This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/UuN7zLVfjwqep8H3gp4uYYBDSlA.roa File: UuN7zLVfjwqep8H3gp4uYYBDSlA.roa (raw, json) Hash identifier: c5uP03tTxyD1867dntdszqVBZixLRyo48/FXuLG4BU8= Subject key identifier: 52:E3:7B:CC:B5:5F:8F:0A:9E:A7:C1:F7:82:9E:2E:61:80:43:4A:50 Certificate issuer: /CN=40254d4a767ad099606e442e092f91241a363670 Certificate serial: 019B7EA640D840D14F7F757835AD1975FDC1 Authority key identifier: 40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/UuN7zLVfjwqep8H3gp4uYYBDSlA.roa Signing time: Fri 02 Jan 2026 12:19:43 +0000 ROA not before: Fri 02 Jan 2026 12:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21227 IP address blocks: 193.22.108.0/24 maxlen: 24 2a0f:7b40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:40:d8:40:d1:4f:7f:75:78:35:ad:19:75:fd:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40254d4a767ad099606e442e092f91241a363670 Validity Not Before: Jan 2 12:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52e37bccb55f8f0a9ea7c1f7829e2e6180434a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2b:6d:1d:14:22:56:72:37:69:78:cb:9d:c0: db:76:85:92:6c:17:0a:a8:56:2a:f7:a2:3b:3d:e0: 34:b2:22:63:80:93:6e:ec:82:8a:c3:5c:1c:15:04: 5e:0c:2b:d7:25:5b:76:d6:d0:5e:5b:50:dc:df:bf: 21:93:6f:2b:14:ef:e0:a0:31:6f:39:44:7e:f0:4e: 58:9b:19:0e:81:27:da:95:69:5a:47:54:90:ed:53: 83:78:3b:21:7c:94:97:85:fb:99:2f:ae:75:8a:b8: 2f:e9:c5:ce:d3:6d:63:7b:0d:bf:d3:3d:a3:ea:d5: 18:b2:e8:9a:87:1d:c1:2b:22:5c:79:32:29:a8:77: c6:07:d1:e0:4b:c5:bd:70:1c:c0:45:74:07:23:66: 83:ff:db:4b:29:b9:cf:7c:c8:ad:04:02:56:b4:3d: b4:1e:16:9c:8f:af:17:8f:6b:e6:a0:71:0c:81:f5: cf:2f:1b:cb:2d:7e:3f:4c:08:7f:df:2a:42:e6:45: d6:79:2f:8f:b1:63:7a:a2:ba:0f:5a:04:e9:dd:09: 18:1b:2a:e6:94:b6:2a:4e:53:71:62:04:50:0b:0e: a3:7f:1e:6e:6d:93:20:af:76:b9:4b:7b:88:67:7b: a2:42:dc:1c:68:b5:dc:28:97:5a:60:17:46:a5:7b: 31:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E3:7B:CC:B5:5F:8F:0A:9E:A7:C1:F7:82:9E:2E:61:80:43:4A:50 X509v3 Authority Key Identifier: keyid:40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/UuN7zLVfjwqep8H3gp4uYYBDSlA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.22.108.0/24 IPv6: 2a0f:7b40::/29 Signature Algorithm: sha256WithRSAEncryption 20:37:7e:88:3c:78:c9:9c:e6:f5:20:79:2f:c0:9a:9e:4f:ad: 78:a4:69:83:c2:56:0a:fb:b9:87:ad:82:79:6e:55:05:2f:23: 1c:da:5d:90:3a:f6:2e:9a:a0:4c:d5:b8:da:33:68:48:1d:96: