This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/uabo7ndnRWzy9MUqP3Ih5P2gxe8.roa File: uabo7ndnRWzy9MUqP3Ih5P2gxe8.roa (raw, json) Hash identifier: j629zk7F2qIP3WUGuPA4LCpVgjs/1/AZWtVe090YvCY= Subject key identifier: B9:A6:E8:EE:77:67:45:6C:F2:F4:C5:2A:3F:72:21:E4:FD:A0:C5:EF Certificate issuer: /CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216 Certificate serial: 019B7C111E40D53BA39D4D37F7DF347D2456 Authority key identifier: C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/uabo7ndnRWzy9MUqP3Ih5P2gxe8.roa Signing time: Fri 02 Jan 2026 00:17:35 +0000 ROA not before: Fri 02 Jan 2026 00:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51221 IP address blocks: 185.34.164.0/22 maxlen: 23 185.34.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:1e:40:d5:3b:a3:9d:4d:37:f7:df:34:7d:24:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216 Validity Not Before: Jan 2 00:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9a6e8ee7767456cf2f4c52a3f7221e4fda0c5ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f3:c3:ed:98:84:42:46:cb:39:65:c7:8f:0c: 81:e2:0d:a9:a2:60:d1:6f:05:0e:93:43:d1:f1:36: 89:33:08:ce:21:7d:bd:dc:51:c7:02:78:c2:46:87: fe:68:69:75:ec:d2:20:33:c8:84:70:40:10:39:de: 4d:e6:b8:26:49:44:b4:b1:5e:7a:53:ad:49:97:de: a8:05:0d:d8:e7:ec:36:ce:b8:95:63:65:b5:44:b3: d3:5f:9f:44:cd:95:47:42:a6:6d:d2:8c:cb:f3:70: bf:3b:40:b3:59:20:53:f5:da:9f:9e:9e:79:d3:d1: 3f:b7:69:39:2a:17:9a:48:96:d4:3e:c8:97:2e:f0: 10:f5:40:73:e6:a1:82:c7:47:aa:9f:61:56:22:c1: 08:36:4c:09:7c:c2:d0:87:31:51:e5:29:01:cf:98: cf:bf:a5:72:5f:0e:2a:33:b3:fb:2f:40:78:3d:21: 4b:41:72:42:9e:e5:8a:ef:a0:cc:98:38:3a:04:b4: fc:46:e8:e5:37:ae:5c:83:3e:83:af:4d:96:80:a0: ad:6d:98:fd:0e:ec:57:25:fe:4a:d3:76:ad:f9:cf: 5f:37:0e:67:fe:12:2c:3c:71:23:26:a6:5c:80:09: 7a:d9:dd:75:ff:b3:d2:42:30:eb:61:70:be:33:40: db:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A6:E8:EE:77:67:45:6C:F2:F4:C5:2A:3F:72:21:E4:FD:A0:C5:EF X509v3 Authority Key Identifier: keyid:C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/uabo7ndnRWzy9MUqP3Ih5P2gxe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.34.164.0/22 Signature Algorithm: sha256WithRSAEncryption 81:a3:d1:ac:b3:95:94:40:eb:38:c5:1e:91:32:30:96:67:dc: d5:e2:57:09:ed:6f:bc:e9:36:93:bc:d0:29:a2:15:5e:59:48: 21:26:12:46:d0:b6:50:f4:f3:65:82:34:33:8a:c8:2c:1c:0f: b3:f4:2e:88:56:0f:59:80:cc:75:07:a4:f5:31:f9:1f:cc:aa: a0:4e:fc:81:86:e7:f4:3e:85:e5:06:89:27:e6:54:ea:d5:aa: 35:b8:70:ca:37:ba:97:72:21:d1:de:07:58:ad:01:39:32:5c: b0:93:c1:c2:0a:f9:96:86:e2:12:36:57:95:20:35:19:6b:95: b2:b6:b9:db:af:de:a5:02:e5:f0:a2:d4:d2:88:7d:ad:5c:ec: 41:69:e8:8e:3f:5c:d2:1e:a7:0d:71:9d:37:c6:d7:3d:4f:69: a5:3b:db:69:f1:82:a8:2e:49:d1:cf:58:58:c9:0e:7f:7e:1b: 41:c3:79:6d:46:87:68:22:4f:5f:03:c7:eb:ed:9e:54:dd:b0: ef:36:df:74:d4:6a:16:88:1b:3e:91:6c:54:0b:8e:5a:a5:1a: 28:1f:3c:21:87:fa:5f:96:c0:f5:e0:4a:28:55:02:04:2e:36: bf:7c:4c:d0:64:19:f2:ef:8c:19:0b:1e:06:37:8d:86:d5:92: fb:7e:7c:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ER5A1TujnU039980fSRWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NTc5OWZmNDMzNWI3YjFhZTcxODhlZGZhNTNmZDdlMjEz ZWIyMTYwHhcNMjYwMTAyMDAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWE2ZThlZTc3Njc0NTZjZjJmNGM1MmEzZjcyMjFlNGZkYTBjNWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPPD7ZiEQkbLOWXHjwyB4g2pomDR bwUOk0PR8TaJMwjOIX293FHHAnjCRof+aGl17NIgM8iEcEAQOd5N5rgmSUS0sV56 U61Jl96oBQ3Y5+w2zriVY2W1RLPTX59EzZVHQqZt0ozL83C/O0CzWSBT9dqfnp55 09E/t2k5KheaSJbUPsiXLvAQ9UBz5qGCx0eqn2FWIsEINkwJfMLQhzFR5SkBz5jP v6VyXw4qM7P7L0B4PSFLQXJCnuWK76DMmDg6BLT8RujlN65cgz6Dr02WgKCtbZj9 DuxXJf5K03at+c9fNw5n/hIsPHEjJqZcgAl62d11/7PSQjDrYXC+M0Db1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLmm6O53Z0Vs8vTFKj9yIeT9oMXvMB8GA1UdIwQY MBaAFMdXmf9DNbexrnGI7fpT/X4hPrIWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDFlWl8wTTF0N0d1Y1lqdC1sUDlmaUUtc2hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xZTRjMDMtZjYxOS00N2EzLTgxYmQt MzZlZjdhZWViZTNiLzEvdWFibzduZG5SV3p5OU1VcVAzSWg1UDJneGU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xZTRjMDMtZjYxOS00N2EzLTgxYmQtMzZlZjdhZWViZTNi LzEveDFlWl8wTTF0N0d1Y1lqdC1sUDlmaUUtc2hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSKkMA0G CSqGSIb3DQEBCwUAA4IBAQCBo9Gss5WUQOs4xR6RMjCWZ9zV4lcJ7W+86TaTvNAp ohVeWUghJhJG0LZQ9PNlgjQzisgsHA+z9C6IVg9ZgMx1B6T1MfkfzKqgTvyBhuf0 PoXlBokn5lTq1ao1uHDKN7qXciHR3gdYrQE5Mlywk8HCCvmWhuISNleVIDUZa5Wy trnbr96lAuXwotTSiH2tXOxBaeiOP1zSHqcNcZ03xtc9T2mlO9tp8YKoLknRz1hY yQ5/fhtBw3ltRodoIk9fA8fr7Z5U3bDvNt901GoWiBs+kWxUC45apRooHzwhh/pf lsD14EooVQIELja/fEzQZBny74wZCx4GN42G1ZL7fnyx -----END CERTIFICATE-----Generated at Sun Jan 11 23:38:36 2026 by rpki-client