This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/UWFOafME42L6O6C8tCsylQ1qM5Y.roa File: UWFOafME42L6O6C8tCsylQ1qM5Y.roa (raw, json) Hash identifier: kTp8dPuulE0KVt0WY/U+hGiw2jKgDTK8kmDYSbikY3M= Subject key identifier: 51:61:4E:69:F3:04:E3:62:FA:3B:A0:BC:B4:2B:32:95:0D:6A:33:96 Certificate issuer: /CN=15fdb088e98e4e6415d944142212448369005b48 Certificate serial: 019B7F8260EDF46E3BFE9BA7AB871B3FA364 Authority key identifier: 15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/UWFOafME42L6O6C8tCsylQ1qM5Y.roa Signing time: Fri 02 Jan 2026 16:20:09 +0000 ROA not before: Fri 02 Jan 2026 16:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395793 IP address blocks: 195.248.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:60:ed:f4:6e:3b:fe:9b:a7:ab:87:1b:3f:a3:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15fdb088e98e4e6415d944142212448369005b48 Validity Not Before: Jan 2 16:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51614e69f304e362fa3ba0bcb42b32950d6a3396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:72:58:52:b6:13:6b:5f:c3:86:41:14:2a:d0: 2e:55:2f:9c:fb:d9:67:99:fd:64:05:2a:3a:57:45: 79:2d:f5:3a:11:bd:ad:12:99:37:1c:9b:16:98:aa: 09:18:e8:74:50:e8:f1:b9:b2:e9:00:89:9b:0c:72: 51:2d:c6:d8:51:6d:5e:e7:f8:6d:47:de:0c:39:e2: 5e:0d:0e:2a:23:5d:d4:46:ea:b9:ad:b5:b3:48:a7: 66:55:92:1d:92:81:eb:27:19:eb:dc:9c:e1:78:d1: 2d:b4:ae:2d:29:ec:24:2d:bf:c8:f0:26:18:00:f8: b0:dc:cb:88:0d:e7:75:b4:2a:15:2e:57:09:f9:f9: 64:31:1d:54:10:c4:2e:ea:94:10:c4:06:11:f3:f8: 73:e3:69:ae:f9:66:21:55:43:77:32:1e:b6:18:76: b7:93:0e:8e:e1:41:ff:c4:e9:1e:0a:d6:34:63:4c: 2c:04:ad:c4:e5:b1:a6:c4:a7:68:7a:fc:29:4a:7d: 46:c2:11:4a:1e:5e:72:1f:55:43:00:84:fb:7a:8b: 44:53:2b:61:51:7b:ce:47:72:a0:d8:2f:ee:8d:fe: ab:0a:a4:c5:c9:a5:f5:62:06:e4:2b:be:28:84:dc: b6:ff:0c:e5:df:da:e9:b4:7a:fc:db:b4:39:90:df: c2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:61:4E:69:F3:04:E3:62:FA:3B:A0:BC:B4:2B:32:95:0D:6A:33:96 X509v3 Authority Key Identifier: keyid:15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/UWFOafME42L6O6C8tCsylQ1qM5Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.248.78.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:48:fa:b4:85:c8:4a:63:a0:d0:f5:52:95:dd:40:e0:14:d6: 02:fe:78:aa:01:51:e9:c1:2d:18:68:22:0f:94:d3:a7:49:85: 62:24:76:21:3f:1f:4b:c1:1d:e5:5e:aa:d4:65:0f:ac:99:fc: 84:fc:32:24:ee:8c:80:8f:74:ef:e2:ea:2a:fd:75:41:c6:28: 3c:68:42:06:81:47:a9:45:44:dc:9a:98:39:93:2e:7e:09:78: 5d:17:ef:2d:41:1e:1f:ae:61:21:ef:03:b6:87:4a:d2:eb:f8: d5:24:f3:bb:ad:64:58:9e:1a:48:5a:ac:c5:05:d0:b3:56:83: f7:ed:3c:04:21:6f:22:34:39:12:8f:a5:e4:fe:c7:d1:40:58: 25:6a:3a:78:a9:2c:32:f3:9f:9c:6f:ee:2e:3b:30:f9:75:92: 2e:e7:34:28:61:e8:6e:8b:b4:20:ed:c2:01:2f:1a:9c:40:1d: 08:63:6c:42:bb:fe:c6:ac:56:0e:35:09:5c:9a:40:8e:cd:3a: 8a:7f:65:8b:27:18:3a:d5:5e:f8:70:7b:3c:8a:99:fa:83:b9: f8:26:02:f9:fa:c8:d0:58:65:55:9a:88:df:5d:6d:ca:18:2a: f2:07:3e:c5:93:de:73:d4:aa:3e:23:9b:27:ec:a0:a6:5d:84: d9:67:b5:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gmDt9G47/punq4cbP6NkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZmRiMDg4ZTk4ZTRlNjQxNWQ5NDQxNDIyMTI0NDgzNjkw MDViNDgwHhcNMjYwMTAyMTYyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTYxNGU2OWYzMDRlMzYyZmEzYmEwYmNiNDJiMzI5NTBkNmEzMzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63JYUrYTa1/DhkEUKtAuVS+c+9ln mf1kBSo6V0V5LfU6Eb2tEpk3HJsWmKoJGOh0UOjxubLpAImbDHJRLcbYUW1e5/ht R94MOeJeDQ4qI13URuq5rbWzSKdmVZIdkoHrJxnr3JzheNEttK4tKewkLb/I8CYY APiw3MuIDed1tCoVLlcJ+flkMR1UEMQu6pQQxAYR8/hz42mu+WYhVUN3Mh62GHa3 kw6O4UH/xOkeCtY0Y0wsBK3E5bGmxKdoevwpSn1GwhFKHl5yH1VDAIT7eotEUyth UXvOR3Kg2C/ujf6rCqTFyaX1YgbkK74ohNy2/wzl39rptHr827Q5kN/CYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFFhTmnzBONi+jugvLQrMpUNajOWMB8GA1UdIwQY MBaAFBX9sIjpjk5kFdlEFCISRINpAFtIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmYyd2lPbU9UbVFWMlVRVUloSkVnMmtBVzBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jYjg3N2MtMTY5OS00NGI5LTlkYzUt MmY2M2FiNDZmMzFjLzEvVVdGT2FmTUU0Mkw2TzZDOHRDc3lsUTFxTTVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9jYjg3N2MtMTY5OS00NGI5LTlkYzUtMmY2M2FiNDZmMzFj LzEvRmYyd2lPbU9UbVFWMlVRVUloSkVnMmtBVzBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/hOMA0G CSqGSIb3DQEBCwUAA4IBAQBtSPq0hchKY6DQ9VKV3UDgFNYC/niqAVHpwS0YaCIP lNOnSYViJHYhPx9LwR3lXqrUZQ+smfyE/DIk7oyAj3Tv4uoq/XVBxig8aEIGgUep RUTcmpg5ky5+CXhdF+8tQR4frmEh7wO2h0rS6/jVJPO7rWRYnhpIWqzFBdCzVoP3 7TwEIW8iNDkSj6Xk/sfRQFglajp4qSwy85+cb+4uOzD5dZIu5zQoYehui7Qg7cIB LxqcQB0IY2xCu/7GrFYONQlcmkCOzTqKf2WLJxg61V74cHs8ipn6g7n4JgL5+sjQ WGVVmojfXW3KGCryBz7Fk95z1Ko+I5sn7KCmXYTZZ7Xf -----END CERTIFICATE-----Generated at Sun Jan 18 04:10:03 2026 by rpki-client