This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/pUIM7v10t5OGFrSPmfiKdj44TIc.roa File: pUIM7v10t5OGFrSPmfiKdj44TIc.roa (raw, json) Hash identifier: Oo445ykGaPumhWQXMGT+U7KwU/ygHDEsLqsafB1c140= Subject key identifier: A5:42:0C:EE:FD:74:B7:93:86:16:B4:8F:99:F8:8A:76:3E:38:4C:87 Certificate issuer: /CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4 Certificate serial: 019B7CEE57F3355C8AA2BFA761E6E06014B0 Authority key identifier: 0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/pUIM7v10t5OGFrSPmfiKdj44TIc.roa Signing time: Fri 02 Jan 2026 04:19:13 +0000 ROA not before: Fri 02 Jan 2026 04:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44679 IP address blocks: 193.201.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:57:f3:35:5c:8a:a2:bf:a7:61:e6:e0:60:14:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4 Validity Not Before: Jan 2 04:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5420ceefd74b7938616b48f99f88a763e384c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2f:dd:a7:98:13:28:47:81:fb:6e:c5:3f:4c: 1e:48:ce:a3:10:15:0c:0e:3b:a5:9a:cd:c3:9b:b4: 70:19:cc:71:05:08:a5:54:a8:65:ed:b5:19:81:3e: 26:00:c0:4a:6f:68:de:3d:b7:69:12:95:68:41:b9: a8:9b:ee:b4:ca:fc:9c:fa:3b:46:83:74:1e:dd:25: 4e:ea:5a:de:4f:5b:5c:98:aa:6d:8f:cc:a3:7a:cf: d8:31:e0:ff:20:a1:8c:e5:44:90:6b:a7:00:cb:2e: ba:1a:f8:71:c8:cc:3e:29:32:d0:bb:0d:59:00:fa: ff:17:84:9c:f8:b5:6b:9b:c8:aa:5e:fb:0d:bf:cb: ca:42:3e:16:9e:19:ee:df:6c:06:4d:52:58:c9:50: 89:c8:b9:c2:24:66:b9:b9:7c:72:5b:72:ac:e5:06: 2f:bc:6b:2a:d1:23:e2:68:45:65:e0:a0:6b:a4:c1: f8:6e:5f:04:8e:67:2b:1d:00:21:4e:e4:b4:ae:d2: 14:6a:9a:3c:4c:ad:4a:f5:96:6e:76:88:3a:45:ff: 72:1c:d4:ad:bc:e7:f3:d6:d9:c5:97:d9:5a:b5:5c: 76:23:77:8b:ec:6f:5b:60:59:9e:df:30:4c:2a:49: 0a:7a:15:4e:dd:f0:a4:09:58:d9:fa:4e:b5:7b:23: 97:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:42:0C:EE:FD:74:B7:93:86:16:B4:8F:99:F8:8A:76:3E:38:4C:87 X509v3 Authority Key Identifier: keyid:0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/pUIM7v10t5OGFrSPmfiKdj44TIc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.201.232.0/22 Signature Algorithm: sha256WithRSAEncryption 61:85:86:35:70:57:e8:ca:c9:5b:17:29:6f:63:9a:a8:d3:22: 93:ea:d8:67:39:92:8f:be:e9:06:ae:10:84:f7:2a:ee:38:ec: ea:bf:6c:ef:c0:bd:12:98:2d:61:17:27:70:85:e4:aa:60:be: 0d:fd:80:0c:0f:e6:3e:f5:57:fa:a4:12:c2:67:2c:b0:e3:93: 00:37:f6:82:5c:49:07:6b:5e:2f:47:84:3c:47:be:fd:ff:a6: 09:3a:35:fd:8c:22:4e:53:a8:e1:77:d1:c0:3a:c7:bc:4f:4a: 9d:fe:8a:46:2b:55:1e:33:3c:0a:ec:f3:cf:0d:0b:9f:cb:05: 1c:71:36:f2:dd:a1:1d:56:69:3f:a6:36:40:d7:0b:33:10:4d: 59:02:d4:71:a3:1a:78:a6:08:19:35:29:4b:e0:80:9c:0b:3c: 6e:7c:e3:7f:fa:59:6f:3e:b7:e0:4b:52:dd:eb:34:e4:82:9c: a2:36:55:23:48:04:1f:33:65:30:f8:c8:ba:58:e6:ac:6b:73: 6f:f6:84:b9:e5:32:5f:4e:84:95:3f:9a:d5:d2:70:a1:c8:ea: f9:3a:6a:0a:42:7d:4e:1e:37:e8:67:f7:49:90:3a:10:26:4f: 67:22:80:d2:3e:ea:23:e5:51:75:86:22:f4:e4:a4:bb:36:d8: 82:c3:a2:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87lfzNVyKor+nYebgYBSwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMzczOTdkOGI2Yzg3M2UyOWJlNmUwOTlkZTdiNzQ2ZWFm ZDBlYjQwHhcNMjYwMTAyMDQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTQyMGNlZWZkNzRiNzkzODYxNmI0OGY5OWY4OGE3NjNlMzg0Yzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy/dp5gTKEeB+27FP0weSM6jEBUM Djulms3Dm7RwGcxxBQilVKhl7bUZgT4mAMBKb2jePbdpEpVoQbmom+60yvyc+jtG g3Qe3SVO6lreT1tcmKptj8yjes/YMeD/IKGM5USQa6cAyy66GvhxyMw+KTLQuw1Z APr/F4Sc+LVrm8iqXvsNv8vKQj4Wnhnu32wGTVJYyVCJyLnCJGa5uXxyW3Ks5QYv vGsq0SPiaEVl4KBrpMH4bl8EjmcrHQAhTuS0rtIUapo8TK1K9ZZudog6Rf9yHNSt vOfz1tnFl9latVx2I3eL7G9bYFme3zBMKkkKehVO3fCkCVjZ+k61eyOX9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKVCDO79dLeThha0j5n4inY+OEyHMB8GA1UdIwQY MBaAFA83OX2LbIc+Kb5uCZ3nt0bq/Q60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHpjNWZZdHNoejRwdm00Sm5lZTNSdXI5RHJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yMWJhODMtZjk0ZS00NTVhLWEyYjct YTYyNTU2ZDI1NDQ3LzEvcFVJTTd2MTB0NU9HRnJTUG1maUtkajQ0VEljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8yMWJhODMtZjk0ZS00NTVhLWEyYjctYTYyNTU2ZDI1NDQ3 LzEvRHpjNWZZdHNoejRwdm00Sm5lZTNSdXI5RHJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwcnoMA0G CSqGSIb3DQEBCwUAA4IBAQBhhYY1cFfoyslbFylvY5qo0yKT6thnOZKPvukGrhCE 9yruOOzqv2zvwL0SmC1hFydwheSqYL4N/YAMD+Y+9Vf6pBLCZyyw45MAN/aCXEkH a14vR4Q8R779/6YJOjX9jCJOU6jhd9HAOse8T0qd/opGK1UeMzwK7PPPDQufywUc cTby3aEdVmk/pjZA1wszEE1ZAtRxoxp4pggZNSlL4ICcCzxufON/+llvPrfgS1Ld 6zTkgpyiNlUjSAQfM2Uw+Mi6WOasa3Nv9oS55TJfToSVP5rV0nChyOr5OmoKQn1O HjfoZ/dJkDoQJk9nIoDSPuoj5VF1hiL05KS7NtiCw6JK -----END CERTIFICATE-----Generated at Tue Jan 27 04:57:55 2026 by rpki-client