This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/pUazdjRdFJkBrTHoULISxbR8Lyk.roa File: pUazdjRdFJkBrTHoULISxbR8Lyk.roa (raw, json) Hash identifier: spesHfXOuqKlEX5RunxdrOt5uA0eHq4U5s/6CkWrMg4= Subject key identifier: A5:46:B3:76:34:5D:14:99:01:AD:31:E8:50:B2:12:C5:B4:7C:2F:29 Certificate issuer: /CN=7111859377ead6f44f940eb8d31c3f3becc53b05 Certificate serial: 019B76EB7378BD733444B9301B354DA22924 Authority key identifier: 71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/pUazdjRdFJkBrTHoULISxbR8Lyk.roa Signing time: Thu 01 Jan 2026 00:18:20 +0000 ROA not before: Thu 01 Jan 2026 00:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211918 IP address blocks: 185.235.140.0/24 maxlen: 24 2a0d:6480::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:73:78:bd:73:34:44:b9:30:1b:35:4d:a2:29:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7111859377ead6f44f940eb8d31c3f3becc53b05 Validity Not Before: Jan 1 00:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a546b376345d149901ad31e850b212c5b47c2f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:63:57:77:33:90:3f:6e:3f:48:09:1e:5d:e0: 1a:65:83:22:10:3a:c8:b1:26:06:04:93:11:78:1a: 4a:fd:3c:dc:e4:64:35:91:16:7b:75:e5:7b:1d:19: a0:6c:1f:dc:f2:4e:37:59:87:c0:61:0f:65:c2:4b: 2d:e4:49:ec:c9:c2:52:8b:4b:6a:88:cf:29:5b:df: 8a:f9:6f:7f:f4:fd:a0:19:5b:ae:a0:27:86:27:ce: 92:c5:1e:53:c2:2a:58:48:ee:88:37:8f:fe:97:02: 70:fa:01:19:9a:3a:3f:b1:1c:fd:5e:c3:ec:ac:d1: 30:ac:8e:0b:75:3a:b6:2f:dc:32:fe:f9:57:23:34: 66:e0:37:79:22:6b:a6:e9:6e:84:15:e1:e1:4a:2d: c9:73:69:09:8b:e4:14:73:fa:73:36:2c:65:e0:5e: 02:bb:8d:bc:4a:6a:84:70:7d:3b:e3:f4:7e:3b:b1: 2b:f1:8c:5d:82:7c:f3:10:ae:7a:26:46:56:10:9d: 4a:b2:6a:dd:34:9d:7b:b1:17:4e:63:6c:82:a1:7f: 32:75:c7:9d:cf:fd:a0:ad:68:e3:f5:ff:8e:b7:97: 84:1d:2b:75:d8:02:fd:91:94:48:9c:b3:8b:fc:2b: be:0c:62:0c:db:3f:e8:e2:bc:11:7d:e0:9d:a3:3e: 62:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:46:B3:76:34:5D:14:99:01:AD:31:E8:50:B2:12:C5:B4:7C:2F:29 X509v3 Authority Key Identifier: keyid:71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/pUazdjRdFJkBrTHoULISxbR8Lyk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.235.140.0/24 IPv6: 2a0d:6480::/29 Signature Algorithm: sha256WithRSAEncryption 4e:f8:13:1a:06:cf:7c:3b:e9:23:0e:6d:b0:3e:e4:cb:d8:67: 4a:e4:b8:1b:d9:d4:62:9f:01:7d:6d:77:cd:8e:9a:d2:ea:ee: 