This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/uWJi4n2fJfSCJnq7hx-7IFaEdzI.roa File: uWJi4n2fJfSCJnq7hx-7IFaEdzI.roa (raw, json) Hash identifier: yeDaCV0sP9BpfoCsIzOVX7zfVilm6PwEVHy8z4NvaQM= Subject key identifier: B9:62:62:E2:7D:9F:25:F4:82:26:7A:BB:87:1F:BB:20:56:84:77:32 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E28D19880CD2D6CEFCF22F710A531 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/uWJi4n2fJfSCJnq7hx-7IFaEdzI.roa Signing time: Thu 01 Jan 2026 12:17:49 +0000 ROA not before: Thu 01 Jan 2026 12:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42495 IP address blocks: 185.115.241.0/24 maxlen: 24 2a06:7242::/43 maxlen: 43 2a06:7242::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:28:d1:98:80:cd:2d:6c:ef:cf:22:f7:10:a5:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b96262e27d9f25f482267abb871fbb2056847732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ff:63:05:3b:b9:5b:de:6a:a3:59:ef:df:0d: d6:9d:1e:40:3e:ff:b3:40:f7:03:7a:00:95:08:b8: 68:b2:01:19:e2:17:80:29:38:b9:4c:32:6f:cc:8c: 7d:8c:48:f7:fb:f0:c5:8d:ed:cf:7b:90:7f:50:a5: 3e:a0:05:d2:50:2e:2a:1c:b9:9c:dc:26:5f:5d:aa: d0:98:34:d3:56:ce:d4:a4:f0:a0:ad:df:3b:87:28: f7:73:05:66:36:06:c4:25:e2:98:f4:31:0a:a7:99: 59:89:39:40:3c:c2:9d:27:de:f7:fa:49:bd:a3:33: 6c:60:19:b5:1d:23:0a:83:3a:ae:7c:2a:23:0f:8c: b2:ac:bd:dc:b7:75:a1:78:a2:11:a0:42:26:5e:d3: dc:71:00:d3:12:b6:55:3f:40:37:aa:25:52:5c:3b: de:0a:28:87:3b:42:24:f9:4f:c3:3c:64:77:c8:1f: 6a:34:73:04:83:a7:e5:23:a5:5b:c3:ad:51:ad:49: 73:d4:ae:30:c1:35:27:0f:d2:eb:ac:92:a5:92:10: e4:e3:ee:22:a7:de:05:33:29:50:c9:56:08:f7:bd: b1:fa:87:7f:1e:1b:44:d6:19:be:ec:09:c7:6d:c1: b9:37:17:27:42:33:95:d4:3e:b6:fa:a4:7f:0d:3a: 55:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:62:62:E2:7D:9F:25:F4:82:26:7A:BB:87:1F:BB:20:56:84:77:32 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/uWJi4n2fJfSCJnq7hx-7IFaEdzI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.115.241.0/24 IPv6: 2a06:7242::/43 Signature Algorithm: sha256WithRSAEncryption cf:64:c2:29:e5:fc:ab:0a:56:97:09:25:95:da:f3:f2:ec:1e: aa:bf:66:c3:6d:e4:4a:ac:93:d6:f2:05:f6:f3:25:27:5f:1f: fb:d9:72:21:4a:f2:df:5f:c5:23:8e:00:64:96:f1:b2:44:4f: 4f:6b:7c:c9:58:5d:b4:a2:0a:78:3c:b7:25:a7:20:9b:3e:ea: 69:4e:6a:0a:43:1a:2b:98:22:d5:b1:10:a1:c2:0d:f5:32:56: 5e:7b:e0:ff:f1:ab:de:0a:6f:2a:35:3f:74:f5:74:d0:70:71: 3b:4e:de:1b:46:d2:ad:b4:de:94:00:6a:40:38:08:22:a7:83: f2:bc:3f:cd:7e:dd:c1:d4:e4:d4:94:1f:18:24:c8:b5:f8:db: 0f:87:28:3a:de:79:8b:1a:63:36:d8:50:56:7c:38:9e:f4:82: 2b:ce:f3:4d:28:56:8e:ae:a1:17:43:0f:62:46:d7:c2:bf:ec: b3:6f:f8:94:0d:d5:18:2f:b4:f5:37:ab:32:9c:bd:15:10:3a: 4f:19:05:63:27:d9:1e:98:ff:4a:8e:49:6d:9d:ee:11:b8:b0: 3b:3c:b4:8d:2e:ef:a0:d2:d0:6d:00:19:95:6e:b0:43:e5:80: 28:39:34:56:d8:16:85:93:75:31:6a:7a:91:6e:c5:c6:20:ec: c0:49:7c:07 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5fijRmIDNLWzvzyL3EKUxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTYyNjJlMjdkOWYyNWY0ODIyNjdhYmI4NzFmYmIyMDU2ODQ3NzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7f9jBTu5W95qo1nv3w3WnR5APv+z QPcDegCVCLhosgEZ4heAKTi5TDJvzIx9jEj3+/DFje3Pe5B/UKU+oAXSUC4qHLmc 3CZfXarQmDTTVs7UpPCgrd87hyj3cwVmNgbEJeKY9DEKp5lZiTlAPMKdJ973+km9 ozNsYBm1HSMKgzqufCojD4yyrL3ct3WheKIRoEImXtPccQDTErZVP0A3qiVSXDve CiiHO0Ik+U/DPGR3yB9qNHMEg6flI6Vbw61RrUlz1K4wwTUnD9LrrJKlkhDk4+4i p94FMylQyVYI972x+od/HhtE1hm+7AnHbcG5NxcnQjOV1D62+qR/DTpVowIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLliYuJ9nyX0giZ6u4cfuyBWhHcyMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvdVdKaTRuMmZKZlNDSm5xN2h4LTdJRmFFZHpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuXPxMA8E AgACMAkDBwUqBnJCAAAwDQYJKoZIhvcNAQELBQADggEBAM9kwinl/KsKVpcJJZXa 8/LsHqq/ZsNt5Eqsk9byBfbzJSdfH/vZciFK8t9fxSOOAGSW8bJET09rfMlYXbSi Cng8tyWnIJs+6mlOagpDGiuYItWxEKHCDfUyVl574P/xq94Kbyo1P3T1dNBwcTtO 3htG0q203pQAakA4CCKng/K8P81+3cHU5NSUHxgkyLX42w+HKDreeYsaYzbYUFZ8 OJ70givO800oVo6uoRdDD2JG18K/7LNv+JQN1RgvtPU3qzKcvRUQOk8ZBWMn2R6Y /0qOSW2d7hG4sDs8tI0u76DS0G0AGZVusEPlgCg5NFbYFoWTdTFqepFuxcYg7MBJ fAc= -----END CERTIFICATE-----Generated at Mon Jan 19 20:23:00 2026 by rpki-client