This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/0uXHR2UhfdGKOw0-7UVbnfQAkig.roa File: 0uXHR2UhfdGKOw0-7UVbnfQAkig.roa (raw, json) Hash identifier: Q9NPQXWKGQHVWf1Z/Oo69HPn4r2sOJMpx+RqofXuMKw= Subject key identifier: D2:E5:C7:47:65:21:7D:D1:8A:3B:0D:3E:ED:45:5B:9D:F4:00:92:28 Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Certificate serial: 019B77C7223C48918A6A590780C7A9CDB55F Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/0uXHR2UhfdGKOw0-7UVbnfQAkig.roa Signing time: Thu 01 Jan 2026 04:18:17 +0000 ROA not before: Thu 01 Jan 2026 04:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197450 IP address blocks: 212.64.199.0/24 maxlen: 24 212.64.201.0/24 maxlen: 24 212.64.202.0/24 maxlen: 24 212.64.210.0/24 maxlen: 32 212.64.211.0/24 maxlen: 32 212.64.215.0/24 maxlen: 24 212.64.216.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:22:3c:48:91:8a:6a:59:07:80:c7:a9:cd:b5:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Validity Not Before: Jan 1 04:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2e5c74765217dd18a3b0d3eed455b9df4009228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5f:fc:6b:9d:69:87:90:22:d2:a7:e8:83:d9: b9:8e:df:c5:26:54:62:cd:2a:58:0e:dc:65:26:64: f9:5a:45:4d:61:20:14:47:3c:90:0d:a0:7b:7b:ab: 78:ec:31:e3:bc:56:4d:58:c5:79:9b:84:5b:ae:21: d3:88:86:47:5d:db:af:a0:8f:46:08:9f:e3:f9:3c: ae:4f:45:b8:e0:2c:d3:04:67:bf:86:ec:9b:22:13: fe:06:91:eb:33:1c:6c:81:98:9d:e0:c5:93:de:c1: 93:d6:76:a8:94:20:fb:c9:37:96:76:3d:fe:d8:bf: 55:44:24:1c:1c:05:7a:c6:99:b7:dd:40:6b:6d:b1: 01:fa:60:a3:d1:5c:a3:ff:67:4e:17:86:1a:ec:68: 53:67:91:4b:cc:a5:35:36:37:e2:14:28:eb:77:31: dc:80:46:59:72:48:00:49:bc:ea:a9:62:7b:a9:af: cf:ac:16:47:ad:94:32:ea:f2:a2:0a:a0:32:e9:14: ae:15:14:5a:4b:ae:36:2d:06:5d:2e:cc:f2:c5:05: 19:d1:43:f5:fd:b6:fe:42:ac:33:e1:52:0c:d2:10: 09:7c:11:c0:15:fe:72:77:b7:69:54:c5:f8:ac:4e: b4:44:6a:21:d8:82:f4:d8:d0:20:ac:87:34:e2:44: 49:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E5:C7:47:65:21:7D:D1:8A:3B:0D:3E:ED:45:5B:9D:F4:00:92:28 X509v3 Authority Key Identifier: keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/0uXHR2UhfdGKOw0-7UVbnfQAkig.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.64.199.0/24 212.64.201.0-212.64.202.255 212.64.210.0/23 212.64.215.0-212.64.216.255 Signature Algorithm: sha256WithRSAEncryption 86:19:38:62:95:36:f9:89:3d:0f:44:d8:09:1f:8d:fe:05:f9: cd:92:33:ed:b1:7a:28:3b:1e:23:90:a7:00:25:ae:01:09:45: eb:dd:90:3e:ab:30:9d:b7:69:f8:54:12:7c:bb:c6:0a:42:af: fc:6d:2c:30:1f:44:a3:cc:e2:0f:fd:89:5e:ce:25:06:ed:c4: 77:61:04:b4:fc:c5:b2:99:35:58:74:26:dc:03:58:8e:e8:4d: dc:b1:49:6d:7c:b2:02:52:27:a9:4c:99:d4:01:3c:ce:2d:fc: 2b:ae:46:c4:48:e6:f8:29:08:34:43:ec:d3:eb:2e:12:2c:05: ec:43:e3:a6:7e:50:bb:8f:42:c8:62:fd:59:09:e6:31:7a:bf: 20:19:8a:2f:82:3d:65:97:07:12:e9:cc:0d:44:25:54:73:de: ef:5c:d8:c1:07:1e:39:ea:df:08:d2:8b:9a:0a:48:3d:09:60: 58:5f:4d:ab:d2:03:4a:39:cb:cf:75:33:c1:37:f4:4f:22:89: 30:37:1a:58:53:01:1c:95:a2:43:fe:eb:19:3b:00:48:fd:bc: 5d:fa:e2:b8:ce:54:40:30:b3:f1:a1:70:26:a2:70:ee:79:8e: ec:ca:e5:1e:3d:0f:3f:3c:3c:75:46:d2:27:db:be:9b:dc:19: 74:04:21:5a -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt3xyI8SJGKalkHgMepzbVfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl NWY0YjkwHhcNMjYwMTAxMDQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmU1Yzc0NzY1MjE3ZGQxOGEzYjBkM2VlZDQ1NWI5ZGY0MDA5MjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61/8a51ph5Ai0qfog9m5jt/FJlRi zSpYDtxlJmT5WkVNYSAURzyQDaB7e6t47DHjvFZNWMV5m4RbriHTiIZHXduvoI9G CJ/j+TyuT0W44CzTBGe/huybIhP+BpHrMxxsgZid4MWT3sGT1naolCD7yTeWdj3+ 2L9VRCQcHAV6xpm33UBrbbEB+mCj0Vyj/2dOF4Ya7GhTZ5FLzKU1NjfiFCjrdzHc gEZZckgASbzqqWJ7qa/PrBZHrZQy6vKiCqAy6RSuFRRaS642LQZdLszyxQUZ0UP1 /bb+Qqwz4VIM0hAJfBHAFf5yd7dpVMX4rE60RGoh2IL02NAgrIc04kRJkwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFNLlx0dlIX3RijsNPu1FW530AJIoMB8GA1UdIwQY MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt NDRhYjdhOWQ3ZGVhLzEvMHVYSFIyVWhmZEdLT3cwLTdVVmJuZlFBa2lnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQA1EDHMAwD BADUQMkDBADUQMoDBAHUQNIwDAMEANRA1wMEANRA2DANBgkqhkiG9w0BAQsFAAOC AQEAhhk4YpU2+Yk9D0TYCR+N/gX5zZIz7bF6KDseI5CnACWuAQlF692QPqswnbdp +FQSfLvGCkKv/G0sMB9Eo8ziD/2JXs4lBu3Ed2EEtPzFspk1WHQm3ANYjuhN3LFJ bXyyAlInqUyZ1AE8zi38K65GxEjm+CkINEPs0+suEiwF7EPjpn5Qu49CyGL9WQnm MXq/IBmKL4I9ZZcHEunMDUQlVHPe71zYwQceOerfCNKLmgpIPQlgWF9Nq9IDSjnL z3UzwTf0TyKJMDcaWFMBHJWiQ/7rGTsASP28XfriuM5UQDCz8aFwJqJw7nmO7Mrl Hj0PPzw8dUbSJ9u+m9wZdAQhWg== -----END CERTIFICATE-----Generated at Wed Jan 21 16:15:43 2026 by rpki-client