This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/UW3uCirPlSHTXeq2kWhdNXEEF_A.roa File: UW3uCirPlSHTXeq2kWhdNXEEF_A.roa (raw, json) Hash identifier: SLhda1CULfByTMm1GHCHLQiMUOu4j8DhX2dtlcfjO6M= Subject key identifier: 51:6D:EE:0A:2A:CF:95:21:D3:5D:EA:B6:91:68:5D:35:71:04:17:F0 Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Certificate serial: 019B7F15CEADCDD8FF09324C1AE797ECEDDD Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/UW3uCirPlSHTXeq2kWhdNXEEF_A.roa Signing time: Fri 02 Jan 2026 14:21:34 +0000 ROA not before: Fri 02 Jan 2026 14:21:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200461 IP address blocks: 194.110.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ce:ad:cd:d8:ff:09:32:4c:1a:e7:97:ec:ed:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Validity Not Before: Jan 2 14:21:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=516dee0a2acf9521d35deab691685d35710417f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d2:e0:d8:54:dd:b8:70:c3:be:2a:c6:c3:c9: 97:69:b8:c0:3e:36:59:73:f6:3f:5f:08:9d:a4:d0: dd:1b:cb:2c:c3:d5:51:72:88:f5:9b:2e:aa:63:4d: 44:f5:42:5b:5c:df:9c:2a:dd:09:77:ab:d3:71:e0: 54:9e:b6:3b:24:d5:3e:fc:ec:28:4b:a3:8a:9d:25: 81:71:f7:a6:9b:0b:47:df:b0:9c:8f:da:cd:70:dc: df:78:71:47:cf:d3:66:39:23:6a:a0:0b:46:bb:ee: ac:c2:5b:13:9b:af:e3:cd:f9:7f:ce:e4:3d:89:c7: 20:a5:80:b1:50:81:d7:bc:0b:85:40:b9:0a:44:5c: 45:a3:84:6a:0c:51:f1:3b:ef:07:07:54:c6:68:9c: 6c:61:15:41:9c:40:13:53:2f:79:b1:11:77:1c:02: fa:b3:05:26:6e:08:94:f1:14:ab:77:08:71:10:bc: 70:4c:96:24:e1:35:02:de:c8:3c:84:82:7b:d6:9f: 35:d7:ae:d4:68:80:f7:f8:13:e9:1c:78:f3:54:9f: a5:7a:75:98:fc:c7:2d:9d:f6:7e:a2:8b:dd:fb:03: 37:84:cf:bb:70:3f:01:52:cf:c2:ad:19:66:18:0e: 0d:09:55:06:ad:f2:41:aa:5a:fd:f8:7b:4b:5a:af: 30:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:6D:EE:0A:2A:CF:95:21:D3:5D:EA:B6:91:68:5D:35:71:04:17:F0 X509v3 Authority Key Identifier: keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/UW3uCirPlSHTXeq2kWhdNXEEF_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.110.175.0/24 Signature Algorithm: sha256WithRSAEncryption 02:c7:87:e8:c8:8c:63:0c:b0:e3:62:51:ed:24:ed:aa:a8:5d: f8:49:b5:13:1a:75:5d:8d:00:b7:1d:12:ac:ec:71:15:52:f9: a5:cf:cb:80:ae:c6:20:a3:61:40:a1:b1:37:34:31:49:56:67: 5f:bf:80:cb:f8:36:14:2a:99:ab:95:d9:5a:e6:59:cd:de:09: f1:ac:a6:a7:3d:a8:0e:13:7a:6b:e6:05:5a:9f:5e:66:b0:9c: 2b:cb:7b:4c:bb:8b:b5:ce:76:07:c1:1a:2a:7d:0b:5b:3d:94: eb:1b:9b:c4:ca:d6:e8:67:44:41:2b:2c:a3:8d:09:c4:05:e7: 1f:5d:94:10:4e:38:b0:03:11:2f:3b:70:14:44:0e:23:53:63: 48:95:51:8a:2d:90:2e:60:31:d7:c3:5b:df:59:db:18:0b:5b: 1b:86:1b:a3:0b:f1:64:1a:aa:4f:11:a4:d2:bf:17:48:e7:8e: 8c:76:5a:79:d7:91:7a:b4:66:c6:a3:89:f9:ce:e5:59:24:13: 21:af:1f:d1:34:f1:b7:54:aa:9c:cb:69:92:88:8e:91:7b:86: dd:d3:88:cd:6a:26:7c:f2:03:25:77:1f:75:d1:c7:96:22:ed: f0:07:c4:b9:e0:c4:53:08:93:85:fc:3e:50:d7:50:ed:38:a9: 41:de:15:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fc6tzdj/CTJMGueX7O3dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk YTEzNzAwHhcNMjYwMTAyMTQyMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTZkZWUwYTJhY2Y5NTIxZDM1ZGVhYjY5MTY4NWQzNTcxMDQxN2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9Lg2FTduHDDvirGw8mXabjAPjZZ c/Y/XwidpNDdG8ssw9VRcoj1my6qY01E9UJbXN+cKt0Jd6vTceBUnrY7JNU+/Owo S6OKnSWBcfemmwtH37Ccj9rNcNzfeHFHz9NmOSNqoAtGu+6swlsTm6/jzfl/zuQ9 iccgpYCxUIHXvAuFQLkKRFxFo4RqDFHxO+8HB1TGaJxsYRVBnEATUy95sRF3HAL6 swUmbgiU8RSrdwhxELxwTJYk4TUC3sg8hIJ71p81167UaID3+BPpHHjzVJ+lenWY /MctnfZ+oovd+wM3hM+7cD8BUs/CrRlmGA4NCVUGrfJBqlr9+HtLWq8w8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFFt7goqz5Uh013qtpFoXTVxBBfwMB8GA1UdIwQY MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt NjA4MDk1MmYwZTA0LzEvVVczdUNpclBsU0hUWGVxMmtXaGROWEVFRl9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0 LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwm6vMA0G CSqGSIb3DQEBCwUAA4IBAQACx4foyIxjDLDjYlHtJO2qqF34SbUTGnVdjQC3HRKs 7HEVUvmlz8uArsYgo2FAobE3NDFJVmdfv4DL+DYUKpmrldla5lnN3gnxrKanPagO E3pr5gVan15msJwry3tMu4u1znYHwRoqfQtbPZTrG5vEytboZ0RBKyyjjQnEBecf XZQQTjiwAxEvO3AURA4jU2NIlVGKLZAuYDHXw1vfWdsYC1sbhhujC/FkGqpPEaTS vxdI546Mdlp515F6tGbGo4n5zuVZJBMhrx/RNPG3VKqcy2mSiI6Re4bd04jNaiZ8 8gMldx910ceWIu3wB8S54MRTCJOF/D5Q11DtOKlB3hVn -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:08 2026 by rpki-client