This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/0ucWFZcFyD58o8zTdzJyfEAC5zk.roa File: 0ucWFZcFyD58o8zTdzJyfEAC5zk.roa (raw, json) Hash identifier: lMcCuoQ+b6EBN3pFu3tzR6OUCs2zcvSlVr6M8lwbMuU= Subject key identifier: D2:E7:16:15:97:05:C8:3E:7C:A3:CC:D3:77:32:72:7C:40:02:E7:39 Certificate issuer: /CN=ad442bdda2a35320a96d806bf168d5b84a76d426 Certificate serial: 019B7F15A1BE5461BC38471F12FEB5320173 Authority key identifier: AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/0ucWFZcFyD58o8zTdzJyfEAC5zk.roa Signing time: Fri 02 Jan 2026 14:21:22 +0000 ROA not before: Fri 02 Jan 2026 14:21:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41099 IP address blocks: 193.9.15.0/24 maxlen: 24 193.9.29.0/24 maxlen: 24 193.9.255.0/24 maxlen: 24 193.16.0.0/24 maxlen: 24 195.10.215.0/24 maxlen: 24 195.10.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a1:be:54:61:bc:38:47:1f:12:fe:b5:32:01:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad442bdda2a35320a96d806bf168d5b84a76d426 Validity Not Before: Jan 2 14:21:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2e716159705c83e7ca3ccd37732727c4002e739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:78:b5:72:0f:56:0e:70:22:2c:cf:44:03:8e: a3:c1:5d:1a:6f:0c:8d:cf:f6:eb:0b:ff:fe:ba:f0: 60:c5:04:86:94:67:87:08:34:24:20:ac:71:3c:b0: a5:3e:dd:28:72:a6:6d:e4:98:22:bf:ee:ab:7d:7c: 22:4e:ea:d8:24:42:35:57:96:76:24:3c:ae:3e:3e: 9a:c3:27:e9:48:81:39:df:0a:65:ae:a2:52:86:2a: c2:bb:97:57:95:00:9f:86:d3:e7:81:b3:4c:9a:1a: 4b:52:2c:05:93:02:08:44:96:c2:e2:de:b5:17:a9: d1:19:a7:fa:b1:37:24:10:6f:8c:9b:4f:03:43:2c: 11:7a:57:8d:45:25:61:2a:0d:84:e6:13:7e:bb:a8: 28:ac:55:cd:d2:4e:4c:44:0c:41:d2:81:bc:58:da: 79:26:6b:d2:51:a2:d1:9f:61:cf:af:5f:f3:8f:d5: c3:ce:e3:23:c8:0c:61:90:92:07:64:b7:29:a9:a4: 2d:c5:30:6b:5b:6c:22:7c:b4:3d:dc:6d:70:b1:29: ba:37:8d:f5:93:06:5a:51:34:19:22:e8:4b:7b:4d: e1:a9:59:cf:21:10:5d:17:f4:58:83:ea:1b:a1:b8: b6:7b:c4:1a:3b:cc:66:75:ec:61:d0:c2:32:98:71: f7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E7:16:15:97:05:C8:3E:7C:A3:CC:D3:77:32:72:7C:40:02:E7:39 X509v3 Authority Key Identifier: keyid:AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/0ucWFZcFyD58o8zTdzJyfEAC5zk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.9.15.0/24 193.9.29.0/24 193.9.255.0/24 193.16.0.0/24 195.10.215.0/24 195.10.222.0/24 Signature Algorithm: sha256WithRSAEncryption 56:bb:22:4b:33:96:61:a8:7f:4b:33:3c:43:7b:2a:69:6b:75: 