This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/uKoRxEv3mOldDEo6fDHAk9yg0S8.roa File: uKoRxEv3mOldDEo6fDHAk9yg0S8.roa (raw, json) Hash identifier: 4hEUcG83yfbcyvkKT/jDeEV25ZBIHXMO6CdGZ2yW5wU= Subject key identifier: B8:AA:11:C4:4B:F7:98:E9:5D:0C:4A:3A:7C:31:C0:93:DC:A0:D1:2F Certificate issuer: /CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04 Certificate serial: 019B7F15747B1938122A82BA845A38D06F1A Authority key identifier: 5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/uKoRxEv3mOldDEo6fDHAk9yg0S8.roa Signing time: Fri 02 Jan 2026 14:21:10 +0000 ROA not before: Fri 02 Jan 2026 14:21:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8820 IP address blocks: 188.246.17.0/24 maxlen: 24 188.246.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:74:7b:19:38:12:2a:82:ba:84:5a:38:d0:6f:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04 Validity Not Before: Jan 2 14:21:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8aa11c44bf798e95d0c4a3a7c31c093dca0d12f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a2:87:39:2e:90:3a:f0:1f:4b:f0:7e:da:20: fb:02:32:ef:d2:e7:44:57:1c:df:82:74:95:02:53: 6b:dc:9b:94:26:91:2b:0a:72:c0:01:5e:95:8b:f5: 16:91:a0:d2:50:fb:cb:e3:07:c2:7f:0a:ef:1d:e1: 04:fd:55:7f:76:fe:8c:fe:35:1a:56:7c:1e:22:7f: 1b:d1:a9:ae:5d:71:d4:56:ff:3a:09:dd:89:5b:8d: 82:fa:ef:54:1f:ca:a7:37:c8:21:e1:37:3f:9f:f4: 72:90:68:43:0f:c8:e2:f5:5f:dc:95:07:a0:57:4d: b1:88:00:cd:59:a1:22:88:70:22:ba:2a:bf:5f:b6: d9:ae:ed:d5:78:ce:84:dd:37:33:80:48:77:0c:ea: 7d:97:f2:e2:58:8e:f2:ba:af:e6:c6:96:c9:72:14: dc:f1:bb:19:34:05:9c:09:d2:1d:43:40:1b:c3:4f: cc:b0:ea:7f:f0:96:8a:ea:f8:0c:8b:8e:6d:3e:27: 01:6a:c1:45:ca:61:c3:87:ff:a8:5d:19:45:f5:ee: 97:9e:1d:f7:18:c6:78:3b:72:0f:94:97:49:a9:92: bb:0d:b2:4c:4f:aa:d1:4f:bb:ce:8a:74:ca:ae:3f: d2:86:bd:a4:27:cd:e6:1f:44:82:d2:eb:58:cd:03: b0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AA:11:C4:4B:F7:98:E9:5D:0C:4A:3A:7C:31:C0:93:DC:A0:D1:2F X509v3 Authority Key Identifier: keyid:5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/uKoRxEv3mOldDEo6fDHAk9yg0S8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.246.17.0/24 188.246.23.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:5e:c0:11:95:00:7d:39:a8:68:33:3f:ee:5e:c0:bf:90:67: c4:25:4d:f0:5a:77:1f:d1:ea:05:01:59:a1:57:c3:b2:c7:e8: 08:37:4d:07:09:08:2d:b5:24:95:83:2f:b7:79:5d:24:f9:98: 4b:3a:d5:d9:18:38:12:bf:8d:25:c0:d1:a1:18:ef:22:f8:d6: 83:ae:f2:4b:75:9b:bc:fa:65:4a:6d:28:db:d7:c3:10:c1:1e: 56:d3:9f:38:8c:6a:2d:f7:93:2f:21:2f:78:00:32:0d:54:06: 66:4e:6c:e4:a4:98:e4:76:82:25:1b:d5:51:b1:07:2d:27:27: 96:e4:45:8e:41:ce:81:cf:a4:36:60:de:08:f5:16:fd:a3:6a: d9:aa:a2:12:1e:9b:ac:30:f0:5d:69:27:be:31:5e:5a:41:d7: b7:3d:ae:af:3b:22:34:4c:c0:14:bc:1b:b2:d7:68:a5:7c:66: c3:e8:5f:5f:79:d1:93:fa:f6:b5:aa:77:fa:84:c8:e8:20:58: c7:0f:5f:d6:72:ef:71:bc:a0:a1:25:d0:4d:ab:dc:08:c5:f9: de:03:12:bb:1f:b1:25:34:3f:57:2e:b3:6e:a9:97:0d:ea:f5: 36:c2:ee:4a:46:44:4d:43:ba:43:2e:13:65:08:e2:50:f9:78: d8:bd:35:94 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FXR7GTgSKoK6hFo40G8aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZWRkNmIwZTM2ZjRiZDhmMWQ1N2UyNmNjMWMyZDE4YzY5 OTNjMDQwHhcNMjYwMTAyMTQyMTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGFhMTFjNDRiZjc5OGU5NWQwYzRhM2E3YzMxYzA5M2RjYTBkMTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaKHOS6QOvAfS/B+2iD7AjLv0udE VxzfgnSVAlNr3JuUJpErCnLAAV6Vi/UWkaDSUPvL4wfCfwrvHeEE/VV/dv6M/jUa VnweIn8b0amuXXHUVv86Cd2JW42C+u9UH8qnN8gh4Tc/n/RykGhDD8ji9V/clQeg V02xiADNWaEiiHAiuiq/X7bZru3VeM6E3TczgEh3DOp9l/LiWI7yuq/mxpbJchTc 8bsZNAWcCdIdQ0Abw0/MsOp/8JaK6vgMi45tPicBasFFymHDh/+oXRlF9e6Xnh33 GMZ4O3IPlJdJqZK7DbJMT6rRT7vOinTKrj/Shr2kJ83mH0SC0utYzQOw4wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLiqEcRL95jpXQxKOnwxwJPcoNEvMB8GA1UdIwQY MBaAFF3t1rDjb0vY8dV+JswcLRjGmTwEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGUzV3NPTnZTOWp4MVg0bXpCd3RHTWFaUEFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mMDNjZGMtMjk0NS00MDhjLTg4ODkt YzY5ODcxZjVkMzA1LzEvdUtvUnhFdjNtT2xkREVvNmZESEFrOXlnMFM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9mMDNjZGMtMjk0NS00MDhjLTg4ODktYzY5ODcxZjVkMzA1 LzEvWGUzV3NPTnZTOWp4MVg0bXpCd3RHTWFaUEFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvPYRAwQA vPYXMA0GCSqGSIb3DQEBCwUAA4IBAQCKXsARlQB9OahoMz/uXsC/kGfEJU3wWncf 0eoFAVmhV8Oyx+gIN00HCQgttSSVgy+3eV0k+ZhLOtXZGDgSv40lwNGhGO8i+NaD rvJLdZu8+mVKbSjb18MQwR5W0584jGot95MvIS94ADINVAZmTmzkpJjkdoIlG9VR sQctJyeW5EWOQc6Bz6Q2YN4I9Rb9o2rZqqISHpusMPBdaSe+MV5aQde3Pa6vOyI0 TMAUvBuy12ilfGbD6F9fedGT+va1qnf6hMjoIFjHD1/Wcu9xvKChJdBNq9wIxfne AxK7H7ElND9XLrNuqZcN6vU2wu5KRkRNQ7pDLhNlCOJQ+XjYvTWU -----END CERTIFICATE-----Generated at Wed Jan 21 04:22:17 2026 by rpki-client