This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/uHeEvudtI10gXPZp_At1Rn0HFFo.roa File: uHeEvudtI10gXPZp_At1Rn0HFFo.roa (raw, json) Hash identifier: g0kiDI0eo7iYfpSxTP76fUJ8Afyuru8rKk/sGNtho80= Subject key identifier: B8:77:84:BE:E7:6D:23:5D:20:5C:F6:69:FC:0B:75:46:7D:07:14:5A Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Certificate serial: 019B7BA539A1050C57AA377A352D55CB16B9 Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/uHeEvudtI10gXPZp_At1Rn0HFFo.roa Signing time: Thu 01 Jan 2026 22:19:44 +0000 ROA not before: Thu 01 Jan 2026 22:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202736 IP address blocks: 185.219.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 21:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:39:a1:05:0c:57:aa:37:7a:35:2d:55:cb:16:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Validity Not Before: Jan 1 22:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b87784bee76d235d205cf669fc0b75467d07145a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:01:70:d8:af:04:d5:b9:76:31:08:c4:d9:37: 63:24:d0:89:fe:ed:f4:c2:65:d5:9e:89:86:23:25: 13:86:e3:e7:d9:c6:4b:ff:cf:4e:a9:14:a4:11:22: 81:d1:30:e9:f7:ee:f0:5a:6c:f3:2a:a0:9e:28:66: 7a:62:ca:94:1b:a9:65:ff:79:2b:f6:1b:84:1d:a1: b3:63:8b:55:e9:77:ef:14:fe:98:e2:10:8b:1c:c8: 59:01:3a:b6:20:ce:ed:9b:f3:2f:20:c5:58:8e:24: e1:77:8e:3f:7c:53:20:7c:09:5c:53:b6:f7:52:4e: 9f:07:c1:8d:68:bd:e5:8b:9b:41:4b:4e:c8:6c:20: 93:ad:82:dd:b6:f4:72:54:a3:2c:95:47:bb:da:32: 2b:3f:01:2b:37:00:ec:c7:28:a6:78:4a:16:67:50: 27:71:5f:e4:69:ec:78:d1:9a:af:76:1b:23:07:ce: 92:88:e0:2d:16:09:0f:86:e2:93:25:66:73:33:fb: 13:32:cb:ba:c0:34:98:00:21:00:21:b8:b0:78:ac: 6c:f8:76:81:d3:46:78:07:b2:10:c4:5f:e0:26:71: d4:3a:4c:bc:e4:4c:0c:63:62:2e:ad:d7:f0:53:1d: ee:2d:24:4f:df:c4:b7:52:d1:07:2c:ba:45:8d:e7: 43:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:77:84:BE:E7:6D:23:5D:20:5C:F6:69:FC:0B:75:46:7D:07:14:5A X509v3 Authority Key Identifier: keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/uHeEvudtI10gXPZp_At1Rn0HFFo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.219.188.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:ff:61:25:e6:e1:e6:c8:9a:a9:c3:3d:2b:c1:17:19:16:95: ef:e7:e9:b3:6f:d2:74:43:b8:0e:52:50:8b:93:3e:9f:ae:7e: 8a:b0:85:f2:11:42:4c:55:da:bc:69:2d:c1:1e:67:d8:b7:b6: a8:51:ec:c4:be:4c:29:d6:19:0f:a1:77:e7:f2:ed:20:a4:b1: cd:b3:dc:3e:ac:5b:2e:dd:8f:10:2e:1e:ca:31:81:0e:63:21: 43:ec:a3:fe:2b:c8:63:87:d2:b7:04:30:9f:49:4a:ce:4b:1b: 5d:e4:55:2c:c1:8d:d9:1b:79:63:fd:70:b5:2f:c1:dd:2a:5c: 60:9d:3e:78:81:42:5e:e3:48:9b:e6:ba:5b:b7:f8:d6:37:cf: 25:81:ac:7f:34:79:60:3b:1c:ce:a2:a0:9c:f9:c2:3c:b6:0a: fb:4f:c8:3b:f0:23:30:4a:fa:5f:ce:c2:e3:94:18:5e:97:84: de:f2:99:14:0c:72:fc:ea:92:7d:a5:ed:46:47:c7:e2:60:f3: 31:98:13:4d:e6:8d:c1:98:0d:7d:5b:b4:cc:84:2d:30:a9:b9: 9b:a9:67:a6:2e:94:ae:64:f1:6b:dd:a8:3f:9a:42:87:2a:73: fe:ee:b2:77:64:31:ec:57:df:75:ca:86:f7:f2:e2:c6:22:fc: 53:4d:f2:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pTmhBQxXqjd6NS1Vyxa5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YWEzZmJjNzhlMzEyMjkxNTdjNzhiNmQyM2E2NWViMmUz NTNkY2UwHhcNMjYwMTAxMjIxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODc3ODRiZWU3NmQyMzVkMjA1Y2Y2NjlmYzBiNzU0NjdkMDcxNDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QFw2K8E1bl2MQjE2TdjJNCJ/u30 wmXVnomGIyUThuPn2cZL/89OqRSkESKB0TDp9+7wWmzzKqCeKGZ6YsqUG6ll/3kr 9huEHaGzY4tV6XfvFP6Y4hCLHMhZATq2IM7tm/MvIMVYjiThd44/fFMgfAlcU7b3 Uk6fB8GNaL3li5tBS07IbCCTrYLdtvRyVKMslUe72jIrPwErNwDsxyimeEoWZ1An cV/kaex40ZqvdhsjB86SiOAtFgkPhuKTJWZzM/sTMsu6wDSYACEAIbiweKxs+HaB 00Z4B7IQxF/gJnHUOky85EwMY2IurdfwUx3uLSRP38S3UtEHLLpFjedD3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLh3hL7nbSNdIFz2afwLdUZ9BxRaMB8GA1UdIwQY MBaAFNaqP7x44xIpFXx4ttI6ZesuNT3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2Mt ODI3NmM4YWFjNTBlLzEvdUhlRXZ1ZHRJMTBnWFBacF9BdDFSbjBIRkZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2MtODI3NmM4YWFjNTBl LzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudu8MA0G CSqGSIb3DQEBCwUAA4IBAQBf/2El5uHmyJqpwz0rwRcZFpXv5+mzb9J0Q7gOUlCL kz6frn6KsIXyEUJMVdq8aS3BHmfYt7aoUezEvkwp1hkPoXfn8u0gpLHNs9w+rFsu 3Y8QLh7KMYEOYyFD7KP+K8hjh9K3BDCfSUrOSxtd5FUswY3ZG3lj/XC1L8HdKlxg nT54gUJe40ib5rpbt/jWN88lgax/NHlgOxzOoqCc+cI8tgr7T8g78CMwSvpfzsLj lBhel4Te8pkUDHL86pJ9pe1GR8fiYPMxmBNN5o3BmA19W7TMhC0wqbmbqWemLpSu ZPFr3ag/mkKHKnP+7rJ3ZDHsV991yob38uLGIvxTTfJ8 -----END CERTIFICATE-----Generated at Sun Jan 11 07:31:25 2026 by rpki-client