64:0f:52:a4:52:93:98:6e:9a:9d:8a:ef:1e:c2:a1:39:5c:ad: cc:30:8d:8d:97:e5:8e:b2:a2:44:fc:7b:0a:a5:07:b9:be:a0: f5:8b:0d:51:4e:16:d9:3b:a2:b8:e3:05:a2:bb:61:03:03:fc: 35:6c:25:65:7c:da:20:b4:73:52:9d:b2:59:a8:7f:08:6c:90: 78:c3:d6:d1:db:15:55:4b:dd:b3:40:85:da:42:bf:e8:5f:db: 73:a9:79:e1:62:08:bc:c3:c1:ec:0d:25:3d:78:c9:ce:0f:e4: 88:81:f2:e4:95:a1:84:c0:09:a9:54:7a:d7:90:e4:69:b0:f9: 93:b6:22:eb:22:18:ff:1d:32:9b:de:b9:7d:c9:c9:12:f9:99: 44:38:27:b6:8c:4a:6a:4d:e1:28:d7:30:74:dc:12:4c:2c:e6: e5:f4:06:31:35:f9:d3:df:dc:44:d2:84:bf:95:f4:4c:b2:9b: 7e:6c:7c:c7:5f:df:0c:1f:de:31:19:c1:73:6b:48:27:e7:08: a4:25:d0:83:05:8d:73:95:ab:2c:0b:7e:f2:ff:19:66:a8:f6: d2:e0:e3:29:e4:6c:7a:b8:c9:f4:d9:6f:99:6e:be:a7:96:61: 2e:fb:8a:aa -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt/FaG+VGG8OEcfEv61MgFzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNDQyYmRkYTJhMzUzMjBhOTZkODA2YmYxNjhkNWI4NGE3 NmQ0MjYwHhcNMjYwMTAyMTQyMTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmU3MTYxNTk3MDVjODNlN2NhM2NjZDM3NzMyNzI3YzQwMDJlNzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHi1cg9WDnAiLM9EA46jwV0abwyN z/brC//+uvBgxQSGlGeHCDQkIKxxPLClPt0ocqZt5Jgiv+6rfXwiTurYJEI1V5Z2 JDyuPj6awyfpSIE53wplrqJShirCu5dXlQCfhtPngbNMmhpLUiwFkwIIRJbC4t61 F6nRGaf6sTckEG+Mm08DQywReleNRSVhKg2E5hN+u6gorFXN0k5MRAxB0oG8WNp5 JmvSUaLRn2HPr1/zj9XDzuMjyAxhkJIHZLcpqaQtxTBrW2wifLQ93G1wsSm6N431 kwZaUTQZIuhLe03hqVnPIRBdF/RYg+obobi2e8QaO8xmdexh0MIymHH3vwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFNLnFhWXBcg+fKPM03cycnxAAuc5MB8GA1UdIwQY MBaAFK1EK92io1MgqW2Aa/Fo1bhKdtQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclVRcjNhS2pVeUNwYllCcjhXalZ1RXAyMUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9kZDY3MmQtZTk4MC00ZGNhLTkxOTUt ODU5ZGJjYTM4NzE0LzEvMHVjV0ZaY0Z5RDU4bzh6VGR6SnlmRUFDNXprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9kZDY3MmQtZTk4MC00ZGNhLTkxOTUtODU5ZGJjYTM4NzE0 LzEvclVRcjNhS2pVeUNwYllCcjhXalZ1RXAyMUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAwQkPAwQA wQkdAwQAwQn/AwQAwRAAAwQAwwrXAwQAwwreMA0GCSqGSIb3DQEBCwUAA4IBAQBW uyJLM5ZhqH9LMzxDeyppa3VkD1KkUpOYbpqdiu8ewqE5XK3MMI2Nl+WOsqJE/HsK pQe5vqD1iw1RThbZO6K44wWiu2EDA/w1bCVlfNogtHNSnbJZqH8IbJB4w9bR2xVV S92zQIXaQr/oX9tzqXnhYgi8w8HsDSU9eMnOD+SIgfLklaGEwAmpVHrXkORpsPmT tiLrIhj/HTKb3rl9yckS+ZlEOCe2jEpqTeEo1zB03BJMLObl9AYxNfnT39xE0oS/ lfRMspt+bHzHX98MH94xGcFza0gn5wikJdCDBY1zlassC37y/xlmqPbS4OMp5Gx6 uMn02W+Zbr6nlmEu+4qq -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:02 2026 by rpki-client