This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/UPKKwW9VJYZFBiA_WvIaqWPdF7s.roa File: UPKKwW9VJYZFBiA_WvIaqWPdF7s.roa (raw, json) Hash identifier: K2pc24cJyQQfvnYYt5miofrs9P0Hxb8DyAeGlZ+9xFY= Subject key identifier: 50:F2:8A:C1:6F:55:25:86:45:06:20:3F:5A:F2:1A:A9:63:DD:17:BB Certificate issuer: /CN=b14881fa3e75a3851cf70419135abdd529d2f682 Certificate serial: 019B7B363FC6DC9E5330D809720C44654AE5 Authority key identifier: B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/UPKKwW9VJYZFBiA_WvIaqWPdF7s.roa Signing time: Thu 01 Jan 2026 20:18:31 +0000 ROA not before: Thu 01 Jan 2026 20:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50446 IP address blocks: 91.216.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.crl rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.mft rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:3f:c6:dc:9e:53:30:d8:09:72:0c:44:65:4a:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b14881fa3e75a3851cf70419135abdd529d2f682 Validity Not Before: Jan 1 20:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50f28ac16f5525864506203f5af21aa963dd17bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cb:f4:08:2b:9b:a2:1a:d2:7c:f7:51:f5:fc: 7f:bb:f8:8d:ba:63:d9:94:ee:6a:41:cf:c8:86:ad: de:88:2a:77:5d:07:60:c7:68:62:c6:10:88:3d:7f: 17:55:8f:55:31:02:d5:e7:75:72:98:f4:a2:a3:6d: 22:bc:41:dc:f4:71:f3:9f:a6:1d:8e:dc:5e:fb:79: d3:a3:5a:38:51:f2:64:d5:12:32:a3:59:68:8f:86: a2:40:5b:53:d8:1b:3e:9a:45:8e:7e:0a:f9:ca:73: 14:43:36:bc:79:a5:eb:b0:cf:7a:74:61:2b:7a:ac: 0a:97:d9:9c:f7:5f:8e:c7:cc:bb:90:c9:0b:1e:3a: 4d:1b:4b:3b:df:63:f8:be:b1:b6:c3:9d:ce:ff:6a: 63:d8:a5:b2:05:3a:ba:69:99:31:52:54:82:d7:54: 02:7f:22:75:8b:6a:aa:a1:8e:ee:64:d8:ca:d8:5d: 27:90:36:9d:ec:bb:d4:2c:bc:c5:2f:a3:aa:04:f2: d7:ec:26:e6:5b:06:46:09:91:06:13:50:66:5c:6f: 91:9f:83:24:cd:26:fb:9c:06:05:9e:a0:31:42:47: 9f:1f:33:15:d5:d4:03:d4:2f:63:aa:89:c1:8f:f5: 4b:07:70:ec:57:ec:0e:58:04:a1:30:a3:58:ad:cb: e8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F2:8A:C1:6F:55:25:86:45:06:20:3F:5A:F2:1A:A9:63:DD:17:BB X509v3 Authority Key Identifier: keyid:B1:48:81:FA:3E:75:A3:85:1C:F7:04:19:13:5A:BD:D5:29:D2:F6:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUiB-j51o4Uc9wQZE1q91SnS9oI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/UPKKwW9VJYZFBiA_WvIaqWPdF7s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/94c70a-fe1d-4420-9985-20f333c253ac/1/sUiB-j51o4Uc9wQZE1q91SnS9oI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.234.0/24 Signature