This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/UzApq6EOLSmo_f-FmHtKYMlNkG8.roa File: UzApq6EOLSmo_f-FmHtKYMlNkG8.roa (raw, json) Hash identifier: uaHU4qHF04fH5UL/VGo93ZAzSiASc8qoSn8SilcNKx8= Subject key identifier: 53:30:29:AB:A1:0E:2D:29:A8:FD:FF:85:98:7B:4A:60:C9:4D:90:6F Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46 Certificate serial: 019B77C6E44A782B34BAB2A198C392DBB4F6 Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/UzApq6EOLSmo_f-FmHtKYMlNkG8.roa Signing time: Thu 01 Jan 2026 04:18:01 +0000 ROA not before: Thu 01 Jan 2026 04:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211373 IP address blocks: 64.190.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 04:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e4:4a:78:2b:34:ba:b2:a1:98:c3:92:db:b4:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46 Validity Not Before: Jan 1 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=533029aba10e2d29a8fdff85987b4a60c94d906f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e6:bc:20:0e:65:a0:6b:a6:3d:77:5b:6f:ed: 11:40:6a:da:96:c4:1f:10:1d:0b:79:b0:9c:c8:2b: e7:f9:f3:51:59:a3:98:ec:d8:8e:68:d9:a7:be:68: 70:b7:9a:fc:8d:4e:c0:da:32:8a:84:fa:48:0c:a1: b8:e3:2a:ab:22:de:75:5c:16:bc:53:14:fb:ea:42: fa:b6:8c:5e:31:41:d1:86:06:aa:6e:89:10:63:df: 7f:4b:90:3b:b0:99:b5:11:6c:a8:f5:bb:98:9f:71: 02:c1:91:a5:f9:c4:8a:4b:8d:dd:77:4a:d1:68:a1: 47:ad:ba:49:75:73:7a:6c:45:5e:7e:96:fb:46:66: 3e:f5:fe:f9:37:5d:dd:9a:8f:45:62:65:9c:cf:32: 83:d2:63:45:df:92:aa:6d:fb:b2:a8:26:64:81:ae: c6:e0:9c:61:05:4d:83:c0:78:b5:9d:88:2e:20:38: 25:3a:4f:31:1a:55:56:ab:d4:eb:d1:27:c2:31:6c: e9:9d:c7:6a:5d:b2:29:6a:c5:d7:54:1e:0b:66:2d: 9e:79:32:e7:c7:10:41:99:e5:12:4d:a0:6f:1e:a1: d0:37:8d:d4:59:1d:50:24:a9:4b:e2:4a:e3:67:69: 20:99:63:c3:87:98:e1:81:43:75:7a:60:22:28:e2: 3f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:30:29:AB:A1:0E:2D:29:A8:FD:FF:85:98:7B:4A:60:C9:4D:90:6F X509v3 Authority Key Identifier: keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/UzApq6EOLSmo_f-FmHtKYMlNkG8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.190.139.0/24 Signature Algorithm: sha256WithRSAEncryption 32:a4:14:20:a8:80:28:e4:7f:88:e3:82:12:cc:78:bd:c7:bb: ca:d3:ac:20:ae:9f:7e:5b:aa:fe:47:2a:59:0a:ba:82:3c:56: 13:00:61:02:20:a6:f9:b8:4d:09:fb:5b:17:fa:61:77:dd:96: d0:53:2a:7b:b1:50:19:aa:26:a4:d0:51:0a:7c:15:33:ab:88: 01:5b:bb:c5:71:de:6c:61:a7:dd:25:a3:de:83:53:79:2e:b1: b6:5a:85:a9:75:7d:48:af:a9:6e:a6:17:f9:3f:ba:90:01:d5: 9a:90:26:f4:0d:62:d3:51:74:e9:79:94:d6:73:9e:75:6e:2c: ab:48:1b:0e:56:e8:6a:d1:a7:2a:07:6b:31:96:41:2a:a6:bc: 40:07:54:97:b4:89:f7:1e:59:17:f2:5d:d8:88:cf:27:34:b3: 13:77:41:2e:6a:bc:d1:ea:33:92:1e:29:8e:46:ed:65:43:54: e9:7b:cd:d3:81:f2:b7:6d:b5:7b:ff:ba:2f:b2:07:b7:0a:7d: 00:a5:e3:63:98:41:03:7f:2b:c6:cd:6a:cc:44:4f:5a:08:57: ef:46:82:43:dd:4a:e7:dd:80:93:ae:cc:50:fa:21:db:c2:e1: 16:8e:aa:96:64:32:f6:31:3a:15:59:66:c0:6f:a1:51:bb:9f: f0:f5:c4:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xuRKeCs0urKhmMOS27T2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYzJjMWFmZDRiZGVjOTgwNTA2ZmEwN2RmN2M4NjYyZDU1 NGZhNDYwHhcNMjYwMTAxMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzMwMjlhYmExMGUyZDI5YThmZGZmODU5ODdiNGE2MGM5NGQ5MDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+a8IA5loGumPXdbb+0RQGralsQf EB0LebCcyCvn+fNRWaOY7NiOaNmnvmhwt5r8jU7A2jKKhPpIDKG44yqrIt51XBa8 UxT76kL6toxeMUHRhgaqbokQY99/S5A7sJm1EWyo9buYn3ECwZGl+cSKS43dd0rR aKFHrbpJdXN6bEVefpb7RmY+9f75N13dmo9FYmWczzKD0mNF35KqbfuyqCZkga7G 4JxhBU2DwHi1nYguIDglOk8xGlVWq9Tr0SfCMWzpncdqXbIpasXXVB4LZi2eeTLn xxBBmeUSTaBvHqHQN43UWR1QJKlL4krjZ2kgmWPDh5jhgUN1emAiKOI/6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFMwKauhDi0pqP3/hZh7SmDJTZBvMB8GA1UdIwQY MBaAFOrCwa/UveyYBQb6B998hmLVVPpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMt YzBjZWIwMzdhZDQyLzEvVXpBcHE2RU9MU21vX2YtRm1IdEtZTWxOa0c4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMtYzBjZWIwMzdhZDQy LzEvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL6LMA0G CSqGSIb3DQEBCwUAA4IBAQAypBQgqIAo5H+I44ISzHi9x7vK06wgrp9+W6r+RypZ CrqCPFYTAGECIKb5uE0J+1sX+mF33ZbQUyp7sVAZqiak0FEKfBUzq4gBW7vFcd5s YafdJaPeg1N5LrG2WoWpdX1Ir6luphf5P7qQAdWakCb0DWLTUXTpeZTWc551biyr SBsOVuhq0acqB2sxlkEqprxAB1SXtIn3HlkX8l3YiM8nNLMTd0EuarzR6jOSHimO Ru1lQ1Tpe83TgfK3bbV7/7ovsge3Cn0ApeNjmEEDfyvGzWrMRE9aCFfvRoJD3Urn 3YCTrsxQ+iHbwuEWjqqWZDL2MToVWWbAb6FRu5/w9cSD -----END CERTIFICATE-----Generated at Mon Jan 19 10:58:08 2026 by rpki-client