This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/uDzu64m1ZPD4co3ETwziJWE95lo.roa File: uDzu64m1ZPD4co3ETwziJWE95lo.roa (raw, json) Hash identifier: xvTvJ4HerqZfilmLig7DuXnycU4OZ2peduUMg7vJfqg= Subject key identifier: B8:3C:EE:EB:89:B5:64:F0:F8:72:8D:C4:4F:0C:E2:25:61:3D:E6:5A Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Certificate serial: 019B92344A916F58CCEA7DD3156392AAF7DF Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/uDzu64m1ZPD4co3ETwziJWE95lo.roa Signing time: Tue 06 Jan 2026 07:27:39 +0000 ROA not before: Tue 06 Jan 2026 07:27:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137235 IP address blocks: 91.221.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:92:34:4a:91:6f:58:cc:ea:7d:d3:15:63:92:aa:f7:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Validity Not Before: Jan 6 07:27:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b83ceeeb89b564f0f8728dc44f0ce225613de65a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bf:7d:5e:d8:40:e7:84:29:34:bb:13:6e:2b: 76:b6:66:99:91:89:df:83:14:f0:54:7e:77:69:cc: ec:17:30:21:d6:b3:18:ab:e8:aa:02:e9:48:a6:20: f7:ca:cd:13:82:53:a7:84:55:f5:36:5b:f3:40:8e: 54:ea:f3:17:1c:15:0d:30:cf:93:03:ed:13:ef:8f: 55:69:a5:3e:d8:cd:e1:7b:9b:7b:22:66:2d:6b:06: c7:4c:c0:74:19:e2:da:62:b8:4d:59:cf:e2:0e:46: 72:1a:35:f0:37:c5:2b:2e:5c:20:0b:55:c7:2e:e1: 1b:d4:bd:a0:f9:ca:71:0b:51:98:98:b5:c7:06:d3: e4:36:66:d0:fa:ec:a3:41:95:eb:c6:3d:9b:86:fd: de:4f:1f:10:28:95:be:ce:19:64:64:be:1c:df:91: 01:b2:de:1f:22:cc:f8:d7:bc:8c:b1:87:52:47:4a: 7a:02:b3:d9:62:21:79:66:2a:d2:71:a2:32:f3:9b: 85:ee:e8:71:1a:68:04:29:c3:6a:68:c3:88:8d:77: 2e:75:a8:77:b5:c9:58:d5:42:5c:1f:b2:1a:11:16: 7c:f3:45:f5:fa:f3:5c:26:7b:54:44:8e:70:b3:6a: 3f:6a:b1:d8:1c:c9:93:36:67:c8:33:c4:f3:b7:97: 0e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3C:EE:EB:89:B5:64:F0:F8:72:8D:C4:4F:0C:E2:25:61:3D:E6:5A X509v3 Authority Key Identifier: keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/uDzu64m1ZPD4co3ETwziJWE95lo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.221.117.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:b1:40:4d:e2:8c:37:82:ee:b0:61:86:cd:19:46:7f:27:46: bb:7f:a5:ee:6f:46:8c:a5:93:5e:b3:a7:04:c4:d0:6a:01:12: de:27:97:cd:7a:92:72:66:d2:ca:79:1f:5f:b1:ae:f5:48:81: a9:c8:32:8c:c4:30:2d:20:29:6c:37:d6:77:6c:62:78:c4:7f: 28:03:11:28:c0:eb:50:93:d1:12:1f:5b:c8:b0:58:8b:01:ee: ab:22:6e:c6:a7:f0:f8:27:48:d3:ac:88:61:84:c2:49:b7:5c: bc:10:3d:66:bc:78:16:c6:5b:59:7e:f5:a9:0e:55:7f:76:b0: 01:98:dc:8d:2c:c6:21:12:80:5e:53:65:fc:49:b7:d1:b0:43: 26:6e:2b:87:ef:a1:1a:52:c0:63:a7:67:a9:c1:d0:cc:a5:69: 27:6f:c3:77:e9:fd:6c:c1:82:d5:e1:0a:12:8b:37:ac:a4:27: f1:0f:2c:5a:67:15:a4:9f:42:2c:ad:da:84:a3:a9:3a:68:85: 94:b7:9b:83:84:0a:cf:a1:33:73:57:c0:6a:c8:2f:b6:f6:36: 44:4e:b1:86:5f:72:ea:30:50:70:d1:fb:33:8b:85:92:79:72: 04:6a:5f:2b:0b:07:f2:4a:89:09:4a:21:26:f4:b6:69:c3:97: 54:25:c8:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuSNEqRb1jM6n3TFWOSqvffMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl MmExY2EwHhcNMjYwMTA2MDcyNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODNjZWVlYjg5YjU2NGYwZjg3MjhkYzQ0ZjBjZTIyNTYxM2RlNjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyL99XthA54QpNLsTbit2tmaZkYnf gxTwVH53aczsFzAh1rMYq+iqAulIpiD3ys0TglOnhFX1NlvzQI5U6vMXHBUNMM+T A+0T749VaaU+2M3he5t7ImYtawbHTMB0GeLaYrhNWc/iDkZyGjXwN8UrLlwgC1XH LuEb1L2g+cpxC1GYmLXHBtPkNmbQ+uyjQZXrxj2bhv3eTx8QKJW+zhlkZL4c35EB st4fIsz417yMsYdSR0p6ArPZYiF5ZirScaIy85uF7uhxGmgEKcNqaMOIjXcudah3 tclY1UJcH7IaERZ880X1+vNcJntURI5ws2o/arHYHMmTNmfIM8Tzt5cOZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLg87uuJtWTw+HKNxE8M4iVhPeZaMB8GA1UdIwQY MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt YTZjYTQ1NGRiMmQ3LzEvdUR6dTY0bTFaUEQ0Y28zRVR3emlKV0U5NWxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3 LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW911MA0G CSqGSIb3DQEBCwUAA4IBAQCcsUBN4ow3gu6wYYbNGUZ/J0a7f6Xub0aMpZNes6cE xNBqARLeJ5fNepJyZtLKeR9fsa71SIGpyDKMxDAtIClsN9Z3bGJ4xH8oAxEowOtQ k9ESH1vIsFiLAe6rIm7Gp/D4J0jTrIhhhMJJt1y8ED1mvHgWxltZfvWpDlV/drAB mNyNLMYhEoBeU2X8SbfRsEMmbiuH76EaUsBjp2epwdDMpWknb8N36f1swYLV4QoS izespCfxDyxaZxWkn0IsrdqEo6k6aIWUt5uDhArPoTNzV8BqyC+29jZETrGGX3Lq MFBw0fszi4WSeXIEal8rCwfySokJSiEm9LZpw5dUJcif -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:49 2026 by rpki-client