This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/Ue5qGAdMUuZjIAkWiew3rNK7iec.roa File: Ue5qGAdMUuZjIAkWiew3rNK7iec.roa (raw, json) Hash identifier: 0R2GCImaNBlpU0Y1AJHIDWb7A+a1HMHsb4hUInCPqe8= Subject key identifier: 51:EE:6A:18:07:4C:52:E6:63:20:09:16:89:EC:37:AC:D2:BB:89:E7 Certificate issuer: /CN=82aa3ec58ba846d27a797111c5585153000dba0e Certificate serial: 019B7911411F3408B6F4C0723F974BD5E3CF Authority key identifier: 82:AA:3E:C5:8B:A8:46:D2:7A:79:71:11:C5:58:51:53:00:0D:BA:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/Ue5qGAdMUuZjIAkWiew3rNK7iec.roa Signing time: Thu 01 Jan 2026 10:18:52 +0000 ROA not before: Thu 01 Jan 2026 10:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202130 IP address blocks: 83.136.144.0/24 maxlen: 24 83.136.145.0/24 maxlen: 24 83.136.146.0/24 maxlen: 24 83.136.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.crl rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:41:1f:34:08:b6:f4:c0:72:3f:97:4b:d5:e3:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82aa3ec58ba846d27a797111c5585153000dba0e Validity Not Before: Jan 1 10:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51ee6a18074c52e66320091689ec37acd2bb89e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6f:4a:b2:4a:ef:69:ac:dd:df:b3:c1:64:35: c5:fd:46:db:80:24:7a:25:30:0d:e2:fa:be:81:d5: 52:dd:7d:01:18:07:b7:7d:9d:7b:75:ea:2f:c8:ac: 0b:5e:98:a6:31:bf:45:25:f3:e3:50:92:31:4e:86: 0b:31:d7:53:05:e9:e7:f2:c1:c1:96:32:16:93:09: 3a:73:c2:20:11:9d:15:fa:48:8c:f9:ba:ba:ee:f6: 1f:7d:bc:1a:cd:e6:a6:d5:bf:cd:4c:97:37:c3:fd: 04:ab:83:bd:2b:59:8c:5d:c7:d5:99:97:28:28:84: 47:19:14:20:9b:cd:9a:b1:f1:25:26:f5:7b:05:f3: 4f:6f:7c:fb:cb:f0:71:66:02:da:6b:60:7d:e2:70: 10:5c:f0:aa:98:85:85:ad:6e:81:f5:23:88:34:7e: c4:e3:a3:e1:aa:61:cf:b5:a3:24:d3:e7:64:ca:32: 1e:31:e8:8f:af:b1:b3:16:de:d1:24:cb:b4:b9:06: 97:d2:9d:22:cc:cf:b9:69:ba:d7:c2:f4:16:20:aa: f2:03:bc:28:cc:fb:a4:97:42:bd:c6:5b:4e:f5:e3: 83:74:41:b4:9b:93:25:5f:6d:7b:56:2a:c8:4a:27: 49:c1:cb:b3:f7:2b:ec:74:2d:44:8b:63:29:5f:7e: 1b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:EE:6A:18:07:4C:52:E6:63:20:09:16:89:EC:37:AC:D2:BB:89:E7 X509v3 Authority Key Identifier: keyid:82:AA:3E:C5:8B:A8:46:D2:7A:79:71:11:C5:58:51:53:00:0D:BA:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/Ue5qGAdMUuZjIAkWiew3rNK7iec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.136.144.0/22 Signature Algorithm: sha256WithRSAEncryption