This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/uaapElHUAVaZCvTQWY96RRO1BmE.roa File: uaapElHUAVaZCvTQWY96RRO1BmE.roa (raw, json) Hash identifier: YoDD+GqIi7yXJNJvp1uQ/eykR6jqDrzcDx3qks2vpKk= Subject key identifier: B9:A6:A9:12:51:D4:01:56:99:0A:F4:D0:59:8F:7A:45:13:B5:06:61 Certificate issuer: /CN=3400d9490983e7df32c7cf17ca1ead4f05f79646 Certificate serial: 019B7B35B1CADC9C187E95970D59D70E319B Authority key identifier: 34:00:D9:49:09:83:E7:DF:32:C7:CF:17:CA:1E:AD:4F:05:F7:96:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/uaapElHUAVaZCvTQWY96RRO1BmE.roa Signing time: Thu 01 Jan 2026 20:17:55 +0000 ROA not before: Thu 01 Jan 2026 20:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12843 IP address blocks: 185.30.156.0/22 maxlen: 22 2a04:4b00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:b1:ca:dc:9c:18:7e:95:97:0d:59:d7:0e:31:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3400d9490983e7df32c7cf17ca1ead4f05f79646 Validity Not Before: Jan 1 20:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9a6a91251d40156990af4d0598f7a4513b50661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:92:59:f3:24:f1:1d:90:9f:34:9e:07:33:0d: f3:60:0e:34:05:9a:be:d1:ba:b8:b2:1b:6f:14:01: 78:11:64:81:5f:ba:62:1b:a4:d4:62:74:70:34:da: 80:03:f7:b1:b3:f0:ee:ac:91:ad:62:e6:e8:1e:df: 30:b9:fc:0d:85:de:89:35:a6:0c:94:d6:80:8c:65: 97:52:56:26:b6:75:17:cd:b7:1f:65:76:6f:df:62: 29:02:58:17:b1:a7:82:9c:4f:dc:a6:cc:33:67:33: ea:25:cb:36:e0:fc:a2:39:de:e2:cc:d9:85:f0:45: c0:c3:85:8f:d5:b9:a4:8c:aa:30:8a:bf:39:cb:cd: bc:41:03:2e:2e:5e:98:bb:d2:62:db:58:5c:85:c7: 1b:bd:61:3f:9b:ae:32:3a:78:90:95:72:04:87:f0: ea:82:9f:71:26:dd:d4:52:31:f5:fd:2c:80:92:55: 19:06:1a:6a:ab:44:1d:75:93:2a:3f:60:3b:6f:8b: 1e:63:13:31:90:18:fe:73:2a:68:c4:e5:92:ad:ce: df:dc:2c:ab:f4:ac:57:a6:ce:4f:33:6a:26:5e:dd: 5e:d7:f3:2c:3b:7f:e0:20:a7:a5:75:ac:97:2d:10: 06:5f:df:8c:bd:cd:0b:7e:96:eb:a6:a6:03:93:1f: 2d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A6:A9:12:51:D4:01:56:99:0A:F4:D0:59:8F:7A:45:13:B5:06:61 X509v3 Authority Key Identifier: keyid:34:00:D9:49:09:83:E7:DF:32:C7:CF:17:CA:1E:AD:4F:05:F7:96:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/uaapElHUAVaZCvTQWY96RRO1BmE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.30.156.0/22 IPv6: 2a04:4b00::/29 Signature Algorithm: sha256WithRSAEncryption bb:d7:4e:02:9a:b3:5a:d3:55:ce:42:46:23:48:c9:19:1c:bf: c0:da:d9:05:43:01:29:06:f7:70:5d:ab:57:c4:19:81:1f:e5: 