This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/uzGW5yZkWFK7XwuN3EgcKBBBYVY.roa
File: uzGW5yZkWFK7XwuN3EgcKBBBYVY.roa (raw, json)
Hash identifier: iqNkpecefxjLtGeufMCzfpSJbAjOStGnY7fR2gXa7Y0=
Subject key identifier: BB:31:96:E7:26:64:58:52:BB:5F:0B:8D:DC:48:1C:28:10:41:61:56
Certificate issuer: /CN=63b147f67e8795d959ed3530396d1256055b126e
Certificate serial: 019B7FF1E801D20D2053CE71A324C3118100
Authority key identifier: 63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/uzGW5yZkWFK7XwuN3EgcKBBBYVY.roa
Signing time: Fri 02 Jan 2026 18:21:58 +0000
ROA not before: Fri 02 Jan 2026 18:21:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206841
IP address blocks: 45.152.80.0/24 maxlen: 24
45.152.81.0/24 maxlen: 24
45.152.82.0/24 maxlen: 24
45.152.83.0/24 maxlen: 24
193.35.84.0/24 maxlen: 24
193.35.85.0/24 maxlen: 24
193.35.86.0/24 maxlen: 24
193.35.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f1:e8:01:d2:0d:20:53:ce:71:a3:24:c3:11:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b147f67e8795d959ed3530396d1256055b126e
Validity
Not Before: Jan 2 18:21:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb3196e726645852bb5f0b8ddc481c2810416156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b3:7a:67:a2:75:5e:34:4f:61:d7:09:ea:2b:
2c:13:61:fc:bc:0e:4a:8b:7f:77:bd:aa:81:15:0e:
1e:ae:92:ce:62:ee:7c:5b:97:97:0c:12:82:62:97:
9e:08:e0:b1:2d:13:95:c0:8f:7b:17:38:f0:68:ec:
05:9d:48:8f:82:d6:e4:db:6b:6b:93:fa:1b:4c:d3:
0b:c7:41:3a:9f:43:e7:e7:7f:90:12:90:cc:c9:0e:
71:39:f9:4d:1b:d5:60:89:1d:76:06:b7:1a:ca:2a:
b2:d6:8a:bb:1a:cd:87:6c:b9:92:9a:da:86:2f:09:
82:52:58:63:a5:a7:c2:5b:34:43:22:b7:1d:3f:61:
6b:a0:21:27:dd:f2:6c:b7:7d:ea:32:98:6e:d6:a1:
e5:87:7f:31:a1:14:da:58:80:06:d6:22:81:23:3d:
b2:69:36:73:2f:3c:e3:94:1b:d2:0f:94:bc:b7:d3:
a1:95:9f:ff:df:53:e1:63:05:ac:be:31:69:0e:d5:
72:79:4a:24:9e:c8:03:34:ed:07:e7:87:8f:0f:5f:
1a:e1:18:d5:e8:19:c1:3d:80:00:8e:91:ae:55:e4:
24:cf:58:a1:e6:98:53:5d:0d:ed:e7:9a:7d:46:1b:
0e:1f:db:6a:aa:5c:0b:58:c9:19:fe:30:33:24:d7:
7a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:31:96:E7:26:64:58:52:BB:5F:0B:8D:DC:48:1C:28:10:41:61:56
X509v3 Authority Key Identifier:
keyid:63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/uzGW5yZkWFK7XwuN3EgcKBBBYVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.80.0/22
193.35.84.0/22
Signature Algorithm: sha256WithRSAEncryption
29:11:6c:ce:38:8c:06:e3:08:12:6d:f3:e5:19:b5:04:e6:dc:
