This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/UWmASN11Y1EhPU_qW1cmmLip81g.roa File: UWmASN11Y1EhPU_qW1cmmLip81g.roa (raw, json) Hash identifier: kuez9D7n3XS4aPJ21EYpdRS5Q3Qzu3GjOt1Zw0lXo4o= Subject key identifier: 51:69:80:48:DD:75:63:51:21:3D:4F:EA:5B:57:26:98:B8:A9:F3:58 Certificate issuer: /CN=3558bb47de354e09e0fc2cb2c1fa14d71d926ee8 Certificate serial: 019B7CEE076BE4E709E7D5C93EEE45F30E64 Authority key identifier: 35:58:BB:47:DE:35:4E:09:E0:FC:2C:B2:C1:FA:14:D7:1D:92:6E:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/UWmASN11Y1EhPU_qW1cmmLip81g.roa Signing time: Fri 02 Jan 2026 04:18:52 +0000 ROA not before: Fri 02 Jan 2026 04:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56548 IP address blocks: 185.188.114.0/24 maxlen: 24 185.188.115.0/24 maxlen: 24 185.199.208.0/24 maxlen: 24 185.199.210.0/24 maxlen: 24 185.199.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:07:6b:e4:e7:09:e7:d5:c9:3e:ee:45:f3:0e:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3558bb47de354e09e0fc2cb2c1fa14d71d926ee8 Validity Not Before: Jan 2 04:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51698048dd756351213d4fea5b572698b8a9f358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2b:c5:75:2a:9e:e5:53:db:bc:d7:0d:b7:94: 43:42:15:4f:ac:59:9d:b9:05:28:4c:ba:23:dd:89: 7a:8f:d9:c5:f5:f8:c6:07:89:09:60:27:91:ec:62: 70:95:04:cb:28:11:db:f7:93:b6:f2:0c:e8:5d:10: 57:9c:ab:06:5c:26:ba:74:64:9c:87:60:29:e0:36: 02:fa:5d:40:9d:d0:ef:81:ad:b4:70:25:03:fc:b8: 1e:11:68:10:16:11:69:46:db:9d:b7:47:ba:8f:88: a2:84:f4:0e:35:37:65:58:e9:50:9f:67:cc:a2:23: e4:ca:4c:f7:a3:5a:f0:9f:95:59:72:9c:97:5a:bd: d0:86:b1:6d:41:20:01:6e:03:6f:cf:ae:23:ff:45: 40:51:b4:43:47:b4:9e:dd:04:82:3a:12:db:7b:14: db:1d:61:5e:46:20:71:cb:a2:c4:0a:a6:1b:ab:9d: 6a:88:03:37:f9:11:12:48:62:a1:5e:39:ee:c7:73: 51:2c:ed:8b:77:0d:9a:b3:9a:55:15:91:00:a1:ef: a6:72:00:ab:a1:6b:2b:d2:0e:bc:62:5f:7f:47:1e: bd:55:9e:95:25:b7:80:47:11:a4:be:00:77:4e:aa: 06:a2:04:ec:2f:64:5e:27:8f:ce:db:9f:6c:a5:5c: 2e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:69:80:48:DD:75:63:51:21:3D:4F:EA:5B:57:26:98:B8:A9:F3:58 X509v3 Authority Key Identifier: keyid:35:58:BB:47:DE:35:4E:09:E0:FC:2C:B2:C1:FA:14:D7:1D:92:6E:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/UWmASN11Y1EhPU_qW1cmmLip81g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.188.114.0/23 185.199.208.0/24 185.199.210.