This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/Uxk1FwItIfltxuYz2o9bKLPYoqw.roa File: Uxk1FwItIfltxuYz2o9bKLPYoqw.roa (raw, json) Hash identifier: 00PfsX6vRTHIMTxBup/P+JPXMFRRdRTXxG1QyBpuPMY= Subject key identifier: 53:19:35:17:02:2D:21:F9:6D:C6:E6:33:DA:8F:5B:28:B3:D8:A2:AC Certificate issuer: /CN=8d34fab9aa33eb55d9854237bd0d2252792132e6 Certificate serial: 019B7C801784936B74B8AC116E7BFE664A48 Authority key identifier: 8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/Uxk1FwItIfltxuYz2o9bKLPYoqw.roa Signing time: Fri 02 Jan 2026 02:18:48 +0000 ROA not before: Fri 02 Jan 2026 02:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 193.176.4.0/24 maxlen: 24 193.176.44.0/24 maxlen: 24 193.176.62.0/24 maxlen: 24 193.176.147.0/24 maxlen: 24 2a0f:90c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:17:84:93:6b:74:b8:ac:11:6e:7b:fe:66:4a:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d34fab9aa33eb55d9854237bd0d2252792132e6 Validity Not Before: Jan 2 02:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53193517022d21f96dc6e633da8f5b28b3d8a2ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c8:fc:3f:8b:ce:18:7f:3a:4a:31:d5:01:b9: 4c:da:03:13:95:49:56:1c:27:5c:e6:33:09:12:4b: 11:26:66:6f:1f:19:a5:a2:87:7c:a0:ba:65:c4:08: 32:de:58:91:5d:f6:96:f0:00:93:75:3a:e9:fe:c9: 26:7b:21:88:0d:8d:8c:a3:73:3d:3d:1c:ed:ac:91: 5e:57:15:17:ae:c3:de:59:4b:3d:18:c0:25:b7:8f: 15:31:db:a0:90:be:4b:b5:03:31:64:d5:94:49:53: d2:9f:01:bd:3f:bb:77:62:d7:9e:05:d4:a2:8c:99: c6:16:53:40:df:48:99:9f:2a:bc:74:1e:7e:32:a5: 6c:bf:29:0b:77:52:a0:e4:e8:39:95:d5:f3:d4:fc: b0:db:57:12:8f:74:73:3b:9c:18:c3:35:2d:5a:ab: 2d:99:46:75:f1:e5:d6:66:38:0f:93:37:0a:cb:ba: 58:ce:24:0c:06:12:46:cb:dd:78:a1:f1:a0:d8:9f: 03:96:33:79:fb:9a:c9:2a:0e:86:0d:40:05:c6:f4: 40:cb:8e:fd:a3:cd:b5:05:63:b3:39:ae:07:ed:e0: ef:f7:c2:be:ab:b9:b8:65:3f:66:ad:bc:0e:db:9c: c4:3c:1b:09:14:eb:50:4d:7a:75:c9:f6:fb:78:4e: 63:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:19:35:17:02:2D:21:F9:6D:C6:E6:33:DA:8F:5B:28:B3:D8:A2:AC X509v3 Authority Key Identifier: keyid:8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/Uxk1FwItIfltxuYz2o9bKLPYoqw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.176.4.0/24 193.176.44.0/24 193.176.62.0/24 193.176.147.0/24 IPv6: 2a0f:90c0::/29 Signature Algorithm: sha256WithRSAEncryption 0a:fc:dc:9c:df:bd:5f:bc:ae:6a:f8:2b:97:12:c5:46:4b:1f: 3e:e3:62:14:34:4f:9b:29:38:8e:00:82:73:f5:8b:52:34:45: 