This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/UyXWOKZgr3NN-YhGS4EIbY2nlzM.roa File: UyXWOKZgr3NN-YhGS4EIbY2nlzM.roa (raw, json) Hash identifier: u8Lz+OMpL7uMnk70SSgAWA/PF3q3DhuMeEPRqfdVsHE= Subject key identifier: 53:25:D6:38:A6:60:AF:73:4D:F9:88:46:4B:81:08:6D:8D:A7:97:33 Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 019B7EA6EBCCBE14321964B2FDC5436DDD7D Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/UyXWOKZgr3NN-YhGS4EIbY2nlzM.roa Signing time: Fri 02 Jan 2026 12:20:27 +0000 ROA not before: Fri 02 Jan 2026 12:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21859 IP address blocks: 89.23.66.0/24 maxlen: 24 178.254.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:eb:cc:be:14:32:19:64:b2:fd:c5:43:6d:dd:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Jan 2 12:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5325d638a660af734df988464b81086d8da79733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:53:3c:49:7d:41:e7:c7:39:a9:3e:c3:15:4a: f7:96:21:d6:33:17:5a:b9:3d:89:0c:03:57:bf:a9: 48:af:5c:e3:5d:01:9a:a3:42:d9:19:31:23:ad:1a: 1f:7b:62:ea:a2:54:26:ba:8c:9e:88:ef:16:2d:e6: 3d:04:38:0d:a0:06:21:49:c3:eb:2d:76:09:ad:52: 86:f9:41:52:6d:d4:6c:0d:7c:0c:aa:0e:18:68:1f: 53:e2:4e:4c:a7:d3:18:7a:49:5d:70:5d:b0:d4:a6: 66:ce:70:40:0c:e0:a1:18:f6:99:54:c1:56:1e:05: 9c:bb:bf:68:a3:f2:19:fc:40:a3:5f:b3:5e:50:2e: b3:fe:c6:c7:a3:ed:45:1c:31:b4:6d:df:bc:ba:2e: f7:c5:9e:d9:37:ff:0a:a8:46:3c:58:85:f9:41:42: 49:9c:6f:03:30:73:48:b4:32:93:a6:30:0c:ae:79: 81:b9:c6:85:88:af:3d:17:98:ca:c2:c2:73:be:c7: fd:2c:af:b1:9c:23:02:2f:f2:9f:cf:55:cd:e3:a0: ab:8d:91:07:ec:2f:0d:e1:d2:51:e4:e1:2e:dc:9f: ba:4d:8f:ef:b7:eb:8a:43:b8:d2:9c:02:e9:40:31: 78:bc:89:02:46:ca:d5:92:6e:2e:6c:2c:cd:25:45: 55:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:25:D6:38:A6:60:AF:73:4D:F9:88:46:4B:81:08:6D:8D:A7:97:33 X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/UyXWOKZgr3NN-YhGS4EIbY2nlzM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.23.66.0/24 178.254.181.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:aa:4c:ee:7f:ef:8a:c6:97:b3:df:45:20:a2:1b:39:b9:cd: e7:61:c3:81:b3:6f:07:44:b7:98:80:e7:fe:cb:59:9d:99:1b: 19:e1:0a:32:ef:f3:de:c3:2b:2d:cd:f1:90:c6:17:cb:4c:79: d3:c7:b1:f8:cd:8e:51:ba:fd:a8:99:d9:9d:24:e2:67:b0:ab: 91:fe:21:76:a3:9a:d9:a5:bb:a3:83:54:cb:b8:be:c3:93:16: e1:16:b4:90:a1:36:b5:b1:9a:64:f3:46:de:24:eb:3f:b2:40: 88:01:e1:fd:7e:db:d0:f2:fe:10:56:6b:a4:d8:b4:ef:54:df: 1b:01:be:c3:63:a9:cb:26:e6:18:6a:5b:64:de:90:48:d9:f5: 11:fd:13:8e:f9:f6:fc:f1:b6:35:75:76:c6:4a:9d:01:e1:c9: c5:ff:98:07:3e:6d:03:0d:3a:e2:9b:3c:89:7b:ad:7e:ce:3c: a6:a1:69:de:ed:93:16:e5:99:bc:ab:c1:c3:cc:11:a9:44:78: e3:8d:92:a8:f4:5f:09:6e:7b:a8:b6:f1:c0:94:6f:87:eb:95: ff:65:e1:e0:19:ef:7d:7d:5b:2b:00:bf:f5:c4:39:32:d9:25: 34:8e:f1:d7:de:9c:7c:5a:2f:6f:13:4c:a6:1b:83:ed:e8:19: f1:f0:23:45 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+puvMvhQyGWSy/cVDbd19MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjYwMTAyMTIyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzI1ZDYzOGE2NjBhZjczNGRmOTg4NDY0YjgxMDg2ZDhkYTc5NzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VM8SX1B58c5qT7DFUr3liHWMxda uT2JDANXv6lIr1zjXQGao0LZGTEjrRofe2LqolQmuoyeiO8WLeY9BDgNoAYhScPr LXYJrVKG+UFSbdRsDXwMqg4YaB9T4k5Mp9MYekldcF2w1KZmznBADOChGPaZVMFW HgWcu79oo/IZ/ECjX7NeUC6z/sbHo+1FHDG0bd+8ui73xZ7ZN/8KqEY8WIX5QUJJ nG8DMHNItDKTpjAMrnmBucaFiK89F5jKwsJzvsf9LK+xnCMCL/Kfz1XN46CrjZEH 7C8N4dJR5OEu3J+6TY/vt+uKQ7jSnALpQDF4vIkCRsrVkm4ubCzNJUVVqwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFMl1jimYK9zTfmIRkuBCG2Np5czMB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvVXlYV09LWmdyM05OLVloR1M0RUliWTJubHpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWRdCAwQA sv61MA0GCSqGSIb3DQEBCwUAA4IBAQBKqkzuf++Kxpez30Ugohs5uc3nYcOBs28H RLeYgOf+y1mdmRsZ4Qoy7/PewystzfGQxhfLTHnTx7H4zY5Ruv2omdmdJOJnsKuR /iF2o5rZpbujg1TLuL7DkxbhFrSQoTa1sZpk80beJOs/skCIAeH9ftvQ8v4QVmuk 2LTvVN8bAb7DY6nLJuYYaltk3pBI2fUR/ROO+fb88bY1dXbGSp0B4cnF/5gHPm0D DTrimzyJe61+zjymoWne7ZMW5Zm8q8HDzBGpRHjjjZKo9F8JbnuotvHAlG+H65X/ ZeHgGe99fVsrAL/1xDky2SU0jvHX3px8Wi9vE0ymG4Pt6Bnx8CNF -----END CERTIFICATE-----Generated at Thu Jan 8 17:25:52 2026 by rpki-client