This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/uQalLdA9Z-zW3X3DbEVUye_tXgY.roa File: uQalLdA9Z-zW3X3DbEVUye_tXgY.roa (raw, json) Hash identifier: edPmQlyk2PdJs3DSgEm0MutEauZdu0bTFCYUkOfWUaU= Subject key identifier: B9:06:A5:2D:D0:3D:67:EC:D6:DD:7D:C3:6C:45:54:C9:EF:ED:5E:06 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797EB890EDD6AF6397E03E609287F7B3 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/uQalLdA9Z-zW3X3DbEVUye_tXgY.roa Signing time: Thu 01 Jan 2026 12:18:26 +0000 ROA not before: Thu 01 Jan 2026 12:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 79.175.93.0/24 maxlen: 24 79.175.103.0/24 maxlen: 24 79.175.105.0/24 maxlen: 24 79.175.110.0/24 maxlen: 24 178.219.1.0/24 maxlen: 24 188.255.162.0/24 maxlen: 24 188.255.163.0/24 maxlen: 24 188.255.164.0/24 maxlen: 24 188.255.165.0/24 maxlen: 24 188.255.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 16:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:b8:90:ed:d6:af:63:97:e0:3e:60:92:87:f7:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b906a52dd03d67ecd6dd7dc36c4554c9efed5e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:75:32:04:9e:82:af:55:f4:d5:37:a8:c2:ec: 8a:1c:74:b4:ca:62:af:fa:cb:b1:92:86:83:6c:3d: f6:03:25:96:55:58:83:8e:65:8f:0b:4b:73:e9:d6: 8b:af:09:4c:5e:13:f5:3f:d0:da:0f:51:e1:86:e2: 3c:03:e5:85:65:cb:8d:ad:17:26:4a:b7:1a:52:51: 3a:5d:2f:20:4f:5b:2e:c6:5f:fa:cd:63:d1:c9:ab: d1:59:eb:e3:cb:b3:c7:73:ea:cf:60:2b:b2:75:1f: 2b:7d:50:b7:41:ef:aa:77:b0:bf:60:20:98:c6:0a: 38:c9:0a:e5:98:1f:52:70:fc:5d:ac:6b:6b:87:82: 62:39:f1:9c:8d:b7:26:45:fc:b0:d9:5c:15:ce:7c: 86:d3:d9:9f:50:c9:54:73:f4:70:13:8b:ca:e0:80: 9a:a5:90:9f:5c:3e:f2:9a:26:e7:87:a2:bb:37:3c: 72:b8:fe:92:4a:5a:56:28:25:ae:1d:67:f3:e0:7d: 71:20:91:73:68:83:74:d7:3e:84:50:c7:a1:b2:bc: e4:ef:67:81:5a:da:7b:a3:c1:b6:d7:87:f4:af:71: 62:e4:f9:61:62:d7:6d:25:d9:6b:62:a7:8a:81:4d: 68:e7:44:76:20:b1:47:b1:bc:0d:7f:14:82:1a:51: e7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:06:A5:2D:D0:3D:67:EC:D6:DD:7D:C3:6C:45:54:C9:EF:ED:5E:06 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/uQalLdA9Z-zW3X3DbEVUye_tXgY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.175.93.0/24 79.175.103.0/24 79.175.105.0/24 79.175.110.0/24 178.219.1.0/24 188.255.162.0-188.255.165.255 188.255.242.0/24 Signature Algorithm: sha256WithRSAEncryption 56:88:ab:bf:21:f2:92:37:d5:eb:c3:b7:56:54:8d:dc:2a:5f: 82:88:15:10:09:3f:2f:ad:95:79:7f:c1:a9:67:53:ca:1d:32: 58:66:fe:9f:3b:7a:85:29:3e:a4:25:be:5d:c6:08:29:3a:c2: 81:34:b7:18:00:c0:da:5c:05:5c:37:24:f8:02:9a:d7:98:61: eb:19:67:62:34:a9:18:d5:22:8a:b9:3b:b3:f4:a8:67:c7:1f: d4:e2:91:c1:1e:3b:87:e4:87:94:51:7f:5f:33:29:2f:cb:16: 52:ef:46:88:f1:ec:af:54:e2:e6:c4:18:7c:a6:f3:09:72:f0: d5:5b:61:18:80:ac:00:45:14:69:0f:ba:bb:b1:6c:e5:0a:16: 95:5b:95:2b:b9:44:73:63:5d:d9:cf:ed:79:9d:bd:78:91:ce: 0d:fe:26:97:e0:99:18:ff:bd:9c:5a:c8:80:98:75:2f:0a:dd: 3b:56:03:bb:85:52:6b:7b:4c:c9:b4:7a:7d:31:8c:72:0a:c9: b4:ce:a5:8d:04:50:4c:a4:77:b7:29:c0:c4:d9:96:78:44:ae: 0e:19:bb:0e:0f:82:ce:fd:e3:f9:95:ed:8e:67:33:16:f1:96: ed:d2:23:38:44:73:5d:7d:62:a6:88:9a:6a:00:b9:40:7b:a7: 65:1b:01:7a -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt5friQ7davY5fgPmCSh/ezMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTA2YTUyZGQwM2Q2N2VjZDZkZDdkYzM2YzQ1NTRjOWVmZWQ1ZTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnUyBJ6Cr1X01TeowuyKHHS0ymKv +suxkoaDbD32AyWWVViDjmWPC0tz6daLrwlMXhP1P9DaD1HhhuI8A+WFZcuNrRcm SrcaUlE6XS8gT1suxl/6zWPRyavRWevjy7PHc+rPYCuydR8rfVC3Qe+qd7C/YCCY xgo4yQrlmB9ScPxdrGtrh4JiOfGcjbcmRfyw2VwVznyG09mfUMlUc/RwE4vK4ICa pZCfXD7ymibnh6K7NzxyuP6SSlpWKCWuHWfz4H1xIJFzaIN01z6EUMehsrzk72eB Wtp7o8G214f0r3Fi5PlhYtdtJdlrYqeKgU1o50R2ILFHsbwNfxSCGlHn2QIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFLkGpS3QPWfs1t19w2xFVMnv7V4GMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvdVFhbExkQTlaLXpXM1gzRGJFVlV5ZV90WGdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAT69dAwQA T69nAwQAT69pAwQAT69uAwQAstsBMAwDBAG8/6IDBAG8/6QDBAC8//IwDQYJKoZI hvcNAQELBQADggEBAFaIq78h8pI31evDt1ZUjdwqX4KIFRAJPy+tlXl/walnU8od Mlhm/p87eoUpPqQlvl3GCCk6woE0txgAwNpcBVw3JPgCmteYYesZZ2I0qRjVIoq5 O7P0qGfHH9TikcEeO4fkh5RRf18zKS/LFlLvRojx7K9U4ubEGHym8wly8NVbYRiA rABFFGkPuruxbOUKFpVblSu5RHNjXdnP7XmdvXiRzg3+JpfgmRj/vZxayICYdS8K 3TtWA7uFUmt7TMm0en0xjHIKybTOpY0EUEykd7cpwMTZlnhErg4Zuw4Pgs794/mV 7Y5nMxbxlu3SIzhEc119YqaImmoAuUB7p2UbAXo= -----END CERTIFICATE-----Generated at Mon Jan 12 00:51:34 2026 by rpki-client