This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/uh159NPLsutfBxTfVmBXo6jRKfI.roa File: uh159NPLsutfBxTfVmBXo6jRKfI.roa (raw, json) Hash identifier: cuRJ8cZbX6qurWVTG+A5l4bJsxobrXuPMyOmp4NalQA= Subject key identifier: BA:1D:79:F4:D3:CB:B2:EB:5F:07:14:DF:56:60:57:A3:A8:D1:29:F2 Certificate issuer: /CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774 Certificate serial: 019B7BA365E173D504C90204C278FAAF2B1B Authority key identifier: 8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/uh159NPLsutfBxTfVmBXo6jRKfI.roa Signing time: Thu 01 Jan 2026 22:17:44 +0000 ROA not before: Thu 01 Jan 2026 22:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198033 IP address blocks: 195.190.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 19:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:65:e1:73:d5:04:c9:02:04:c2:78:fa:af:2b:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774 Validity Not Before: Jan 1 22:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba1d79f4d3cbb2eb5f0714df566057a3a8d129f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d7:95:fb:47:14:c8:5c:85:ed:78:ec:3a:a4: 33:d4:82:52:df:4f:39:50:33:a4:03:16:76:f8:12: 4c:99:77:1e:9d:e5:f1:5a:3f:70:7c:ad:07:85:a8: c3:c8:3a:f2:3c:48:0f:d2:6f:34:36:39:21:d7:44: 3d:0b:e8:0b:17:a0:47:16:6a:f6:95:1d:3b:a2:a6: 8f:d5:9a:b2:e2:78:60:43:92:b5:9c:8e:90:d2:b3: 92:8d:ef:12:f3:b8:bd:d3:6a:aa:0e:64:04:f6:64: 96:da:f6:8c:5f:c7:22:84:3a:52:61:ad:30:07:35: d1:66:ed:a9:9a:96:8b:af:8e:ad:ba:68:f5:b5:0b: 44:69:7d:63:d7:f1:16:a3:43:20:33:96:a8:7c:99: 98:0e:d3:6b:b8:ad:ad:bc:cd:75:d5:77:44:ba:3f: c1:72:a7:40:a5:6f:d4:eb:7d:48:c8:a2:6a:dd:fb: 8f:f4:d2:2a:b2:15:62:ce:6d:8e:94:a0:cb:9d:5a: 30:9c:7d:c5:83:6b:46:28:a0:2a:af:2e:d0:6b:17: 2f:04:c5:bc:ac:95:03:6c:c7:9a:8c:72:61:2e:bf: 35:87:11:60:06:4b:96:61:87:4b:58:6c:53:b5:33: 0b:6d:46:16:0d:b6:2d:da:54:d9:e4:77:9a:75:55: 40:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1D:79:F4:D3:CB:B2:EB:5F:07:14:DF:56:60:57:A3:A8:D1:29:F2 X509v3 Authority Key Identifier: keyid:8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/uh159NPLsutfBxTfVmBXo6jRKfI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.190.152.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:f0:5d:82:56:80:b3:c7:16:b8:d8:c0:43:01:d3:ff:59:fe: e0:8d:17:95:09:0c:28:c9:87:df:f9:37:45:06:f6:b8:82:89: d7:09:f9:b2:f7:d3:ce:84:24:2b:eb:a0:80:5d:43:93:20:6f: 74:39:14:89:80:b9:b1:ab:8b:00:ca:1d:74:23:08:e3:58:44: 0c:94:0a:1c:fc:9d:92:43:05:4d:61:e4:27:15:b3:79:70:a3: 2b:85:8b:e2:e8:43:12:8f:1e:8f:f2:cc:84:95:4c:37:1d:0e: f6:8f:0e:63:a8:ac:77:8f:ad:19:ca:d2:ae:b8:98:e8:69:a1: 0a:ac:fe:14:36:93:f3:60:5b:da:23:eb:40:5d:17:0e:a2:95: a0:5e:fd:ef:e6:c8:d4:06:cb:ad:2c:42:b5:54:bd:51:41:4a: fe:95:13:d8:6a:33:58:dd:2a:fb:ce:c9:f0:e5:5e:6b:39:13: a1:71:57:22:d4:40:f0:96:55:a0:37:47:f1:dc:e3:b4:ba:1f: f1:f7:88:2f:f1:c4:6a:9e:d3:2e:f0:83:51:e6:3c:e1:a1:dd: aa:e3:f9:48:32:bf:4e:d3:9d:27:73:ef:3b:e0:40:bd:95:8c: 8b:bd:39:82:80:39:4d:b5:a2:65:76:b3:97:7e:e6:8f:0c:c0: 71:a8:e3:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o2Xhc9UEyQIEwnj6rysbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNjIyYTM0YzU1ZTM5YjhmYTE1YTM3YmE5ZTM3MGVhYWZk OTk3NzQwHhcNMjYwMTAxMjIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTFkNzlmNGQzY2JiMmViNWYwNzE0ZGY1NjYwNTdhM2E4ZDEyOWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdeV+0cUyFyF7XjsOqQz1IJS3085 UDOkAxZ2+BJMmXceneXxWj9wfK0HhajDyDryPEgP0m80Njkh10Q9C+gLF6BHFmr2 lR07oqaP1Zqy4nhgQ5K1nI6Q0rOSje8S87i902qqDmQE9mSW2vaMX8cihDpSYa0w BzXRZu2pmpaLr46tumj1tQtEaX1j1/EWo0MgM5aofJmYDtNruK2tvM111XdEuj/B cqdApW/U631IyKJq3fuP9NIqshVizm2OlKDLnVownH3Fg2tGKKAqry7QaxcvBMW8 rJUDbMeajHJhLr81hxFgBkuWYYdLWGxTtTMLbUYWDbYt2lTZ5HeadVVAnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLodefTTy7LrXwcU31ZgV6Oo0SnyMB8GA1UdIwQY MBaAFI5iKjTFXjm4+hWje6njcOqv2Zd0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam1JcU5NVmVPYmo2RmFON3FlTnc2cV9abDNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84MmNiM2UtODE5OS00OTE3LWExNzYt ZTUwZTFlOWJiNGIzLzEvdWgxNTlOUExzdXRmQnhUZlZtQlhvNmpSS2ZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84MmNiM2UtODE5OS00OTE3LWExNzYtZTUwZTFlOWJiNGIz LzEvam1JcU5NVmVPYmo2RmFON3FlTnc2cV9abDNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw76YMA0G CSqGSIb3DQEBCwUAA4IBAQAs8F2CVoCzxxa42MBDAdP/Wf7gjReVCQwoyYff+TdF Bva4gonXCfmy99POhCQr66CAXUOTIG90ORSJgLmxq4sAyh10IwjjWEQMlAoc/J2S QwVNYeQnFbN5cKMrhYvi6EMSjx6P8syElUw3HQ72jw5jqKx3j60ZytKuuJjoaaEK rP4UNpPzYFvaI+tAXRcOopWgXv3v5sjUBsutLEK1VL1RQUr+lRPYajNY3Sr7zsnw 5V5rOROhcVci1EDwllWgN0fx3OO0uh/x94gv8cRqntMu8INR5jzhod2q4/lIMr9O 050nc+874EC9lYyLvTmCgDlNtaJldrOXfuaPDMBxqOMt -----END CERTIFICATE-----Generated at Sat Jan 10 04:11:45 2026 by rpki-client