This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/Uelu6l4NquwAbyVxi9MJYjggwy0.roa File: Uelu6l4NquwAbyVxi9MJYjggwy0.roa (raw, json) Hash identifier: ssdwawQd6a83Zwysw9XF2aqNC9cl5v3DkKLPdZdT8pQ= Subject key identifier: 51:E9:6E:EA:5E:0D:AA:EC:00:6F:25:71:8B:D3:09:62:38:20:C3:2D Certificate issuer: /CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8 Certificate serial: 019B7DCA3795EFAE795506B837A486C70582 Authority key identifier: 9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/Uelu6l4NquwAbyVxi9MJYjggwy0.roa Signing time: Fri 02 Jan 2026 08:19:23 +0000 ROA not before: Fri 02 Jan 2026 08:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34578 IP address blocks: 159.144.0.0/16 maxlen: 16 192.112.254.0/24 maxlen: 24 2a00:9480::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:37:95:ef:ae:79:55:06:b8:37:a4:86:c7:05:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8 Validity Not Before: Jan 2 08:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51e96eea5e0daaec006f25718bd309623820c32d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:42:38:8b:22:9a:c0:a2:29:74:6b:45:15:2e: 44:a5:65:b2:a0:dd:27:12:a1:ae:f3:96:9f:6e:95: 2b:4d:76:4a:85:16:46:f6:5a:62:50:9e:71:ea:ec: 33:f7:b3:8b:73:a2:98:db:fd:cd:8f:93:be:ee:01: 6f:42:7c:e8:a7:f2:02:ac:44:0c:27:14:9e:86:54: 00:45:25:6c:66:a3:49:0a:19:b4:b9:4b:b5:6a:92: 67:0a:2c:99:59:a6:2e:91:de:4a:ec:0a:78:fe:57: ce:00:34:7a:be:08:f8:af:60:54:39:db:95:79:5e: fa:60:84:c1:41:fc:cd:14:3c:60:d2:ca:e7:b7:3b: 0f:58:7e:23:b6:df:73:3d:8d:22:d5:b7:87:1e:06: 8c:0f:6e:c5:27:a8:33:ac:9c:93:b2:50:5d:97:54: 18:f8:c5:c6:c1:21:71:bd:f8:84:c8:9e:a6:71:37: bf:3d:4f:2b:b8:76:a2:92:7f:05:07:7c:dc:77:97: 6f:71:38:69:e7:0a:42:83:1f:db:37:9e:cf:39:10: 3e:a9:cc:25:1f:aa:5a:e6:cc:37:e1:5f:89:5c:7d: f2:f0:47:64:2d:86:e2:f8:da:c5:e6:41:50:6a:f4: 53:e7:56:31:a9:b9:ec:e9:9a:dd:0b:aa:fb:51:d8: 63:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E9:6E:EA:5E:0D:AA:EC:00:6F:25:71:8B:D3:09:62:38:20:C3:2D X509v3 Authority Key Identifier: keyid:9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/Uelu6l4NquwAbyVxi9MJYjggwy0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.144.0.0/16 192.112.254.0/24 IPv6: 2a00:9480::/32 Signature Algorithm: sha256WithRSAEncryption 7d:df:64:47:fd:f3:3b:7e:a6:f2:10:d6:1f:ae:1f:10:3a:58: de:8c:a5:5b:5b:12:00:46:d9:33:ce:6e:15:6d:78:f7:bc:4e: 79:17:3f:77:e0:7c:d0:bf:a5:d1:e1:9c:0d:dc:64:0c:59:89: dd:4b:78:89:62:95:e2:d7:74:ef:8e:0c:80:b1:3f:b3:a0:90: d8:56:ad:a9:27:1b:01:4b:2d:5b:b0:d1:d2:60:5b:59:99:ce: 26:c7:9d:ba:06:76:1a:1d:41:10:c9:85:3e:4f:96:65:31:84: a4:ab:e3:aa:ee:4d:05:43:0e:8e:ee:f0:8e:79:58:77:bd:f7: cf:d3:1a:f1:e1:4f:99:97:9e:a1:33:c6:cc:d8:9a:a7:39:5a: 2d:fc:d9:92:28:80:32:20:41:34:15:09:89:08:1f:ab:98:00: 96:87:bc:48:4f:2e:4b:93:81:f3:2a:f2:49:ef:79:ad:dd:0b: d3:a3:ac:1e:fd:36:71:b9:5f:cb:c1:13:eb:31:d1:b6:2d:9e: bf:ce:01:0a:c7:69:48:fa:ef:8f:c0:f3:c0:45:d7:e6:d3:d3: 1d:7d:0f:72:7b:1b:70:23:30:bb:d8:57:33:63:4a:55:e9:22: c5:5c:70:5e:32:3d:c9:f4:c9:26:32:bd:57:03:9f:77:1a:5a: da:f4:84:65 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt9yjeV7655VQa4N6SGxwWCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYTMxOWVhNTFjODAwM2FhZDk0YThlMjdjZTY5NDkyYWEy ZTMzYTgwHhcNMjYwMTAyMDgxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWU5NmVlYTVlMGRhYWVjMDA2ZjI1NzE4YmQzMDk2MjM4MjBjMzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUI4iyKawKIpdGtFFS5EpWWyoN0n EqGu85afbpUrTXZKhRZG9lpiUJ5x6uwz97OLc6KY2/3Nj5O+7gFvQnzop/ICrEQM JxSehlQARSVsZqNJChm0uUu1apJnCiyZWaYukd5K7Ap4/lfOADR6vgj4r2BUOduV eV76YITBQfzNFDxg0srntzsPWH4jtt9zPY0i1beHHgaMD27FJ6gzrJyTslBdl1QY +MXGwSFxvfiEyJ6mcTe/PU8ruHaikn8FB3zcd5dvcThp5wpCgx/bN57PORA+qcwl H6pa5sw34V+JXH3y8EdkLYbi+NrF5kFQavRT51Yxqbns6ZrdC6r7Udhj0QIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFFHpbupeDarsAG8lcYvTCWI4IMMtMB8GA1UdIwQY MBaAFJyjGepRyAA6rZSo4nzmlJKqLjOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbktNWjZsSElBRHF0bEtqaWZPYVVrcW91TTZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82MTQ5NGMtMDc0NC00OTkxLWFiNjct MGFkM2M3OTYyYzA5LzEvVWVsdTZsNE5xdXdBYnlWeGk5TUpZamdnd3kwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC82MTQ5NGMtMDc0NC00OTkxLWFiNjctMGFkM2M3OTYyYzA5 LzEvbktNWjZsSElBRHF0bEtqaWZPYVVrcW91TTZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjARBAIAATALAwMAn5ADBADA cP4wDQQCAAIwBwMFACoAlIAwDQYJKoZIhvcNAQELBQADggEBAH3fZEf98zt+pvIQ 1h+uHxA6WN6MpVtbEgBG2TPObhVtePe8TnkXP3fgfNC/pdHhnA3cZAxZid1LeIli leLXdO+ODICxP7OgkNhWraknGwFLLVuw0dJgW1mZzibHnboGdhodQRDJhT5PlmUx hKSr46ruTQVDDo7u8I55WHe998/TGvHhT5mXnqEzxszYmqc5Wi382ZIogDIgQTQV CYkIH6uYAJaHvEhPLkuTgfMq8knvea3dC9OjrB79NnG5X8vBE+sx0bYtnr/OAQrH aUj674/A88BF1+bT0x19D3J7G3AjMLvYVzNjSlXpIsVccF4yPcn0ySYyvVcDn3ca Wtr0hGU= -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:57 2026 by rpki-client