69:9a:80:62:1f:19:3c:48:da:be:7e:d8:08:3d:a2:5c:7a:c4: 5a:f7:3a:10:cb:b5:7c:f5:6b:16:ba:cf:e6:a2:fa:47:7a:59: 28:7d:a4:8c:99:7e:43:97:cb:20:8b:54:1d:10:8e:27:38:62: b9:1a:f5:20:13:5e:2e:81:c5:9c:0b:23:71:7f:8d:a4:75:f1: d7:bd:ae:35:5d:be:55:67:1f:90:a1:65:b5:b1:84:72:28:d8: 9f:13:95:61:7d:cb:c3:3d:5d:42:53:33:2c:6f:ef:dc:3d:f0: b3:78:58:29:f7:6c:75:b1:83:cb:05:e9:27:04:65:ab:ea:8f: d9:10:51:e0:99:0f:71:03:df:7b:10:58:1d:da:bf:18:9d:58: 3a:1b:16:61:6f:6b:24:72:45:a6:de:92:5e:3e:3e:23:8d:17: e7:f6:10:40:c0:af:a2:47:81:03:32:9e:4e:c1:f1:ab:c4:60: 69:a4:3a:73:6e:c3:31:02:1f:9d:29:97:dd:09:1c:69:d3:13: 4a:fb:45:9b:bd:ba:d7:d7:79:e3:ea:aa:23:7e:c3:cf:38:2a: 75:a7:95:34 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt8gBeEk2t0uKwRbnv+ZkpIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMzRmYWI5YWEzM2ViNTVkOTg1NDIzN2JkMGQyMjUyNzky MTMyZTYwHhcNMjYwMTAyMDIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzE5MzUxNzAyMmQyMWY5NmRjNmU2MzNkYThmNWIyOGIzZDhhMmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMj8P4vOGH86SjHVAblM2gMTlUlW HCdc5jMJEksRJmZvHxmlood8oLplxAgy3liRXfaW8ACTdTrp/skmeyGIDY2Mo3M9 PRztrJFeVxUXrsPeWUs9GMAlt48VMdugkL5LtQMxZNWUSVPSnwG9P7t3YteeBdSi jJnGFlNA30iZnyq8dB5+MqVsvykLd1Kg5Og5ldXz1Pyw21cSj3RzO5wYwzUtWqst mUZ18eXWZjgPkzcKy7pYziQMBhJGy914ofGg2J8DljN5+5rJKg6GDUAFxvRAy479 o821BWOzOa4H7eDv98K+q7m4ZT9mrbwO25zEPBsJFOtQTXp1yfb7eE5jJQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFFMZNRcCLSH5bcbmM9qPWyiz2KKsMB8GA1UdIwQY MBaAFI00+rmqM+tV2YVCN70NIlJ5ITLmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalRUNnVhb3o2MVhaaFVJM3ZRMGlVbmtoTXVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82ZGU3ZmYtMzIxZS00YjQ3LWIzYzUt NmRiMDg2YzAwZjZhLzEvVXhrMUZ3SXRJZmx0eHVZejJvOWJLTFBZb3F3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC82ZGU3ZmYtMzIxZS00YjQ3LWIzYzUtNmRiMDg2YzAwZjZh LzEvalRUNnVhb3o2MVhaaFVJM3ZRMGlVbmtoTXVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAwbAEAwQA wbAsAwQAwbA+AwQAwbCTMA0EAgACMAcDBQMqD5DAMA0GCSqGSIb3DQEBCwUAA4IB AQAK/Nyc371fvK5q+CuXEsVGSx8+42IUNE+bKTiOAIJz9YtSNEVpmoBiHxk8SNq+ ftgIPaJcesRa9zoQy7V89WsWus/movpHelkofaSMmX5Dl8sgi1QdEI4nOGK5GvUg E14ugcWcCyNxf42kdfHXva41Xb5VZx+QoWW1sYRyKNifE5VhfcvDPV1CUzMsb+/c PfCzeFgp92x1sYPLBeknBGWr6o/ZEFHgmQ9xA997EFgd2r8YnVg6GxZhb2skckWm 3pJePj4jjRfn9hBAwK+iR4EDMp5OwfGrxGBppDpzbsMxAh+dKZfdCRxp0xNK+0Wb vbrX13nj6qojfsPPOCp1p5U0 -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:52 2026 by rpki-client