This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/uCHdbczowtuleN607t3-X8nqm8I.roa File: uCHdbczowtuleN607t3-X8nqm8I.roa (raw, json) Hash identifier: yiE7OXub7Co6WZANPsf3qZwNA4zRpdg1YwhmaQglGcE= Subject key identifier: B8:21:DD:6D:CC:E8:C2:DB:A5:78:DE:B4:EE:DD:FE:5F:C9:EA:9B:C2 Certificate issuer: /CN=75905949e963d3577be076326ca0b91ff32f9684 Certificate serial: 019B7BA3D30BF461BF88FC943A53F2140435 Authority key identifier: 75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/uCHdbczowtuleN607t3-X8nqm8I.roa Signing time: Thu 01 Jan 2026 22:18:12 +0000 ROA not before: Thu 01 Jan 2026 22:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.229.146.0/24 maxlen: 24 185.229.147.0/24 maxlen: 24 2a0d:d600::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d3:0b:f4:61:bf:88:fc:94:3a:53:f2:14:04:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75905949e963d3577be076326ca0b91ff32f9684 Validity Not Before: Jan 1 22:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b821dd6dcce8c2dba578deb4eeddfe5fc9ea9bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:32:97:2d:dd:fb:23:36:59:4b:6e:cd:84:0f: 4b:b5:8c:49:a4:e1:22:a9:96:ab:d6:28:94:1c:4d: 2c:37:84:54:c9:96:6f:c8:04:36:23:70:6f:00:f8: 29:4a:a7:e1:60:b1:86:4d:57:44:4d:9b:77:f2:1e: 6c:72:ed:e0:1f:7e:99:7c:4a:d9:00:89:f0:bf:f9: 9d:c9:5c:83:a2:30:f6:9e:53:e7:77:0d:4e:1d:17: 7b:a0:11:90:6d:c1:a4:13:96:a1:66:ad:50:62:5e: 32:30:c9:4b:1e:06:e4:96:54:fa:7f:52:4f:a3:67: 46:0f:a4:ed:02:46:9a:ad:90:58:f0:2d:38:83:5c: c6:92:70:9c:73:fc:64:33:3a:d8:2f:f9:e2:92:53: 2f:53:8e:24:c9:4e:d3:89:72:af:ee:2c:e2:dc:6a: c6:4f:d8:e6:da:a5:99:2e:06:8a:c3:6a:79:37:5b: 18:63:fa:46:b2:b4:4b:e2:48:9f:11:1b:d0:98:f8: 02:e5:b3:a8:e3:72:c2:3a:eb:fa:5f:41:d1:66:2d: 1c:03:9e:8c:0f:34:1b:69:1e:6a:e3:b2:24:11:82: 0d:3b:c3:da:25:8c:64:11:99:fc:b9:71:81:4d:5d: 98:48:c4:38:33:d9:20:1a:03:a9:a2:7b:77:7f:4c: d7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:21:DD:6D:CC:E8:C2:DB:A5:78:DE:B4:EE:DD:FE:5F:C9:EA:9B:C2 X509v3 Authority Key Identifier: keyid:75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/uCHdbczowtuleN607t3-X8nqm8I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.229.146.0/23 IPv6: 2a0d:d600::/32 Signature Algorithm: sha256WithRSAEncryption 41:76:95:33:ac:8e:96:b4:f2:d5:5e:64:32:5f:cc:54:10:86: 58:22:d9:6d:e8:df:e2:1a:f7:ee:e7:6d:80:88:15:52:6d:84: 