This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/uGQWNyg5237Zm0UUhjGg8gARmn0.roa File: uGQWNyg5237Zm0UUhjGg8gARmn0.roa (raw, json) Hash identifier: li0m/zbSxgzFDwh2iasmSHBN8irzYLoTvtgSIVNzWfI= Subject key identifier: B8:64:16:37:28:39:DB:7E:D9:9B:45:14:86:31:A0:F2:00:11:9A:7D Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e Certificate serial: 019B7EA61A07175958AD9EC38D6A37D852AD Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/uGQWNyg5237Zm0UUhjGg8gARmn0.roa Signing time: Fri 02 Jan 2026 12:19:33 +0000 ROA not before: Fri 02 Jan 2026 12:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47147 IP address blocks: 152.53.0.0/16 maxlen: 24 152.53.98.0/24 maxlen: 24 152.53.128.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:1a:07:17:59:58:ad:9e:c3:8d:6a:37:d8:52:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e Validity Not Before: Jan 2 12:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b86416372839db7ed99b45148631a0f200119a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7d:30:b2:4f:d0:43:41:4f:ff:3e:49:0a:4d: 95:49:f3:53:72:03:0e:6d:ed:13:4b:30:79:3b:23: 33:72:f1:d8:f0:d7:0a:71:d0:08:41:52:a5:cc:22: c6:c0:3f:ab:89:b7:a7:57:2d:e9:c6:1a:bc:98:b7: 1a:60:6d:3a:b8:f6:d7:81:86:8b:7c:35:da:74:bb: d2:e9:ed:39:14:69:99:93:c8:6a:ba:67:8b:82:ca: 08:c5:b9:29:04:70:17:6b:a4:ba:af:cd:fa:9d:18: 94:26:23:2d:55:d9:71:00:2a:5c:83:35:8d:a4:40: e4:73:b9:7f:06:63:a1:d8:f8:50:98:99:90:5b:a2: 83:51:70:ab:25:03:2a:eb:ad:4f:7a:f2:0d:c5:e9: 4a:ee:fb:46:f0:9a:c9:10:44:9d:56:11:c9:fe:77: a3:4c:b3:ac:b2:03:0e:27:cd:79:cc:6c:d5:48:4f: b8:6d:bc:6f:c7:f5:83:25:2e:cb:d9:3b:8b:5a:cb: 08:81:62:6d:b3:25:87:f0:fd:50:96:5e:bc:56:57: f9:df:3f:06:0f:ca:f0:57:c6:28:2b:a0:d4:98:d0: 8d:31:29:23:bc:38:2e:4c:33:02:6b:ec:b1:49:93: 40:13:fb:1f:a5:67:1b:10:6f:ce:48:b1:59:95:9a: 61:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:64:16:37:28:39:DB:7E:D9:9B:45:14:86:31:A0:F2:00:11:9A:7D X509v3 Authority Key Identifier: keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/uGQWNyg5237Zm0UUhjGg8gARmn0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.53.0.0/16 Signature Algorithm: sha256WithRSAEncryption c2:e0:43:c0:c1:84:81:a2:7d:b9:9d:ac:25:fd:28:34:96:09: 35:2a:59:f5:72:81:b3:7a:56:15:69:17:86:8e:3e:a4:03:b6: eb:57:64:68:2f:6b:b9:cf:a5:82:30:40:cd:be:c4:89:9f:20: 32:ff:11:34:f5:45:f9:fe:99:9c:9a:85:8b:77:06:c3:df:16: 75:73:c2:dc:0d:10:26:6c:f0:bf:74:2c:07:54:b0:d3:d0:27: b9:f7:33:a6:0a:46:1f:04:45:a6:1a:08:bc:13:c7:b4:b0:06: a6:42:7c:03:eb:da:4d:24:91:9c:f6:09:a2:e0:03:ca:5c:39: 11:7e:a3:ea:d1:98:55:45:d0:ff:cc:32:39:5a:1d:77:14:ca: 89:e1:4c:4d:b7:e8:e6:d9:01:70:ae:d5:7f:cc:c8:12:ca:32: 8c:22:6e:29:ed:f3:5d:97:21:8b:4c:dd:a2:06:b9:11:97:67: 7c:7c:10:a8:68:a9:16:a9:ff:ac:6a:ec:9a:9f:db:09:47:dc: ef:d5:24:d3:be:7f:38:50:45:8f:33:c9:f8:e4:1c:16:fb:a6: 6d:7c:8f:f1:f8:74:83:75:b6:65:30:e7:a4:c7:3a:a6:f8:f2: de:52:24:38:04:13:7e:5e:ce:5d:84:2e:96:f1:44:86:46:93: 34:c0:34:33 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt+phoHF1lYrZ7DjWo32FKtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMGIzN2I2ZjRiNDQ1NjQ1ZTY5OTNhOWM1ZWM2MDg0OTI0 MjVmMGUwHhcNMjYwMTAyMTIxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODY0MTYzNzI4MzlkYjdlZDk5YjQ1MTQ4NjMxYTBmMjAwMTE5YTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0H0wsk/QQ0FP/z5JCk2VSfNTcgMO be0TSzB5OyMzcvHY8NcKcdAIQVKlzCLGwD+ribenVy3pxhq8mLcaYG06uPbXgYaL fDXadLvS6e05FGmZk8hqumeLgsoIxbkpBHAXa6S6r836nRiUJiMtVdlxACpcgzWN pEDkc7l/BmOh2PhQmJmQW6KDUXCrJQMq661PevINxelK7vtG8JrJEESdVhHJ/nej TLOssgMOJ815zGzVSE+4bbxvx/WDJS7L2TuLWssIgWJtsyWH8P1Qll68Vlf53z8G D8rwV8YoK6DUmNCNMSkjvDguTDMCa+yxSZNAE/sfpWcbEG/OSLFZlZph4wIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFLhkFjcoOdt+2ZtFFIYxoPIAEZp9MB8GA1UdIwQY MBaAFNALN7b0tEVkXmmTqcXsYISSQl8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83MzBmYzUtNzMwMS00YTYwLTg2ZDEt N2RiNjg2OGQ4NDc0LzEvdUdRV055ZzUyMzdabTBVVWhqR2c4Z0FSbW4wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC83MzBmYzUtNzMwMS00YTYwLTg2ZDEtN2RiNjg2OGQ4NDc0 LzEvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmDUwDQYJ KoZIhvcNAQELBQADggEBAMLgQ8DBhIGifbmdrCX9KDSWCTUqWfVygbN6VhVpF4aO PqQDtutXZGgva7nPpYIwQM2+xImfIDL/ETT1Rfn+mZyahYt3BsPfFnVzwtwNECZs 8L90LAdUsNPQJ7n3M6YKRh8ERaYaCLwTx7SwBqZCfAPr2k0kkZz2CaLgA8pcORF+ o+rRmFVF0P/MMjlaHXcUyonhTE236ObZAXCu1X/MyBLKMowibint812XIYtM3aIG uRGXZ3x8EKhoqRap/6xq7Jqf2wlH3O/VJNO+fzhQRY8zyfjkHBb7pm18j/H4dIN1 tmUw56THOqb48t5SJDgEE35ezl2ELpbxRIZGkzTANDM= -----END CERTIFICATE-----Generated at Mon Jan 26 13:45:57 2026 by rpki-client