Algorithm: sha256WithRSAEncryption ab:6b:07:2a:11:11:90:82:7c:53:c7:7e:c4:44:02:82:a8:32: 10:d5:8c:6c:a3:95:9f:81:ae:22:5c:af:cb:4f:5e:d6:43:17: 35:9c:b0:f3:0f:92:cf:53:c4:ad:fc:cd:ab:99:9d:cd:4a:42: b2:57:71:7a:d5:84:04:6d:0f:c0:fb:b7:48:f0:d1:34:e6:e1: 9f:e3:a2:a6:58:35:8e:3d:6d:41:e3:4b:f5:8c:cd:82:f3:0c: 73:12:f8:91:9e:16:01:c5:dd:37:bc:6b:35:c4:d3:66:b3:d4: 76:8f:c0:25:bb:64:f6:c0:74:9d:f1:d9:5d:58:94:5f:40:3e: 1b:34:68:7a:f0:68:bd:51:01:f6:34:3a:fe:b6:73:17:2d:ed: 67:24:a2:ef:6a:df:ab:ac:d2:a7:ed:bb:04:14:bb:ea:8e:e3: 58:09:8c:19:04:d4:b4:c4:b7:fc:23:63:a8:6f:1f:10:79:4c: e1:01:76:4e:42:f8:9b:6c:74:08:c5:51:26:d6:e4:ad:1b:fc: ab:d0:9c:27:6e:a7:ed:18:28:01:5b:84:7e:51:e4:4a:a6:cb: c1:4e:1d:8b:ae:7c:e9:9c:0f:93:7d:29:38:fc:06:08:d7:f9: ae:a5:f0:57:56:06:92:48:94:ef:bf:81:bc:2f:54:bd:42:9c: c9:15:a9:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nj/G3J5TMNgJcgxEZUrlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNDg4MWZhM2U3NWEzODUxY2Y3MDQxOTEzNWFiZGQ1Mjlk MmY2ODIwHhcNMjYwMTAxMjAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGYyOGFjMTZmNTUyNTg2NDUwNjIwM2Y1YWYyMWFhOTYzZGQxN2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocv0CCubohrSfPdR9fx/u/iNumPZ lO5qQc/Ihq3eiCp3XQdgx2hixhCIPX8XVY9VMQLV53VymPSio20ivEHc9HHzn6Yd jtxe+3nTo1o4UfJk1RIyo1loj4aiQFtT2Bs+mkWOfgr5ynMUQza8eaXrsM96dGEr eqwKl9mc91+Ox8y7kMkLHjpNG0s732P4vrG2w53O/2pj2KWyBTq6aZkxUlSC11QC fyJ1i2qqoY7uZNjK2F0nkDad7LvULLzFL6OqBPLX7CbmWwZGCZEGE1BmXG+Rn4Mk zSb7nAYFnqAxQkefHzMV1dQD1C9jqonBj/VLB3DsV+wOWAShMKNYrcvonwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFDyisFvVSWGRQYgP1ryGqlj3Re7MB8GA1UdIwQY MBaAFLFIgfo+daOFHPcEGRNavdUp0vaCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1VpQi1qNTFvNFVjOXdRWkUxcTkxU25TOW9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy85NGM3MGEtZmUxZC00NDIwLTk5ODUt MjBmMzMzYzI1M2FjLzEvVVBLS3dXOVZKWVpGQmlBX1d2SWFxV1BkRjdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy85NGM3MGEtZmUxZC00NDIwLTk5ODUtMjBmMzMzYzI1M2Fj LzEvc1VpQi1qNTFvNFVjOXdRWkUxcTkxU25TOW9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9jqMA0G CSqGSIb3DQEBCwUAA4IBAQCrawcqERGQgnxTx37ERAKCqDIQ1Yxso5Wfga4iXK/L T17WQxc1nLDzD5LPU8St/M2rmZ3NSkKyV3F61YQEbQ/A+7dI8NE05uGf46KmWDWO PW1B40v1jM2C8wxzEviRnhYBxd03vGs1xNNms9R2j8Alu2T2wHSd8dldWJRfQD4b NGh68Gi9UQH2NDr+tnMXLe1nJKLvat+rrNKn7bsEFLvqjuNYCYwZBNS0xLf8I2Oo bx8QeUzhAXZOQvibbHQIxVEm1uStG/yr0JwnbqftGCgBW4R+UeRKpsvBTh2Lrnzp nA+TfSk4/AYI1/mupfBXVgaSSJTvv4G8L1S9QpzJFamy -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:44 2026 by rpki-client