This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/uYZjOh9Kgwsak2oPpAOEr0mbsfE.roa File: uYZjOh9Kgwsak2oPpAOEr0mbsfE.roa (raw, json) Hash identifier: OrmjLRTXG+oegV4PdrzJj0Bu9Tz8UUlGWQ3FZMfRKHE= Subject key identifier: B9:86:63:3A:1F:4A:83:0B:1A:93:6A:0F:A4:03:84:AF:49:9B:B1:F1 Certificate issuer: /CN=f141d664698b70ffb2a26f684b47deb6c8d59a53 Certificate serial: 019B7F15CC212AE59171DBD89E791CE749D6 Authority key identifier: F1:41:D6:64:69:8B:70:FF:B2:A2:6F:68:4B:47:DE:B6:C8:D5:9A:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UHWZGmLcP-yom9oS0fetsjVmlM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/uYZjOh9Kgwsak2oPpAOEr0mbsfE.roa Signing time: Fri 02 Jan 2026 14:21:33 +0000 ROA not before: Fri 02 Jan 2026 14:21:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201336 IP address blocks: 109.71.248.0/22 maxlen: 22 109.71.248.0/24 maxlen: 24 109.71.249.0/24 maxlen: 24 109.71.250.0/24 maxlen: 24 109.71.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.crl rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft rsync://rpki.ripe.net/repository/DEFAULT/8UHWZGmLcP-yom9oS0fetsjVmlM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:cc:21:2a:e5:91:71:db:d8:9e:79:1c:e7:49:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f141d664698b70ffb2a26f684b47deb6c8d59a53 Validity Not Before: Jan 2 14:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b986633a1f4a830b1a936a0fa40384af499bb1f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:44:29:ca:7e:38:26:e1:04:ad:a6:ff:3b:9a: 1d:12:d6:18:17:32:7b:9c:14:d6:b4:47:ca:2d:52: 3a:be:d7:62:ad:96:39:f7:fc:9f:88:dd:88:f9:2d: 7a:b1:1a:0d:03:80:87:04:ce:1a:ee:ea:60:f9:8f: 3f:2d:1c:67:4f:91:86:14:d5:08:36:c0:ea:bd:71: b4:3e:b8:fd:92:01:f7:2e:af:44:ab:b5:40:00:c6: 55:bd:68:fc:67:46:d4:18:e4:9b:1f:fb:2e:93:08: b2:29:78:8d:a2:bd:ff:1d:3b:c7:e2:96:f7:c9:64: 57:d8:58:fb:73:1d:fe:9a:7b:b3:fe:36:ce:65:7f: 96:44:9f:29:93:68:aa:3c:0d:cf:8f:4c:ba:35:21: 8d:41:1a:9c:5e:04:6b:df:e3:3f:e0:f9:ba:18:13: 72:3b:34:8b:56:d4:ed:6f:a1:87:5c:03:82:d3:76: ad:bd:52:d1:f4:2b:9f:ab:03:58:9e:f8:e0:a9:e0: 9b:c8:ff:a7:74:7b:64:90:05:05:57:e6:29:2e:29: 49:44:c1:1c:01:db:60:8f:60:b4:4a:6b:22:57:9a: 11:3d:90:b0:b7:1f:e6:47:50:93:61:2e:02:b0:cc: 89:14:50:a4:71:c0:8b:1d:3d:23:fa:78:1d:06:64: 99:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:86:63:3A:1F:4A:83:0B:1A:93:6A:0F:A4:03:84:AF:49:9B:B1:F1 X509v3 Authority Key Identifier: keyid:F1:41:D6:64:69:8B:70:FF:B2:A2:6F:68:4B:47:DE:B6:C8:D5:9A:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UHWZGmLcP-yom9oS0fetsjVmlM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/uYZjOh9Kgwsak2oPpAOEr0mbsfE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.71.248.