b8:47:cf:08:bf:b3:4b:80:f1:cb:95:68:28:f5:6e:db:a6:fc: 67:2f:72:f8:f3:67:63:76:f5:e1:9e:4f:f0:d1:3d:4a:a7:e8: 90:7c:d7:c7:df:26:78:31:29:89:5f:e4:b6:74:bd:24:27:27: ff:91:79:fa:1b:39:d4:4b:0e:e4:24:25:b2:bb:d1:7a:d5:b5: 4c:fd:48:f7:c1:ec:6a:3b:1d:7e:18:8b:55:f2:7b:8b:58:7a: 17:72:b5:44:5d:90:51:8d:ad:a4:35:3b:44:9c:11:dc:54:4a: 44:53:a0:23:32:3f:9e:b6:b7:62:21:5e:04:e0:57:38:5d:79: 97:1a:12:46:18:fa:fd:06:39:e3:3b:b4:9b:e2:85:cb:28:82: 25:4b:79:3c:49:6c:38:bb:21:40:4d:b6:b4:5d:fa:57:e2:08: 19:48:b0:cd:08:a3:95:dc:f7:ab:3c:43:ba:e1:68:4a:01:79: 6b:e4:2f:28:e1:ab:ed:e9:99:ad:b2:55:e4:91:9e:9d:f9:13: 9d:11:a7:aa -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pkDYQNFPf3V4Na0Zdf3BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMjU0ZDRhNzY3YWQwOTk2MDZlNDQyZTA5MmY5MTI0MWEz NjM2NzAwHhcNMjYwMTAyMTIxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmUzN2JjY2I1NWY4ZjBhOWVhN2MxZjc4MjllMmU2MTgwNDM0YTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CttHRQiVnI3aXjLncDbdoWSbBcK qFYq96I7PeA0siJjgJNu7IKKw1wcFQReDCvXJVt21tBeW1Dc378hk28rFO/goDFv OUR+8E5YmxkOgSfalWlaR1SQ7VODeDshfJSXhfuZL651irgv6cXO021jew2/0z2j 6tUYsuiahx3BKyJceTIpqHfGB9HgS8W9cBzARXQHI2aD/9tLKbnPfMitBAJWtD20 Hhacj68Xj2vmoHEMgfXPLxvLLX4/TAh/3ypC5kXWeS+PsWN6oroPWgTp3QkYGyrm lLYqTlNxYgRQCw6jfx5ubZMgr3a5S3uIZ3uiQtwcaLXcKJdaYBdGpXsx2wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFLje8y1X48KnqfB94KeLmGAQ0pQMB8GA1UdIwQY MBaAFEAlTUp2etCZYG5ELgkvkSQaNjZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUNWTlNuWjYwSmxnYmtRdUNTLVJKQm8yTm5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9lZjZjOGUtM2YwNy00YjNmLWE4N2Ut YmJlOTEyZWVjNzNlLzEvVXVON3pMVmZqd3FlcDhIM2dwNHVZWUJEU2xBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9lZjZjOGUtM2YwNy00YjNmLWE4N2UtYmJlOTEyZWVjNzNl LzEvUUNWTlNuWjYwSmxnYmtRdUNTLVJKQm8yTm5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwRZsMA0E AgACMAcDBQMqD3tAMA0GCSqGSIb3DQEBCwUAA4IBAQAgN36IPHjJnOb1IHkvwJqe T614pGmDwlYK+7mHrYJ5blUFLyMc2l2QOvYumqBM1bjaM2hIHZa4R88Iv7NLgPHL lWgo9W7bpvxnL3L482djdvXhnk/w0T1Kp+iQfNfH3yZ4MSmJX+S2dL0kJyf/kXn6 GznUSw7kJCWyu9F61bVM/Uj3wexqOx1+GItV8nuLWHoXcrVEXZBRja2kNTtEnBHc VEpEU6AjMj+etrdiIV4E4Fc4XXmXGhJGGPr9BjnjO7Sb4oXLKIIlS3k8SWw4uyFA Tba0XfpX4ggZSLDNCKOV3PerPEO64WhKAXlr5C8o4avt6ZmtslXkkZ6d+ROdEaeq -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:01 2026 by rpki-client