a1:12:88:08:b5:fe:2e:ee:52:03:20:97:91:10:06:3f:7c:9e:
97:45:b4:39:b7:cd:e5:b4:43:dd:c1:f0:f5:44:93:40:88:90:
cf:fd:20:b3:04:06:7d:2b:f3:0a:46:06:78:0e:f1:10:93:b1:
bd:b5:b7:8f:72:ba:bb:20:e7:c7:3a:96:30:b3:9f:69:16:b1:
5e:8a:17:75:76:ab:21:d0:64:0c:ab:d1:b5:06:11:7a:14:90:
d8:2f:4f:e7:30:32:10:60:e3:67:34:60:69:16:29:d3:5f:d7:
5f:df:32:5f:3e:d7:7c:b3:c7:d7:4c:02:a7:9e:90:62:d1:06:
b0:48:e1:82:8e:9a:ab:0b:9f:84:69:9a:9d:67:ac:17:c1:4e:
c6:bb:58:18:a0:a9:04:ae:aa:d6:b3:61:6a:c4:4f:b1:de:e0:
cc:fa:04:fd:f6:54:c4:cb:cb:35:36:ed:cc:4c:45:13:ad:34:
c4:a8:0e:c7:84:5a:03:eb:9b:ce:a5:c2:e9:b1:c1:3f:d5:db:
05:e3:a8:07:8b:65:4b:02:49:cb:7a:f7:a0:22:d8:8e:7f:fc:
77:6d:92:92:f4:42:b5:42:e0:5a:aa:5e:0a:df:da:fc:6d:14:
b0:8a:51:45
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt/8egB0g0gU85xoyTDEYEAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYjE0N2Y2N2U4Nzk1ZDk1OWVkMzUzMDM5NmQxMjU2MDU1
YjEyNmUwHhcNMjYwMTAyMTgyMTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjMxOTZlNzI2NjQ1ODUyYmI1ZjBiOGRkYzQ4MWMyODEwNDE2MTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLN6Z6J1XjRPYdcJ6issE2H8vA5K
i393vaqBFQ4erpLOYu58W5eXDBKCYpeeCOCxLROVwI97FzjwaOwFnUiPgtbk22tr
k/obTNMLx0E6n0Pn53+QEpDMyQ5xOflNG9VgiR12Brcayiqy1oq7Gs2HbLmSmtqG
LwmCUlhjpafCWzRDIrcdP2FroCEn3fJst33qMphu1qHlh38xoRTaWIAG1iKBIz2y
aTZzLzzjlBvSD5S8t9OhlZ//31PhYwWsvjFpDtVyeUoknsgDNO0H54ePD18a4RjV
6BnBPYAAjpGuVeQkz1ih5phTXQ3t55p9RhsOH9tqqlwLWMkZ/jAzJNd6gQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLsxlucmZFhSu18LjdxIHCgQQWFWMB8GA1UdIwQY
MBaAFGOxR/Z+h5XZWe01MDltElYFWxJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTdGSDluNkhsZGxaN1RVd09XMFNWZ1ZiRW00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8wZjg3ZTItYjgwNS00YmY5LWEzNjYt
MGYyYzMzNGU1ZTA1LzEvdXpHVzV5WmtXRks3WHd1TjNFZ2NLQkJCWVZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8wZjg3ZTItYjgwNS00YmY5LWEzNjYtMGYyYzMzNGU1ZTA1
LzEvWTdGSDluNkhsZGxaN1RVd09XMFNWZ1ZiRW00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLZhQAwQC
wSNUMA0GCSqGSIb3DQEBCwUAA4IBAQApEWzOOIwG4wgSbfPlGbUE5tyhEogItf4u
7lIDIJeREAY/fJ6XRbQ5t83ltEPdwfD1RJNAiJDP/SCzBAZ9K/MKRgZ4DvEQk7G9
tbePcrq7IOfHOpYws59pFrFeihd1dqsh0GQMq9G1BhF6FJDYL0/nMDIQYONnNGBp
FinTX9df3zJfPtd8s8fXTAKnnpBi0QawSOGCjpqrC5+EaZqdZ6wXwU7Gu1gYoKkE
rqrWs2FqxE+x3uDM+gT99lTEy8s1Nu3MTEUTrTTEqA7HhFoD65vOpcLpscE/1dsF
46gHi2VLAknLevegItiOf/x3bZKS9EK1QuBaql4K39r8bRSwilFF
-----END CERTIFICATE-----
Generated at Tue Feb 10 02:22:40 2026 by rpki-client