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:10:5c:a0:cd:05:0e:ad:35:27:3b:04:26:38:64:3e:c5:0b: 6e:c8:b3:33:6c:50:79:31:42:f5:08:23:96:b5:c0:79:b5:52: 55:72:84:15:36:3b:eb:4e:43:30:33:38:02:c5:3b:41:0f:f8: 99:f3:c9:e8:17:25:0d:76:0c:dc:59:fb:53:24:6b:b8:87:6d: 29:5d:a1:3f:df:df:50:6a:32:b3:d8:63:96:8d:c7:76:86:33: 28:12:14:0d:99:c9:00:8d:bc:ba:92:ce:ce:0d:ab:8b:67:69: 3d:f7:4c:1c:e2:48:ef:30:b3:e6:3f:88:ef:37:7c:bc:0b:8e: 87:ab:4c:d7:9e:72:a7:1f:90:45:7e:e8:ff:2c:96:58:ee:7d: 3d:74:75:14:33:cb:45:08:13:0f:72:da:34:dc:12:68:6b:7e: 4f:c0:94:e6:ff:cd:67:e3:c3:3b:5a:08:e4:61:64:18:db:fd: 98:40:24:4f:25:a6:7e:f7:ce:ba:7f:8e:b2:3f:28:1a:b9:64: 7d:4e:5e:b6:27:77:ed:24:65:1e:69:c0:33:c0:96:37:b3:bd: ef:26:bc:73:e8:5d:11:9d:2b:74:23:33:c8:aa:3b:33:27:ff: 8c:80:dc:76:ab:fd:94:3f:08:23:a5:36:09:c3:e0:16:d5:b2: aa:b2:1a:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FcwhKuWRcdvYnnkc50nWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNDFkNjY0Njk4YjcwZmZiMmEyNmY2ODRiNDdkZWI2Yzhk NTlhNTMwHhcNMjYwMTAyMTQyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTg2NjMzYTFmNGE4MzBiMWE5MzZhMGZhNDAzODRhZjQ5OWJiMWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kQpyn44JuEErab/O5odEtYYFzJ7 nBTWtEfKLVI6vtdirZY59/yfiN2I+S16sRoNA4CHBM4a7upg+Y8/LRxnT5GGFNUI NsDqvXG0Prj9kgH3Lq9Eq7VAAMZVvWj8Z0bUGOSbH/sukwiyKXiNor3/HTvH4pb3 yWRX2Fj7cx3+mnuz/jbOZX+WRJ8pk2iqPA3Pj0y6NSGNQRqcXgRr3+M/4Pm6GBNy OzSLVtTtb6GHXAOC03atvVLR9CufqwNYnvjgqeCbyP+ndHtkkAUFV+YpLilJRMEc Adtgj2C0SmsiV5oRPZCwtx/mR1CTYS4CsMyJFFCkccCLHT0j+ngdBmSZnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLmGYzofSoMLGpNqD6QDhK9Jm7HxMB8GA1UdIwQY MBaAFPFB1mRpi3D/sqJvaEtH3rbI1ZpTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFVIV1pHbUxjUC15b205b1MwZmV0c2pWbWxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yZThhYmUtOGU3MC00NzE1LTkxYWUt OTYzZDEzZmQwOWJiLzEvdVlaak9oOUtnd3NhazJvUHBBT0VyMG1ic2ZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8yZThhYmUtOGU3MC00NzE1LTkxYWUtOTYzZDEzZmQwOWJi LzEvOFVIV1pHbUxjUC15b205b1MwZmV0c2pWbWxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbUf4MA0G CSqGSIb3DQEBCwUAA4IBAQB6EFygzQUOrTUnOwQmOGQ+xQtuyLMzbFB5MUL1CCOW tcB5tVJVcoQVNjvrTkMwMzgCxTtBD/iZ88noFyUNdgzcWftTJGu4h20pXaE/399Q ajKz2GOWjcd2hjMoEhQNmckAjby6ks7ODauLZ2k990wc4kjvMLPmP4jvN3y8C46H q0zXnnKnH5BFfuj/LJZY7n09dHUUM8tFCBMPcto03BJoa35PwJTm/81n48M7Wgjk YWQY2/2YQCRPJaZ+9866f46yPygauWR9Tl62J3ftJGUeacAzwJY3s73vJrxz6F0R nSt0IzPIqjszJ/+MgNx2q/2UPwgjpTYJw+AW1bKqshoT -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:57 2026 by rpki-client