This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/UoSlOzteIllw7JKAMLD2ES3PoNg.roa File: UoSlOzteIllw7JKAMLD2ES3PoNg.roa (raw, json) Hash identifier: UeqZoThE4U/xsy3ukGaq6pq/5t3D+Ob5wQ2JcDQDIQA= Subject key identifier: 52:84:A5:3B:3B:5E:22:59:70:EC:92:80:30:B0:F6:11:2D:CF:A0:D8 Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 019B79EBDF69B5E22B0F5BABDDD2943AD5F3 Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/UoSlOzteIllw7JKAMLD2ES3PoNg.roa Signing time: Thu 01 Jan 2026 14:17:39 +0000 ROA not before: Thu 01 Jan 2026 14:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51066 IP address blocks: 193.80.132.0/22 maxlen: 22 193.80.136.0/21 maxlen: 21 193.80.144.0/20 maxlen: 20 193.80.160.0/22 maxlen: 22 193.81.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:df:69:b5:e2:2b:0f:5b:ab:dd:d2:94:3a:d5:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Jan 1 14:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5284a53b3b5e225970ec928030b0f6112dcfa0d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:63:7e:a4:80:a4:99:39:bb:1c:48:63:db:ff: 14:38:df:72:75:07:d4:8e:aa:f4:be:12:b5:a9:71: c6:c1:e9:62:c0:30:48:b3:e7:a1:c7:90:f0:77:ff: 0e:a9:4f:9b:69:8c:c7:fc:45:f8:4f:2b:db:4b:f3: 4a:7e:98:aa:b5:8c:b4:cc:42:2f:a4:77:2e:78:c6: bb:38:4f:7d:92:76:14:15:9b:36:65:01:9e:26:d8: ed:8a:e7:4b:99:33:8b:12:d9:62:59:95:0e:1d:73: 34:6c:7d:96:b2:8a:c2:40:f2:9a:02:c7:d7:75:b2: be:38:15:d2:5c:fb:ef:f4:68:f3:3b:c5:96:ed:02: a6:28:8d:2e:1f:03:f9:6e:0e:8e:0b:76:2a:ee:1a: 0f:d5:14:27:72:6a:33:1a:43:f6:f6:d6:82:a0:8d: 68:7d:a2:b3:0d:ee:fb:02:fb:14:32:57:7c:1c:d2: 0a:02:0d:5f:a0:f5:49:68:7a:f2:32:17:2c:b2:e3: c8:42:c3:db:e0:26:eb:cd:28:a6:56:7a:a3:47:8a: 0d:62:1f:46:52:6b:ca:b1:59:fd:f1:0f:d9:bb:a0: fd:20:7c:b0:bf:d7:dc:cc:c7:75:5b:16:e6:fb:fc: 05:e0:3e:4d:9d:dc:17:7b:b5:8f:c7:4c:ac:8d:88: 70:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:84:A5:3B:3B:5E:22:59:70:EC:92:80:30:B0:F6:11:2D:CF:A0:D8 X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/UoSlOzteIllw7JKAMLD2ES3PoNg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.80.132.0-193.80.163.255 193.81.1.0/24 Signature Algorithm: sha256WithRSAEncryption 02:43:bd:9f:c7:24:d0:d3:28:a1:24:1e:84:e5:66:35:89:3c: b7:39:49:cc:77:e7:9c:47:50:8f:0a:52:32:aa:54:ff:10:37: ab:6d:f8:f4:f2:33:51:60:cf:e6:7b:7a:87:04:98:ee:fa:7a: 93:cb:8a:18:7c:a4:14:41:6c:3d:3d:55:35:15:bf:76:96:ab: 65:8b:03:1f:dd:fd:cb:b1:67:3f:46:6a:5d:f0:a3:e7:4d:63: 67:ee:29:9b:72:83:b4:66:31:94:92:08:48:e7:59:98:81:b8: 18:ca:03:81:22:12:7b:65:33:78:c8:10:cf:06:37:d8:da:d4: 21:e6:e0:61:d4:23:65:5e:d9:0d:8f:f7:61:86:6b:c3:1f:03: 05:80:4e:ec:2c:5f:29:eb:09:04:d4:1a:5c:5d:36:52:ab:45: 45:9f:17:8c:c5:b2:8d:e4:1c:bc:cb:5c:e7:1a:fb:2e:6d:f7: ab:65:a6:14:df:09:6e:14:e4:0e:d8:23:cb:db:eb:fb:7b:5a: d6:1b:16:dc:99:b4:9e:6a:ff:96:63:f4:ce:8a:d7:02:a6:04: ac:9a:46:80:41:b5:90:4c:1e:52:9d:89:6c:2e:48:a0:26:25: 8c:83:0d:87:db:a5:eb:b6:c9:8a:8d:f9:92:eb:b4:f6:af:de: 41:3a:f1:a7 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt5699pteIrD1ur3dKUOtXzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjYwMTAxMTQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Mjg0YTUzYjNiNWUyMjU5NzBlYzkyODAzMGIwZjYxMTJkY2ZhMGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2N+pICkmTm7HEhj2/8UON9ydQfU jqr0vhK1qXHGweliwDBIs+ehx5Dwd/8OqU+baYzH/EX4TyvbS/NKfpiqtYy0zEIv pHcueMa7OE99knYUFZs2ZQGeJtjtiudLmTOLEtliWZUOHXM0bH2WsorCQPKaAsfX dbK+OBXSXPvv9GjzO8WW7QKmKI0uHwP5bg6OC3Yq7hoP1RQncmozGkP29taCoI1o faKzDe77AvsUMld8HNIKAg1foPVJaHryMhcssuPIQsPb4CbrzSimVnqjR4oNYh9G UmvKsVn98Q/Zu6D9IHywv9fczMd1Wxbm+/wF4D5NndwXe7WPx0ysjYhwWwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFFKEpTs7XiJZcOySgDCw9hEtz6DYMB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEvVW9TbE96dGVJbGx3N0pLQU1MRDJFUzNQb05nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBALBUIQD BALBUKADBADBUQEwDQYJKoZIhvcNAQELBQADggEBAAJDvZ/HJNDTKKEkHoTlZjWJ PLc5Scx355xHUI8KUjKqVP8QN6tt+PTyM1Fgz+Z7eocEmO76epPLihh8pBRBbD09 VTUVv3aWq2WLAx/d/cuxZz9Gal3wo+dNY2fuKZtyg7RmMZSSCEjnWZiBuBjKA4Ei EntlM3jIEM8GN9ja1CHm4GHUI2Ve2Q2P92GGa8MfAwWATuwsXynrCQTUGlxdNlKr RUWfF4zFso3kHLzLXOca+y5t96tlphTfCW4U5A7YI8vb6/t7WtYbFtyZtJ5q/5Zj 9M6K1wKmBKyaRoBBtZBMHlKdiWwuSKAmJYyDDYfbpeu2yYqN+ZLrtPav3kE68ac= -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:35 2026 by rpki-client