This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/UQBamIu_tf9wPCOvESltx6uxaSM.roa File: UQBamIu_tf9wPCOvESltx6uxaSM.roa (raw, json) Hash identifier: 0H4wa03fUeDSOPCaqZfvn2P/bbZkgwu98158FsqzTX0= Subject key identifier: 51:00:5A:98:8B:BF:B5:FF:70:3C:23:AF:11:29:6D:C7:AB:B1:69:23 Certificate issuer: /CN=df2e1ce94e88a13f38fe7f943b79416bc07a1df0 Certificate serial: 019B7B36920CC81673AE025BD8D057DC8A58 Authority key identifier: DF:2E:1C:E9:4E:88:A1:3F:38:FE:7F:94:3B:79:41:6B:C0:7A:1D:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/UQBamIu_tf9wPCOvESltx6uxaSM.roa Signing time: Thu 01 Jan 2026 20:18:52 +0000 ROA not before: Thu 01 Jan 2026 20:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200129 IP address blocks: 185.36.180.0/24 maxlen: 24 185.36.181.0/24 maxlen: 24 185.36.182.0/24 maxlen: 24 185.36.183.0/24 maxlen: 24 2a00:e860:180::/48 maxlen: 48 2a00:e860:181::/48 maxlen: 48 2a00:e860:182::/48 maxlen: 48 2a00:e860:183::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.crl rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:92:0c:c8:16:73:ae:02:5b:d8:d0:57:dc:8a:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df2e1ce94e88a13f38fe7f943b79416bc07a1df0 Validity Not Before: Jan 1 20:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51005a988bbfb5ff703c23af11296dc7abb16923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:03:a8:13:18:d5:2e:57:fc:4d:79:e8:69:72: 4d:b3:ad:74:a0:fb:02:0b:1c:78:af:46:08:25:27: ab:65:f5:f5:6a:71:f4:2b:ab:ea:77:5b:6d:88:58: 66:e7:77:a2:37:02:7d:6c:cc:6e:06:88:52:32:5b: 98:a1:b5:3e:e7:52:84:8b:9c:43:c6:ab:98:1e:4f: 7b:bd:ef:6c:2e:77:b3:d5:6d:65:56:e0:e5:83:71: 5b:cd:7e:fc:0e:07:e2:b6:4a:35:5c:07:28:b4:6f: 22:8f:d7:3a:d9:35:82:2f:bf:af:80:c1:2b:80:e2: b0:60:97:2b:03:76:ee:f2:29:a8:91:ab:f1:d6:fe: 7d:42:6c:8f:22:7a:c6:47:1f:20:e8:00:9b:1b:5b: db:8e:5a:7f:46:25:da:43:5a:e4:7b:0d:b7:11:2d: 12:66:04:90:7a:4c:7e:d3:02:ca:97:48:e6:1d:41: ac:c2:36:48:00:5f:74:f9:58:1f:fa:25:33:53:fd: 9e:e7:42:a1:2e:5b:97:ac:c1:91:70:24:28:b5:8e: bd:61:87:ca:6b:2d:34:01:31:a7:5d:8c:d8:67:cd: 16:4d:b6:9f:0c:2b:ae:34:3c:d8:24:16:24:a7:c5: 41:c0:60:92:91:02:7a:ea:1b:d2:33:6b:0b:03:f8: c5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:00:5A:98:8B:BF:B5:FF:70:3C:23:AF:11:29:6D:C7:AB:B1:69:23 X509v3 Authority Key Identifier: keyid:DF:2E:1C:E9:4E:88:A1:3F:38:FE:7F:94:3B:79:41:6B:C0:7A:1D:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/UQBamIu_tf9wPCOvESltx6uxaSM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.36.180.0/22 IPv6: 2a00:e860:180::/46 Signature