This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/UlPebmu1c40UOSCL-ly4OscZCUI.roa File: UlPebmu1c40UOSCL-ly4OscZCUI.roa (raw, json) Hash identifier: h0gF33577TsfLaBIuEPgAJQ2oPdZpB3QfyyzokMxY64= Subject key identifier: 52:53:DE:6E:6B:B5:73:8D:14:39:20:8B:FA:5C:B8:3A:C7:19:09:42 Certificate issuer: /CN=8d842656177b4267ab55e4ba165a5ec00f5084bc Certificate serial: 019B7A5B4C98F7BC020C680266582885A690 Authority key identifier: 8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/UlPebmu1c40UOSCL-ly4OscZCUI.roa Signing time: Thu 01 Jan 2026 16:19:22 +0000 ROA not before: Thu 01 Jan 2026 16:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199287 IP address blocks: 80.76.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:4c:98:f7:bc:02:0c:68:02:66:58:28:85:a6:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d842656177b4267ab55e4ba165a5ec00f5084bc Validity Not Before: Jan 1 16:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5253de6e6bb5738d1439208bfa5cb83ac7190942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:94:4d:5d:6f:4d:d9:4d:88:d2:a2:8b:a7:b1: 8d:ac:dd:ff:ef:6a:3d:d7:6c:df:ae:16:44:0c:5d: 7f:61:2f:49:9c:06:bd:49:d1:d6:2d:78:90:fc:95: 4e:c9:62:92:dc:87:16:fa:3d:2e:ad:09:92:e8:73: dc:1d:a0:a2:6b:80:7b:d7:27:87:83:4e:06:b9:48: dc:3b:ea:db:be:98:12:c3:12:67:2e:b8:33:76:6e: 34:22:9a:08:e9:a4:f0:db:c6:d5:1f:09:bb:05:4a: 96:f8:c9:7e:44:0d:11:39:f7:1e:9e:01:49:9f:b3: 90:50:e3:33:79:12:ce:91:ff:6a:56:7a:8b:ca:fa: 7e:5e:b8:13:53:a4:27:55:d2:15:34:38:59:f2:1f: cb:20:bd:3f:9f:f3:26:fa:16:ab:73:51:46:b5:3a: a6:f9:f5:50:00:e1:a1:2a:6f:d5:4e:85:9a:12:e9: c9:ad:9d:3d:44:da:0e:ea:e2:d0:ae:af:50:8b:0f: 20:6d:c7:dd:9b:40:de:d4:7e:ce:38:74:2b:a3:4c: 64:b1:b4:4b:1b:4f:dc:6d:b1:79:e4:31:c8:c0:d8: 6a:c8:de:f8:d9:77:0d:18:d6:7e:a3:59:0e:bd:2c: 88:ba:05:9c:64:2b:41:6c:4c:ee:12:b7:90:74:d7: 50:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:53:DE:6E:6B:B5:73:8D:14:39:20:8B:FA:5C:B8:3A:C7:19:09:42 X509v3 Authority Key Identifier: keyid:8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/UlPebmu1c40UOSCL-ly4OscZCUI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.76.228.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:90:be:5d:9a:a6:1e:4c:49:af:ad:fb:8f:fe:a7:15:87:f8: 5e:a3:3d:e5:36:a7:74:9a:b9:22:86:17:1b:fa:25:2e:ca:84: eb:37:87:2a:84:5b:c0:b8:89:54:40:98:29:b7:f9:c6:20:bd: 1e:ae:c4:81:5b:63:37:f3:d4:f2:88:68:1d:12:49:a1:51:42: 03:db:cf:7c:01:92:03:fb:0a:5c:f0:08:19:2f:72:93:4b:f7: 57:d7:90:68:41:68:92:64:54:a5:0e:73:f3:ce:7d:cb:9b:78: d2:0d:d0:cc:b8:2a:c7:8a:f0:0d:2e:7f:88:f6:9f:ce:03:5c: 04:66:2b:63:62:7d:2b:44:c5:86:28:1a:56:ec:4a:d7:85:c5: 68:e5:7c:e1:3b:c3:f2:a6:b6:32:6b:5c:7c:78:19:81:29:38: 89:dc:fa:c6:6f:8d:c5:17:a2:87:47:e7:a9:74:49:be:e3:ee: 3e:31:6b:2e:d0:96:7d:92:54:d2:fb:bd:36:82:a6:fd:f0:ae: 39:4a:f9:51:08:29:b2:2c:6d:53:02:d4:17:9c:7f:53:41:8d: 12:aa:13:38:07:a6:14:0e:bf:38:99:d5:6d:5b:f9:ce:2c:90: 9b:df:4c:75:3e:8d:34:ab:ce:2a:95:e7:64:d7:db:a8:65:d4: 11:62:5a:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W0yY97wCDGgCZlgohaaQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODQyNjU2MTc3YjQyNjdhYjU1ZTRiYTE2NWE1ZWMwMGY1 MDg0YmMwHhcNMjYwMTAxMTYxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjUzZGU2ZTZiYjU3MzhkMTQzOTIwOGJmYTVjYjgzYWM3MTkwOTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypRNXW9N2U2I0qKLp7GNrN3/72o9 12zfrhZEDF1/YS9JnAa9SdHWLXiQ/JVOyWKS3IcW+j0urQmS6HPcHaCia4B71yeH g04GuUjcO+rbvpgSwxJnLrgzdm40IpoI6aTw28bVHwm7BUqW+Ml+RA0ROfcengFJ n7OQUOMzeRLOkf9qVnqLyvp+XrgTU6QnVdIVNDhZ8h/LIL0/n/Mm+harc1FGtTqm +fVQAOGhKm/VToWaEunJrZ09RNoO6uLQrq9Qiw8gbcfdm0De1H7OOHQro0xksbRL G0/cbbF55DHIwNhqyN742XcNGNZ+o1kOvSyIugWcZCtBbEzuEreQdNdQHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFJT3m5rtXONFDkgi/pcuDrHGQlCMB8GA1UdIwQY MBaAFI2EJlYXe0Jnq1XkuhZaXsAPUIS8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallRbVZoZDdRbWVyVmVTNkZscGV3QTlRaEx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS85MzYwZWMtOWNkMS00YzAwLTg2Njgt OTRjMmY4MjY5ZTljLzEvVWxQZWJtdTFjNDBVT1NDTC1seTRPc2NaQ1VJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS85MzYwZWMtOWNkMS00YzAwLTg2NjgtOTRjMmY4MjY5ZTlj LzEvallRbVZoZDdRbWVyVmVTNkZscGV3QTlRaEx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEzkMA0G CSqGSIb3DQEBCwUAA4IBAQAckL5dmqYeTEmvrfuP/qcVh/heoz3lNqd0mrkihhcb +iUuyoTrN4cqhFvAuIlUQJgpt/nGIL0ersSBW2M389TyiGgdEkmhUUID2898AZID +wpc8AgZL3KTS/dX15BoQWiSZFSlDnPzzn3Lm3jSDdDMuCrHivANLn+I9p/OA1wE ZitjYn0rRMWGKBpW7ErXhcVo5XzhO8PyprYya1x8eBmBKTiJ3PrGb43FF6KHR+ep dEm+4+4+MWsu0JZ9klTS+702gqb98K45SvlRCCmyLG1TAtQXnH9TQY0SqhM4B6YU Dr84mdVtW/nOLJCb30x1Po00q84qledk19uoZdQRYlqG -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:01 2026 by rpki-client