42:e5:e4:3e:86:16:6d:c4:6d:b9:fe:b1:33:aa:e9:98:33:7a: 57:8d:32:5d:18:0a:71:87:fa:5e:ac:60:28:21:20:0f:d7:f2: c6:83:42:fe:77:74:d8:d4:97:26:06:56:fa:c7:52:4c:81:06: 9d:45:e9:42:8c:d2:93:c5:10:d1:ac:2c:c7:68:a2:86:e4:4c: fd:4a:6c:c2:4a:07:59:55:65:84:b2:24:37:8f:53:0d:c9:be: 08:f5:3b:6e:d7:cc:a7:70:29:a3:83:ea:db:6d:75:2b:b2:24: 04:98:1e:7d:a0:0e:f0:7c:30:7d:3b:d0:60:96:6a:29:b2:b7: d5:f8:32:39:0f:05:b3:84:16:b8:ec:d3:0f:08:ec:29:8d:86: f6:f4:35:3c:a0:9a:09:8f:ea:1c:58:ed:b0:4d:b7:ad:91:b1: 85:bb:4e:31:b3:66:2b:41:16:01:f9:c5:59:cd:38:ed:a3:ea: 9b:d2:15:97:14:7a:0b:1a:84:8a:92:dc:bb:29:4e:92:3d:9d: 26:db:55:93:69:86:bb:72:20:7d:e4:19:79:57:c6:e7:e2:d4: 75:6c:38:be -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NbHK3JwYfpWXDVnXDjGbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MDBkOTQ5MDk4M2U3ZGYzMmM3Y2YxN2NhMWVhZDRmMDVm Nzk2NDYwHhcNMjYwMTAxMjAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWE2YTkxMjUxZDQwMTU2OTkwYWY0ZDA1OThmN2E0NTEzYjUwNjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZJZ8yTxHZCfNJ4HMw3zYA40BZq+ 0bq4shtvFAF4EWSBX7piG6TUYnRwNNqAA/exs/DurJGtYuboHt8wufwNhd6JNaYM lNaAjGWXUlYmtnUXzbcfZXZv32IpAlgXsaeCnE/cpswzZzPqJcs24PyiOd7izNmF 8EXAw4WP1bmkjKowir85y828QQMuLl6Yu9Ji21hchccbvWE/m64yOniQlXIEh/Dq gp9xJt3UUjH1/SyAklUZBhpqq0QddZMqP2A7b4seYxMxkBj+cypoxOWSrc7f3Cyr 9KxXps5PM2omXt1e1/MsO3/gIKeldayXLRAGX9+Mvc0LfpbrpqYDkx8tNwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLmmqRJR1AFWmQr00FmPekUTtQZhMB8GA1UdIwQY MBaAFDQA2UkJg+ffMsfPF8oerU8F95ZGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkFEWlNRbUQ1OTh5eDg4WHloNnRUd1gzbGtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9mZWZjMTItMmZjMi00MzBkLTk2MDYt ZjQ5NDZmMDNmNTQyLzEvdWFhcEVsSFVBVmFaQ3ZUUVdZOTZSUk8xQm1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9mZWZjMTItMmZjMi00MzBkLTk2MDYtZjQ5NDZmMDNmNTQy LzEvTkFEWlNRbUQ1OTh5eDg4WHloNnRUd1gzbGtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuR6cMA0E AgACMAcDBQMqBEsAMA0GCSqGSIb3DQEBCwUAA4IBAQC7104CmrNa01XOQkYjSMkZ HL/A2tkFQwEpBvdwXatXxBmBH+VC5eQ+hhZtxG25/rEzqumYM3pXjTJdGApxh/pe rGAoISAP1/LGg0L+d3TY1JcmBlb6x1JMgQadRelCjNKTxRDRrCzHaKKG5Ez9SmzC SgdZVWWEsiQ3j1MNyb4I9Ttu18yncCmjg+rbbXUrsiQEmB59oA7wfDB9O9Bglmop srfV+DI5DwWzhBa47NMPCOwpjYb29DU8oJoJj+ocWO2wTbetkbGFu04xs2YrQRYB +cVZzTjto+qb0hWXFHoLGoSKkty7KU6SPZ0m21WTaYa7ciB95Bl5V8bn4tR1bDi+ -----END CERTIFICATE-----Generated at Sat Jan 10 09:22:46 2026 by rpki-client