This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/uQBI9CCKkaQ15QLDKCoXQ9CMr50.roa File: uQBI9CCKkaQ15QLDKCoXQ9CMr50.roa (raw, json) Hash identifier: 2DCBMNVSZ9VX6UXs8yIhflCej68SIec+3/kzpBsnYa4= Subject key identifier: B9:00:48:F4:20:8A:91:A4:35:E5:02:C3:28:2A:17:43:D0:8C:AF:9D Certificate issuer: /CN=7077707f66978826a875eb8d2eb333bed8569667 Certificate serial: 019B7B365FD18F6A6CB877C87192968DFCCD Authority key identifier: 70:77:70:7F:66:97:88:26:A8:75:EB:8D:2E:B3:33:BE:D8:56:96:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/uQBI9CCKkaQ15QLDKCoXQ9CMr50.roa Signing time: Thu 01 Jan 2026 20:18:39 +0000 ROA not before: Thu 01 Jan 2026 20:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21433 IP address blocks: 195.191.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:5f:d1:8f:6a:6c:b8:77:c8:71:92:96:8d:fc:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7077707f66978826a875eb8d2eb333bed8569667 Validity Not Before: Jan 1 20:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b90048f4208a91a435e502c3282a1743d08caf9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:59:78:e4:75:ed:28:83:1a:af:29:5f:21:12: f1:38:78:c9:a6:2e:0f:6f:30:9d:b3:5c:ad:df:03: 63:27:c5:96:ec:44:59:4a:30:3b:f1:b3:f2:5f:ab: 16:66:26:b6:2c:88:29:1d:ff:7f:81:6d:1e:94:a8: 08:7a:18:ae:49:08:18:50:06:b2:ff:e0:2b:aa:b5: 29:86:cd:0c:cf:fd:75:31:1b:e8:96:51:52:9b:3a: 5a:2f:61:5b:a1:4c:c0:21:45:2a:f8:4e:1b:e3:51: f8:ad:3c:79:ff:be:f6:3b:37:93:95:01:4a:b6:8b: 01:cd:f7:dc:ac:12:68:33:78:e8:d1:2a:34:45:f9: f4:4e:71:49:33:2b:1f:e5:2e:bf:7f:27:8a:1b:8e: ef:ed:bf:38:34:bc:70:b1:01:c9:1b:0d:8b:40:f8: 44:44:6f:c7:6b:09:09:32:bc:b2:a7:2d:0c:d6:70: f5:b5:f1:3a:20:b6:28:9c:f8:b4:ca:ac:a1:e9:dc: 7d:d8:ae:82:76:46:6d:61:24:55:f8:27:72:05:78: 36:35:3c:ca:aa:a7:bc:04:96:6e:27:7a:8c:42:dd: ae:bd:01:ac:cd:06:41:c3:dc:b2:40:8f:f9:d2:de: 57:9f:8c:0d:5e:e8:57:df:de:8f:1f:bf:f2:a3:fe: 1d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:00:48:F4:20:8A:91:A4:35:E5:02:C3:28:2A:17:43:D0:8C:AF:9D X509v3 Authority Key Identifier: keyid:70:77:70:7F:66:97:88:26:A8:75:EB:8D:2E:B3:33:BE:D8:56:96:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/uQBI9CCKkaQ15QLDKCoXQ9CMr50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.191.188.0/24 Signature Algorithm: sha256WithRSAEncryption 79:e5:ac:4f:a0:ab:21:1c:59:0f:fb:90:d0:a6:1f:26:b1:42: 18:10:98:3a:64:e8:46:2c:60:f1:cb:3b:81:1f:64:d2:51:88: 