This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/uvbvn8OBN6Pzw3hiHYl0ByGDuQ8.roa File: uvbvn8OBN6Pzw3hiHYl0ByGDuQ8.roa (raw, json) Hash identifier: ETVSR/ckn3Oog+8IFynqo/+RZfG89RYtPK0lPQ+99JU= Subject key identifier: BA:F6:EF:9F:C3:81:37:A3:F3:C3:78:62:1D:89:74:07:21:83:B9:0F Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15F000B4669EAE10F0C8CA79C238FF Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/uvbvn8OBN6Pzw3hiHYl0ByGDuQ8.roa Signing time: Fri 02 Jan 2026 14:21:42 +0000 ROA not before: Fri 02 Jan 2026 14:21:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208241 IP address blocks: 91.223.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f0:00:b4:66:9e:ae:10:f0:c8:ca:79:c2:38:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=baf6ef9fc38137a3f3c378621d8974072183b90f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7c:01:da:c8:cf:df:ad:d8:32:fd:c2:b4:c7: 79:41:60:64:03:29:0f:24:90:c0:5e:e3:3c:aa:bd: 60:74:90:c1:e9:50:0c:d3:05:49:18:3c:57:17:79: 22:6b:1e:a3:c0:21:06:38:11:42:c1:09:b2:55:a4: 0f:1c:0a:d7:a4:d4:54:59:de:ae:04:b1:53:8b:57: c6:55:b0:7f:6a:2d:2c:a1:d2:ac:91:d2:0b:dd:f6: b2:e3:b1:96:b6:7b:75:d9:e2:67:b4:d5:6b:3e:43: 0d:04:17:bf:ea:64:74:b3:87:2b:3c:ef:a4:ce:64: 80:f1:08:e6:10:0d:78:e1:02:43:b8:c1:b9:8f:4a: 00:54:85:36:f7:ba:10:49:35:0b:33:93:a4:58:d4: 61:88:a7:11:1a:9f:86:62:6a:c7:39:a5:9d:db:2c: 1a:37:79:71:12:c5:fa:ef:b4:32:77:38:2f:3b:40: e3:07:85:b0:87:14:a4:4f:3b:94:69:a4:4c:d9:7f: 60:16:b8:a2:b9:de:de:89:8a:95:a2:98:d4:30:c9: 36:f3:bf:d1:77:09:70:58:21:a7:28:65:7d:2d:fc: c5:98:5d:f2:4f:c5:31:3c:bd:f8:72:5a:95:af:1d: 57:0a:c1:ed:8b:88:f4:de:b6:c9:12:9f:a6:0c:df: 3d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F6:EF:9F:C3:81:37:A3:F3:C3:78:62:1D:89:74:07:21:83:B9:0F X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/uvbvn8OBN6Pzw3hiHYl0ByGDuQ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.110.0/24 Signature Algorithm: sha256WithRSAEncryption 24:04:4d:d1:25:6a:c7:9c:f2:8f:37:fc:8d:27:f7:f0:05:74: 78:bb:7a:e4:20:6e:97:3e:64:9a:75:bc:b8:d8:ab:74:96:04: e7:0d:89:18:fd:5c:95:9c:b8:97:16:2b:d4:6d:e6:e2:13:53: 60:f0:20:93:19:f8:08:68:2b:88:60:ca:de:6d:51:d4:73:59: df:0b:51:73:83:57:88:28:70:dc:10:54:ba:8d:4c:ca:d3:2c: c4:5f:54:02:3e:b4:37:af:dd:74:0a:c0:d7:d5:04:08:5c:aa: ab:89:33:37:81:fd:3a:17:21:6b:87:43:3c:b8:24:16:bd:fc: 1b:95:67:b0:e1:75:7d:d9:ca:70:b7:8e:ec:25:00:12:d8:63: eb:4e:2b:74:15:e1:51:03:66:21:0a:81:43:06:ed:ac:03:af: bc:3c:88:d5:8f:d0:22:e8:7a:48:48:f8:e6:3b:f0:21:8e:d1: be:c3:e6:c9:1a:73:9e:e2:76:9d:b6:e3:ea:97:e5:7a:b4:3d: 11:71:f2:4a:3f:ac:f0:ed:1a:92:ab:9a:07:fa:1a:32:b0:1f: 66:e5:db:52:cd:1b:b3:dd:59:58:97:44:3e:de:f4:ac:f7:2a: 51:26:6f:6c:58:f9:d2:d8:ff:e6:13:8c:7a:51:e2:f3:ca:bb: ea:ff:a3:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FfAAtGaerhDwyMp5wjj/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWY2ZWY5ZmMzODEzN2EzZjNjMzc4NjIxZDg5NzQwNzIxODNiOTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnwB2sjP363YMv3CtMd5QWBkAykP JJDAXuM8qr1gdJDB6VAM0wVJGDxXF3kiax6jwCEGOBFCwQmyVaQPHArXpNRUWd6u BLFTi1fGVbB/ai0sodKskdIL3fay47GWtnt12eJntNVrPkMNBBe/6mR0s4crPO+k zmSA8QjmEA144QJDuMG5j0oAVIU297oQSTULM5OkWNRhiKcRGp+GYmrHOaWd2ywa N3lxEsX677QydzgvO0DjB4WwhxSkTzuUaaRM2X9gFriiud7eiYqVopjUMMk287/R dwlwWCGnKGV9LfzFmF3yT8UxPL34clqVrx1XCsHti4j03rbJEp+mDN89swIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLr275/DgTej88N4Yh2JdAchg7kPMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvdXZidm44T0JONlB6dzNoaUhZbDBCeUdEdVE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW99uMA0G CSqGSIb3DQEBCwUAA4IBAQAkBE3RJWrHnPKPN/yNJ/fwBXR4u3rkIG6XPmSadby4 2Kt0lgTnDYkY/VyVnLiXFivUbebiE1Ng8CCTGfgIaCuIYMrebVHUc1nfC1Fzg1eI KHDcEFS6jUzK0yzEX1QCPrQ3r910CsDX1QQIXKqriTM3gf06FyFrh0M8uCQWvfwb lWew4XV92cpwt47sJQAS2GPrTit0FeFRA2YhCoFDBu2sA6+8PIjVj9Ai6HpISPjm O/AhjtG+w+bJGnOe4nadtuPql+V6tD0RcfJKP6zw7RqSq5oH+hoysB9m5dtSzRuz 3VlYl0Q+3vSs9ypRJm9sWPnS2P/mE4x6UeLzyrvq/6OX -----END CERTIFICATE-----Generated at Tue Jan 6 20:52:38 2026 by rpki-client