Algorithm: sha256WithRSAEncryption c0:69:60:75:5c:ea:e1:5b:9f:b3:17:73:c2:44:90:85:d2:e3: c3:48:22:d0:71:a0:0f:c5:6e:67:04:2a:2e:56:0c:94:81:03: 63:1f:98:ec:8b:12:fa:ca:ec:13:94:6b:f9:a1:d4:7d:03:54: e6:13:1a:7e:96:93:d0:03:67:dd:21:36:02:09:e8:fc:64:10: ed:46:a6:6c:e0:8d:ad:10:07:73:46:f8:9c:f5:e1:51:13:85: 4a:bc:d7:ec:ef:ff:d5:52:6c:57:05:4c:be:4d:e7:55:79:a3: fb:72:32:bd:9a:a7:42:a2:86:e1:d3:4e:53:5b:1c:53:3a:a5: e0:6b:b3:c3:3b:9c:88:77:4d:98:4e:bf:60:6f:d6:13:fa:5b: 07:9f:eb:96:36:5b:59:52:56:5a:ca:e6:f2:c3:5b:0b:3b:86: 15:5d:de:3d:2f:e5:57:45:c5:65:a7:ad:39:0a:6e:0e:ed:e5: db:4f:1c:90:96:f1:31:bc:bf:5d:cb:a4:31:b3:94:0b:c7:d8: 48:59:7f:d6:6e:1c:0a:30:0c:2c:c0:ed:1b:8a:bb:eb:8f:b3: 53:0c:01:a9:3c:f5:48:9e:91:b3:74:93:9f:53:02:21:cb:e7: 9d:4e:73:df:16:cb:bd:cd:78:6f:88:65:2c:42:08:ce:ab:a4: 8d:bf:72:bf -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7NpIMyBZzrgJb2NBX3IpYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmMmUxY2U5NGU4OGExM2YzOGZlN2Y5NDNiNzk0MTZiYzA3 YTFkZjAwHhcNMjYwMTAxMjAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTAwNWE5ODhiYmZiNWZmNzAzYzIzYWYxMTI5NmRjN2FiYjE2OTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgOoExjVLlf8TXnoaXJNs610oPsC Cxx4r0YIJSerZfX1anH0K6vqd1ttiFhm53eiNwJ9bMxuBohSMluYobU+51KEi5xD xquYHk97ve9sLnez1W1lVuDlg3FbzX78Dgfitko1XAcotG8ij9c62TWCL7+vgMEr gOKwYJcrA3bu8imokavx1v59QmyPInrGRx8g6ACbG1vbjlp/RiXaQ1rkew23ES0S ZgSQekx+0wLKl0jmHUGswjZIAF90+Vgf+iUzU/2e50KhLluXrMGRcCQotY69YYfK ay00ATGnXYzYZ80WTbafDCuuNDzYJBYkp8VBwGCSkQJ66hvSM2sLA/jFCwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFEAWpiLv7X/cDwjrxEpbcersWkjMB8GA1UdIwQY MBaAFN8uHOlOiKE/OP5/lDt5QWvAeh3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3k0YzZVNklvVDg0X24tVU8zbEJhOEI2SGZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83OGQ4ZjQtM2UwZi00YmJlLTkyMTQt NTM3NGM3ZTBmZmExLzEvVVFCYW1JdV90Zjl3UENPdkVTbHR4NnV4YVNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi83OGQ4ZjQtM2UwZi00YmJlLTkyMTQtNTM3NGM3ZTBmZmEx LzEvM3k0YzZVNklvVDg0X24tVU8zbEJhOEI2SGZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCuSS0MA8E AgACMAkDBwIqAOhgAYAwDQYJKoZIhvcNAQELBQADggEBAMBpYHVc6uFbn7MXc8JE kIXS48NIItBxoA/FbmcEKi5WDJSBA2MfmOyLEvrK7BOUa/mh1H0DVOYTGn6Wk9AD Z90hNgIJ6PxkEO1Gpmzgja0QB3NG+Jz14VEThUq81+zv/9VSbFcFTL5N51V5o/ty Mr2ap0KihuHTTlNbHFM6peBrs8M7nIh3TZhOv2Bv1hP6Wwef65Y2W1lSVlrK5vLD Wws7hhVd3j0v5VdFxWWnrTkKbg7t5dtPHJCW8TG8v13LpDGzlAvH2EhZf9ZuHAow DCzA7RuKu+uPs1MMAak89UiekbN0k59TAiHL551Oc98Wy73NeG+IZSxCCM6rpI2/ cr8= -----END CERTIFICATE-----Generated at Tue Feb 10 06:00:42 2026 by rpki-client