This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pUjh9h5kXbyvjHZRDW0Br9vXdLU.roa File: pUjh9h5kXbyvjHZRDW0Br9vXdLU.roa (raw, json) Hash identifier: uUjMwRWcQ7RYd1GUYJVzIdOVuxk/0bQ87LFm8UvaTfM= Subject key identifier: A5:48:E1:F6:1E:64:5D:BC:AF:8C:76:51:0D:6D:01:AF:DB:D7:74:B5 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A3356002CB621B61EEB049C79528C8 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pUjh9h5kXbyvjHZRDW0Br9vXdLU.roa Signing time: Thu 01 Jan 2026 08:18:40 +0000 ROA not before: Thu 01 Jan 2026 08:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208389 IP address blocks: 93.123.0.0/22 maxlen: 32 93.123.4.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:35:60:02:cb:62:1b:61:ee:b0:49:c7:95:28:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a548e1f61e645dbcaf8c76510d6d01afdbd774b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:08:a9:b9:51:af:99:56:a3:80:6e:a2:8d:50: 95:de:6b:bd:b0:f0:e2:a2:8e:95:e5:2f:62:ac:df: 08:97:c4:f7:f1:58:60:2b:36:03:61:07:48:b8:75: 69:6c:44:56:a0:c9:50:9a:16:24:dd:94:a3:2b:c3: 2e:35:5a:e3:76:b9:fc:16:b4:05:3f:50:9f:8d:8f: 9b:a5:73:fa:c3:b5:2b:14:c0:2d:73:a6:b4:df:f9: ec:b0:10:5d:aa:9c:cd:21:bc:2d:53:fb:31:3c:cf: 0e:4f:3a:7f:ea:55:8f:6f:0e:20:b9:c5:2f:3b:f9: 40:d0:72:18:a3:68:f0:5e:23:4f:26:32:5b:4e:00: df:10:cf:f9:f6:9c:57:c2:0d:f3:bc:4d:bc:80:a6: d3:0d:31:8d:fa:3b:7d:61:00:7f:70:ff:66:05:25: 33:16:08:b4:08:39:07:04:4e:dd:71:d2:30:ad:67: b3:60:c3:66:ff:f1:1c:0b:12:bd:92:4c:f6:84:01: 78:9f:51:70:94:99:e0:d9:21:e0:3b:2c:3b:0e:63: 78:70:1c:68:9d:2b:c1:32:27:fc:79:b8:a6:82:dd: e6:68:0f:b3:79:b4:7c:bc:4d:00:5d:fa:71:eb:cb: 76:46:d8:d4:8d:22:9a:f6:86:78:56:ac:a4:d5:70: bd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:48:E1:F6:1E:64:5D:BC:AF:8C:76:51:0D:6D:01:AF:DB:D7:74:B5 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pUjh9h5kXbyvjHZRDW0Br9vXdLU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.123.0.0-93.123.5.255 Signature Algorithm: sha256WithRSAEncryption 95:90:d6:4b:d1:68:e5:8f:77:14:08:07:14:81:ca:75:a5:0e: 46:4b:8a:b4:7b:e8:a7:f6:1d:57:b3:b7:80:a2:10:ca:f3:c4: dd:1f:ca:5f:ec:5e:88:1f:de:52:90:8d:be:e4:ff:1b:8a:66: 19:4a:63:cc:6b:da:45:74:09:8d:67:2e:eb:b6:6a:19:6c:13: d0:80:89:c9:c3:b4:46:ac:ac:29:40:5b:94:25:be:48:be:23: bb:53:78:79:2a:ae:d5:7c:17:a3:09:22:fe:07:95:d3:e6:e7: d3:57:fb:b6:ac:81:61:e6:3c:a3:bf:7b:b9:b7:42:92:9a:eb: ce:f3:73:0a:ac:e1:00:30:38:85:88:17:9b:dd:fe:6c:f1:58: 9f:8f:aa:78:9e:12:93:53:21:30:5a:5a:4c:33:26:28:d5:9b: d6:cf:06:53:8c:6a:f5:28:44:cb:d9:f1:aa:91:2e:a5:dc:73: 41:21:11:8d:c1:e9:35:b0:ab:0c:0c:a6:8d:4a:3a:0b:cd:11: 12:e2:2a:45:16:94:68:b1:db:97:2f:4c:f0:da:1a:9a:ff:21: 29:db:75:31:9f:de:b3:d1:c7:29:1a:62:cd:a7:8d:97:43:b1: 06:a1:c0:ff:b3:24:b8:0e:c0:7c:ab:32:4a:b1:f1:d2:44:ef: 1f:a1:78:5c -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt4ozVgAstiG2HusEnHlSjIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTQ4ZTFmNjFlNjQ1ZGJjYWY4Yzc2NTEwZDZkMDFhZmRiZDc3NGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AipuVGvmVajgG6ijVCV3mu9sPDi oo6V5S9irN8Il8T38VhgKzYDYQdIuHVpbERWoMlQmhYk3ZSjK8MuNVrjdrn8FrQF P1CfjY+bpXP6w7UrFMAtc6a03/nssBBdqpzNIbwtU/sxPM8OTzp/6lWPbw4gucUv O/lA0HIYo2jwXiNPJjJbTgDfEM/59pxXwg3zvE28gKbTDTGN+jt9YQB/cP9mBSUz Fgi0CDkHBE7dcdIwrWezYMNm//EcCxK9kkz2hAF4n1FwlJng2SHgOyw7DmN4cBxo nSvBMif8ebimgt3maA+zebR8vE0AXfpx68t2RtjUjSKa9oZ4Vqyk1XC9WwIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFKVI4fYeZF28r4x2UQ1tAa/b13S1MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvcFVqaDloNWtYYnl2akhaUkRXMEJyOXZYZExVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwBdewME AV17BDANBgkqhkiG9w0BAQsFAAOCAQEAlZDWS9Fo5Y93FAgHFIHKdaUORkuKtHvo p/YdV7O3gKIQyvPE3R/KX+xeiB/eUpCNvuT/G4pmGUpjzGvaRXQJjWcu67ZqGWwT 0ICJycO0RqysKUBblCW+SL4ju1N4eSqu1XwXowki/geV0+bn01f7tqyBYeY8o797 ubdCkprrzvNzCqzhADA4hYgXm93+bPFYn4+qeJ4Sk1MhMFpaTDMmKNWb1s8GU4xq 9ShEy9nxqpEupdxzQSERjcHpNbCrDAymjUo6C80REuIqRRaUaLHbly9M8Noamv8h Kdt1MZ/es9HHKRpizaeNl0OxBqHA/7MkuA7AfKsySrHx0kTvH6F4XA== -----END CERTIFICATE-----Generated at Fri Jan 2 12:08:23 2026 by rpki-client