This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/UFBEpO4lAvQQYygzidhd3XdFxgI.roa File: UFBEpO4lAvQQYygzidhd3XdFxgI.roa (raw, json) Hash identifier: UGxXMNFmL4JWlj/CB1VthyOKOfzl2mNWHFy1E8dwYXo= Subject key identifier: 50:50:44:A4:EE:25:02:F4:10:63:28:33:89:D8:5D:DD:77:45:C6:02 Certificate issuer: /CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5 Certificate serial: 019B7E388710D6D8944F2134F829D436FDFE Authority key identifier: F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/UFBEpO4lAvQQYygzidhd3XdFxgI.roa Signing time: Fri 02 Jan 2026 10:19:52 +0000 ROA not before: Fri 02 Jan 2026 10:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207829 IP address blocks: 91.198.170.0/23 maxlen: 23 2a0b:c140::/32 maxlen: 32 2a0b:c140:aa::/48 maxlen: 48 2a0b:c140:ab::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:87:10:d6:d8:94:4f:21:34:f8:29:d4:36:fd:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5 Validity Not Before: Jan 2 10:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=505044a4ee2502f41063283389d85ddd7745c602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7d:2e:6c:85:ff:1f:87:94:ee:f0:03:49:4c: d9:06:9d:49:a8:f9:5f:95:af:69:79:86:50:b9:e2: ce:d3:bc:f5:f3:00:ed:25:37:31:24:aa:ff:68:7d: ae:9b:74:bf:8b:30:74:88:2f:9e:ea:04:97:93:fe: 86:cd:65:97:84:b9:f6:71:46:03:18:35:0a:26:a2: 8c:2f:03:53:80:7a:ae:97:8d:f6:36:91:d8:09:b6: d5:e9:9d:b9:b5:87:cc:ee:fc:02:c1:d1:e3:33:ff: d6:d2:09:d0:a9:e7:05:e5:16:96:43:1f:70:8e:89: bb:cb:e0:c0:4d:de:53:2d:4e:6f:ec:d4:39:d7:6d: 24:c9:89:b5:2a:7b:15:bc:87:df:06:e1:66:c9:91: 98:18:c8:29:82:41:0e:d1:59:ca:ee:09:b8:f3:a4: 2d:b8:ae:1f:44:cf:0a:3b:d5:1b:97:10:ee:64:92: c3:24:81:66:c6:e0:ad:ca:e2:b5:8e:d3:e4:e2:c3: 4c:b8:3b:5c:a8:44:f0:43:3e:f5:59:15:6d:80:d6: fb:81:b5:4f:d3:2b:48:e3:58:4d:35:51:f2:19:03: 76:e2:c6:6e:84:58:15:8b:62:75:7b:29:2d:50:f3: c6:35:44:9d:95:ec:44:bf:5c:e6:e5:f3:16:72:be: b5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:50:44:A4:EE:25:02:F4:10:63:28:33:89:D8:5D:DD:77:45:C6:02 X509v3 Authority Key Identifier: keyid:F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/UFBEpO4lAvQQYygzidhd3XdFxgI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.170.0/23 IPv6: 2a0b:c140::/32 Signature Algorithm: sha256WithRSAEncryption 8c:61:fb:d5:80:bc:16:43:ba:c2:34:d6:85:93:5b:51:94:bd: ed:37:2d:69:44:99:ba:15:de:39:b7:38:f1:8e:06:6e:09:2b: 