This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/UhcVOrWI94PD7J8NZ396e7oTXmQ.roa File: UhcVOrWI94PD7J8NZ396e7oTXmQ.roa (raw, json) Hash identifier: le2/ey5cYL9OHx+rHl459Ml2HcRFUdgLBFJPfGYggHU= Subject key identifier: 52:17:15:3A:B5:88:F7:83:C3:EC:9F:0D:67:7F:7A:7B:BA:13:5E:64 Certificate issuer: /CN=2093e383b2cc52d5eca30feb12697593c9c788a0 Certificate serial: 019B79EC8F6B26F925154C4A4F5DAF9EA842 Authority key identifier: 20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/UhcVOrWI94PD7J8NZ396e7oTXmQ.roa Signing time: Thu 01 Jan 2026 14:18:24 +0000 ROA not before: Thu 01 Jan 2026 14:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57793 IP address blocks: 193.47.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:8f:6b:26:f9:25:15:4c:4a:4f:5d:af:9e:a8:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2093e383b2cc52d5eca30feb12697593c9c788a0 Validity Not Before: Jan 1 14:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5217153ab588f783c3ec9f0d677f7a7bba135e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:82:58:b7:55:1b:c2:f8:05:7f:93:56:33:04: 20:8c:86:5d:28:d1:da:6c:6d:d9:a9:20:8d:a2:99: 0f:50:0f:9e:db:da:ce:15:d6:ea:8a:53:91:e3:4d: ed:49:c1:8e:7e:e1:52:f7:97:50:bb:ca:96:ff:1c: 41:c0:03:63:55:2d:23:16:3f:2b:a6:fa:48:2b:99: 4b:70:69:db:ba:f6:99:cd:d1:d3:46:b5:5f:94:63: e2:41:29:9c:e0:7c:e9:20:40:6c:eb:85:dd:d7:06: 98:c0:72:c2:e0:30:0d:bb:a0:f8:ca:3a:42:e3:be: f1:83:c4:ac:08:f0:b0:bd:ce:60:7e:ef:4d:7d:43: 22:e6:ce:55:0d:58:b9:ee:3e:28:ca:f0:5b:be:2a: a3:60:20:b0:8a:dc:aa:9b:2d:f5:95:d9:2c:5a:87: 1d:f7:e9:d0:b0:e8:1c:15:31:f9:8b:a5:17:d9:40: df:be:ec:56:37:79:3c:03:34:d1:7c:f4:b6:98:c3: 8b:b6:8b:44:cf:bd:0f:f5:11:a3:d5:c7:ba:b2:b3: 4c:9c:04:7f:75:55:2b:28:9f:51:92:8a:55:08:6f: 4e:c3:7e:08:3a:a6:5e:a7:8a:ac:b8:c7:18:98:4d: 67:6f:0f:fb:c0:f1:76:7b:21:1c:ca:3c:47:af:41: 05:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:17:15:3A:B5:88:F7:83:C3:EC:9F:0D:67:7F:7A:7B:BA:13:5E:64 X509v3 Authority Key Identifier: keyid:20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/UhcVOrWI94PD7J8NZ396e7oTXmQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.47.147.0/24 Signature Algorithm: sha256WithRSAEncryption 24:d9:56:4c:f6:1e:c2:4b:b7:68:f6:99:dd:f5:54:fc:b3:ea: 32:ac:f4:c4:a8:a7:2c:cd:fe:2d:ce:a3:a0:84:cc:30:c6:e6: 9a:0a:fd:68:55:a0:fc:6f:b6:12:22:bf:fe:42:1f:f1:10:f9: 07:7f:35:e0:d1:15:7c:5d:12:49:e1:ba:a1:e1:9a:f6:8b:29: 84:fb:c5:0d:b7:a0:53:cc:fe:be:d6:d0:a6:ca:33:3d:01:15: d8:05:2f:8a:15:2f:c7:8b:27:5c:a4:c7:16:e8:a7:37:20:3f: 70:6f:28:0b:b4:e6:a5:44:2a:61:d2:06:7e:0f:a2:d5:4a:ee: 00:36:31:ad:6a:ab:4b:06:4d:ca:e7:7f:f3:44:3a:b9:b8:32: 53:1a:13:03:5b:e0:b8:d6:ae:4f:54:38:80:c5:fc:4e:35:ca: 10:af:b9:43:8f:19:af:02:fa:9a:09:68:5f:d8:80:60:03:af: d9:cb:b0:2f:cd:cd:8e:91:ec:21:37:94:6a:c7:1c:17:99:5e: c4:6e:47:8a:94:61:4e:33:94:f6:5c:10:30:c0:24:03:e0:95: 7c:84:ac:07:c9:ee:08:71:44:cd:76:6f:61:7e:11:ce:5a:e8: 95:3b:39:d4:0f:b0:68:e9:94:7f:53:da:82:05:ce:86:44:0e: e2:61:81:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57I9rJvklFUxKT12vnqhCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOTNlMzgzYjJjYzUyZDVlY2EzMGZlYjEyNjk3NTkzYzlj Nzg4YTAwHhcNMjYwMTAxMTQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjE3MTUzYWI1ODhmNzgzYzNlYzlmMGQ2NzdmN2E3YmJhMTM1ZTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oJYt1UbwvgFf5NWMwQgjIZdKNHa bG3ZqSCNopkPUA+e29rOFdbqilOR403tScGOfuFS95dQu8qW/xxBwANjVS0jFj8r pvpIK5lLcGnbuvaZzdHTRrVflGPiQSmc4HzpIEBs64Xd1waYwHLC4DANu6D4yjpC 477xg8SsCPCwvc5gfu9NfUMi5s5VDVi57j4oyvBbviqjYCCwityqmy31ldksWocd 9+nQsOgcFTH5i6UX2UDfvuxWN3k8AzTRfPS2mMOLtotEz70P9RGj1ce6srNMnAR/ dVUrKJ9RkopVCG9Ow34IOqZep4qsuMcYmE1nbw/7wPF2eyEcyjxHr0EFiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFIXFTq1iPeDw+yfDWd/enu6E15kMB8GA1UdIwQY MBaAFCCT44OyzFLV7KMP6xJpdZPJx4igMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUpQamc3TE1VdFhzb3dfckVtbDFrOG5IaUtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NzMxMzYtMDlhYi00YzgzLThmM2Mt MDQ1MzRlYmNlMzVlLzEvVWhjVk9yV0k5NFBEN0o4TlozOTZlN29UWG1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS85NzMxMzYtMDlhYi00YzgzLThmM2MtMDQ1MzRlYmNlMzVl LzEvSUpQamc3TE1VdFhzb3dfckVtbDFrOG5IaUtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwS+TMA0G CSqGSIb3DQEBCwUAA4IBAQAk2VZM9h7CS7do9pnd9VT8s+oyrPTEqKcszf4tzqOg hMwwxuaaCv1oVaD8b7YSIr/+Qh/xEPkHfzXg0RV8XRJJ4bqh4Zr2iymE+8UNt6BT zP6+1tCmyjM9ARXYBS+KFS/HiydcpMcW6Kc3ID9wbygLtOalRCph0gZ+D6LVSu4A NjGtaqtLBk3K53/zRDq5uDJTGhMDW+C41q5PVDiAxfxONcoQr7lDjxmvAvqaCWhf 2IBgA6/Zy7Avzc2OkewhN5RqxxwXmV7EbkeKlGFOM5T2XBAwwCQD4JV8hKwHye4I cUTNdm9hfhHOWuiVOznUD7Bo6ZR/U9qCBc6GRA7iYYED -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:33 2026 by rpki-client