This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/uZDw5aQDg9kzqxAtzIUgqnOWO6w.roa File: uZDw5aQDg9kzqxAtzIUgqnOWO6w.roa (raw, json) Hash identifier: NhfmaZ0kw27eExE8ON4LLs4g9I2IN7wuuGVJMPmFM88= Subject key identifier: B9:90:F0:E5:A4:03:83:D9:33:AB:10:2D:CC:85:20:AA:73:96:3B:AC Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E7AA349D210E92747890071414086 Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/uZDw5aQDg9kzqxAtzIUgqnOWO6w.roa Signing time: Thu 01 Jan 2026 12:18:10 +0000 ROA not before: Thu 01 Jan 2026 12:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400909 IP address blocks: 91.226.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:7a:a3:49:d2:10:e9:27:47:89:00:71:41:40:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b990f0e5a40383d933ab102dcc8520aa73963bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b6:84:9f:d5:e5:ae:e8:3f:b2:72:e3:d7:04: 86:16:58:e2:b2:54:d2:eb:84:9c:ff:4e:05:c9:fc: 69:0b:a8:35:9b:79:41:1c:72:6e:14:10:db:cd:e6: ee:80:3c:9f:ae:40:9d:5e:42:75:4e:dc:09:d6:0d: cf:9b:01:a2:c2:56:1d:76:01:87:d6:36:ce:51:c7: 96:ef:3c:ed:a8:07:a4:50:ce:d4:1c:a0:9e:e0:2d: 3d:99:2a:a6:41:9e:a1:75:17:ff:12:df:ff:aa:0c: 89:68:41:3d:9a:64:a9:fd:a8:15:b9:56:b4:92:fc: 4d:6a:59:60:94:8a:d6:2c:8b:6e:2b:0b:0b:cb:6e: ba:56:5c:c8:ba:e6:c1:7f:13:95:40:3f:a7:f8:c7: f5:7e:17:5c:13:df:b0:b2:bf:40:c3:7c:fd:08:e0: c0:c6:e2:ce:41:86:d7:c6:ce:6d:a5:4c:60:09:81: 98:4a:26:da:8e:ba:15:7c:21:0c:71:58:27:99:61: 95:ac:47:7a:05:7d:db:af:fb:93:88:fa:51:96:db: 79:b0:a1:77:23:28:fc:68:81:3c:06:73:a9:e9:2e: 0a:f6:b5:8e:05:7b:86:f4:dd:c2:77:d7:86:63:85: df:9c:93:d6:25:31:e7:66:6d:b8:ee:05:24:43:e8: 7f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:90:F0:E5:A4:03:83:D9:33:AB:10:2D:CC:85:20:AA:73:96:3B:AC X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/uZDw5aQDg9kzqxAtzIUgqnOWO6w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.59.0/24 Signature Algorithm: sha256WithRSAEncryption 21:29:aa:34:7e:6e:9a:6c:e6:bc:30:07:69:62:2b:6f:da:fd: 07:9f:a6:02:60:e2:f8:1a:f1:96:6a:8e:5a:a5:e5:17:a0:67: 7d:ee:d2:59:69:df:a6:16:e3:4b:69:d9:4c:d8:47:aa:a6:87: d6:6f:00:83:05:37:f7:e1:2a:04:f2:28:e0:80:30:5c:81:27: 01:fa:fa:c6:66:10:09:29:d0:dd:be:94:ec:65:9e:b7:0f:64: e8:ec:b4:e1:dc:ec:dc:2a:c8:9e:cc:69:c3:fc:b4:fb:52:b6: 1d:85:a1:05:17:cc:5c:92:0b:c5:22:15:3b:69:46:15:8c:ff: da:4d:c5:2f:c4:20:f0:6f:f0:5b:cd:f5:7e:33:d3:49:4e:b5: 33:f7:b9:0a:fa:2a:d0:81:53:bd:96:91:c2:ee:ab:2f:8a:be: c5:d5:39:eb:6a:57:2b:65:57:4a:f8:95:61:b8:4d:5a:5a:09: c4:0e:07:60:bc:49:fe:eb:93:58:df:41:f1:78:58:06:18:a7: 1b:ed:11:a1:02:8f:00:65:2c:4c:12:e2:6e:07:c6:74:cc:f0: 85:33:27:43:f0:76:53:82:52:76:b6:cf:6b:f4:85:c2:9f:01: 3c:b2:b4:59:a3:96:46:01:eb:b5:c8:31:b6:ba:a7:95:ec:97: 86:8f:76:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fnqjSdIQ6SdHiQBxQUCGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTkwZjBlNWE0MDM4M2Q5MzNhYjEwMmRjYzg1MjBhYTczOTYzYmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7aEn9Xlrug/snLj1wSGFljislTS 64Sc/04FyfxpC6g1m3lBHHJuFBDbzebugDyfrkCdXkJ1TtwJ1g3PmwGiwlYddgGH 1jbOUceW7zztqAekUM7UHKCe4C09mSqmQZ6hdRf/Et//qgyJaEE9mmSp/agVuVa0 kvxNallglIrWLItuKwsLy266VlzIuubBfxOVQD+n+Mf1fhdcE9+wsr9Aw3z9CODA xuLOQYbXxs5tpUxgCYGYSibajroVfCEMcVgnmWGVrEd6BX3br/uTiPpRltt5sKF3 Iyj8aIE8BnOp6S4K9rWOBXuG9N3Cd9eGY4XfnJPWJTHnZm247gUkQ+h/gwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLmQ8OWkA4PZM6sQLcyFIKpzljusMB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvdVpEdzVhUURnOWt6cXhBdHpJVWdxbk9XTzZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+I7MA0G CSqGSIb3DQEBCwUAA4IBAQAhKao0fm6abOa8MAdpYitv2v0Hn6YCYOL4GvGWao5a peUXoGd97tJZad+mFuNLadlM2EeqpofWbwCDBTf34SoE8ijggDBcgScB+vrGZhAJ KdDdvpTsZZ63D2To7LTh3OzcKsiezGnD/LT7UrYdhaEFF8xckgvFIhU7aUYVjP/a TcUvxCDwb/BbzfV+M9NJTrUz97kK+irQgVO9lpHC7qsvir7F1TnralcrZVdK+JVh uE1aWgnEDgdgvEn+65NY30HxeFgGGKcb7RGhAo8AZSxMEuJuB8Z0zPCFMydD8HZT glJ2ts9r9IXCnwE8srRZo5ZGAeu1yDG2uqeV7JeGj3aV -----END CERTIFICATE-----Generated at Mon Jan 19 13:55:13 2026 by rpki-client