This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/uWOZy_EPwfgQwRo6km-aj6_sruQ.roa File: uWOZy_EPwfgQwRo6km-aj6_sruQ.roa (raw, json) Hash identifier: I8+HKPWrMaBjM9qWikuKnf9E5Oq5L1aDbsXtFh5NL2k= Subject key identifier: B9:63:99:CB:F1:0F:C1:F8:10:C1:1A:3A:92:6F:9A:8F:AF:EC:AE:E4 Certificate issuer: /CN=e8cf15bf6b1f2690f20901d1896e2d880fe8886e Certificate serial: 019B7D5C92BF0ACC5145D629E83FD025015A Authority key identifier: E8:CF:15:BF:6B:1F:26:90:F2:09:01:D1:89:6E:2D:88:0F:E8:88:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/uWOZy_EPwfgQwRo6km-aj6_sruQ.roa Signing time: Fri 02 Jan 2026 06:19:37 +0000 ROA not before: Fri 02 Jan 2026 06:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205753 IP address blocks: 193.169.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.mft rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:92:bf:0a:cc:51:45:d6:29:e8:3f:d0:25:01:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8cf15bf6b1f2690f20901d1896e2d880fe8886e Validity Not Before: Jan 2 06:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b96399cbf10fc1f810c11a3a926f9a8fafecaee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:00:04:45:20:1a:b0:be:47:1d:ca:a0:88:b8: 9f:ab:6d:f2:6a:4b:0c:18:7a:00:53:f1:65:91:22: f5:7b:04:2c:ca:f8:83:2a:d3:30:c1:c0:13:be:e2: 2d:bc:e5:9c:81:b7:9a:d0:b6:5d:33:b0:cc:f1:d3: 3d:7e:aa:93:d7:d0:1c:a7:84:5a:79:05:20:34:fa: ea:76:32:53:4d:7e:ae:ac:3f:20:a1:ac:a9:45:dd: 86:5a:99:4d:a7:08:7d:dd:87:09:c9:03:bf:b0:ba: 21:52:f8:33:c9:3a:69:3b:24:79:77:9d:3c:2b:c9: 62:59:93:a9:e5:68:16:1d:10:71:f1:7a:99:23:6b: 07:a0:b2:21:bf:7e:99:23:5f:cc:e8:55:5f:42:39: 8f:b0:c9:d7:b1:c2:27:14:50:e6:4e:35:24:99:f9: 0b:e4:36:23:b1:85:44:2c:d4:69:b0:1b:40:89:aa: cb:c9:82:86:d4:80:17:9b:94:02:ca:59:15:b2:0c: 31:d1:5e:50:74:7a:f8:89:1d:37:ab:07:c9:62:3b: 9e:08:ca:67:2c:e6:b4:a6:ad:1f:0c:6f:70:6a:3d: 0a:6c:ce:29:20:a6:bc:6b:48:3e:b6:4a:46:b6:69: ee:65:e7:5c:fe:0b:32:22:0c:9d:d6:57:b2:20:3d: 7f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:63:99:CB:F1:0F:C1:F8:10:C1:1A:3A:92:6F:9A:8F:AF:EC:AE:E4 X509v3 Authority Key Identifier: keyid:E8:CF:15:BF:6B:1F:26:90:F2:09:01:D1:89:6E:2D:88:0F:E8:88:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/uWOZy_EPwfgQwRo6km-aj6_sruQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.169.135.0/24 Signature Algorithm: sha256WithRSAEncryption a4:bb:37:78:0b:e6:27:a5:ed:31:d5:d4:8c:c7:cc:e1:3b:62: e0:87:49:e3:d8:dc:64:ed:4b:93:b8:68:db:cb:72:a3:9c:ed: 30:b2:25:74:99:ea:42:5f:74:0d:52:02:39:b2:4e:c4:0c:a8: b1:32:ac:25:f8:f0:ed:28:4d:99:7f:5e:3d:9b:7b:4f:4a:a8: 7c:91:1b:65:35:3f:2b:63:33:bc:cf:e5:17:83:23:6f:9d:0f: 03:a0:b2:56:45:58:00:3b:b6:c8:b5:77:f4:d1:41:cc:30:74: c2:e0:bd:94:62:f8:19:4b:0c:56:29:9c:ac:1a:06:ac:24:f0: a3:0a:44:ea:c8:f5:5f:7d:f9:8d:8a:1a:a8:41:12:46:d4:45: 64:a1:8a:2e:dc:f8:89:bb:95:02:29:32:06:9c:2c:cd:b1:66: 2a:85:be:5c:37:17:ec:d4:0c:29:ae:ca:9c:dd:82:40:5d:28: ad:90:e4:64:59:a3:17:5a:58:e9:18:dd:fb:f4:0c:5c:8d:45: e4:05:8a:57:63:bc:9d:56:71:96:37:f4:e0:06:a2:25:bd:70: 16:c0:ea:44:b0:5c:32:a3:49:d9:bd:1d:ac:5e:f1:2d:17:90: ca:da:9a:54:b4:f8:fc:d1:ba:42:18:dc:a2:19:93:99:77:77: f9:0c:23:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XJK/CsxRRdYp6D/QJQFaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4Y2YxNWJmNmIxZjI2OTBmMjA5MDFkMTg5NmUyZDg4MGZl ODg4NmUwHhcNMjYwMTAyMDYxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTYzOTljYmYxMGZjMWY4MTBjMTFhM2E5MjZmOWE4ZmFmZWNhZWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAAERSAasL5HHcqgiLifq23yaksM GHoAU/FlkSL1ewQsyviDKtMwwcATvuItvOWcgbea0LZdM7DM8dM9fqqT19Acp4Ra eQUgNPrqdjJTTX6urD8goaypRd2GWplNpwh93YcJyQO/sLohUvgzyTppOyR5d508 K8liWZOp5WgWHRBx8XqZI2sHoLIhv36ZI1/M6FVfQjmPsMnXscInFFDmTjUkmfkL 5DYjsYVELNRpsBtAiarLyYKG1IAXm5QCylkVsgwx0V5QdHr4iR03qwfJYjueCMpn LOa0pq0fDG9waj0KbM4pIKa8a0g+tkpGtmnuZedc/gsyIgyd1leyID1/fQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLljmcvxD8H4EMEaOpJvmo+v7K7kMB8GA1UdIwQY MBaAFOjPFb9rHyaQ8gkB0YluLYgP6IhuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNk04VnYyc2ZKcER5Q1FIUmlXNHRpQV9vaUc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kODM1NzYtYzY4NS00NjI0LTlkODgt OTkxMWZhOTg0ZTJlLzEvdVdPWnlfRVB3ZmdRd1JvNmttLWFqNl9zcnVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kODM1NzYtYzY4NS00NjI0LTlkODgtOTkxMWZhOTg0ZTJl LzEvNk04VnYyc2ZKcER5Q1FIUmlXNHRpQV9vaUc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwamHMA0G CSqGSIb3DQEBCwUAA4IBAQCkuzd4C+Ynpe0x1dSMx8zhO2Lgh0nj2Nxk7UuTuGjb y3KjnO0wsiV0mepCX3QNUgI5sk7EDKixMqwl+PDtKE2Zf149m3tPSqh8kRtlNT8r YzO8z+UXgyNvnQ8DoLJWRVgAO7bItXf00UHMMHTC4L2UYvgZSwxWKZysGgasJPCj CkTqyPVfffmNihqoQRJG1EVkoYou3PiJu5UCKTIGnCzNsWYqhb5cNxfs1Awprsqc 3YJAXSitkORkWaMXWljpGN379AxcjUXkBYpXY7ydVnGWN/TgBqIlvXAWwOpEsFwy o0nZvR2sXvEtF5DK2ppUtPj80bpCGNyiGZOZd3f5DCMp -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:00 2026 by rpki-client