19:b2:7f:22:19:61:9e:d5:a2:4b:12:7f:26:a3:a3:85:01:5a: f7:f4:41:0c:6c:69:59:60:f9:89:0d:ba:d5:f3:c2:9d:54:db: 07:d9:56:04:55:84:3f:53:ee:6d:1b:9a:97:1c:85:f5:97:d4: ab:ef:ae:29:1b:81:b7:38:4c:7e:4f:87:8e:76:e8:06:28:ca: ea:ae:31:1d:0c:01:50:27:a4:76:1d:46:ea:d5:0d:96:f0:5d: a7:7e:63:3a:6d:60:8d:30:b7:fc:66:69:63:32:71:1b:1a:58: ee:a0:d9:2a:ea:ab:96:33:22:a7:d1:0e:bd:de:8a:3d:40:a3: 20:ab:6b:d4:3d:53:61:0c:ed:e6:76:c0:89:d6:f4:4a:06:b4: b7:c4:3e:5c:ac:fc:72:36:d4:41:e4:3c:6d:7b:35:ae:9f:b8: 80:27:31:7f:30:77:e7:52:29:88:0f:44:1d:0e:4e:c7:01:8e: 19:0a:75:48:1d:d2:eb:74:f5:f8:4d:f7:9c:6f:1d:98:5f:c8: fd:3c:52:c2:c3:8e:11:75:8a:23:70:9e:02:31:46:aa:b2:16: 69:a5:d2:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nl/Rj2psuHfIcZKWjfzNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNzc3MDdmNjY5Nzg4MjZhODc1ZWI4ZDJlYjMzM2JlZDg1 Njk2NjcwHhcNMjYwMTAxMjAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTAwNDhmNDIwOGE5MWE0MzVlNTAyYzMyODJhMTc0M2QwOGNhZjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1l45HXtKIMarylfIRLxOHjJpi4P bzCds1yt3wNjJ8WW7ERZSjA78bPyX6sWZia2LIgpHf9/gW0elKgIehiuSQgYUAay /+ArqrUphs0Mz/11MRvollFSmzpaL2FboUzAIUUq+E4b41H4rTx5/772OzeTlQFK tosBzffcrBJoM3jo0So0Rfn0TnFJMysf5S6/fyeKG47v7b84NLxwsQHJGw2LQPhE RG/HawkJMryypy0M1nD1tfE6ILYonPi0yqyh6dx92K6CdkZtYSRV+CdyBXg2NTzK qqe8BJZuJ3qMQt2uvQGszQZBw9yyQI/50t5Xn4wNXuhX396PH7/yo/4d6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLkASPQgipGkNeUCwygqF0PQjK+dMB8GA1UdIwQY MBaAFHB3cH9ml4gmqHXrjS6zM77YVpZnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0hkd2YyYVhpQ2FvZGV1TkxyTXp2dGhXbG1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iOWExYTAtNmFkYS00ZGRlLTk2NWIt NDZmZjdjZTJjMTQwLzEvdVFCSTlDQ0trYVExNVFMREtDb1hROUNNcjUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9iOWExYTAtNmFkYS00ZGRlLTk2NWItNDZmZjdjZTJjMTQw LzEvY0hkd2YyYVhpQ2FvZGV1TkxyTXp2dGhXbG1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7+8MA0G CSqGSIb3DQEBCwUAA4IBAQB55axPoKshHFkP+5DQph8msUIYEJg6ZOhGLGDxyzuB H2TSUYgZsn8iGWGe1aJLEn8mo6OFAVr39EEMbGlZYPmJDbrV88KdVNsH2VYEVYQ/ U+5tG5qXHIX1l9Sr764pG4G3OEx+T4eOdugGKMrqrjEdDAFQJ6R2HUbq1Q2W8F2n fmM6bWCNMLf8ZmljMnEbGljuoNkq6quWMyKn0Q693oo9QKMgq2vUPVNhDO3mdsCJ 1vRKBrS3xD5crPxyNtRB5DxtezWun7iAJzF/MHfnUimID0QdDk7HAY4ZCnVIHdLr dPX4Tfecbx2YX8j9PFLCw44RdYojcJ4CMUaqshZppdLc -----END CERTIFICATE-----Generated at Tue Jan 27 08:47:10 2026 by rpki-client