86:f9:08:92:ff:d7:e2:e8:20:1e:ac:03:cf:df:b3:9a:05:30: dc:b0:95:3f:61:b9:ac:69:83:4d:9a:cc:0a:ee:9d:b7:fd:e5: 1f:f2:fb:45:2b:9c:fc:36:8d:1f:c5:a6:9e:e9:0a:0a:3d:af: 1d:ce:7e:c7:60:4a:20:11:5a:5e:76:af:d2:22:c7:38:6b:f4: 92:0b:dd:5b:7a:55:32:ed:3c:fc:49:5c:db:63:5d:b6:68:33: ce:32:b0:f3:9e:f3:44:0c:6d:10:95:8a:f1:6e:49:d4:61:8a: 6c:9e:43:84:90:7c:a0:d0:13:a5:e5:df:5a:a8:5f:8c:87:a6: f8:ef:44:a5:e6:8e:79:61:bc:af:f6:21:77:10:c5:79:6a:29: c6:4a:91:b2:3f:50:99:ad:6a:4d:ad:db:3f:98:ce:a7:66:68: 67:2f:87:b4:cd:78:48:c9:21:da:92:c3:0c:31:6e:76:95:d3: bc:66:ef:3f:70:f8:3d:d5:fb:f4:dd:33:14:b4:b8:99:2c:0d: 4d:4d:3f:7c:59:6c:bb:73:fa:d6:2d:ea:78:df:6c:da:e4:47: 8f:b2:b5:17 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt263N4vXM0RLkwGzVNoikkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMTE4NTkzNzdlYWQ2ZjQ0Zjk0MGViOGQzMWMzZjNiZWNj NTNiMDUwHhcNMjYwMTAxMDAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTQ2YjM3NjM0NWQxNDk5MDFhZDMxZTg1MGIyMTJjNWI0N2MyZjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWNXdzOQP24/SAkeXeAaZYMiEDrI sSYGBJMReBpK/Tzc5GQ1kRZ7deV7HRmgbB/c8k43WYfAYQ9lwkst5EnsycJSi0tq iM8pW9+K+W9/9P2gGVuuoCeGJ86SxR5TwipYSO6IN4/+lwJw+gEZmjo/sRz9XsPs rNEwrI4LdTq2L9wy/vlXIzRm4Dd5Imum6W6EFeHhSi3Jc2kJi+QUc/pzNixl4F4C u428SmqEcH074/R+O7Er8YxdgnzzEK56JkZWEJ1KsmrdNJ17sRdOY2yCoX8ydced z/2grWjj9f+Ot5eEHSt12AL9kZRInLOL/Cu+DGIM2z/o4rwRfeCdoz5iFQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKVGs3Y0XRSZAa0x6FCyEsW0fC8pMB8GA1UdIwQY MBaAFHERhZN36tb0T5QOuNMcPzvsxTsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1JHRmszZnExdlJQbEE2NDB4d19PLXpGT3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi84YjQzY2ItZjIwOS00ZjIyLTkzMGQt NzU4Y2E0ZDQ4YmMyLzEvcFVhemRqUmRGSmtCclRIb1VMSVN4YlI4THlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi84YjQzY2ItZjIwOS00ZjIyLTkzMGQtNzU4Y2E0ZDQ4YmMy LzEvY1JHRmszZnExdlJQbEE2NDB4d19PLXpGT3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAueuMMA0E AgACMAcDBQMqDWSAMA0GCSqGSIb3DQEBCwUAA4IBAQBO+BMaBs98O+kjDm2wPuTL 2GdK5Lgb2dRinwF9bXfNjprS6u6G+QiS/9fi6CAerAPP37OaBTDcsJU/YbmsaYNN mswK7p23/eUf8vtFK5z8No0fxaae6QoKPa8dzn7HYEogEVpedq/SIsc4a/SSC91b elUy7Tz8SVzbY122aDPOMrDznvNEDG0QlYrxbknUYYpsnkOEkHyg0BOl5d9aqF+M h6b470Sl5o55Ybyv9iF3EMV5ainGSpGyP1CZrWpNrds/mM6nZmhnL4e0zXhIySHa ksMMMW52ldO8Zu8/cPg91fv03TMUtLiZLA1NTT98WWy7c/rWLep432za5EePsrUX -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:33 2026 by rpki-client