This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/uUpVaQyB5Gef14b5-tkLPMH-Qck.roa File: uUpVaQyB5Gef14b5-tkLPMH-Qck.roa (raw, json) Hash identifier: ADfKqzOA47ogtpw04+VhM6A9XUlpgBTWjAQa2xF3ouQ= Subject key identifier: B9:4A:55:69:0C:81:E4:67:9F:D7:86:F9:FA:D9:0B:3C:C1:FE:41:C9 Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c Certificate serial: 019B78A2B30B332900830D81129407ACF11E Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/uUpVaQyB5Gef14b5-tkLPMH-Qck.roa Signing time: Thu 01 Jan 2026 08:18:07 +0000 ROA not before: Thu 01 Jan 2026 08:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 195.182.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:b3:0b:33:29:00:83:0d:81:12:94:07:ac:f1:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c Validity Not Before: Jan 1 08:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b94a55690c81e4679fd786f9fad90b3cc1fe41c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0e:b8:3b:9e:45:3f:76:cc:cc:f7:5f:6d:99: 20:f2:df:d9:60:db:7b:5c:bb:a6:da:12:57:6c:59: a8:72:c8:c0:70:3f:d8:05:a4:9e:62:df:9f:aa:84: f2:1c:1d:f4:98:f7:6f:da:dd:cf:88:62:e5:b2:fe: 53:33:09:36:2b:5e:ab:95:01:8a:0c:35:c1:da:01: 6f:3d:33:05:cd:a3:31:22:95:82:65:d3:c7:46:ea: 31:5b:8c:1d:d7:3c:81:91:52:2d:05:62:5b:df:0c: 03:0f:b7:7e:d1:23:bc:19:05:b2:a1:4f:0f:c3:7b: 45:44:d7:aa:dd:26:f4:e8:b3:62:08:3c:36:08:c3: d7:af:18:28:1b:e1:f6:f5:ed:6f:d9:f0:cf:c1:f8: 9a:41:84:e9:8e:85:59:ac:db:87:0a:e0:93:5b:5b: 5f:c5:dc:3d:90:4e:a4:72:c1:a3:e1:af:b2:56:32: 1b:31:93:7e:40:7e:36:c4:7a:ca:80:4a:d6:aa:e4: 6e:dc:e8:3d:ff:66:56:35:0e:f5:10:cf:7b:1b:61: d8:f2:a6:ba:78:36:22:73:84:2d:71:86:c3:da:c5: 13:e8:f7:00:0e:42:b2:4f:ad:66:ed:ad:71:ab:3a: a5:c5:d6:3e:a1:08:b7:ca:ad:84:24:f9:5b:42:85: 98:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4A:55:69:0C:81:E4:67:9F:D7:86:F9:FA:D9:0B:3C:C1:FE:41:C9 X509v3 Authority Key Identifier: keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/uUpVaQyB5Gef14b5-tkLPMH-Qck.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.182.198.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:b8:71:a6:ba:5a:7d:e6:b5:e6:78:0f:6e:1d:23:29:e9:2d: 46:d2:f9:6e:00:30:12:16:4b:22:51:a3:ed:99:59:65:3f:9f: fb:2c:59:c1:a9:bd:95:25:29:0e:c6:e4:42:45:b5:a0:40:7e: a2:02:16:b2:d8:20:9b:5e:75:dd:ed:9e:20:5b:f7:a8:15:e0: 52:89:f7:82:e6:89:69:ff:51:c7:02:1a:59:63:db:c8:28:98: 6a:f4:c1:2e:f1:fa:a7:8e:c3:9d:31:dc:9b:ed:d1:d9:9d:69: 33:9c:71:95:ce:5a:e0:ae:8a:92:12:55:98:c9:6d:6e:74:db: 9e:a0:8e:d9:d2:6b:cc:46:1d:44:86:d3:91:c8:6e:a9:e2:87: bb:3c:88:53:23:05:5a:9b:d7:18:9f:49:0c:20:41:15:69:99: 49:54:bd:32:ba:ad:9c:84:fa:2e:63:51:82:1c:cd:59:49:80: a2:23:06:3e:d7:9c:c9:54:ef:6b:76:79:89:20:ee:80:4a:11: 4b:de:20:85:28:1f:bc:2f:7c:01:a2:a8:ae:e9:d7:9e:ac:1b: 1b:5d:94:77:5e:fc:33:06:43:2e:87:1b:44:26:4a:0d:49:28: 7b:ea:77:78:49:b5:6b:b5:3c:ed:fc:05:b9:27:d9:29:6b:54: 95:b0:b0:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4orMLMykAgw2BEpQHrPEeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZDIxZTgwNGFiNzcxM2FkNzg3N2RkZTYwM2FhNzgyNGIz MTk4M2MwHhcNMjYwMTAxMDgxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTRhNTU2OTBjODFlNDY3OWZkNzg2ZjlmYWQ5MGIzY2MxZmU0MWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Q64O55FP3bMzPdfbZkg8t/ZYNt7 XLum2hJXbFmocsjAcD/YBaSeYt+fqoTyHB30mPdv2t3PiGLlsv5TMwk2K16rlQGK DDXB2gFvPTMFzaMxIpWCZdPHRuoxW4wd1zyBkVItBWJb3wwDD7d+0SO8GQWyoU8P w3tFRNeq3Sb06LNiCDw2CMPXrxgoG+H29e1v2fDPwfiaQYTpjoVZrNuHCuCTW1tf xdw9kE6kcsGj4a+yVjIbMZN+QH42xHrKgErWquRu3Og9/2ZWNQ71EM97G2HY8qa6 eDYic4QtcYbD2sUT6PcADkKyT61m7a1xqzqlxdY+oQi3yq2EJPlbQoWYZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLlKVWkMgeRnn9eG+frZCzzB/kHJMB8GA1UdIwQY MBaAFMLSHoBKt3E614d93mA6p4JLMZg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYt NTlhZTA5ZWRiZWI5LzEvdVVwVmFReUI1R2VmMTRiNS10a0xQTUgtUWNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYtNTlhZTA5ZWRiZWI5 LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7bGMA0G CSqGSIb3DQEBCwUAA4IBAQBuuHGmulp95rXmeA9uHSMp6S1G0vluADASFksiUaPt mVllP5/7LFnBqb2VJSkOxuRCRbWgQH6iAhay2CCbXnXd7Z4gW/eoFeBSifeC5olp /1HHAhpZY9vIKJhq9MEu8fqnjsOdMdyb7dHZnWkznHGVzlrgroqSElWYyW1udNue oI7Z0mvMRh1EhtORyG6p4oe7PIhTIwVam9cYn0kMIEEVaZlJVL0yuq2chPouY1GC HM1ZSYCiIwY+15zJVO9rdnmJIO6AShFL3iCFKB+8L3wBoqiu6deerBsbXZR3Xvwz BkMuhxtEJkoNSSh76nd4SbVrtTzt/AW5J9kpa1SVsLBH -----END CERTIFICATE-----Generated at Fri Jan 2 09:30:04 2026 by rpki-client