAL8C7gCHIfO+N0WA3HDbyrk2Mv65qP3G r6QmEAGlJDryxuhHNF4Pbzj3gd/NasVF+iGWWiqmdAaKlxsojwJazm6NBvEgg3kL wwl+piQFxeK6iTWYuqnbKxxjzaAxAwGT -----END CERTIFICATE-----Generated at Tue Feb 10 05:47:25 2026 by rpki-client