This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/UKaxkQEqDefi6Q-PAxV70oCO_r8.roa File: UKaxkQEqDefi6Q-PAxV70oCO_r8.roa (raw, json) Hash identifier: U/xm0eOwS2N25g8rhsisLKcIXoZW3KuS4QAYfKx9zWg= Subject key identifier: 50:A6:B1:91:01:2A:0D:E7:E2:E9:0F:8F:03:15:7B:D2:80:8E:FE:BF Certificate issuer: /CN=f3ba90c71eb4cb0169c94843e5c72fd777501906 Certificate serial: 019B76EAF21CDBADB376E9EF6A314308782F Authority key identifier: F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/UKaxkQEqDefi6Q-PAxV70oCO_r8.roa Signing time: Thu 01 Jan 2026 00:17:47 +0000 ROA not before: Thu 01 Jan 2026 00:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21437 IP address blocks: 193.104.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f2:1c:db:ad:b3:76:e9:ef:6a:31:43:08:78:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3ba90c71eb4cb0169c94843e5c72fd777501906 Validity Not Before: Jan 1 00:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50a6b191012a0de7e2e90f8f03157bd2808efebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:70:46:f9:63:2d:af:a3:85:5d:07:4c:f6:38: 01:81:59:95:19:4b:34:b2:e4:f1:60:1c:26:6c:9c: 2b:58:2f:67:5e:b5:fe:57:e4:c3:f1:82:ae:47:2e: 96:ea:e7:67:c9:a1:78:26:5c:a5:5f:d7:d4:ae:76: 94:ca:12:86:97:13:d3:a4:eb:6b:85:3b:9f:70:1d: e5:79:63:f9:21:05:b0:43:18:2d:7e:0f:c1:bc:5d: 08:26:0b:be:6a:2f:6b:12:e0:59:73:27:5c:e2:ea: 79:43:b4:34:f5:d0:7a:3f:46:17:6d:39:39:b2:e0: 61:32:65:33:7b:d0:44:b6:08:8b:10:f2:12:60:da: 0f:54:d0:b4:b2:79:ea:b8:2b:74:50:f4:8d:e8:eb: 5b:25:97:56:ff:96:da:09:46:9c:02:6a:4c:87:60: 87:00:47:db:00:80:4e:67:9f:f6:1f:f9:bf:e3:a9: 1c:1e:fd:01:8a:4c:12:3c:54:1b:08:69:04:f4:d5: 77:73:d7:8b:3a:7f:94:d2:c0:78:23:b9:df:5c:b5: 90:06:eb:48:05:f7:77:7b:f9:53:11:ba:36:af:63: 3a:2c:c0:3b:e5:c0:68:2a:6b:7c:c7:2d:fa:b2:a1: aa:65:cb:fa:ea:86:a1:22:9a:b2:e3:01:12:32:63: 6c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A6:B1:91:01:2A:0D:E7:E2:E9:0F:8F:03:15:7B:D2:80:8E:FE:BF X509v3 Authority Key Identifier: keyid:F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/UKaxkQEqDefi6Q-PAxV70oCO_r8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.133.0/24 Signature Algorithm: sha256WithRSAEncryption 89:bf:dd:00:03:7d:f1:e9:46:01:be:2f:fa:62:8c:02:ef:30: 10:eb:d3:d2:1f:24:c2:f3:4c:a1:a3:b3:da:25:bc:48:e4:f1: 86:44:e3:e7:7a:8f:f0:cc:48:cd:1d:38:79:6d:fc:15:bd:de: 9b:e3:af:fd:19:f7:2f:a9:fa:d2:ec:29:04:44:0c:bd:94:5c: 61:00:cd:f3:dd:60:b3:24:d5:84:f2:93:50:e1:33:9c:07:dd: cf:20:74:7d:8a:ef:81:28:35:10:e9:90:5d:48:e1:df:b2:3b: cb:5d:96:5e:a6:91:ce:9b:a8:32:39:a0:1b:72:52:1e:68:bc: c7:a4:30:49:0a:ad:6f:01:04:60:44:be:75:dd:4b:b8:4f:8c: c1:82:2e:60:a6:ed:01:40:8a:2f:a7:4a:b7:b1:c2:6e:6c:8e: 7a:d7:44:1a:96:59:1b:77:16:fb:00:c9:1a:45:5d:09:eb:05: 78:59:18:5b:07:34:d1:b7:ac:67:13:3f:14:d6:be:f5:b8:ea: 25:58:e0:a8:83:9b:b3:95:77:12:03:a1:eb:91:2f:f4:3a:37: d8:05:f3:28:44:5a:db:d3:07:48:f7:d7:5a:fa:28:71:24:78: 41:da:2f:9d:ed:59:3f:3c:6d:0e:06:f7:3d:69:4a:97:37:e1: be:27:e0:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26vIc262zdunvajFDCHgvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYmE5MGM3MWViNGNiMDE2OWM5NDg0M2U1YzcyZmQ3Nzc1 MDE5MDYwHhcNMjYwMTAxMDAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGE2YjE5MTAxMmEwZGU3ZTJlOTBmOGYwMzE1N2JkMjgwOGVmZWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXBG+WMtr6OFXQdM9jgBgVmVGUs0 suTxYBwmbJwrWC9nXrX+V+TD8YKuRy6W6udnyaF4JlylX9fUrnaUyhKGlxPTpOtr hTufcB3leWP5IQWwQxgtfg/BvF0IJgu+ai9rEuBZcydc4up5Q7Q09dB6P0YXbTk5 suBhMmUze9BEtgiLEPISYNoPVNC0snnquCt0UPSN6OtbJZdW/5baCUacAmpMh2CH AEfbAIBOZ5/2H/m/46kcHv0BikwSPFQbCGkE9NV3c9eLOn+U0sB4I7nfXLWQButI Bfd3e/lTEbo2r2M6LMA75cBoKmt8xy36sqGqZcv66oahIpqy4wESMmNsxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFCmsZEBKg3n4ukPjwMVe9KAjv6/MB8GA1UdIwQY MBaAFPO6kMcetMsBaclIQ+XHL9d3UBkGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODdxUXh4NjB5d0ZweVVoRDVjY3YxM2RRR1FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hYmNjMDctOWE2MC00OWY2LWExZWYt OGQ1MjkwMmFjODMwLzEvVUtheGtRRXFEZWZpNlEtUEF4Vjcwb0NPX3I4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9hYmNjMDctOWE2MC00OWY2LWExZWYtOGQ1MjkwMmFjODMw LzEvODdxUXh4NjB5d0ZweVVoRDVjY3YxM2RRR1FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWiFMA0G CSqGSIb3DQEBCwUAA4IBAQCJv90AA33x6UYBvi/6YowC7zAQ69PSHyTC80yho7Pa JbxI5PGGROPneo/wzEjNHTh5bfwVvd6b46/9GfcvqfrS7CkERAy9lFxhAM3z3WCz JNWE8pNQ4TOcB93PIHR9iu+BKDUQ6ZBdSOHfsjvLXZZeppHOm6gyOaAbclIeaLzH pDBJCq1vAQRgRL513Uu4T4zBgi5gpu0BQIovp0q3scJubI5610Qallkbdxb7AMka RV0J6wV4WRhbBzTRt6xnEz8U1r71uOolWOCog5uzlXcSA6HrkS/0OjfYBfMoRFrb 0wdI99da+ihxJHhB2i+d7Vk/PG0OBvc9aUqXN+G+J+Dr -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:33 2026 by rpki-client