This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/uDA5v4UlBvQvX-LZ9N2uiXPAqNc.roa File: uDA5v4UlBvQvX-LZ9N2uiXPAqNc.roa (raw, json) Hash identifier: 74PjhxXF+GVRA7M8a6OYT30HIUUuictdHv+lHM0QfVc= Subject key identifier: B8:30:39:BF:85:25:06:F4:2F:5F:E2:D9:F4:DD:AE:89:73:C0:A8:D7 Certificate issuer: /CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f Certificate serial: 019B7F157FEC19A7A1B55A10B0B38AA71698 Authority key identifier: D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/uDA5v4UlBvQvX-LZ9N2uiXPAqNc.roa Signing time: Fri 02 Jan 2026 14:21:13 +0000 ROA not before: Fri 02 Jan 2026 14:21:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8220 IP address blocks: 193.58.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:7f:ec:19:a7:a1:b5:5a:10:b0:b3:8a:a7:16:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f Validity Not Before: Jan 2 14:21:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b83039bf852506f42f5fe2d9f4ddae8973c0a8d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:15:f4:b0:0a:bb:95:eb:a4:43:78:93:c9:17: 81:6f:f6:dc:ab:4c:f8:1e:9e:7f:18:f9:34:45:57: 89:b6:1a:11:e3:a4:84:6e:0b:a5:19:b3:ee:4a:b1: b7:10:88:a0:db:c1:61:ef:4d:2c:18:e2:23:bb:fd: 75:e5:58:65:13:2d:24:69:bb:7c:b4:0f:ac:a8:c4: 4f:e8:29:d1:28:ed:5e:8b:36:b4:23:d2:6c:3f:65: b6:b7:c6:13:4c:8e:b8:a0:a3:f5:0c:e1:f1:65:8d: 5b:9e:e3:f1:3b:03:8a:1b:b9:25:de:0a:9f:ab:8e: 7e:13:ff:54:96:98:1c:51:57:a4:46:34:c2:c8:8e: 1b:9c:fb:3d:ca:0a:99:b3:fd:51:44:9f:ee:01:48: 43:98:18:40:41:3d:b8:cc:8d:8e:e9:c2:8e:9a:c5: e0:d5:fe:19:91:98:3d:1b:24:69:8a:91:a0:6b:60: b3:44:6a:ba:79:79:4a:38:16:6f:99:dd:17:d1:d7: 6a:33:ec:51:4a:55:0d:49:d7:4a:b7:64:99:e4:c6: a0:5c:7a:8b:00:4a:60:97:94:8a:24:0a:34:4d:e3: 99:93:ac:25:b2:70:e7:72:d7:70:0c:2a:00:11:ef: 4c:ff:be:27:18:b2:34:58:d2:74:d5:40:a1:cc:f0: 2f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:30:39:BF:85:25:06:F4:2F:5F:E2:D9:F4:DD:AE:89:73:C0:A8:D7 X509v3 Authority Key Identifier: keyid:D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/uDA5v4UlBvQvX-LZ9N2uiXPAqNc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.58.222.0/23 Signature Algorithm: sha256WithRSAEncryption 67:b8:7d:ca:14:b0:e5:f6:ff:77:9c:a0:95:a7:6a:ee:e0:ef: 80:f5:16:40:45:fc:3f:c5:35:35:c2:0d:11:1d:d5:02:fb:92: db:f9:ef:e9:74:96:ec:f5:25:61:7a:fa:a4:07:86:b5:b6:a6: cd:71:30:38:14:3a:cf:7a:b7:0c:29:b1:bb:94:b5:49:c7:0f: 88:74:92:77:ae:4a:c7:71:ff:08:03:8d:09:c6:7f:cd:a7:56: 24:d4:4e:29:32:be:3e:ac:b6:86:c2:d8:b1:dd:16:68:d4:f9: f0:7f:1e:42:a4:9c:28:99:21:14:b1:8e:b4:1c:47:69:36:fb: 6a:38:8a:16:5a:68:ca:ab:1f:55:40:12:1a:b8:69:bc:de:fc: bd:38:27:b5:f7:ed:c3:fd:71:79:1a:bf:03:df:fe:56:ad:6b: ec:ac:a7:37:dd:63:8a:ae:5e:cb:6f:a3:2a:49:bf:64:a3:94: 60:19:5d:7d:55:b2:c5:6a:a9:0f:c8:a9:7f:53:57:97:87:65: cb:28:22:d4:a5:bc:45:17:9b:3a:e9:06:01:67:47:e3:c5:7b: 88:6b:e1:4f:5b:9f:50:d6:89:c2:be:4d:dd:a0:dd:b3:c4:3f: bc:3c:80:e3:2a:54:ac:7b:57:85:f5:02:21:93:b7:00:a0:0a: 8a:0c:eb:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FX/sGaehtVoQsLOKpxaYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMWRkMWE1MTRkM2E3ZTNkZmRiOGJmYjc1ZDdkMjRlZDk4 ZDQ3OWYwHhcNMjYwMTAyMTQyMTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODMwMzliZjg1MjUwNmY0MmY1ZmUyZDlmNGRkYWU4OTczYzBhOGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRX0sAq7leukQ3iTyReBb/bcq0z4 Hp5/GPk0RVeJthoR46SEbgulGbPuSrG3EIig28Fh700sGOIju/115VhlEy0kabt8 tA+sqMRP6CnRKO1eiza0I9JsP2W2t8YTTI64oKP1DOHxZY1bnuPxOwOKG7kl3gqf q45+E/9UlpgcUVekRjTCyI4bnPs9ygqZs/1RRJ/uAUhDmBhAQT24zI2O6cKOmsXg 1f4ZkZg9GyRpipGga2CzRGq6eXlKOBZvmd0X0ddqM+xRSlUNSddKt2SZ5MagXHqL AEpgl5SKJAo0TeOZk6wlsnDnctdwDCoAEe9M/74nGLI0WNJ01UChzPAvgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLgwOb+FJQb0L1/i2fTdrolzwKjXMB8GA1UdIwQY MBaAFNMd0aUU06fj39uL+3XX0k7ZjUefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHgzUnBSVFRwLVBmMjR2N2RkZlNUdG1OUjU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9mMjQ3OGYtYzUwMy00MmMyLTk0YjIt YjE2NmFlMmVmMjg3LzEvdURBNXY0VWxCdlF2WC1MWjlOMnVpWFBBcU5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9mMjQ3OGYtYzUwMy00MmMyLTk0YjItYjE2NmFlMmVmMjg3 LzEvMHgzUnBSVFRwLVBmMjR2N2RkZlNUdG1OUjU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwTreMA0G CSqGSIb3DQEBCwUAA4IBAQBnuH3KFLDl9v93nKCVp2ru4O+A9RZARfw/xTU1wg0R HdUC+5Lb+e/pdJbs9SVhevqkB4a1tqbNcTA4FDrPercMKbG7lLVJxw+IdJJ3rkrH cf8IA40Jxn/Np1Yk1E4pMr4+rLaGwtix3RZo1Pnwfx5CpJwomSEUsY60HEdpNvtq OIoWWmjKqx9VQBIauGm83vy9OCe19+3D/XF5Gr8D3/5WrWvsrKc33WOKrl7Lb6Mq Sb9ko5RgGV19VbLFaqkPyKl/U1eXh2XLKCLUpbxFF5s66QYBZ0fjxXuIa+FPW59Q 1onCvk3doN2zxD+8PIDjKlSse1eF9QIhk7cAoAqKDOsD -----END CERTIFICATE-----Generated at Wed Jan 21 12:19:13 2026 by rpki-client