This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/uFrq-RvRQC9OkGuy5R4gchdIKl8.roa File: uFrq-RvRQC9OkGuy5R4gchdIKl8.roa (raw, json) Hash identifier: gWuU4TcPqkONBsiGVOMRa8nHv+rsSsomHzbQIL7QK8c= Subject key identifier: B8:5A:EA:F9:1B:D1:40:2F:4E:90:6B:B2:E5:1E:20:72:17:48:2A:5F Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019C099ADF0294293901C79661D4EADF2996 Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/uFrq-RvRQC9OkGuy5R4gchdIKl8.roa Signing time: Thu 29 Jan 2026 11:54:30 +0000 ROA not before: Thu 29 Jan 2026 11:54:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8881 IP address blocks: 114.69.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:09:9a:df:02:94:29:39:01:c7:96:61:d4:ea:df:29:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Jan 29 11:54:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b85aeaf91bd1402f4e906bb2e51e207217482a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0e:1c:5b:80:80:65:f5:94:83:93:e9:02:48: 22:82:8e:ff:8c:91:34:37:3a:8e:ec:2f:f9:d5:6d: 3c:7c:4f:85:05:7f:48:0c:cf:af:25:af:90:df:f7: 56:bf:4a:a8:74:d4:9a:ba:98:c4:fe:71:8d:0c:cc: 10:f1:45:18:1a:5f:ab:55:f1:da:99:62:6c:77:fe: fe:b7:23:09:c4:f7:e2:0a:b8:af:92:f4:47:81:b4: 82:84:79:29:94:d4:32:a3:65:57:24:fe:e8:ea:c4: bd:37:f7:16:ec:37:44:79:3f:9d:8f:3c:cf:5d:bb: 02:2c:1d:f0:11:56:99:5a:66:77:ce:e0:99:f9:ed: 64:42:6f:eb:98:5b:1e:a8:02:0a:65:ad:cc:c8:22: 2c:57:e3:9d:da:f7:51:09:79:89:59:f8:b2:fb:f7: d8:8f:9b:e8:01:8b:39:2c:cd:36:77:68:98:f5:0a: 39:ed:87:ee:36:8b:fb:8e:41:56:32:8b:11:d8:00: d2:a5:f6:62:3e:42:2f:47:ad:33:46:ec:1b:ea:a3: 30:6a:e1:5f:d8:ad:6f:fd:04:eb:65:e6:11:f5:22: a4:d9:2e:f6:36:ce:38:7d:4b:14:0c:05:2b:f5:77: af:d8:d0:67:65:8a:67:02:e3:48:9d:e7:d4:dd:c2: c3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5A:EA:F9:1B:D1:40:2F:4E:90:6B:B2:E5:1E:20:72:17:48:2A:5F X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/uFrq-RvRQC9OkGuy5R4gchdIKl8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.69.244.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:92:d5:39:bb:e7:c5:fd:e9:ad:c0:43:41:10:22:b9:97:f2: 78:c4:95:c5:c5:f7:f8:a2:2a:45:97:2b:61:31:c0:a4:89:c3: 13:fa:26:31:09:05:35:6e:73:3f:b6:a3:7a:c2:dc:90:ef:4a: 84:34:44:6f:41:80:08:c4:34:ad:25:9a:a2:6f:00:fa:f5:b7: 58:9a:23:d4:de:c6:b1:0c:41:a6:aa:08:35:54:38:bc:51:b5: f1:6f:20:40:1b:30:45:d7:e7:f4:36:d7:91:56:66:ad:5b:46: 8c:10:ba:7a:42:33:fd:bd:4f:85:6a:37:ae:6d:8c:4a:5f:27: 35:3f:9c:74:92:91:d0:9b:11:54:7e:0a:40:47:29:16:48:ea: f5:22:12:ab:cd:32:36:d6:99:e0:90:e4:28:40:68:4f:46:3b: 4f:56:77:ae:34:38:a8:33:03:ed:fd:18:4e:d5:5b:b3:93:29: 81:b9:f4:ad:0d:05:c0:5c:3e:d7:6a:3b:fe:d6:a3:a4:46:03: 15:d8:4c:b1:b5:d3:11:cb:db:08:d2:c8:d4:e6:c2:39:58:9e: 30:19:83:e1:b4:c8:40:f4:65:45:6b:fb:de:86:80:55:35:48: 71:f5:8a:18:9c:34:61:de:82:4c:cf:42:2b:07:51:2f:1d:18: da:b2:e6:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwJmt8ClCk5AceWYdTq3ymWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjYwMTI5MTE1NDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODVhZWFmOTFiZDE0MDJmNGU5MDZiYjJlNTFlMjA3MjE3NDgyYTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA4cW4CAZfWUg5PpAkgigo7/jJE0 NzqO7C/51W08fE+FBX9IDM+vJa+Q3/dWv0qodNSaupjE/nGNDMwQ8UUYGl+rVfHa mWJsd/7+tyMJxPfiCrivkvRHgbSChHkplNQyo2VXJP7o6sS9N/cW7DdEeT+djzzP XbsCLB3wEVaZWmZ3zuCZ+e1kQm/rmFseqAIKZa3MyCIsV+Od2vdRCXmJWfiy+/fY j5voAYs5LM02d2iY9Qo57YfuNov7jkFWMosR2ADSpfZiPkIvR60zRuwb6qMwauFf 2K1v/QTrZeYR9SKk2S72Ns44fUsUDAUr9Xev2NBnZYpnAuNInefU3cLDtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLha6vkb0UAvTpBrsuUeIHIXSCpfMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvdUZycS1SdlJRQzlPa0d1eTVSNGdjaGRJS2w4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAckX0MA0G CSqGSIb3DQEBCwUAA4IBAQBbktU5u+fF/emtwENBECK5l/J4xJXFxff4oipFlyth McCkicMT+iYxCQU1bnM/tqN6wtyQ70qENERvQYAIxDStJZqibwD69bdYmiPU3sax DEGmqgg1VDi8UbXxbyBAGzBF1+f0NteRVmatW0aMELp6QjP9vU+FajeubYxKXyc1 P5x0kpHQmxFUfgpARykWSOr1IhKrzTI21pngkOQoQGhPRjtPVneuNDioMwPt/RhO 1VuzkymBufStDQXAXD7Xajv+1qOkRgMV2EyxtdMRy9sI0sjU5sI5WJ4wGYPhtMhA 9GVFa/vehoBVNUhx9YoYnDRh3oJMz0IrB1EvHRjasubf -----END CERTIFICATE-----Generated at Thu Feb 5 18:11:12 2026 by rpki-client