This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/Uwy94ESK4H9_ORvt89GH2GKZ-wA.roa File: Uwy94ESK4H9_ORvt89GH2GKZ-wA.roa (raw, json) Hash identifier: NnPhFs3DaaK4BxiXGVh9eUavNQZbFqm0Zmxp3/WTUQg= Subject key identifier: 53:0C:BD:E0:44:8A:E0:7F:7F:39:1B:ED:F3:D1:87:D8:62:99:FB:00 Certificate issuer: /CN=19bbc28498eb169590b069a005414c41a179b240 Certificate serial: 019B797DED98AAD2B073F91A62D190622780 Authority key identifier: 19:BB:C2:84:98:EB:16:95:90:B0:69:A0:05:41:4C:41:A1:79:B2:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/Uwy94ESK4H9_ORvt89GH2GKZ-wA.roa Signing time: Thu 01 Jan 2026 12:17:34 +0000 ROA not before: Thu 01 Jan 2026 12:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44292 IP address blocks: 92.42.168.0/24 maxlen: 24 92.42.169.0/24 maxlen: 24 92.42.170.0/24 maxlen: 24 92.42.171.0/24 maxlen: 24 92.42.172.0/24 maxlen: 24 92.42.173.0/24 maxlen: 24 92.42.174.0/24 maxlen: 24 92.42.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.crl rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.mft rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:ed:98:aa:d2:b0:73:f9:1a:62:d1:90:62:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19bbc28498eb169590b069a005414c41a179b240 Validity Not Before: Jan 1 12:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=530cbde0448ae07f7f391bedf3d187d86299fb00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1a:53:df:b3:a4:49:53:69:e2:29:1a:ff:42: 51:c8:5e:02:7d:d9:b0:19:ff:bf:6f:d7:87:72:72: db:e8:76:4e:b7:aa:29:17:bc:95:67:86:4e:00:5b: 00:22:d5:03:38:e5:7d:b7:e9:26:0e:2a:ac:5b:dd: 1f:b5:31:a2:04:6f:9d:68:83:e1:07:b5:ff:b8:37: 4d:8d:94:5b:da:a4:e2:2d:46:f4:7a:6b:13:21:23: 9e:83:37:eb:ee:51:8d:1f:d3:9b:48:db:dc:f7:b3: da:74:48:cc:7e:0d:db:ce:aa:5e:4e:2f:cf:31:76: c8:f3:46:d2:ed:4d:b2:9f:a5:a2:02:25:49:05:16: 83:e7:d1:39:c6:b4:cb:ad:d3:eb:c7:42:ec:70:7a: d8:ff:18:f9:08:f0:4a:a6:c3:9a:cf:b1:33:42:23: 35:76:78:a2:3c:63:ce:bf:c1:cb:6b:7c:36:f2:9e: c6:18:43:42:d1:cf:cb:b1:c0:9c:3e:8c:32:06:b0: b8:f7:da:d7:87:fb:e3:8d:c0:5e:b3:b2:fa:0f:5f: c8:44:50:f0:f6:71:85:f7:39:b8:27:1e:79:5d:a0: ad:f5:d4:6f:09:28:ec:d8:52:72:77:de:5e:6e:4c: c1:e0:e4:e4:2d:5c:dd:a1:92:91:04:b6:39:13:d7: f2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:0C:BD:E0:44:8A:E0:7F:7F:39:1B:ED:F3:D1:87:D8:62:99:FB:00 X509v3 Authority Key Identifier: keyid:19:BB:C2:84:98:EB:16:95:90:B0:69:A0:05:41:4C:41:A1:79:B2:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/Uwy94ESK4H9_ORvt89GH2GKZ-wA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.42.168.0/21 