This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/uKzr6b65vtzDdcB3SEbQ_eXsURQ.roa File: uKzr6b65vtzDdcB3SEbQ_eXsURQ.roa (raw, json) Hash identifier: xSRJcjd0eLR5MNbT/qQW4MnOH8NKSKy8VGBBsMm1Rj4= Subject key identifier: B8:AC:EB:E9:BE:B9:BE:DC:C3:75:C0:77:48:46:D0:FD:E5:EC:51:14 Certificate issuer: /CN=cd65ee23bff42ccf679d7377fe4da695d341aef0 Certificate serial: 019B7C11CD00117C357104F872CFD1F49036 Authority key identifier: CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/uKzr6b65vtzDdcB3SEbQ_eXsURQ.roa Signing time: Fri 02 Jan 2026 00:18:19 +0000 ROA not before: Fri 02 Jan 2026 00:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51013 IP address blocks: 213.188.152.0/22 maxlen: 22 213.188.156.0/23 maxlen: 23 2a02:250:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:cd:00:11:7c:35:71:04:f8:72:cf:d1:f4:90:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd65ee23bff42ccf679d7377fe4da695d341aef0 Validity Not Before: Jan 2 00:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8acebe9beb9bedcc375c0774846d0fde5ec5114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:41:c7:44:63:cc:be:16:48:03:c6:09:84:5a: 57:a6:ba:33:b4:00:a5:bc:94:33:cd:2b:84:59:a1: db:f5:ea:d2:e7:af:8b:a1:0a:50:15:06:0b:16:ba: b2:83:06:7a:20:da:2b:b4:49:ec:c0:bf:ac:18:81: e8:50:00:01:fc:13:51:8b:43:bb:fa:68:cc:8b:c4: 23:66:72:d7:73:ae:49:d7:13:36:e7:da:ee:34:6b: 00:e3:a5:0b:2c:1d:0e:44:9a:87:80:fc:7f:fa:f4: 21:68:c7:b1:08:6f:22:4b:12:fd:3a:34:d1:03:48: 57:37:d8:3f:e1:0b:3d:61:22:4b:73:e2:f1:59:8b: 7f:d6:c3:fe:9b:be:fe:65:26:9b:bf:c2:28:2b:3c: a3:f1:c3:2e:41:dd:da:7f:51:23:81:e7:2c:82:d6: 1b:96:4f:e2:09:87:3c:b4:3d:28:a5:c3:c4:10:44: 45:8f:60:40:d4:f2:3a:6d:fc:73:27:16:58:19:f4: 0f:3b:0d:78:5d:15:ab:84:e7:6e:50:96:ea:e5:66: 1d:09:2d:e8:f8:a4:fa:dc:1c:20:d1:f4:c9:f4:b8: e9:45:39:40:79:62:20:26:80:e5:97:5a:5e:ef:98: 3d:b8:e4:d1:97:1f:4a:7a:52:2e:ec:b5:bc:32:78: 6f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AC:EB:E9:BE:B9:BE:DC:C3:75:C0:77:48:46:D0:FD:E5:EC:51:14 X509v3 Authority Key Identifier: keyid:CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/uKzr6b65vtzDdcB3SEbQ_eXsURQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.188.152.0-213.188.157.255 IPv6: 2a02:250:2::/48 Signature Algorithm: sha256WithRSAEncryption a0:37:7b:b3:76:cc:be:c7:15:f4:fe:ea:58:5f:89:56:99:ef: 18:e4:79:5f:11:2f:31:1f:57:c4:db:ce:4c:b0:6c:40:44:eb: