This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/_ugkR7EVVfxByxX4xFuzJ-ICxnM.roa File: _ugkR7EVVfxByxX4xFuzJ-ICxnM.roa (raw, json) Hash identifier: k76p+M7xU4ZojZboTeMRkkpRvcXvQeBc65zI5mAjkww= Subject key identifier: FE:E8:24:47:B1:15:55:FC:41:CB:15:F8:C4:5B:B3:27:E2:02:C6:73 Certificate issuer: /CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01 Certificate serial: 019B7F15290FA4C817DEB69237DD369101BB Authority key identifier: CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/_ugkR7EVVfxByxX4xFuzJ-ICxnM.roa Signing time: Fri 02 Jan 2026 14:20:51 +0000 ROA not before: Fri 02 Jan 2026 14:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13005 IP address blocks: 85.113.68.0/23 maxlen: 32 213.170.128.0/22 maxlen: 32 213.170.132.0/24 maxlen: 32 213.170.134.0/24 maxlen: 32 213.170.136.0/22 maxlen: 32 213.170.140.0/24 maxlen: 32 213.170.144.0/24 maxlen: 32 213.170.147.0/24 maxlen: 32 213.170.148.0/23 maxlen: 32 213.170.150.0/24 maxlen: 32 213.170.152.0/23 maxlen: 32 213.170.154.0/24 maxlen: 32 2001:be0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:29:0f:a4:c8:17:de:b6:92:37:dd:36:91:01:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01 Validity Not Before: Jan 2 14:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fee82447b11555fc41cb15f8c45bb327e202c673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:22:02:14:9d:b8:53:8e:a0:dc:d8:d2:f4:18: 5e:17:a0:3d:52:60:cc:42:77:4c:9a:dd:fd:44:cf: 37:56:c7:d7:5e:37:1c:99:32:02:96:f1:49:39:a8: 7b:b8:59:5a:02:88:52:bb:7d:16:a3:34:b4:5e:03: 35:be:d2:f1:b9:9a:1c:03:3b:7d:b1:f6:56:8f:a0: aa:11:d5:81:c0:9d:b6:09:ae:53:8c:98:7f:f6:f5: e3:3c:07:e3:70:4c:ba:33:1b:24:78:3b:d3:10:a8: 0b:3c:e0:d8:3d:70:fc:d0:7d:ae:6e:36:82:11:d0: 62:e9:31:ca:c7:5c:18:8f:47:da:2c:d9:fd:f1:df: 47:e5:d8:ca:ba:0c:3d:d0:97:8a:1a:31:52:ac:b4: 33:2f:7e:a9:08:96:dd:5e:61:81:0f:e0:23:65:12: fe:cb:73:5f:61:e9:1f:fa:3a:fd:9a:ed:74:69:f2: 4c:98:d3:3f:61:0d:8d:16:93:8c:34:c8:6f:6d:42: 9d:d1:ec:f7:05:92:22:06:20:53:e0:6f:b4:c0:2a: c1:1d:fb:7d:64:38:78:db:30:7c:52:03:bc:c2:9c: c9:97:fd:41:e1:24:d7:6b:96:32:1e:b5:4d:cc:1b: d5:1e:c9:9f:a1:ef:df:54:3a:c6:e2:a8:f9:ec:dc: d9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E8:24:47:B1:15:55:FC:41:CB:15:F8:C4:5B:B3:27:E2:02:C6:73 X509v3 Authority Key Identifier: keyid:CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/_ugkR7EVVfxByxX4xFuzJ-ICxnM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.113.68.0/23 213.170.128.0-213.170.132.255 213.170.134.0/24 213.170.136.0-213.170.140.255 213.170.144.0/24 213.170.147.0-213.170.150.255 213.170.152.0-213.170.154.255 IPv6: 2001:be0::/32 Signature Algorithm: sha256WithRSAEncryption b4:4e:09:f8:db:23:db:81:31:d9:c4:6e:b1:ea:18:5d:a4:f9: c8:e7:0b:e8:80:6b:8e:e8:73:25:74:55:a2:b7:68:9c:a3:1c: b4:c2:f1:8b:b5:07:03:b8:cc:91:05:39:5d:d4:b0:74:c0:5d: 6b:71:3a:d9:91:0d:b1:24:fc:f1:63:0f:1d:c2:f4:7a:82:5c: 45:cb:89:c4:7b:fe:84:40:02:23:2a:6f:c7:38:24:8e:89:58: 21:98:fb:03:b1:c7:4d:57:67:39:ac:24:e6:e7:72:3a:7f:00: 47:12:58:8b:4d:e0:3b:b7:26:a7:ee:c8:10:d1:55:d0:98:96: 2e:05:a8:ec:d9:19:4f:7e:8a:9b:da:b4:f7:69:17:ec:ab:9e: d9:0e:c0:a0:d0:8c:0e:b9:8a:3c:e6:3d:81:ba:a7:b4:ce:3e: fd:2f:42:5b:4d:fe:e8:5a:8d:34:1f:72:0a:ab:30:dd:c2:63: e8:bd:37:f2:78:56:32:9e:bd:08:03:fc:66:e4:3f:0e:81:43: 0b:53:42:7f:95:65:c7:23:d5:ea:34:e7:c6:aa:0a:37:77:d9: 23:84:22:67:87:a4:20:0c:76:b2:16:36:1f:fb:7b:a3:88:77: c7:97:04:01:86:6d:13:fb:15:18:54:d7:53:14:8f:e8:6e:da: 00:3f:62:30 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgISAZt/FSkPpMgX3raSN902kQG7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlOTEzNWRmZWQwYmI2MzM1ZDE5ZGRkNmQ3ZTk5ZjQ4YWZi ZTNjMDEwHhcNMjYwMTAyMTQyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWU4MjQ0N2IxMTU1NWZjNDFjYjE1ZjhjNDViYjMyN2UyMDJjNjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSICFJ24U46g3NjS9BheF6A9UmDM QndMmt39RM83VsfXXjccmTIClvFJOah7uFlaAohSu30WozS0XgM1vtLxuZocAzt9 sfZWj6CqEdWBwJ22Ca5TjJh/9vXjPAfjcEy6MxskeDvTEKgLPODYPXD80H2ubjaC EdBi6THKx1wYj0faLNn98d9H5djKugw90JeKGjFSrLQzL36pCJbdXmGBD+AjZRL+ y3NfYekf+jr9mu10afJMmNM/YQ2NFpOMNMhvbUKd0ez3BZIiBiBT4G+0wCrBHft9 ZDh42zB8UgO8wpzJl/1B4STXa5YyHrVNzBvVHsmfoe/fVDrG4qj57NzZRwIDAQAB o4ICXDCCAlgwHQYDVR0OBBYEFP7oJEexFVX8QcsV+MRbsyfiAsZzMB8GA1UdIwQY MBaAFM6RNd/tC7YzXRnd1tfpn0ivvjwBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenBFMTMtMEx0ak5kR2QzVzEtbWZTSy0tUEFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8zYzljM2MtZDYwOC00ZWEyLTlhMjgt YzExZWM2ZWE4NmI4LzEvX3Vna1I3RVZWZnhCeXhYNHhGdXpKLUlDeG5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8zYzljM2MtZDYwOC00ZWEyLTlhMjgtYzExZWM2ZWE4NmI4 LzEvenBFMTMtMEx0ak5kR2QzVzEtbWZTSy0tUEFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHIGCCsGAQUFBwEHAQH/BGMwYTBQBAIAATBKAwQBVXFEMAwD BAfVqoADBADVqoQDBADVqoYwDAMEA9WqiAMEANWqjAMEANWqkDAMAwQA1aqTAwQA 1aqWMAwDBAPVqpgDBADVqpowDQQCAAIwBwMFACABC+AwDQYJKoZIhvcNAQELBQAD ggEBALROCfjbI9uBMdnEbrHqGF2k+cjnC+iAa47ocyV0VaK3aJyjHLTC8Yu1BwO4 zJEFOV3UsHTAXWtxOtmRDbEk/PFjDx3C9HqCXEXLicR7/oRAAiMqb8c4JI6JWCGY +wOxx01XZzmsJObncjp/AEcSWItN4Du3JqfuyBDRVdCYli4FqOzZGU9+ipvatPdp F+yrntkOwKDQjA65ijzmPYG6p7TOPv0vQltN/uhajTQfcgqrMN3CY+i9N/J4VjKe vQgD/GbkPw6BQwtTQn+VZccj1eo058aqCjd32SOEImeHpCAMdrIWNh/7e6OId8eX BAGGbRP7FRhU11MUj+hu2gA/YjA= -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:25 2026 by rpki-client