This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/uf9kYM6bm6nAONdl8a65rkIYgu0.roa File: uf9kYM6bm6nAONdl8a65rkIYgu0.roa (raw, json) Hash identifier: eilXyuZnlj2dgxzjRmoRlIqnyiAwWyw+VjTTRqknEa8= Subject key identifier: B9:FF:64:60:CE:9B:9B:A9:C0:38:D7:65:F1:AE:B9:AE:42:18:82:ED Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Certificate serial: 019B7C80936057EA1228130BA9D3BE76EBDD Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/uf9kYM6bm6nAONdl8a65rkIYgu0.roa Signing time: Fri 02 Jan 2026 02:19:19 +0000 ROA not before: Fri 02 Jan 2026 02:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35267 IP address blocks: 86.105.253.0/24 maxlen: 24 89.35.38.0/24 maxlen: 24 89.36.150.0/23 maxlen: 24 93.114.232.0/23 maxlen: 24 188.212.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:93:60:57:ea:12:28:13:0b:a9:d3:be:76:eb:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Validity Not Before: Jan 2 02:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9ff6460ce9b9ba9c038d765f1aeb9ae421882ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:15:99:ad:f4:ab:5c:ca:62:a5:5b:2c:42:e2: dd:70:b1:da:96:85:1f:50:dc:00:db:98:aa:51:fc: 52:f8:87:0a:cb:14:bf:b4:92:62:6f:c1:fc:6f:be: eb:6c:e1:84:98:81:ff:b9:66:2d:bb:bc:ec:44:e3: 67:ee:a1:9a:2b:67:d5:2b:a0:a2:a5:cb:e3:c2:83: aa:35:c4:41:82:c1:99:84:96:6b:12:3f:a3:7b:7c: b6:dc:51:98:d6:a7:4a:cc:65:09:fc:29:52:9c:9e: e1:7a:6e:c1:c4:37:06:3b:24:10:c8:af:b9:67:04: 0c:97:b2:13:32:ab:f4:6b:d9:85:0b:33:8d:d7:2b: f2:59:ef:e6:84:8b:9e:b4:25:81:42:cd:63:2e:5d: 98:4f:71:ba:2d:fd:ca:72:d3:c9:48:cc:12:e0:62: 31:d3:d8:96:94:8d:61:d0:10:52:e5:ec:4f:71:2a: 47:62:bc:fa:12:5f:3e:0e:cf:6e:ba:99:4c:0a:7d: 76:08:24:da:38:08:9e:71:65:73:b7:ab:1e:2c:a5: 62:75:ab:c7:b9:ea:32:de:c5:00:4a:76:20:bb:fe: cf:41:5a:cb:46:6a:09:b8:c2:3a:79:a7:13:a0:d9: c0:2f:55:da:d7:85:aa:db:41:c4:1c:31:8f:00:92: 19:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:FF:64:60:CE:9B:9B:A9:C0:38:D7:65:F1:AE:B9:AE:42:18:82:ED X509v3 Authority Key Identifier: keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/uf9kYM6bm6nAONdl8a65rkIYgu0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.105.253.0/24 89.35.38.0/24 89.36.150.0/23 93.114.232.0/23 188.212.192.0/21 Signature Algorithm: sha256WithRSAEncryption 33:04:20:ea:c9:58:eb:7f:4f:19:56:e4:01:00:a3:9c:ca:7a: 1e:ef:08:cf:06:44:f3:cf:53:c7:ef:24:ad:3f:26:37:76:b5: be:82:f0:fc:94:2b:ce:e3:28:c6:cf:6b:e4:a3:91:b0:f0:7b: f7:98:6a:1f:7e:1a:96:5b:16:8a:27:b8:c6:32:a4:59:9d:1a: eb:21:22:1e:10:30:12:86:7c:1a:4b:9a:6b:0e:c3:16:37:89: bd:62:d5:13:c7:a5:34:1c:6a:ba:a1:6d:b8:7b:74:e3:fc:b7: 9a:c5:90:fc:1e:67:45:88:c3:51:7a:7c:b3:87:a9:9c:fb:56: 47:84:d5:fe:c8:0c:37:0e:f1:75:c6:af:07:40:4d:58:c5:1f: db:8e:6d:51:54:c7:77:0b:c8:05:fe:08:d1:f8:6f:5b:9e:94: 8b:74:40:2d:84:84:a6:65:6f:f2:0d:bb:5a:2d:4d:4a:31:7f: 32:85:da:f3:30:d2:62:ff:5b:b9:43:39:1c:5e:64:10:53:4b: a4:fd:79:ae:bc:cb:f9:ce:80:70:17:9b:3b:b2:ea:e4:e3:7e: 42:78:df:dd:e8:55:52:8a:62:d1:98:b1:ea:f3:15:d5:0d:8f: 03:4b:f2:20:9e:49:f9:24:42:7c:0d:a0:e8:4a:88:16:c6:ff: 5d:a0:eb:76 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt8gJNgV+oSKBMLqdO+duvdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5 M2FlYjkwHhcNMjYwMTAyMDIxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWZmNjQ2MGNlOWI5YmE5YzAzOGQ3NjVmMWFlYjlhZTQyMTg4MmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhWZrfSrXMpipVssQuLdcLHaloUf UNwA25iqUfxS+IcKyxS/tJJib8H8b77rbOGEmIH/uWYtu7zsRONn7qGaK2fVK6Ci pcvjwoOqNcRBgsGZhJZrEj+je3y23FGY1qdKzGUJ/ClSnJ7hem7BxDcGOyQQyK+5 ZwQMl7ITMqv0a9mFCzON1yvyWe/mhIuetCWBQs1jLl2YT3G6Lf3KctPJSMwS4GIx 09iWlI1h0BBS5exPcSpHYrz6El8+Ds9uuplMCn12CCTaOAiecWVzt6seLKVidavH ueoy3sUASnYgu/7PQVrLRmoJuMI6eacToNnAL1Xa14Wq20HEHDGPAJIZ8wIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFLn/ZGDOm5upwDjXZfGuua5CGILtMB8GA1UdIwQY MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt NWQ0OGI2NWNlNTczLzEvdWY5a1lNNmJtNm5BT05kbDhhNjVya0lZZ3UwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAVmn9AwQA WSMmAwQBWSSWAwQBXXLoAwQDvNTAMA0GCSqGSIb3DQEBCwUAA4IBAQAzBCDqyVjr f08ZVuQBAKOcynoe7wjPBkTzz1PH7yStPyY3drW+gvD8lCvO4yjGz2vko5Gw8Hv3 mGoffhqWWxaKJ7jGMqRZnRrrISIeEDAShnwaS5prDsMWN4m9YtUTx6U0HGq6oW24 e3Tj/LeaxZD8HmdFiMNRenyzh6mc+1ZHhNX+yAw3DvF1xq8HQE1YxR/bjm1RVMd3 C8gF/gjR+G9bnpSLdEAthISmZW/yDbtaLU1KMX8yhdrzMNJi/1u5QzkcXmQQU0uk /XmuvMv5zoBwF5s7surk435CeN/d6FVSimLRmLHq8xXVDY8DS/Ignkn5JEJ8DaDo SogWxv9doOt2 -----END CERTIFICATE-----Generated at Wed Jan 21 10:48:13 2026 by rpki-client