This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/uA_7wYjLpmJR5wWf04CLCHg7aHg.roa File: uA_7wYjLpmJR5wWf04CLCHg7aHg.roa (raw, json) Hash identifier: Ze6+p6XBYPHq88GRwn6FCeZpimA88A2muQCLlaTI194= Subject key identifier: B8:0F:FB:C1:88:CB:A6:62:51:E7:05:9F:D3:80:8B:08:78:3B:68:78 Certificate issuer: /CN=208b221700b281f823e322a32221a867e5b079a6 Certificate serial: 019B7759670D3E2FA01D67F7EDADA66549FD Authority key identifier: 20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/uA_7wYjLpmJR5wWf04CLCHg7aHg.roa Signing time: Thu 01 Jan 2026 02:18:26 +0000 ROA not before: Thu 01 Jan 2026 02:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 194.76.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 02:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:67:0d:3e:2f:a0:1d:67:f7:ed:ad:a6:65:49:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208b221700b281f823e322a32221a867e5b079a6 Validity Not Before: Jan 1 02:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b80ffbc188cba66251e7059fd3808b08783b6878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:16:ea:44:4b:72:db:80:af:c2:61:ca:be:a4: 38:83:01:f4:7c:4d:b5:84:d9:46:72:05:e5:a2:43: 75:83:4f:21:19:d3:5b:19:be:26:68:21:fc:e1:94: c4:f4:8a:8b:c0:c0:19:56:e0:01:28:cf:9f:6a:25: 5c:bd:ce:bb:bc:26:1c:93:8c:f0:36:f3:67:9c:cc: 8c:7b:da:78:36:23:b3:d6:5a:72:34:a0:07:b7:7e: bf:18:09:1e:bd:0e:5d:2d:25:2a:a0:c3:d6:a3:6a: 65:14:4f:7b:c6:3d:04:e6:a5:8a:c5:07:14:20:e5: 32:26:b7:b4:ab:a3:4b:9b:13:2d:39:51:f8:41:53: 99:a8:15:a2:3a:8d:4f:48:ce:0e:2a:33:ce:36:a4: 7c:d5:b2:13:d2:54:69:60:df:9a:1b:e3:f9:e0:d7: ca:1f:fd:28:56:82:50:f2:7e:f3:e4:a8:45:a4:bc: 00:81:cd:57:a7:8c:fd:1f:0a:f7:0d:9b:de:19:9f: 39:7e:a4:fd:6a:a8:9c:e6:1e:7b:e3:7a:06:9b:b1: 7f:a7:7a:aa:75:cf:6f:fe:46:50:8d:3a:bb:9c:3e: d3:85:24:09:f9:a5:bf:0b:18:b8:6c:ca:58:e7:f4: 4c:2c:28:56:ae:ce:e0:af:e1:b5:c5:3e:6a:a8:6d: f4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:0F:FB:C1:88:CB:A6:62:51:E7:05:9F:D3:80:8B:08:78:3B:68:78 X509v3 Authority Key Identifier: keyid:20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/uA_7wYjLpmJR5wWf04CLCHg7aHg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.76.209.0/24 Signature Algorithm: sha256WithRSAEncryption 11:d9:b1:f6:dd:41:a0:24:88:eb:34:8f:34:40:60:ee:83:45: cf:1a:fe:ef:84:c6:03:bf:91:95:85:57:7b:11:e8:4a:bb:fc: b0:e8:b7:ae:e4:be:8e:81:f0:3d:05:ec:f0:b6:a1:60:61:6a: e0:b7:42:3f:95:29:10:d0:10:aa:62:a7:13:af:0b:6e:0c:8b: 40:99:fb:55:4b:3a:71:d0:89:ae:8c:55:33:ce:3c:0a:8e:ff: 55:51:72:a2:fc:7e:34:b7:df:c6:c6:f9:12:af:28:32:0c:0f: f9:87:b8:79:b4:10:4d:8b:56:12:80:77:02:34:c7:59:61:e8: 10:52:b8:7b:88:68:f4:fa:ec:3e:a7:cf:49:72:be:c7:79:7a: 59:cb:4f:9c:35:e1:ac:af:e3:60:08:6f:dc:8c:d9:24:c0:4a: 09:33:6c:72:be:7e:68:a9:0d:c6:cd:c4:d7:62:2f:a5:98:c9: 63:23:5d:74:6e:7b:75:94:6d:e8:97:e7:4c:2a:70:90:d7:02: 00:97:a5:46:f0:a0:21:35:18:34:0d:7f:52:07:27:da:d5:79: e7:d7:8a:a0:39:a6:b7:62:3e:fd:d9:a2:d6:31:2a:72:7a:03: 77:a4:3e:75:87:92:c9:dd:04:1f:d1:af:54:f8:04:6d:39:78: 02:cc:03:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WWcNPi+gHWf37a2mZUn9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOGIyMjE3MDBiMjgxZjgyM2UzMjJhMzIyMjFhODY3ZTVi MDc5YTYwHhcNMjYwMTAxMDIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODBmZmJjMTg4Y2JhNjYyNTFlNzA1OWZkMzgwOGIwODc4M2I2ODc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBbqREty24CvwmHKvqQ4gwH0fE21 hNlGcgXlokN1g08hGdNbGb4maCH84ZTE9IqLwMAZVuABKM+faiVcvc67vCYck4zw NvNnnMyMe9p4NiOz1lpyNKAHt36/GAkevQ5dLSUqoMPWo2plFE97xj0E5qWKxQcU IOUyJre0q6NLmxMtOVH4QVOZqBWiOo1PSM4OKjPONqR81bIT0lRpYN+aG+P54NfK H/0oVoJQ8n7z5KhFpLwAgc1Xp4z9Hwr3DZveGZ85fqT9aqic5h5743oGm7F/p3qq dc9v/kZQjTq7nD7ThSQJ+aW/Cxi4bMpY5/RMLChWrs7gr+G1xT5qqG30SQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLgP+8GIy6ZiUecFn9OAiwh4O2h4MB8GA1UdIwQY MBaAFCCLIhcAsoH4I+MioyIhqGflsHmmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUlzaUZ3Q3lnZmdqNHlLaklpR29aLVd3ZWFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80ODAzNTUtZGQ2ZS00MGVjLWJjZjYt OWIyYTlmNDZhNDgzLzEvdUFfN3dZakxwbUpSNXdXZjA0Q0xDSGc3YUhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi80ODAzNTUtZGQ2ZS00MGVjLWJjZjYtOWIyYTlmNDZhNDgz LzEvSUlzaUZ3Q3lnZmdqNHlLaklpR29aLVd3ZWFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwkzRMA0G CSqGSIb3DQEBCwUAA4IBAQAR2bH23UGgJIjrNI80QGDug0XPGv7vhMYDv5GVhVd7 EehKu/yw6Leu5L6OgfA9BezwtqFgYWrgt0I/lSkQ0BCqYqcTrwtuDItAmftVSzpx 0ImujFUzzjwKjv9VUXKi/H40t9/GxvkSrygyDA/5h7h5tBBNi1YSgHcCNMdZYegQ Urh7iGj0+uw+p89Jcr7HeXpZy0+cNeGsr+NgCG/cjNkkwEoJM2xyvn5oqQ3GzcTX Yi+lmMljI110bnt1lG3ol+dMKnCQ1wIAl6VG8KAhNRg0DX9SByfa1Xnn14qgOaa3 Yj792aLWMSpyegN3pD51h5LJ3QQf0a9U+ARtOXgCzANx -----END CERTIFICATE-----Generated at Mon Jan 19 11:47:19 2026 by rpki-client