Signature Algorithm: sha256WithRSAEncryption 70:eb:74:8c:cf:a4:d8:10:35:29:99:52:a6:be:ec:47:fc:cf: 88:9c:50:e6:ee:65:f9:d0:d8:e4:e4:c4:ce:bc:ce:07:43:0f: 3a:e5:cb:21:dc:19:df:83:13:b0:3d:d9:30:4f:43:70:fd:f1: ea:35:99:2d:bb:2f:95:fc:96:e8:85:18:3b:ca:6a:44:69:75: f6:cd:65:ed:8d:ac:88:f9:47:f1:55:35:2e:4c:e7:9d:5c:c9: 32:c9:be:aa:2c:30:6a:27:84:b4:3a:ec:cf:e7:24:a7:cb:de: 04:98:8e:09:0e:ee:4a:70:cc:2a:eb:e1:33:ce:59:0f:f6:05: c0:c8:85:03:2b:45:e2:ec:88:b8:ae:f1:b8:80:1f:2e:4e:40: 3e:c5:ff:1d:05:fc:9f:ae:4c:01:9b:66:14:16:f6:73:68:05: 7c:42:d8:9f:27:f1:31:6b:1c:99:a3:81:73:03:78:a9:3f:b9: cb:73:c5:44:ca:c2:5e:d6:5c:8b:17:ac:72:4d:71:a1:72:b2: ea:ef:ea:e8:84:31:95:bc:5c:28:18:7b:0d:48:d0:0d:a5:5e: 7e:72:33:95:8f:4b:95:96:65:9a:0f:b1:93:7c:fd:5e:ca:8d: 4f:44:fb:b8:17:21:72:86:db:b6:03:15:ac:cb:c7:2e:8c:3f: b5:f8:7d:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fe2YqtKwc/kaYtGQYieAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YmJjMjg0OThlYjE2OTU5MGIwNjlhMDA1NDE0YzQxYTE3 OWIyNDAwHhcNMjYwMTAxMTIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzBjYmRlMDQ0OGFlMDdmN2YzOTFiZWRmM2QxODdkODYyOTlmYjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RpT37OkSVNp4ika/0JRyF4Cfdmw Gf+/b9eHcnLb6HZOt6opF7yVZ4ZOAFsAItUDOOV9t+kmDiqsW90ftTGiBG+daIPh B7X/uDdNjZRb2qTiLUb0emsTISOegzfr7lGNH9ObSNvc97PadEjMfg3bzqpeTi/P MXbI80bS7U2yn6WiAiVJBRaD59E5xrTLrdPrx0LscHrY/xj5CPBKpsOaz7EzQiM1 dniiPGPOv8HLa3w28p7GGENC0c/LscCcPowyBrC499rXh/vjjcBes7L6D1/IRFDw 9nGF9zm4Jx55XaCt9dRvCSjs2FJyd95ebkzB4OTkLVzdoZKRBLY5E9fy0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFMMveBEiuB/fzkb7fPRh9himfsAMB8GA1UdIwQY MBaAFBm7woSY6xaVkLBpoAVBTEGhebJAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2J2Q2hKanJGcFdRc0dtZ0JVRk1RYUY1c2tBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8xNjg2NWItMGU3MC00MTYwLWE0OGQt N2YwMTk3MjE4NmEzLzEvVXd5OTRFU0s0SDlfT1J2dDg5R0gyR0taLXdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8xNjg2NWItMGU3MC00MTYwLWE0OGQtN2YwMTk3MjE4NmEz LzEvR2J2Q2hKanJGcFdRc0dtZ0JVRk1RYUY1c2tBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXCqoMA0G CSqGSIb3DQEBCwUAA4IBAQBw63SMz6TYEDUpmVKmvuxH/M+InFDm7mX50Njk5MTO vM4HQw865csh3BnfgxOwPdkwT0Nw/fHqNZktuy+V/JbohRg7ympEaXX2zWXtjayI +UfxVTUuTOedXMkyyb6qLDBqJ4S0OuzP5ySny94EmI4JDu5KcMwq6+EzzlkP9gXA yIUDK0Xi7Ii4rvG4gB8uTkA+xf8dBfyfrkwBm2YUFvZzaAV8QtifJ/ExaxyZo4Fz A3ipP7nLc8VEysJe1lyLF6xyTXGhcrLq7+rohDGVvFwoGHsNSNANpV5+cjOVj0uV lmWaD7GTfP1eyo1PRPu4FyFyhtu2AxWsy8cujD+1+H00 -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:17 2026 by rpki-client