This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/uzwRSecIzXXYWfgJfZsJeESUkdo.roa File: uzwRSecIzXXYWfgJfZsJeESUkdo.roa (raw, json) Hash identifier: F/+k7rYQfNtdvgAZPkZ7IVUpCs68QRZv55pPhKsqLbk= Subject key identifier: BB:3C:11:49:E7:08:CD:75:D8:59:F8:09:7D:9B:09:78:44:94:91:DA Certificate issuer: /CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818 Certificate serial: 019B797E5C9321B5BD80BB3E9E3FF7CEACA3 Authority key identifier: DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/uzwRSecIzXXYWfgJfZsJeESUkdo.roa Signing time: Thu 01 Jan 2026 12:18:02 +0000 ROA not before: Thu 01 Jan 2026 12:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 94.156.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:5c:93:21:b5:bd:80:bb:3e:9e:3f:f7:ce:ac:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818 Validity Not Before: Jan 1 12:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb3c1149e708cd75d859f8097d9b0978449491da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3e:43:16:44:e2:c0:ad:e0:7f:17:8f:1d:8e: 84:22:11:10:ab:d1:1a:c6:37:93:eb:f2:00:2e:87: 38:78:4d:78:77:37:10:a5:b8:cf:1d:8e:78:81:d1: 95:f2:a7:4a:48:1d:65:98:09:bc:dc:9c:83:90:cb: 3a:fc:79:c6:01:f1:f1:78:ff:b0:6b:1b:4c:b9:2d: 44:8f:a3:32:d6:43:19:7b:a4:6e:bb:04:c7:8b:5e: 89:a8:8b:6b:6a:97:8e:6f:36:b0:ea:68:51:ba:79: 55:f1:6d:db:8b:ec:ca:c9:f8:49:f5:ea:ef:e3:a9: 44:9d:4c:9f:97:bc:16:25:18:dd:2a:ec:54:40:1c: 33:75:2e:26:c7:15:60:7c:86:f9:7e:2d:34:1b:9a: 12:d5:f2:57:1c:bd:ad:e9:bb:e4:32:a0:0c:db:35: 69:14:b2:94:74:9e:18:74:53:e2:52:c1:10:37:29: 56:e0:46:bf:55:7c:be:e7:76:fb:9b:a2:a1:03:c4: d1:57:56:6c:b4:27:a4:55:26:80:53:1b:a4:71:cf: d4:b7:5a:7b:e8:f2:94:43:05:ce:22:4e:59:a3:fc: 1d:f0:49:74:84:59:f2:1a:12:85:1d:2a:3c:58:3c: 7b:6b:70:52:b3:53:0a:d3:d5:32:41:a5:fb:47:d3: 5c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:3C:11:49:E7:08:CD:75:D8:59:F8:09:7D:9B:09:78:44:94:91:DA X509v3 Authority Key Identifier: keyid:DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/uzwRSecIzXXYWfgJfZsJeESUkdo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.156.176.0/24 Signature Algorithm: sha256WithRSAEncryption 25:d2:d2:cf:fd:47:05:90:d3:f1:59:1a:c8:ca:02:2f:da:ba: 42:a7:78:ff:75:8a:9c:a2:ce:6c:55:58:9f:2a:75:08:9c:4d: 9b:7b:50:bd:45:c4:a5:04:f3:d0:98:a2:58:73:26:9f:54:fd: 87:09:77:25:ab:a9:35:26:29:9a:db:19:55:6b:23:bf:d8:97: 1f:26:9d:25:15:2a:12:32:a1:31:a0:27:49:ca:c7:78:de:35: e4:65:9d:9b:4c:3d:6d:0f:f6:74:f1:ba:11:62:46:77:74:e3: c2:a0:30:28:c9:dd:49:e0:fa:58:1f:02:8a:c9:c7:1b:4f:ee: 00:76:c6:32:de:83:25:91:85:d0:c7:4b:91:55:3c:14:1d:a8: 39:5b:02:d5:30:f7:9c:72:a2:92:eb:92:45:c8:2c:43:d8:2c: 10:75:65:46:0f:b3:f2:e2:04:2c:6b:57:fa:4e:74:41:47:cb: 5d:6f:ef:06:31:4f:d9:01:11:46:12:b2:f6:31:22:a4:0d:71: b9:fa:9b:0e:14:5e:6d:3c:2e:7c:63:ad:86:11:0c:53:be:b7: 22:74:d8:36:19:82:fd:1d:79:65:9f:19:72:81:b6:27:bd:be: a0:dd:2a:56:83:e4:20:bf:0b:1c:57:79:39:1a:cb:4d:2b:34: 73:64:5c:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5flyTIbW9gLs+nj/3zqyjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhY2UyOGYyMmM2ZTdlNDQ0YmIwYTdlNTJhMTUzM2I4MGRl ZTc4MTgwHhcNMjYwMTAxMTIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjNjMTE0OWU3MDhjZDc1ZDg1OWY4MDk3ZDliMDk3ODQ0OTQ5MWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD5DFkTiwK3gfxePHY6EIhEQq9Ea xjeT6/IALoc4eE14dzcQpbjPHY54gdGV8qdKSB1lmAm83JyDkMs6/HnGAfHxeP+w axtMuS1Ej6My1kMZe6RuuwTHi16JqItrapeObzaw6mhRunlV8W3bi+zKyfhJ9erv 46lEnUyfl7wWJRjdKuxUQBwzdS4mxxVgfIb5fi00G5oS1fJXHL2t6bvkMqAM2zVp FLKUdJ4YdFPiUsEQNylW4Ea/VXy+53b7m6KhA8TRV1ZstCekVSaAUxukcc/Ut1p7 6PKUQwXOIk5Zo/wd8El0hFnyGhKFHSo8WDx7a3BSs1MK09UyQaX7R9NcMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLs8EUnnCM112Fn4CX2bCXhElJHaMB8GA1UdIwQY MBaAFNrOKPIsbn5ES7Cn5SoVM7gN7ngYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnM0bzhpeHVma1JMc0tmbEtoVXp1QTN1ZUJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hOTZjOWMtYjg1NS00ZmRhLWE1Zjct NzVjOWIyNDc4ZTNlLzEvdXp3UlNlY0l6WFhZV2ZnSmZac0plRVNVa2RvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hOTZjOWMtYjg1NS00ZmRhLWE1ZjctNzVjOWIyNDc4ZTNl LzEvMnM0bzhpeHVma1JMc0tmbEtoVXp1QTN1ZUJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpywMA0G CSqGSIb3DQEBCwUAA4IBAQAl0tLP/UcFkNPxWRrIygIv2rpCp3j/dYqcos5sVVif KnUInE2be1C9RcSlBPPQmKJYcyafVP2HCXclq6k1Jima2xlVayO/2JcfJp0lFSoS MqExoCdJysd43jXkZZ2bTD1tD/Z08boRYkZ3dOPCoDAoyd1J4PpYHwKKyccbT+4A dsYy3oMlkYXQx0uRVTwUHag5WwLVMPeccqKS65JFyCxD2CwQdWVGD7Py4gQsa1f6 TnRBR8tdb+8GMU/ZARFGErL2MSKkDXG5+psOFF5tPC58Y62GEQxTvrcidNg2GYL9 HXllnxlygbYnvb6g3SpWg+QgvwscV3k5GstNKzRzZFyZ -----END CERTIFICATE-----Generated at Fri Jan 9 06:21:09 2026 by rpki-client