This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/Uryh4fThyDLMPt3qMbkDETFPkjs.roa File: Uryh4fThyDLMPt3qMbkDETFPkjs.roa (raw, json) Hash identifier: /xcRZ3cub7ymv3GtgsooN/HcmqZzVT8RJVzKbGyx/dQ= Subject key identifier: 52:BC:A1:E1:F4:E1:C8:32:CC:3E:DD:EA:31:B9:03:11:31:4F:92:3B Certificate issuer: /CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d Certificate serial: 019B7D5C8B17632FCE3D56D78D133698CFD5 Authority key identifier: AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/Uryh4fThyDLMPt3qMbkDETFPkjs.roa Signing time: Fri 02 Jan 2026 06:19:35 +0000 ROA not before: Fri 02 Jan 2026 06:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8879 IP address blocks: 91.216.108.0/24 maxlen: 24 195.66.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 09:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:8b:17:63:2f:ce:3d:56:d7:8d:13:36:98:cf:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d Validity Not Before: Jan 2 06:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52bca1e1f4e1c832cc3eddea31b90311314f923b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ec:0e:69:dd:4a:d3:a4:68:b3:1d:45:83:e6: 32:52:7f:59:fc:55:99:3d:f9:0a:7b:c9:a8:e0:65: 08:06:f5:90:28:87:f8:e9:c2:f1:94:85:ec:d5:97: 90:97:e9:17:7a:b8:7b:0e:cc:45:06:89:4e:af:61: c5:cb:06:b1:21:d4:1e:2f:91:23:8f:ea:ac:72:1f: 3d:f5:d6:e8:d9:38:8b:ce:9b:45:2f:f8:5d:e8:83: c2:11:e5:7b:ba:21:a9:e8:15:91:3d:84:1a:a3:68: 0f:e2:94:b2:7f:5c:48:2a:17:22:34:82:45:d1:65: 86:6f:1e:3d:97:ed:12:1b:ec:97:68:bc:32:d7:d3: 61:5b:01:42:33:c9:8f:99:1b:65:ae:fa:74:87:d2: 74:80:ee:bc:3c:0f:37:ac:e8:69:51:c3:28:ed:51: ee:c7:5a:d3:5d:ec:6b:da:ff:70:99:d8:f0:c1:78: 45:c3:0c:9c:58:13:3f:7a:4c:0b:1b:4a:1a:50:df: 02:a1:91:87:21:45:59:9c:fd:7e:8b:7e:67:fd:d7: 07:bf:14:fa:02:f6:99:33:b8:3c:da:08:60:0a:40: 07:02:4e:c9:e3:2a:ec:b2:9c:68:4b:09:c3:c4:85: 94:7d:8d:30:cd:40:2c:f6:79:8f:8e:30:33:64:3f: c2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BC:A1:E1:F4:E1:C8:32:CC:3E:DD:EA:31:B9:03:11:31:4F:92:3B X509v3 Authority Key Identifier: keyid:AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/Uryh4fThyDLMPt3qMbkDETFPkjs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.108.0/24 195.66.76.0/24 Signature Algorithm: sha256WithRSAEncryption be:a9:63:50:f3:f9:38:de:d0:93:98:cd:51:b1:20:23:4b:03: 24:c6:20:b5:14:01:10:f0:f7:e8:4b:87:f0:5f:12:23:9a:49: 20:e4:de:b4:e8:b5:91:5f:ef:d3:68:4f:04:c0:ad:21:4c:6f: ae:96:d1:6a:31:c7:17:39:e2:a4:3a:d0:1e:e9:fa:68:f0:9b: 4d:c2:dc:de:68:fb:14:be:45:be:fc:cc:4c:13:53:b3:a0:03: 13:4c:1f:cd:1c:51:4e:0e:65:73:0f:1f:97:5b:65:86:6a:a0: 24:12:64:fd:b4:39:df:26:f4:06:7c:67:7a:e2:69:75:d4:54: 1d:6b:1d:48:f4:5f:1e:9b:d7:c0:13:e3:35:04:5c:3a:a6:bb: 2e:5b:c8:ac:dd:5b:42:81:de:5f:0d:b2:5e:28:5e:1a:ef:eb: 1e:63:30:9a:97:b9:49:49:a4:c8:4f:57:97:b4:79:eb:7c:ff: 24:1a:e0:81:cf:4f:64:6d:91:d1:b2:0a:2d:64:e2:81:96:07: 1c:99:27:e7:05:7b:c5:f2:ca:a3:54:6f:2a:0e:a6:5d:4d:e2: 00:eb:bd:ac:26:f4:d0:5c:3e:7e:93:55:b2:27:af:96:f9:14: d2:9b:f1:ef:38:d0:a6:bd:79:8c:cc:79:b0:a6:41:2f:38:0c: 50:65:89:dc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XIsXYy/OPVbXjRM2mM/VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNGM4MzBiMTEyNjE0ODNhNjJiNjY5NmE0YzM3MjBlOGFk ODhhMGQwHhcNMjYwMTAyMDYxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmJjYTFlMWY0ZTFjODMyY2MzZWRkZWEzMWI5MDMxMTMxNGY5MjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuwOad1K06Rosx1Fg+YyUn9Z/FWZ PfkKe8mo4GUIBvWQKIf46cLxlIXs1ZeQl+kXerh7DsxFBolOr2HFywaxIdQeL5Ej j+qsch899dbo2TiLzptFL/hd6IPCEeV7uiGp6BWRPYQao2gP4pSyf1xIKhciNIJF 0WWGbx49l+0SG+yXaLwy19NhWwFCM8mPmRtlrvp0h9J0gO68PA83rOhpUcMo7VHu x1rTXexr2v9wmdjwwXhFwwycWBM/ekwLG0oaUN8CoZGHIUVZnP1+i35n/dcHvxT6 AvaZM7g82ghgCkAHAk7J4yrsspxoSwnDxIWUfY0wzUAs9nmPjjAzZD/C+QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFK8oeH04cgyzD7d6jG5AxExT5I7MB8GA1UdIwQY MBaAFK1MgwsRJhSDpitmlqTDcg6K2IoNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclV5REN4RW1GSU9tSzJhV3BNTnlEb3JZaWcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jNmE2YmEtYWUwNS00NTI0LTg0ZDEt MjIyY2ViNmMzNDRjLzEvVXJ5aDRmVGh5RExNUHQzcU1ia0RFVEZQa2pzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jNmE2YmEtYWUwNS00NTI0LTg0ZDEtMjIyY2ViNmMzNDRj LzEvclV5REN4RW1GSU9tSzJhV3BNTnlEb3JZaWcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9hsAwQA w0JMMA0GCSqGSIb3DQEBCwUAA4IBAQC+qWNQ8/k43tCTmM1RsSAjSwMkxiC1FAEQ 8PfoS4fwXxIjmkkg5N606LWRX+/TaE8EwK0hTG+ultFqMccXOeKkOtAe6fpo8JtN wtzeaPsUvkW+/MxME1OzoAMTTB/NHFFODmVzDx+XW2WGaqAkEmT9tDnfJvQGfGd6 4ml11FQdax1I9F8em9fAE+M1BFw6prsuW8is3VtCgd5fDbJeKF4a7+seYzCal7lJ SaTIT1eXtHnrfP8kGuCBz09kbZHRsgotZOKBlgccmSfnBXvF8sqjVG8qDqZdTeIA 672sJvTQXD5+k1WyJ6+W+RTSm/HvONCmvXmMzHmwpkEvOAxQZYnc -----END CERTIFICATE-----Generated at Fri Jan 9 17:23:24 2026 by rpki-client