49:27:d0:9c:96:8f:3d:e5:54:cc:4f:fa:f1:24:f5:de:a2:20: c8:67:9e:d7:b4:ad:53:df:ae:ef:c1:ed:9e:2f:01:15:41:a9: 20:ac:8f:1b:da:fe:e2:57:40:3d:8d:a4:18:81:2e:21:25:15: 9b:7f:c0:22:93:a9:98:98:7a:05:9c:27:29:28:ab:c2:46:1a: d2:bd:b0:5b:69:4f:36:0b:23:c7:39:40:28:89:3b:4c:78:8c: a7:fc:62:b7:e1:9e:7f:ff:7d:30:2b:c6:4c:f7:bf:a3:a7:a5: 1e:7e:d2:09:b6:41:bd:3c:95:a5:79:2d:45:a7:c3:9e:0e:b1: b5:b4:41:4d:fb:4c:4f:81:c5:43:1c:e3:f7:ff:30:8d:46:5e: 9f:03:e9:4c:ee:97:a7:6b:e0:2b:15:85:18:e8:9c:5a:59:fc: 9b:4c:cf:53:5f:c3:b4:b1:c2:25:ef:a1:06:a1:98:a4:7e:68: af:11:68:56:e2:33:7b:b5:dd:8b:bb:ef:2f:7a:da:de:b2:a3: 55:9b:19:9c:ad:a6:37:a2:05:ca:8c:7b:b3:b4:f2:20:52:15: 13:40:d6:41 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7o9ML9GG/iPyUOlPyFAQ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1OTA1OTQ5ZTk2M2QzNTc3YmUwNzYzMjZjYTBiOTFmZjMy Zjk2ODQwHhcNMjYwMTAxMjIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODIxZGQ2ZGNjZThjMmRiYTU3OGRlYjRlZWRkZmU1ZmM5ZWE5YmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTKXLd37IzZZS27NhA9LtYxJpOEi qZar1iiUHE0sN4RUyZZvyAQ2I3BvAPgpSqfhYLGGTVdETZt38h5scu3gH36ZfErZ AInwv/mdyVyDojD2nlPndw1OHRd7oBGQbcGkE5ahZq1QYl4yMMlLHgbkllT6f1JP o2dGD6TtAkaarZBY8C04g1zGknCcc/xkMzrYL/niklMvU44kyU7TiXKv7izi3GrG T9jm2qWZLgaKw2p5N1sYY/pGsrRL4kifERvQmPgC5bOo43LCOuv6X0HRZi0cA56M DzQbaR5q47IkEYINO8PaJYxkEZn8uXGBTV2YSMQ4M9kgGgOpont3f0zX8wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLgh3W3M6MLbpXjetO7d/l/J6pvCMB8GA1UdIwQY MBaAFHWQWUnpY9NXe+B2MmyguR/zL5aEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFpCWlNlbGowMWQ3NEhZeWJLQzVIX012bG9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kNjFmNzMtYWMwYi00NWJjLWE1YTQt MWE4MzAxYjdlNmRlLzEvdUNIZGJjem93dHVsZU42MDd0My1YOG5xbThJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9kNjFmNzMtYWMwYi00NWJjLWE1YTQtMWE4MzAxYjdlNmRl LzEvZFpCWlNlbGowMWQ3NEhZeWJLQzVIX012bG9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBueWSMA0E AgACMAcDBQAqDdYAMA0GCSqGSIb3DQEBCwUAA4IBAQBBdpUzrI6WtPLVXmQyX8xU EIZYItlt6N/iGvfu522AiBVSbYRJJ9Cclo895VTMT/rxJPXeoiDIZ57XtK1T367v we2eLwEVQakgrI8b2v7iV0A9jaQYgS4hJRWbf8Aik6mYmHoFnCcpKKvCRhrSvbBb aU82CyPHOUAoiTtMeIyn/GK34Z5//30wK8ZM97+jp6UeftIJtkG9PJWleS1Fp8Oe DrG1tEFN+0xPgcVDHOP3/zCNRl6fA+lM7pena+ArFYUY6JxaWfybTM9TX8O0scIl 76EGoZikfmivEWhW4jN7td2Lu+8vetresqNVmxmcraY3ogXKjHuztPIgUhUTQNZB -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:12 2026 by rpki-client