c1:61:5a:df:8b:60:9d:2f:df:67:eb:b9:f4:c0:7c:2c:96:c3: 52:c4:91:c5:6d:31:e4:59:a1:ae:96:80:d7:41:d0:9f:80:04: 44:21:e2:b4:c6:dc:32:51:ef:d0:fb:1d:6a:5e:70:07:06:89: 17:16:9c:f9:26:ad:40:4e:f6:db:2d:fe:fc:36:38:5e:ae:b0: 33:12:43:26:a3:84:5e:32:e1:7d:d5:5f:bf:9e:11:09:df:fe: f8:30:b5:e8:ab:bc:c5:9e:60:f1:e4:9b:bb:8f:51:d8:dc:e5: 30:0f:c9:bf:06:4a:d2:cf:e0:c6:1b:d4:2e:33:4b:ce:f3:0c: 44:e0:05:14:7a:46:5f:09:05:e2:26:e4:59:86:07:47:5a:8d: 79:55:13:e0:40:40:a8:75:c3:5f:44:35:cc:21:2a:58:84:dd: 51:bf:d9:dd:65:aa:39:5d:65:d7:40:a7:a6:e7:e7:6a:5d:86: 8e:58:fe:ae:95:76:2c:27:f1:60:d9:c9:6d:1d:c0:ed:be:8d: 79:c5:f6:3a:b0:ff:93:24:d8:d2:46:c9:96:6a:fa:e2:19:09: 3c:eb:fe:38:b1:70:b3:e0:12:37:58:3a:a7:10:7f:52:31:69: 96:1d:62:ae:48:b8:7f:94:fe:96:fa:b0:fa:c6:0d:0c:d5:f1: 74:75:0f:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EUEfNAi29MByP5dL1ePPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyYWEzZWM1OGJhODQ2ZDI3YTc5NzExMWM1NTg1MTUzMDAw ZGJhMGUwHhcNMjYwMTAxMTAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWVlNmExODA3NGM1MmU2NjMyMDA5MTY4OWVjMzdhY2QyYmI4OWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW9Kskrvaazd37PBZDXF/UbbgCR6 JTAN4vq+gdVS3X0BGAe3fZ17deovyKwLXpimMb9FJfPjUJIxToYLMddTBenn8sHB ljIWkwk6c8IgEZ0V+kiM+bq67vYffbwazeam1b/NTJc3w/0Eq4O9K1mMXcfVmZco KIRHGRQgm82asfElJvV7BfNPb3z7y/BxZgLaa2B94nAQXPCqmIWFrW6B9SOINH7E 46PhqmHPtaMk0+dkyjIeMeiPr7GzFt7RJMu0uQaX0p0izM+5abrXwvQWIKryA7wo zPukl0K9xltO9eODdEG0m5MlX217VirISidJwcuz9yvsdC1Ei2MpX34b/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFHuahgHTFLmYyAJFonsN6zSu4nnMB8GA1UdIwQY MBaAFIKqPsWLqEbSenlxEcVYUVMADboOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3FvLXhZdW9SdEo2ZVhFUnhWaFJVd0FOdWc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iMWM3ZjktYWQ5Yy00YmI3LWFjNDct OTI3ZGQ0NTlhYzVjLzEvVWU1cUdBZE1VdVpqSUFrV2lldzNyTks3aWVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9iMWM3ZjktYWQ5Yy00YmI3LWFjNDctOTI3ZGQ0NTlhYzVj LzEvZ3FvLXhZdW9SdEo2ZVhFUnhWaFJVd0FOdWc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU4iQMA0G CSqGSIb3DQEBCwUAA4IBAQDBYVrfi2CdL99n67n0wHwslsNSxJHFbTHkWaGuloDX QdCfgAREIeK0xtwyUe/Q+x1qXnAHBokXFpz5Jq1ATvbbLf78NjherrAzEkMmo4Re MuF91V+/nhEJ3/74MLXoq7zFnmDx5Ju7j1HY3OUwD8m/BkrSz+DGG9QuM0vO8wxE 4AUUekZfCQXiJuRZhgdHWo15VRPgQECodcNfRDXMISpYhN1Rv9ndZao5XWXXQKem 5+dqXYaOWP6ulXYsJ/Fg2cltHcDtvo15xfY6sP+TJNjSRsmWavriGQk86/44sXCz 4BI3WDqnEH9SMWmWHWKuSLh/lP6W+rD6xg0M1fF0dQ/G -----END CERTIFICATE-----Generated at Tue Jan 13 05:46:15 2026 by rpki-client