d8:7b:7d:f1:3a:a1:be:24:97:4d:c4:77:94:b5:ea:ef:6d:23: bd:c2:89:0f:08:68:25:71:d5:16:82:f7:62:30:0c:cb:f1:3c: bf:75:fe:15:fc:d3:28:d4:a3:86:d4:6b:5a:1f:07:30:25:fd: 78:9e:63:1b:b5:d8:a6:ef:e0:fa:01:51:c0:0e:f9:62:ee:a4: ff:3b:a0:a5:4f:bc:8e:13:31:70:9a:a9:8a:06:64:8d:47:09: f5:e3:11:be:75:a3:10:e3:87:2a:0f:b2:3c:c6:e3:cf:36:83: fe:d1:06:53:e0:1c:f9:75:8d:8f:2f:eb:63:ab:74:a4:bf:1f: c6:24:b7:ac:00:92:45:81:8c:27:46:dd:4f:cb:5e:8e:16:b6: 48:a0:5d:03:f2:07:57:2e:30:31:e3:26:cc:84:92:fb:1a:4f: 5b:0a:d0:5f:53:be:6a:a9:1b:8e:63:19:1d:9f:ee:84:cb:ff: 16:b5:b8:20:a2:e5:c5:53:28:ee:4a:2f:da:27:f9:17:21:b8: d6:43:4d:54:ef:36:a7:6c:f8:9d:d8:a0:54:26:7c:19:77:bc: 93:a6:78:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt8Ec0AEXw1cQT4cs/R9JA2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNjVlZTIzYmZmNDJjY2Y2NzlkNzM3N2ZlNGRhNjk1ZDM0 MWFlZjAwHhcNMjYwMTAyMDAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGFjZWJlOWJlYjliZWRjYzM3NWMwNzc0ODQ2ZDBmZGU1ZWM1MTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUHHRGPMvhZIA8YJhFpXproztACl vJQzzSuEWaHb9erS56+LoQpQFQYLFrqygwZ6INortEnswL+sGIHoUAAB/BNRi0O7 +mjMi8QjZnLXc65J1xM259ruNGsA46ULLB0ORJqHgPx/+vQhaMexCG8iSxL9OjTR A0hXN9g/4Qs9YSJLc+LxWYt/1sP+m77+ZSabv8IoKzyj8cMuQd3af1EjgecsgtYb lk/iCYc8tD0opcPEEERFj2BA1PI6bfxzJxZYGfQPOw14XRWrhOduUJbq5WYdCS3o +KT63Bwg0fTJ9LjpRTlAeWIgJoDll1pe75g9uOTRlx9KelIu7LW8MnhvUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLis6+m+ub7cw3XAd0hG0P3l7FEUMB8GA1UdIwQY MBaAFM1l7iO/9CzPZ51zd/5NppXTQa7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveldYdUk3XzBMTTlublhOM19rMm1sZE5CcnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMDZkNDMtM2RiZi00Y2Y4LTgxNWQt NWRjMmZhNmEzNTAzLzEvdUt6cjZiNjV2dHpEZGNCM1NFYlFfZVhzVVJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wMDZkNDMtM2RiZi00Y2Y4LTgxNWQtNWRjMmZhNmEzNTAz LzEveldYdUk3XzBMTTlublhOM19rMm1sZE5CcnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAPVvJgD BAHVvJwwDwQCAAIwCQMHACoCAlAAAjANBgkqhkiG9w0BAQsFAAOCAQEAoDd7s3bM vscV9P7qWF+JVpnvGOR5XxEvMR9XxNvOTLBsQETr2Ht98TqhviSXTcR3lLXq720j vcKJDwhoJXHVFoL3YjAMy/E8v3X+FfzTKNSjhtRrWh8HMCX9eJ5jG7XYpu/g+gFR wA75Yu6k/zugpU+8jhMxcJqpigZkjUcJ9eMRvnWjEOOHKg+yPMbjzzaD/tEGU+Ac +XWNjy/rY6t0pL8fxiS3rACSRYGMJ0bdT8tejha2SKBdA/IHVy4wMeMmzISS+xpP WwrQX1O+aqkbjmMZHZ/uhMv/FrW4IKLlxVMo7kov2if5FyG41kNNVO82p2z4ndig VCZ8GXe8k6Z4gA== -----END CERTIFICATE-----Generated at Mon Jan 26 14:08:01 2026 by rpki-client