This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/uGGHB9Av3_ThaGzwH8xxsyY9IAk.roa File: uGGHB9Av3_ThaGzwH8xxsyY9IAk.roa (raw, json) Hash identifier: EQLCZ4pDh+GlnlGdR0v0R9xaKh+vfEuApMYZeBAUdys= Subject key identifier: B8:61:87:07:D0:2F:DF:F4:E1:68:6C:F0:1F:CC:71:B3:26:3D:20:09 Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Certificate serial: 019B7FF1F02EBFA3E5D6B34B6BBF8B71C2F5 Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/uGGHB9Av3_ThaGzwH8xxsyY9IAk.roa Signing time: Fri 02 Jan 2026 18:22:00 +0000 ROA not before: Fri 02 Jan 2026 18:22:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212219 IP address blocks: 46.31.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:f0:2e:bf:a3:e5:d6:b3:4b:6b:bf:8b:71:c2:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Validity Not Before: Jan 2 18:22:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8618707d02fdff4e1686cf01fcc71b3263d2009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6b:9e:23:10:84:cf:ed:7e:a5:db:1b:77:ce: f3:0c:d8:5f:2b:74:e3:23:33:57:c9:07:1e:9c:ea: 81:32:c9:8b:52:48:94:12:dd:f6:90:37:bd:15:af: 95:78:d2:ac:56:57:f5:b2:01:35:64:2b:97:59:6c: 3c:50:04:c4:83:5a:d9:ac:48:03:60:4f:a5:f3:44: 84:5a:0a:7f:33:e3:a2:24:9a:a5:6e:ee:02:51:24: a5:1a:e1:0b:b1:d4:21:c3:67:6e:36:28:99:e5:f7: a3:fb:71:9e:cb:84:49:dc:a3:36:01:fb:24:cd:30: e4:9c:ca:d5:f3:26:f3:e1:42:0a:f8:a7:59:5a:1a: 16:e4:a3:de:10:fb:ac:d9:1f:de:f0:30:f1:95:d7: 98:10:51:84:c7:f4:09:c8:cf:35:0f:b6:14:00:64: 96:28:62:e3:f2:7d:bf:8d:b1:3c:92:49:fa:b9:a6: fd:21:8f:12:1f:d4:59:1f:dc:ad:e2:7a:96:7f:ec: 7c:c9:fd:85:f2:fc:c4:0c:69:f3:a0:3c:f8:a1:cc: d8:3f:bd:00:5d:f7:e1:f7:20:3d:5b:7b:ec:1b:aa: 6e:da:55:13:0e:54:9e:f2:35:8c:1d:8e:09:81:e9: 95:49:82:2c:ed:75:cb:cf:a5:7b:61:7e:47:50:b1: d7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:61:87:07:D0:2F:DF:F4:E1:68:6C:F0:1F:CC:71:B3:26:3D:20:09 X509v3 Authority Key Identifier: keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/uGGHB9Av3_ThaGzwH8xxsyY9IAk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.77.0/24 Signature Algorithm: sha256WithRSAEncryption d1:18:bd:f6:44:d6:14:9a:d0:7a:0d:30:f5:5b:20:77:11:3a: 87:52:70:a3:8f:68:23:91:f5:bb:9e:d1:22:75:23:d7:36:9e: 9c:da:b1:da:83:10:39:92:d2:2c:74:b0:52:ae:a1:26:bb:8b: 37:98:3a:4f:d2:16:01:0d:19:e0:f8:b4:db:86:2e:10:71:96: 9c:80:53:71:d8:7d:5a:af:a1:0b:92:37:31:38:37:ec:00:3d: 03:0d:20:a1:33:7d:ff:36:85:a8:c9:c5:b0:7e:06:cb:07:6a: c2:7c:5d:a6:13:f7:57:0e:1c:2e:90:66:65:fe:99:89:c6:54: 75:15:49:a5:e4:5f:71:de:0e:f4:8d:87:6a:ff:a6:13:79:ba: b8:91:5c:cc:6d:42:64:9e:85:0a:8c:9b:2e:33:01:86:08:38: 63:fb:22:db:8b:28:4d:8d:02:b0:d8:a6:f3:98:56:af:49:30: a0:5c:15:7e:b5:84:20:a0:17:b9:74:e5:6f:ea:c5:ff:06:48: 42:83:9d:a9:6c:8e:7b:c0:a2:96:2a:bc:64:3f:4a:be:49:d6: d7:6a:d7:8c:f6:0a:78:e9:4a:c0:78:f3:0d:f7:b2:fb:e8:6b: 5b:39:85:15:d0:a4:e0:37:15:be:fd:c8:75:3b:8e:b4:92:14: bf:74:99:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8fAuv6Pl1rNLa7+LccL1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NmRkOWRhZDc1ODc3ZjdkMjhkMTRlMDhkYzU1YjEzMzBi ZDEzYjcwHhcNMjYwMTAyMTgyMjAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODYxODcwN2QwMmZkZmY0ZTE2ODZjZjAxZmNjNzFiMzI2M2QyMDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2ueIxCEz+1+pdsbd87zDNhfK3Tj IzNXyQcenOqBMsmLUkiUEt32kDe9Fa+VeNKsVlf1sgE1ZCuXWWw8UATEg1rZrEgD YE+l80SEWgp/M+OiJJqlbu4CUSSlGuELsdQhw2duNiiZ5fej+3Gey4RJ3KM2Afsk zTDknMrV8ybz4UIK+KdZWhoW5KPeEPus2R/e8DDxldeYEFGEx/QJyM81D7YUAGSW KGLj8n2/jbE8kkn6uab9IY8SH9RZH9yt4nqWf+x8yf2F8vzEDGnzoDz4oczYP70A Xffh9yA9W3vsG6pu2lUTDlSe8jWMHY4JgemVSYIs7XXLz6V7YX5HULHXvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLhhhwfQL9/04Whs8B/McbMmPSAJMB8GA1UdIwQY MBaAFKdt2drXWHf30o0U4I3FWxMwvRO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQt MmFjNmZmNzViZWIwLzEvdUdHSEI5QXYzX1RoYUd6d0g4eHhzeVk5SUFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQtMmFjNmZmNzViZWIw LzEvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALh9NMA0G CSqGSIb3DQEBCwUAA4IBAQDRGL32RNYUmtB6DTD1WyB3ETqHUnCjj2gjkfW7ntEi dSPXNp6c2rHagxA5ktIsdLBSrqEmu4s3mDpP0hYBDRng+LTbhi4QcZacgFNx2H1a r6ELkjcxODfsAD0DDSChM33/NoWoycWwfgbLB2rCfF2mE/dXDhwukGZl/pmJxlR1 FUml5F9x3g70jYdq/6YTebq4kVzMbUJknoUKjJsuMwGGCDhj+yLbiyhNjQKw2Kbz mFavSTCgXBV+tYQgoBe5dOVv6sX/BkhCg52pbI57wKKWKrxkP0q+SdbXateM9gp4 6UrAePMN97L76GtbOYUV0KTgNxW+/ch1O460khS/dJki -----END CERTIFICATE-----Generated at Wed Jan 21 16:15:39 2026 by rpki-client