16:a7:fa:d6:f3:74:30:19:2f:a6:7a:3a:f5:3c:23:8b:97:5d: db:4a:4b:71:c8:48:63:65:a8:d5:a9:f2:70:dd:27:cb:22:11: 80:c8:68:92:e4:28:f1:0d:95:eb:89:fa:ff:6e:e9:81:c2:57: 0e:88:95:0c:69:a5:2e:c1:58:bb:2f:69:c7:b2:70:96:24:3a: d9:62:b2:1b:fb:6d:a0:91:01:28:21:04:4a:54:b8:e9:af:a8: 10:0b:93:f3:fd:14:b9:7d:be:58:e0:81:cd:2e:9d:a7:c4:85: be:49:7f:d2:d3:36:7b:27:61:ae:43:fa:69:12:dc:4b:ac:c2: 96:ac:02:6a:c6:9f:91:9b:d3:29:d0:7c:16:fb:70:af:bc:b3: d7:29:72:0c:ed:26:a8:b0:4c:50:2d:6c:08:e0:a9:7e:ef:c9: 78:9e:cc:1f:74:07:82:b0:ba:3f:4c:94:e5:9b:12:75:70:39: 1d:32:d6:5f:ed:80:a2:ed:65:a3:a2:1c:44:88:68:7e:3f:8d: 96:f3:bd:ab:29:54:85:ad:4b:2d:3e:94:37:88:3f:d5:b1:ad: fe:da:ce:0c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OIcQ1tiUTyE0+CnUNv3+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYTMyZDIxMjlhMzg2YzlhMGFmZGJiOTE1ZTBkYmYxMzBi YTcwZDUwHhcNMjYwMTAyMTAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDUwNDRhNGVlMjUwMmY0MTA2MzI4MzM4OWQ4NWRkZDc3NDVjNjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy30ubIX/H4eU7vADSUzZBp1JqPlf la9peYZQueLO07z18wDtJTcxJKr/aH2um3S/izB0iC+e6gSXk/6GzWWXhLn2cUYD GDUKJqKMLwNTgHqul432NpHYCbbV6Z25tYfM7vwCwdHjM//W0gnQqecF5RaWQx9w jom7y+DATd5TLU5v7NQ5120kyYm1KnsVvIffBuFmyZGYGMgpgkEO0VnK7gm486Qt uK4fRM8KO9UblxDuZJLDJIFmxuCtyuK1jtPk4sNMuDtcqETwQz71WRVtgNb7gbVP 0ytI41hNNVHyGQN24sZuhFgVi2J1eyktUPPGNUSdlexEv1zm5fMWcr61NwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFBQRKTuJQL0EGMoM4nYXd13RcYCMB8GA1UdIwQY MBaAFPCjLSEpo4bJoK/buRXg2/EwunDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEtNdElTbWpoc21ncjl1NUZlRGI4VEM2Y05VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy81OGI4ZTItMTIxNS00YmIwLTk2ZGYt MmYwODM4MGFlNmM3LzEvVUZCRXBPNGxBdlFRWXlnemlkaGQzWGRGeGdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy81OGI4ZTItMTIxNS00YmIwLTk2ZGYtMmYwODM4MGFlNmM3 LzEvOEtNdElTbWpoc21ncjl1NUZlRGI4VEM2Y05VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBW8aqMA0E AgACMAcDBQAqC8FAMA0GCSqGSIb3DQEBCwUAA4IBAQCMYfvVgLwWQ7rCNNaFk1tR lL3tNy1pRJm6Fd45tzjxjgZuCSsWp/rW83QwGS+mejr1PCOLl13bSktxyEhjZajV qfJw3SfLIhGAyGiS5CjxDZXrifr/bumBwlcOiJUMaaUuwVi7L2nHsnCWJDrZYrIb +22gkQEoIQRKVLjpr6gQC5Pz/RS5fb5Y4IHNLp2nxIW+SX/S0zZ7J2GuQ/ppEtxL rMKWrAJqxp+Rm9Mp0HwW+3CvvLPXKXIM7SaosExQLWwI4Kl+78l4nswfdAeCsLo/ TJTlmxJ1cDkdMtZf7YCi7WWjohxEiGh+P42W872rKVSFrUstPpQ3iD/Vsa3+2s4M -----END CERTIFICATE-----Generated at Mon Feb 9 23:51:33 2026 by rpki-client