This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/uECQUsjfaqrlYL383G6Bm7t8I4M.roa File: uECQUsjfaqrlYL383G6Bm7t8I4M.roa (raw, json) Hash identifier: fiYRp6eJInd1HBPu5f1buVFXTSVD/xHqEtnjRPebiMg= Subject key identifier: B8:40:90:52:C8:DF:6A:AA:E5:60:BD:FC:DC:6E:81:9B:BB:7C:23:83 Certificate issuer: /CN=b2853aa1eb32bfee0feb1483c14936d101f16edf Certificate serial: 019B7A5A880F1A424FCE733E109E7079204F Authority key identifier: B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/uECQUsjfaqrlYL383G6Bm7t8I4M.roa Signing time: Thu 01 Jan 2026 16:18:31 +0000 ROA not before: Thu 01 Jan 2026 16:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49612 IP address blocks: 185.178.211.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 18:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:88:0f:1a:42:4f:ce:73:3e:10:9e:70:79:20:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2853aa1eb32bfee0feb1483c14936d101f16edf Validity Not Before: Jan 1 16:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8409052c8df6aaae560bdfcdc6e819bbb7c2383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:75:4d:a2:66:c5:a5:c7:3c:c3:18:e3:3d:69: 35:6d:1b:17:ca:94:8f:b1:5e:7a:b8:6e:45:bf:1b: 03:54:86:63:f1:26:df:d3:b1:4e:5a:c6:aa:47:fb: 37:e0:fd:1a:83:84:fa:64:49:86:e1:37:ee:70:e5: 1c:43:ee:fb:99:ee:02:75:33:dd:fc:b7:bd:2d:3b: 61:68:a2:d7:08:a4:9e:e9:04:ae:13:13:d9:1d:30: f0:df:e4:1a:77:8c:40:5d:5d:b9:04:42:8d:47:cd: 6a:4c:ae:f5:f3:db:9c:d8:c2:42:5e:52:dc:44:28: 67:ec:07:dd:bb:da:6a:92:8c:0c:01:fb:ed:13:2d: 24:0e:4a:ad:db:77:13:af:93:be:88:7c:54:37:01: 41:22:95:d6:1c:91:c6:9a:f8:81:dd:4e:33:be:e9: 5d:2b:b4:52:07:17:ab:46:90:ca:f4:b4:b8:cc:81: 11:6a:be:0e:8e:00:4b:67:d8:8f:05:51:f0:cf:3b: 9b:cb:22:fe:20:5f:29:c4:d2:39:6a:ed:56:f5:f0: d4:e3:83:ce:c8:c0:b7:1b:0c:0e:34:0d:b2:df:75: 42:a1:0f:90:19:15:e7:24:86:16:a5:91:2a:ab:58: f9:fb:22:9d:61:e1:e3:4b:27:75:dd:eb:ce:70:75: 55:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:40:90:52:C8:DF:6A:AA:E5:60:BD:FC:DC:6E:81:9B:BB:7C:23:83 X509v3 Authority Key Identifier: keyid:B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/uECQUsjfaqrlYL383G6Bm7t8I4M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.178.211.0/24 Signature Algorithm: sha256WithRSAEncryption 83:06:a7:32:bd:44:fc:4a:46:f0:ad:b2:14:6a:07:21:79:e9: 82:3a:1d:44:55:16:ef:17:74:4d:8b:63:18:40:c4:db:b8:a6: c1:3d:de:90:9c:0e:42:7c:a9:b5:98:a9:59:0a:61:e5:bc:6c: 95:69:c7:15:bb:ed:bf:6d:8c:dc:42:7a:1f:b7:67:28:37:ad: 1b:2e:a1:bb:df:0a:68:7f:7e:b2:bd:00:3a:87:a4:40:9e:4e: c2:bf:64:18:8d:ea:69:21:49:b1:d4:70:4c:6f:61:fd:93:2c: 01:c5:72:f3:75:7a:f0:14:d7:39:e6:b2:9f:61:08:2d:ba:53: e0:59:62:f0:14:69:25:6c:b2:ae:18:82:0d:f3:3c:a9:71:39: cc:fb:53:f1:15:3e:d1:c4:e4:f1:77:c8:c3:50:17:63:2e:4a: 26:cc:04:b7:23:d2:34:28:58:3a:5e:c5:41:86:ad:c8:c4:da: b0:b6:00:46:27:58:cf:96:c4:15:1a:0c:9b:24:fc:f2:9a:be: 4d:a2:9b:6c:b5:e6:6d:94:62:1c:94:83:71:0f:25:23:2d:ff: 52:1e:a2:41:43:ca:c7:53:9b:ac:ba:ad:9c:64:70:7a:a5:ce: 78:cb:ef:44:c9:26:3f:fa:d1:38:b7:0e:9d:d6:65:45:09:9e: 00:6c:2a:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WogPGkJPznM+EJ5weSBPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyODUzYWExZWIzMmJmZWUwZmViMTQ4M2MxNDkzNmQxMDFm MTZlZGYwHhcNMjYwMTAxMTYxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODQwOTA1MmM4ZGY2YWFhZTU2MGJkZmNkYzZlODE5YmJiN2MyMzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHVNombFpcc8wxjjPWk1bRsXypSP sV56uG5FvxsDVIZj8Sbf07FOWsaqR/s34P0ag4T6ZEmG4TfucOUcQ+77me4CdTPd /Le9LTthaKLXCKSe6QSuExPZHTDw3+Qad4xAXV25BEKNR81qTK7189uc2MJCXlLc RChn7Afdu9pqkowMAfvtEy0kDkqt23cTr5O+iHxUNwFBIpXWHJHGmviB3U4zvuld K7RSBxerRpDK9LS4zIERar4OjgBLZ9iPBVHwzzubyyL+IF8pxNI5au1W9fDU44PO yMC3GwwONA2y33VCoQ+QGRXnJIYWpZEqq1j5+yKdYeHjSyd13evOcHVVqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLhAkFLI32qq5WC9/NxugZu7fCODMB8GA1UdIwQY MBaAFLKFOqHrMr/uD+sUg8FJNtEB8W7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc29VNm9lc3l2LTRQNnhTRHdVazIwUUh4YnQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zMWM4MTUtZDk2YS00YmI2LThjY2Yt ZjJiODEwNzliNzQ2LzEvdUVDUVVzamZhcXJsWUwzODNHNkJtN3Q4STRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8zMWM4MTUtZDk2YS00YmI2LThjY2YtZjJiODEwNzliNzQ2 LzEvc29VNm9lc3l2LTRQNnhTRHdVazIwUUh4YnQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubLTMA0G CSqGSIb3DQEBCwUAA4IBAQCDBqcyvUT8SkbwrbIUagcheemCOh1EVRbvF3RNi2MY QMTbuKbBPd6QnA5CfKm1mKlZCmHlvGyVaccVu+2/bYzcQnoft2coN60bLqG73wpo f36yvQA6h6RAnk7Cv2QYjeppIUmx1HBMb2H9kywBxXLzdXrwFNc55rKfYQgtulPg WWLwFGklbLKuGIIN8zypcTnM+1PxFT7RxOTxd8jDUBdjLkomzAS3I9I0KFg6XsVB hq3IxNqwtgBGJ1jPlsQVGgybJPzymr5NoptsteZtlGIclINxDyUjLf9SHqJBQ8rH U5usuq2cZHB6pc54y+9EySY/+tE4tw6d1mVFCZ4AbCqU -----END CERTIFICATE-----Generated at Wed Feb 4 23:36:12 2026 by rpki-client