This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/ue_Gh1l0t3knLCASFwUNeJAIkx0.roa File: ue_Gh1l0t3knLCASFwUNeJAIkx0.roa (raw, json) Hash identifier: 1pjYSr/W+zP5viSFVkMhp73vUcBE03OWMQPqP7OyN2Y= Subject key identifier: B9:EF:C6:87:59:74:B7:79:27:2C:20:12:17:05:0D:78:90:08:93:1D Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Certificate serial: 019B7CECF716FC2111F7D4FC2A65E1C58E47 Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/ue_Gh1l0t3knLCASFwUNeJAIkx0.roa Signing time: Fri 02 Jan 2026 04:17:43 +0000 ROA not before: Fri 02 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5489 IP address blocks: 195.251.120.0/22 maxlen: 22 195.251.238.0/23 maxlen: 23 195.251.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:f7:16:fc:21:11:f7:d4:fc:2a:65:e1:c5:8e:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Validity Not Before: Jan 2 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9efc6875974b779272c201217050d789008931d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3d:6d:a9:e9:0b:58:d1:f1:79:bf:91:c8:2e: 96:81:ec:2e:d2:66:51:9f:dc:4e:c6:a3:32:be:a2: 68:b9:ea:7e:cd:ac:90:68:e6:00:24:bd:43:b0:f3: a9:57:b5:d4:75:e6:15:cd:1a:13:1d:8f:cc:11:c5: c3:3c:b9:75:0f:3e:1c:d9:82:9b:63:a4:2c:ae:b7: fd:0f:fd:32:f1:f1:c9:2f:a7:79:81:e1:24:a8:37: 65:84:c8:dd:af:e7:e7:52:c4:b7:19:7b:9a:50:c4: 1b:72:ea:c9:82:5c:e0:11:26:08:d8:96:83:9b:e3: 8f:0e:00:da:95:ef:73:e3:16:4f:01:7d:35:90:d7: a2:3a:49:85:18:3d:90:d2:12:5f:1e:78:8a:fd:2b: 31:72:e5:e6:f3:eb:8d:58:5e:a8:86:81:53:be:82: 05:af:a9:f1:df:7b:91:45:90:bf:a7:77:36:27:93: 93:78:ce:e1:70:c6:87:c8:bf:54:d9:30:09:12:bb: e4:5e:69:f3:e1:1e:09:6c:21:8f:01:11:57:64:ac: 0c:2c:7a:21:67:ab:9b:b8:71:2c:f4:f7:1b:c4:90: 4d:b1:a5:68:64:94:2f:85:01:b9:0e:3d:dc:38:90: 8a:3b:a4:fd:b4:c5:20:9b:3b:7c:ab:21:13:25:e4: 71:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:EF:C6:87:59:74:B7:79:27:2C:20:12:17:05:0D:78:90:08:93:1D X509v3 Authority Key Identifier: keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/ue_Gh1l0t3knLCASFwUNeJAIkx0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.251.120.0/22 195.251.238.0-195.251.243.255 Signature Algorithm: sha256WithRSAEncryption 7d:d4:d9:02:b0:42:db:6c:49:8d:f3:43:ab:c4:75:90:41:de: 94:b2:1b:21:1e:bc:3b:aa:06:67:8d:28:08:aa:8e:87:4c:0c: ea:f0:42:d1:5a:e8:95:47:a1:76:a8:17:d8:9b:20:3f:4c:37: ed:4e:6a:b4:dd:3b:2c:fc:99:e0:bf:70:72:1e:89:ef:a3:75: 18:9f:9c:08:77:05:24:d0:ba:d4:69:05:67:20:82:5b:e8:67: 64:ce:a3:86:ac:09:46:aa:7b:6e:02:ad:ff:26:49:5c:e4:e3: e2:80:8d:a3:02:c2:dc:93:fe:bd:01:6a:ac:7b:74:bc:4d:4b: 2e:32:5f:1f:92:ab:cb:a2:d7:55:ab:fb:fc:02:72:9f:55:69: c6:2b:64:82:51:0c:40:ae:b9:ea:c6:23:94:d4:86:93:f9:13: 5c:f5:18:dc:9a:c9:bb:6f:1d:3f:a1:64:a5:67:9a:3d:71:9c: 14:a2:6f:dc:5f:54:e1:e1:27:78:73:70:9c:7f:fc:e8:9a:18: 85:83:cb:6b:64:51:d2:ee:77:56:7f:39:4d:c5:68:6f:e4:94: d3:7b:b5:08:ea:f9:44:3a:14:34:55:4c:ef:60:6b:74:43:62: b7:4e:77:45:e2:a5:e1:63:98:2e:24:a0:96:ff:b9:01:f5:cb: 24:e2:0c:6e -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt87PcW/CER99T8KmXhxY5HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1 MjlkYzMwHhcNMjYwMTAyMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWVmYzY4NzU5NzRiNzc5MjcyYzIwMTIxNzA1MGQ3ODkwMDg5MzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmT1tqekLWNHxeb+RyC6Wgewu0mZR n9xOxqMyvqJouep+zayQaOYAJL1DsPOpV7XUdeYVzRoTHY/MEcXDPLl1Dz4c2YKb Y6Qsrrf9D/0y8fHJL6d5geEkqDdlhMjdr+fnUsS3GXuaUMQbcurJglzgESYI2JaD m+OPDgDale9z4xZPAX01kNeiOkmFGD2Q0hJfHniK/SsxcuXm8+uNWF6ohoFTvoIF r6nx33uRRZC/p3c2J5OTeM7hcMaHyL9U2TAJErvkXmnz4R4JbCGPARFXZKwMLHoh Z6ubuHEs9PcbxJBNsaVoZJQvhQG5Dj3cOJCKO6T9tMUgmzt8qyETJeRxjwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFLnvxodZdLd5JywgEhcFDXiQCJMdMB8GA1UdIwQY MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut YWFhNDU1M2QyYWJkLzEvdWVfR2gxbDB0M2tuTENBU0Z3VU5lSkFJa3gwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCw/t4MAwD BAHD++4DBALD+/AwDQYJKoZIhvcNAQELBQADggEBAH3U2QKwQttsSY3zQ6vEdZBB 3pSyGyEevDuqBmeNKAiqjodMDOrwQtFa6JVHoXaoF9ibID9MN+1OarTdOyz8meC/ cHIeie+jdRifnAh3BSTQutRpBWcgglvoZ2TOo4asCUaqe24Crf8mSVzk4+KAjaMC wtyT/r0Baqx7dLxNSy4yXx+Sq8ui11Wr+/wCcp9VacYrZIJRDECuuerGI5TUhpP5 E1z1GNyaybtvHT+hZKVnmj1xnBSib9xfVOHhJ3hzcJx//OiaGIWDy2tkUdLud1Z/ OU3FaG/klNN7tQjq+UQ6FDRVTO9ga3RDYrdOd0XipeFjmC4koJb/uQH1yyTiDG4= -----END CERTIFICATE-----Generated at Mon Feb 2 09:39:02 2026 by rpki-client