This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/u599xzfE-EX9olnz8cBJD6oZ2j8.roa File: u599xzfE-EX9olnz8cBJD6oZ2j8.roa (raw, json) Hash identifier: rUizvq/CWTmc6UMWj8ItfZ7+jtqd5XX0DhV70/3vEUA= Subject key identifier: BB:9F:7D:C7:37:C4:F8:45:FD:A2:59:F3:F1:C0:49:0F:AA:19:DA:3F Certificate issuer: /CN=4728eba001359cdd418346f651c0a187c89fbabf Certificate serial: 019B7758C64B4FD694400334362AD9372DA3 Authority key identifier: 47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/u599xzfE-EX9olnz8cBJD6oZ2j8.roa Signing time: Thu 01 Jan 2026 02:17:45 +0000 ROA not before: Thu 01 Jan 2026 02:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48613 IP address blocks: 91.233.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c6:4b:4f:d6:94:40:03:34:36:2a:d9:37:2d:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4728eba001359cdd418346f651c0a187c89fbabf Validity Not Before: Jan 1 02:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb9f7dc737c4f845fda259f3f1c0490faa19da3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e4:18:87:9d:4f:8c:3a:8c:3e:b4:1b:ed:5c: 2b:3e:5f:31:ac:d4:8d:cd:d2:77:0d:b0:ab:80:3c: 29:1a:58:5d:7f:ee:cb:33:89:aa:a5:c5:84:cc:c9: 7e:cc:0f:dc:3e:0c:ac:4a:45:8b:ff:ad:ee:02:ce: 05:8c:fc:73:2c:77:0c:44:07:f9:9a:bf:b2:ae:4f: 2a:14:cc:4b:96:5d:af:58:ae:df:84:ac:39:dc:15: 18:88:07:cf:06:77:56:c4:df:64:29:e3:08:b6:74: 3a:b9:99:d1:a7:3f:a5:13:8e:b9:e0:1a:c3:95:f3: 48:01:c1:7b:68:7d:ea:cd:46:23:d4:6d:78:9b:5d: 6a:a6:56:d9:8e:b1:8f:3b:8b:cc:15:44:ec:a7:87: 59:38:12:1a:3e:38:05:ae:af:f6:0b:22:a0:31:f3: 08:fa:ff:11:b6:eb:6e:9e:e1:02:df:a3:98:8b:72: 30:f5:c2:af:5f:e9:bd:5d:2f:ba:5c:92:cb:16:b5: c8:73:51:3d:1a:90:54:de:e8:d8:b4:09:4b:8e:57: 47:ec:b6:ed:09:2e:dc:c4:64:d8:05:39:4a:e7:ae: df:58:e0:b4:b1:f6:fc:da:9d:a8:65:bf:c9:96:08: 3f:1a:8a:50:92:db:fb:c2:53:98:e3:0d:78:70:45: d3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:9F:7D:C7:37:C4:F8:45:FD:A2:59:F3:F1:C0:49:0F:AA:19:DA:3F X509v3 Authority Key Identifier: keyid:47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/u599xzfE-EX9olnz8cBJD6oZ2j8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.233.51.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:e9:ad:35:47:62:b6:ba:c7:c1:6a:d0:57:94:e6:90:45:6a: aa:21:0d:e6:19:b3:de:a5:c4:45:d2:5d:aa:6d:25:f9:1f:cc: 6f:d2:23:98:e7:c4:d2:51:9a:c7:6a:1a:01:02:3f:08:18:c8: d6:49:a7:3e:89:6d:98:15:0c:87:b7:f4:1b:38:37:90:4a:cd: cf:c2:36:49:3b:df:35:2e:2b:49:46:0b:40:31:7c:27:db:4d: 18:85:99:4b:b7:b3:ea:b8:53:3f:fe:15:34:e7:da:13:84:a0: 8d:06:21:f1:e4:08:f8:0b:4d:71:84:19:31:0d:44:fc:f2:f8: e6:76:c8:c9:45:21:69:6a:ff:f0:51:b6:45:18:70:d6:76:1a: bb:a0:ac:54:7e:1f:3e:d9:dc:f8:63:be:5b:76:80:24:ed:65: 7d:d5:4d:20:ca:96:2e:fb:35:88:c1:e8:da:38:1a:0c:bd:bf: 02:ec:32:83:8a:e6:af:81:b3:11:24:2a:d8:0f:52:0f:ae:9c: c6:f6:f1:cf:01:a6:e1:d7:49:62:22:86:ce:a6:6c:4d:4a:2e: 52:e2:e4:5f:a9:c6:35:c8:13:2d:68:23:46:7d:24:a0:c1:7e: 72:5c:9b:d5:5a:a1:13:8a:08:26:32:b1:3e:5a:86:e9:e3:ae: 7d:4b:9e:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WMZLT9aUQAM0NirZNy2jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MjhlYmEwMDEzNTljZGQ0MTgzNDZmNjUxYzBhMTg3Yzg5 ZmJhYmYwHhcNMjYwMTAxMDIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjlmN2RjNzM3YzRmODQ1ZmRhMjU5ZjNmMWMwNDkwZmFhMTlkYTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uQYh51PjDqMPrQb7VwrPl8xrNSN zdJ3DbCrgDwpGlhdf+7LM4mqpcWEzMl+zA/cPgysSkWL/63uAs4FjPxzLHcMRAf5 mr+yrk8qFMxLll2vWK7fhKw53BUYiAfPBndWxN9kKeMItnQ6uZnRpz+lE4654BrD lfNIAcF7aH3qzUYj1G14m11qplbZjrGPO4vMFUTsp4dZOBIaPjgFrq/2CyKgMfMI +v8RtutunuEC36OYi3Iw9cKvX+m9XS+6XJLLFrXIc1E9GpBU3ujYtAlLjldH7Lbt CS7cxGTYBTlK567fWOC0sfb82p2oZb/Jlgg/GopQktv7wlOY4w14cEXTNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLuffcc3xPhF/aJZ8/HASQ+qGdo/MB8GA1UdIwQY MBaAFEco66ABNZzdQYNG9lHAoYfIn7q/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnlqcm9BRTFuTjFCZzBiMlVjQ2hoOGlmdXI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8yOGM1YjYtMjNmMC00NWZiLTliMjEt Mjk0ZDljZjc5ZTJlLzEvdTU5OXh6ZkUtRVg5b2xuejhjQkpENm9aMmo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8yOGM1YjYtMjNmMC00NWZiLTliMjEtMjk0ZDljZjc5ZTJl LzEvUnlqcm9BRTFuTjFCZzBiMlVjQ2hoOGlmdXI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+kzMA0G CSqGSIb3DQEBCwUAA4IBAQAs6a01R2K2usfBatBXlOaQRWqqIQ3mGbPepcRF0l2q bSX5H8xv0iOY58TSUZrHahoBAj8IGMjWSac+iW2YFQyHt/QbODeQSs3PwjZJO981 LitJRgtAMXwn200YhZlLt7PquFM//hU059oThKCNBiHx5Aj4C01xhBkxDUT88vjm dsjJRSFpav/wUbZFGHDWdhq7oKxUfh8+2dz4Y75bdoAk7WV91U0gypYu+zWIweja OBoMvb8C7DKDiuavgbMRJCrYD1IPrpzG9vHPAabh10liIobOpmxNSi5S4uRfqcY1 yBMtaCNGfSSgwX5yXJvVWqETiggmMrE+Wobp4659S560 -----END CERTIFICATE-----Generated at Tue Feb 10 05:55:08 2026 by rpki-client