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:e1:5d:c1:13:c6:fa:5d:e6:5d:9b:7a:ae:55:ab:5d:93:db: 05:41:90:b3:45:79:c9:34:45:56:5e:1b:78:d7:ff:e0:be:85: f6:7c:6d:4a:0c:ae:ed:c0:ab:93:ac:e1:1e:8e:7c:d7:c3:0d: 74:ac:9c:a0:33:bb:38:b5:7f:09:02:4a:09:ea:c7:b0:21:4c: c4:ab:76:47:cc:bd:30:56:32:d9:0d:e0:ca:56:05:5a:30:05: a5:0a:aa:c1:8c:22:b6:50:c3:d2:7b:03:8c:bf:8c:99:fe:7f: 30:49:08:2d:c8:f7:cd:74:bc:62:aa:57:6b:8a:52:64:c2:88: ee:a9:12:5e:bc:25:ce:03:e3:24:d0:26:5d:fb:a9:7c:09:c9: 67:1a:66:68:b5:ec:54:32:ed:22:6c:f1:b4:63:63:f4:1e:d6: 97:40:30:aa:29:59:9c:8c:28:5d:15:b8:7f:cd:e9:f8:ed:e4: 9b:86:b6:f3:e7:0c:8b:ed:44:69:50:8a:b5:db:40:85:ca:17: fa:ff:6c:b1:7b:95:c8:79:b1:79:ee:e2:81:2d:c5:1c:c0:0a: 75:ef:25:d4:79:cf:ea:45:97:1a:dc:ec:d5:18:c7:0d:7a:93: c9:1c:7c:97:57:5b:4c:05:74:c3:47:a0:b3:27:ff:a6:ec:db: 8e:cb:6e:d6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87gdr5OcJ59XJPu5F8w5kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NThiYjQ3ZGUzNTRlMDllMGZjMmNiMmMxZmExNGQ3MWQ5 MjZlZTgwHhcNMjYwMTAyMDQxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTY5ODA0OGRkNzU2MzUxMjEzZDRmZWE1YjU3MjY5OGI4YTlmMzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSvFdSqe5VPbvNcNt5RDQhVPrFmd uQUoTLoj3Yl6j9nF9fjGB4kJYCeR7GJwlQTLKBHb95O28gzoXRBXnKsGXCa6dGSc h2Ap4DYC+l1AndDvga20cCUD/LgeEWgQFhFpRtudt0e6j4iihPQONTdlWOlQn2fM oiPkykz3o1rwn5VZcpyXWr3QhrFtQSABbgNvz64j/0VAUbRDR7Se3QSCOhLbexTb HWFeRiBxy6LECqYbq51qiAM3+RESSGKhXjnux3NRLO2Ldw2as5pVFZEAoe+mcgCr oWsr0g68Yl9/Rx69VZ6VJbeARxGkvgB3TqoGogTsL2ReJ4/O259spVwuUQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFFpgEjddWNRIT1P6ltXJpi4qfNYMB8GA1UdIwQY MBaAFDVYu0feNU4J4PwsssH6FNcdkm7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlZpN1I5NDFUZ25nX0N5eXdmb1UxeDJTYnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hMGZhY2EtZGI3Zi00ZWQ4LWIxMWEt ZWVjNDZjYTgyYTMzLzEvVVdtQVNOMTFZMUVoUFVfcVcxY21tTGlwODFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9hMGZhY2EtZGI3Zi00ZWQ4LWIxMWEtZWVjNDZjYTgyYTMz LzEvTlZpN1I5NDFUZ25nX0N5eXdmb1UxeDJTYnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBubxyAwQA ucfQAwQBucfSMA0GCSqGSIb3DQEBCwUAA4IBAQCc4V3BE8b6XeZdm3quVatdk9sF QZCzRXnJNEVWXht41//gvoX2fG1KDK7twKuTrOEejnzXww10rJygM7s4tX8JAkoJ 6sewIUzEq3ZHzL0wVjLZDeDKVgVaMAWlCqrBjCK2UMPSewOMv4yZ/n8wSQgtyPfN dLxiqldrilJkwojuqRJevCXOA+Mk0CZd+6l8CclnGmZotexUMu0ibPG0Y2P0HtaX QDCqKVmcjChdFbh/zen47eSbhrbz5wyL7URpUIq120CFyhf6/2yxe5XIebF57uKB LcUcwAp17yXUec/qRZca3OzVGMcNepPJHHyXV1tMBXTDR6CzJ/+m7NuOy27W -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:38 2026 by rpki-client