This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uYe2E9XqjQuyayQwbnCYwO8OY5Q.roa File: uYe2E9XqjQuyayQwbnCYwO8OY5Q.roa (raw, json) Hash identifier: LlUIlF8+WMGel0bdAUm/diNzE+MD4+M8wuAtEpExURI= Subject key identifier: B9:87:B6:13:D5:EA:8D:0B:B2:6B:24:30:6E:70:98:C0:EF:0E:63:94 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A33FE24B2FF296AB64801904B49194 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uYe2E9XqjQuyayQwbnCYwO8OY5Q.roa Signing time: Thu 01 Jan 2026 08:18:43 +0000 ROA not before: Thu 01 Jan 2026 08:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 45.149.240.0/24 maxlen: 24 87.121.46.0/24 maxlen: 24 93.123.116.0/24 maxlen: 24 94.156.14.0/24 maxlen: 24 95.214.25.0/24 maxlen: 24 95.214.26.0/24 maxlen: 24 185.218.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3f:e2:4b:2f:f2:96:ab:64:80:19:04:b4:91:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b987b613d5ea8d0bb26b24306e7098c0ef0e6394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:41:23:55:c4:be:b6:a1:30:46:ee:8a:02:60: 6a:e2:9f:b7:6a:47:86:2d:83:e3:88:7a:28:91:d1: a2:b7:fd:f2:9d:e5:fc:7c:bb:30:fe:b8:61:9a:8c: af:99:ee:6c:13:d0:20:cd:47:9c:c8:4a:6b:bc:ab: f5:b9:a1:ab:8c:f8:88:eb:27:b9:b9:f1:6e:40:52: 81:03:52:37:f9:e1:be:81:e6:4a:d8:c9:ed:20:9d: ed:2d:2d:72:b2:18:c0:cb:f9:1e:4d:75:a4:cf:04: 78:5f:1c:65:c4:68:b1:6d:53:c5:a1:5d:c2:c4:f1: f3:dc:8f:af:88:b7:d1:42:b3:c7:f4:e2:86:6b:e6: 9c:b8:f4:86:86:95:ad:59:ba:6e:8c:ac:5c:f8:52: a8:bf:41:c0:3d:9a:79:49:7d:53:07:10:b3:54:4e: c7:89:1b:ff:27:4c:dc:2b:b6:dd:1d:87:84:19:05: cd:63:16:93:62:c4:db:5b:62:8b:9a:a4:34:48:98: cd:bb:0a:ca:44:1f:5f:84:87:25:fa:67:91:d3:95: 09:af:86:43:c2:53:84:f7:36:fa:85:7e:ba:fd:60: 37:6f:19:c4:a5:5e:e6:7b:8f:86:c3:b9:22:bc:58: 56:64:2e:a4:92:79:ae:29:7d:0c:0e:41:f3:81:17: 13:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:87:B6:13:D5:EA:8D:0B:B2:6B:24:30:6E:70:98:C0:EF:0E:63:94 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uYe2E9XqjQuyayQwbnCYwO8OY5Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.240.0/24 87.121.46.0/24 93.123.116.0/24 94.156.14.0/24 95.214.25.0-95.214.26.255 185.218.136.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:92:b0:91:e2:df:9e:fa:26:f9:ed:17:5c:37:52:92:8f:8d: df:8a:d5:0d:d1:a5:34:6d:f4:80:dd:d1:1a:00:35:c9:65:91: 3f:4a:62:69:69:1c:54:a6:48:6f:09:aa:b1:f0:45:9c:19:fa: 9a:a7:1e:90:eb:11:ba:a5:24:da:cf:73:f3:94:78:9e:91:0b: 0b:79:ec:d6:96:dd:df:51:40:dd:96:49:3d:99:59:fb:f8:c8: 31:b0:dd:34:ce:2a:49:2e:66:ba:ac:06:31:cc:a4:13:f2:54: b4:47:e2:a3:89:da:ad:b4:05:70:dd:eb:42:70:92:4c:f6:af: 01:9b:6f:07:dd:74:b7:f5:93:2d:41:a2:d2:63:31:d2:a3:9b: d5:b8:3d:f8:bd:db:8a:28:69:c4:08:af:9f:cc:c2:0a:67:b7: b2:4a:20:54:c6:4e:fe:a0:6a:3d:c2:1f:a0:0d:8a:93:8a:85: 0e:10:c9:bc:c2:d2:9a:0b:5e:a1:c7:c4:57:31:9a:11:c3:24: 31:7d:96:e7:7c:0c:44:88:86:24:4e:da:63:83:2e:ae:34:c2: 26:08:ff:2c:ad:79:78:ae:d4:28:4e:9d:84:17:73:a2:77:09: 7c:00:e0:e6:17:78:07:6f:54:f4:06:8b:32:ad:57:b8:fc:3a: f5:ae:9b:98 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt4oz/iSy/ylqtkgBkEtJGUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTg3YjYxM2Q1ZWE4ZDBiYjI2YjI0MzA2ZTcwOThjMGVmMGU2Mzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykEjVcS+tqEwRu6KAmBq4p+3akeG LYPjiHookdGit/3yneX8fLsw/rhhmoyvme5sE9AgzUecyEprvKv1uaGrjPiI6ye5 ufFuQFKBA1I3+eG+geZK2MntIJ3tLS1yshjAy/keTXWkzwR4XxxlxGixbVPFoV3C xPHz3I+viLfRQrPH9OKGa+acuPSGhpWtWbpujKxc+FKov0HAPZp5SX1TBxCzVE7H iRv/J0zcK7bdHYeEGQXNYxaTYsTbW2KLmqQ0SJjNuwrKRB9fhIcl+meR05UJr4ZD wlOE9zb6hX66/WA3bxnEpV7me4+Gw7kivFhWZC6kknmuKX0MDkHzgRcTrQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFLmHthPV6o0LsmskMG5wmMDvDmOUMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvdVllMkU5WHFqUXV5YXlRd2JuQ1l3TzhPWTVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQALZXwAwQA V3kuAwQAXXt0AwQAXpwOMAwDBABf1hkDBABf1hoDBAC52ogwDQYJKoZIhvcNAQEL BQADggEBAE6SsJHi3576JvntF1w3UpKPjd+K1Q3RpTRt9IDd0RoANcllkT9KYmlp HFSmSG8JqrHwRZwZ+pqnHpDrEbqlJNrPc/OUeJ6RCwt57NaW3d9RQN2WST2ZWfv4 yDGw3TTOKkkuZrqsBjHMpBPyVLRH4qOJ2q20BXDd60Jwkkz2rwGbbwfddLf1ky1B otJjMdKjm9W4Pfi924ooacQIr5/Mwgpnt7JKIFTGTv6gaj3CH6ANipOKhQ4QybzC 0poLXqHHxFcxmhHDJDF9lud8DESIhiRO2mODLq40wiYI/yyteXiu1ChOnYQXc6J3 CXwA4OYXeAdvVPQGizKtV7j8OvWum5g= -----END CERTIFICATE-----Generated at Fri Jan 2 12:07:51 2026 by rpki-client