This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/uhWP65iIcvZTsGSiBTIcefinHZQ.roa File: uhWP65iIcvZTsGSiBTIcefinHZQ.roa (raw, json) Hash identifier: RDsU+on83wZCchaROnKt/rVWQYfzxwy4j90xxJ6pfyg= Subject key identifier: BA:15:8F:EB:98:88:72:F6:53:B0:64:A2:05:32:1C:79:F8:A7:1D:94 Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 019B76EB80EFC60C18FCA0D595C8490DFCDC Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/uhWP65iIcvZTsGSiBTIcefinHZQ.roa Signing time: Thu 01 Jan 2026 00:18:23 +0000 ROA not before: Thu 01 Jan 2026 00:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41324 IP address blocks: 82.222.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:80:ef:c6:0c:18:fc:a0:d5:95:c8:49:0d:fc:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Jan 1 00:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba158feb988872f653b064a205321c79f8a71d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:31:f3:13:23:48:66:63:c6:6f:b7:4f:5c:b4: 46:4c:b7:a7:de:ad:66:22:fe:29:fe:bb:5c:7e:f9: da:c9:d4:61:2b:9e:a1:fa:aa:17:2f:8e:e1:dd:47: a3:6c:fb:58:47:5e:d5:1d:e9:a1:0d:6f:dc:2c:e4: 20:f8:8d:3f:7c:6b:66:be:fd:06:71:d7:92:1f:c6: 4d:6a:95:5c:0e:63:d1:81:e9:bb:c9:ec:c9:ca:b3: e5:e1:eb:68:39:e5:fd:84:e6:bd:ba:e5:5e:ef:74: 4f:9c:78:30:69:0f:ae:26:76:8c:56:b8:65:44:3a: de:8e:98:59:cd:a8:e5:03:ef:31:23:aa:bf:8c:ac: 70:a5:cf:9f:70:11:c2:87:ca:9f:c8:00:3e:ae:84: 56:cf:14:a9:ee:16:92:c4:5c:58:4b:15:cb:93:54: c5:b2:8f:7e:b6:9b:9a:7e:02:bc:b9:bc:78:a4:88: e5:98:64:b8:00:e3:67:0d:64:78:79:a9:0b:9e:0b: 77:ff:54:ae:a8:ee:3b:d8:b5:49:30:57:1d:6f:ec: 5f:b9:93:f3:fe:90:e2:94:b4:27:81:d8:9b:03:d6: b7:b6:97:dd:ff:4b:ef:44:6c:42:75:7f:fb:91:ee: a0:72:e9:89:fd:b9:f0:55:fd:bd:9c:a9:c6:64:5d: 35:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:15:8F:EB:98:88:72:F6:53:B0:64:A2:05:32:1C:79:F8:A7:1D:94 X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/uhWP65iIcvZTsGSiBTIcefinHZQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.222.154.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:99:5e:f7:ff:68:0a:01:cf:64:bd:ca:8a:ca:6a:9e:65:0b: e7:53:ac:d5:01:73:c7:b2:c0:2b:6b:90:e0:68:69:83:2c:e7: 08:cf:04:76:9d:d6:c1:05:2f:64:2e:b1:db:b7:79:99:9d:da: b1:70:6f:a4:25:2e:81:de:b2:0e:a1:7f:28:24:b3:f3:ec:7f: 33:9e:e0:9b:14:7e:77:84:21:18:1a:27:b5:ce:54:74:71:1d: 5e:cd:6d:53:28:02:af:ff:8a:87:c0:f6:99:6e:e6:f6:47:06: 9c:38:82:3f:cc:1d:be:cc:73:62:99:74:27:41:db:70:80:6f: 0b:85:df:86:06:91:67:1c:7d:34:27:b9:e4:53:bf:7e:ca:0f: 5d:e0:04:da:c2:a8:e9:48:8b:4f:c9:69:d7:35:15:2b:be:05: d2:2c:39:cb:c0:ad:43:a8:ef:57:7a:4a:9c:8d:4a:a4:d2:89: 4b:ae:7e:b9:73:a8:0a:2b:95:ad:7f:58:12:6a:3f:fa:d3:d1: 70:a1:9e:c7:73:55:70:a1:9f:95:02:89:02:8b:12:7a:47:55: c1:c4:67:b2:05:4c:0c:f2:e7:80:87:a1:a5:b6:99:81:26:4f: 3d:ad:f1:a8:15:63:6a:53:df:41:ac:61:3a:af:57:8a:fe:25: 6c:51:2e:5d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264DvxgwY/KDVlchJDfzcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjYwMTAxMDAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTE1OGZlYjk4ODg3MmY2NTNiMDY0YTIwNTMyMWM3OWY4YTcxZDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDHzEyNIZmPGb7dPXLRGTLen3q1m Iv4p/rtcfvnaydRhK56h+qoXL47h3UejbPtYR17VHemhDW/cLOQg+I0/fGtmvv0G cdeSH8ZNapVcDmPRgem7yezJyrPl4etoOeX9hOa9uuVe73RPnHgwaQ+uJnaMVrhl RDrejphZzajlA+8xI6q/jKxwpc+fcBHCh8qfyAA+roRWzxSp7haSxFxYSxXLk1TF so9+tpuafgK8ubx4pIjlmGS4AONnDWR4eakLngt3/1SuqO472LVJMFcdb+xfuZPz /pDilLQngdibA9a3tpfd/0vvRGxCdX/7ke6gcumJ/bnwVf29nKnGZF018wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLoVj+uYiHL2U7BkogUyHHn4px2UMB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvdWhXUDY1aUljdlpUc0dTaUJUSWNlZmluSFpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUt6aMA0G CSqGSIb3DQEBCwUAA4IBAQBLmV73/2gKAc9kvcqKymqeZQvnU6zVAXPHssAra5Dg aGmDLOcIzwR2ndbBBS9kLrHbt3mZndqxcG+kJS6B3rIOoX8oJLPz7H8znuCbFH53 hCEYGie1zlR0cR1ezW1TKAKv/4qHwPaZbub2RwacOII/zB2+zHNimXQnQdtwgG8L hd+GBpFnHH00J7nkU79+yg9d4ATawqjpSItPyWnXNRUrvgXSLDnLwK1DqO9Xekqc jUqk0olLrn65c6gKK5Wtf1gSaj/609FwoZ7Hc1VwoZ+VAokCixJ6R1XBxGeyBUwM 8ueAh6GltpmBJk89rfGoFWNqU99BrGE6r1eK/iVsUS5d -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:14 2026 by rpki-client