This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/UaQ-s38Z57ecJNUbRdVAzUGv8GA.roa
File: UaQ-s38Z57ecJNUbRdVAzUGv8GA.roa (raw, json)
Hash identifier: 4xw5dIxtZo++aDtcmN5R2tGAogLl64Jnmc82+4RR2Mo=
Subject key identifier: 51:A4:3E:B3:7F:19:E7:B7:9C:24:D5:1B:45:D5:40:CD:41:AF:F0:60
Certificate issuer: /CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Certificate serial: 019B77C75700990B6654850121C1F3C3B64D
Authority key identifier: A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/UaQ-s38Z57ecJNUbRdVAzUGv8GA.roa
Signing time: Thu 01 Jan 2026 04:18:31 +0000
ROA not before: Thu 01 Jan 2026 04:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25512
IP address blocks: 91.234.162.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:57:00:99:0b:66:54:85:01:21:c1:f3:c3:b6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Validity
Not Before: Jan 1 04:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51a43eb37f19e7b79c24d51b45d540cd41aff060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:15:2b:4d:4d:10:9a:57:f3:52:35:7d:05:6a:
20:13:8c:43:84:9e:ce:d0:5b:c4:5a:da:5e:fb:55:
c0:3f:5c:cc:f8:87:3c:31:b6:ec:f8:58:bc:ad:2d:
a6:be:d5:8d:2e:04:32:60:37:99:1c:10:33:49:fb:
77:f3:10:3b:27:fa:5c:3f:1e:84:c2:02:0b:e9:f9:
fb:81:c7:dc:8b:d3:b5:e8:ee:4e:f5:85:42:15:84:
85:27:d5:3b:e8:d7:61:b7:22:12:32:bf:48:eb:62:
be:eb:85:f2:50:f7:4c:f4:ed:96:96:40:d3:5f:86:
16:05:5b:91:88:69:48:9e:bf:9f:6f:04:fb:4a:d4:
b3:20:3b:ce:5b:b9:3d:92:d2:4d:9a:93:80:af:6a:
66:bf:27:76:b7:90:73:8f:d0:4a:e7:86:49:7f:3a:
54:47:20:a1:34:3e:80:a7:e9:ac:ce:99:a1:5b:c8:
a8:63:a1:66:2c:28:f9:cc:9a:c7:10:63:e5:15:90:
75:47:67:18:cc:24:2b:b3:45:a6:36:3a:30:69:02:
8f:0c:0e:a0:5c:39:b3:99:d6:d3:6b:03:69:ca:a5:
05:ff:d8:81:7f:5b:b3:1c:70:a9:e9:85:71:27:b3:
60:70:05:e2:51:85:7b:a8:8a:9e:be:14:31:9b:20:
55:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A4:3E:B3:7F:19:E7:B7:9C:24:D5:1B:45:D5:40:CD:41:AF:F0:60
X509v3 Authority Key Identifier:
keyid:A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/UaQ-s38Z57ecJNUbRdVAzUGv8GA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.162.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:8f:fb:c1:76:74:b8:53:4a:39:43:fb:2d:30:1e:fc:c6:e0:
28:2a:e7:74:1f:a8:d8:57:c6:08:3d:fa:f9:b2:26:5e:8f:90:
ab:53:c8:f0:97:f0:72:1b:05:74:23:b2:60:63:dd:70:b3:bf:
ae:ba:9a:f3:65:71:72:46:c3:b7:dd:f2:9d:48:ae:42:4d:f5:
c8:a3:89:4e:19:a9:95:80:71:f4:9a:8f:26:48:39:7d:0f:42:
29:0b:24:ed:97:91:95:3f:09:1b:89:4e:fa:66:23:3e:80:db:
4a:60:75:fe:93:a8:ab:47:1d:79:6a:0a:bc:bd:8e:40:f9:11:
fa:4c:ab:b8:d2:71:0b:6e:d5:50:f9:82:b8:2d:2c:41:eb:63:
78:68:89:b6:db:ae:4f:56:36:f5:36:3d:c2:36:3e:ba:4e:cc:
a2:66:a4:f0:13:e0:eb:c9:32:c1:6f:8e:d6:84:9a:50:90:a7:
0a:8b:aa:06:dd:e1:c0:74:b7:05:65:eb:ad:16:03:19:8f:3b:
60:85:ce:ea:af:4d:3e:65:5b:26:73:d1:36:35:c8:a9:62:71:
02:9c:c7:02:a6:68:1e:27:a5:79:f6:dc:ec:1d:18:a8:13:b4:
1c:4b:8f:dd:a0:8a:34:ab:b7:a6:1a:25:7a:0c:7c:d3:d9:ea:
81:63:90:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3x1cAmQtmVIUBIcHzw7ZNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNDExZjU2ODc1YjRjYjdhNThjZWU2Y2I2MDdlZTI1MWNi
ZGY5ODAwHhcNMjYwMTAxMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWE0M2ViMzdmMTllN2I3OWMyNGQ1MWI0NWQ1NDBjZDQxYWZmMDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRUrTU0QmlfzUjV9BWogE4xDhJ7O
0FvEWtpe+1XAP1zM+Ic8Mbbs+Fi8rS2mvtWNLgQyYDeZHBAzSft38xA7J/pcPx6E
wgIL6fn7gcfci9O16O5O9YVCFYSFJ9U76NdhtyISMr9I62K+64XyUPdM9O2WlkDT
X4YWBVuRiGlInr+fbwT7StSzIDvOW7k9ktJNmpOAr2pmvyd2t5Bzj9BK54ZJfzpU
RyChND6Ap+mszpmhW8ioY6FmLCj5zJrHEGPlFZB1R2cYzCQrs0WmNjowaQKPDA6g
XDmzmdbTawNpyqUF/9iBf1uzHHCp6YVxJ7NgcAXiUYV7qIqevhQxmyBVSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFGkPrN/Gee3nCTVG0XVQM1Br/BgMB8GA1UdIwQY
MBaAFKFBH1aHW0y3pYzubLYH7iUcvfmAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1VFZlZvZGJUTGVsak81c3RnZnVKUnk5LVlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9jOThiODctMTg1Ny00NGJkLThiMGMt
NzhkODMzZTQxNDZhLzEvVWFRLXMzOFo1N2VjSk5VYlJkVkF6VUd2OEdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9jOThiODctMTg1Ny00NGJkLThiMGMtNzhkODMzZTQxNDZh
LzEvb1VFZlZvZGJUTGVsak81c3RnZnVKUnk5LVlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+qiMA0G
CSqGSIb3DQEBCwUAA4IBAQAaj/vBdnS4U0o5Q/stMB78xuAoKud0H6jYV8YIPfr5
siZej5CrU8jwl/ByGwV0I7JgY91ws7+uuprzZXFyRsO33fKdSK5CTfXIo4lOGamV
gHH0mo8mSDl9D0IpCyTtl5GVPwkbiU76ZiM+gNtKYHX+k6irRx15agq8vY5A+RH6
TKu40nELbtVQ+YK4LSxB62N4aIm2265PVjb1Nj3CNj66TsyiZqTwE+DryTLBb47W
hJpQkKcKi6oG3eHAdLcFZeutFgMZjztghc7qr00+ZVsmc9E2NcipYnECnMcCpmge
J6V59tzsHRioE7QcS4/doIo0q7emGiV6DHzT2eqBY5A9
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:31:56 2026 by rpki-client