This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/a-uv6NcQQFUj4AlHMAn_keIfHpY.roa File: a-uv6NcQQFUj4AlHMAn_keIfHpY.roa (raw, json) Hash identifier: DGUml10FputozIpRl4oW5dyB0wWScyZsA35A31zOw64= Subject key identifier: 6B:EB:AF:E8:D7:10:40:55:23:E0:09:47:30:09:FF:91:E2:1F:1E:96 Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Certificate serial: 019B78A345D27423DF493DA167415725D722 Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/a-uv6NcQQFUj4AlHMAn_keIfHpY.roa Signing time: Thu 01 Jan 2026 08:18:44 +0000 ROA not before: Thu 01 Jan 2026 08:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 83.147.248.0/22 maxlen: 22 91.186.200.0/23 maxlen: 24 91.186.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:45:d2:74:23:df:49:3d:a1:67:41:57:25:d7:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Validity Not Before: Jan 1 08:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6bebafe8d710405523e009473009ff91e21f1e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ae:ba:97:1b:14:cf:a3:4b:62:b1:07:55:4d: 6b:72:60:9d:a9:06:26:7a:ab:d7:09:ac:29:dc:57: aa:51:f1:12:67:b6:44:a8:35:53:0c:e3:ab:5e:1e: 4e:0f:3d:5e:92:1b:d8:0c:74:8a:93:10:a7:ff:d9: 2f:36:a0:aa:88:a0:47:56:2f:7c:53:24:7b:b6:01: ae:7c:fb:17:99:92:d4:a0:12:f5:f0:43:20:06:a4: 6a:4e:cd:d2:22:d0:69:fd:b3:21:72:b0:1c:20:a7: 15:c9:44:11:b0:10:59:76:30:2a:39:59:29:be:6d: 3b:43:db:e6:d7:03:5c:91:66:3f:a1:db:07:7d:24: 18:b9:42:b9:06:82:63:04:3a:5d:69:99:e0:2c:7c: db:bb:cb:3a:36:ce:6b:22:99:8f:3e:17:c3:96:02: 6e:b9:c8:36:06:4a:30:c3:b4:d2:db:df:ab:5e:70: 0e:16:0f:18:0b:20:69:89:46:66:47:2e:7a:22:48: 0e:77:e0:1d:f6:68:60:1b:f5:d1:63:d9:7b:4a:02: 00:78:3b:e8:c2:ab:c5:4f:55:4b:b1:6b:18:40:97: 65:29:b2:e2:df:58:7b:bf:01:3c:c8:db:bd:f9:bb: b4:14:dd:5b:8d:b6:58:76:42:8b:57:03:77:63:2b: 60:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:EB:AF:E8:D7:10:40:55:23:E0:09:47:30:09:FF:91:E2:1F:1E:96 X509v3 Authority Key Identifier: keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/a-uv6NcQQFUj4AlHMAn_keIfHpY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.147.248.0/22 91.186.200.0/22 Signature Algorithm: sha256WithRSAEncryption 73:f0:9a:5f:b4:28:b2:99:3c:48:8c:b3:5d:93:13:6f:8c:29: 5f:07:7d:0e:a4:6b:4f:75:a1:a2:a0:87:46:74:24:aa:a1:3d: 79:15:5c:ba:2c:b0:26:cd:2e:02:a2:ca:c2:96:ab:4d:75:65: f0:58:f4:df:f5:b2:52:46:05:59:40:62:80:1d:78:cd:9e:b7: be:d1:5e:bc:17:e6:78:a8:1a:98:29:48:21:03:59:e0:fd:7b: 80:cc:02:17:86:89:b0:b4:e0:cb:d5:fe:b1:3d:7e:7d:d5:dd: de:7b:ba:e1:a6:14:38:50:25:7e:f8:58:e2:bc:3f:f0:54:36: ac:85:40:29:d0:89:5d:43:6e:4d:bf:c2:87:cf:f0:51:02:5f: bf:e8:69:cb:b5:67:e5:04:db:34:73:b0:40:1b:3a:d7:03:3d: 8e:de:98:4e:37:48:42:fb:ea:d3:36:a4:cf:2a:b3:2b:3c:46: 54:c4:c5:2e:6c:79:51:5f:63:0d:df:05:68:9c:5c:58:27:af: 36:39:b4:75:a0:3b:d8:7e:ab:44:a6:f3:15:57:1f:ae:5b:0c: ca:4d:da:7c:90:7c:0e:7d:8c:9c:21:8e:00:bc:09:b0:7a:b7: f2:6f:c3:5c:74:02:cd:fd:33:0b:4d:8f:56:2f:ae:7f:27:41: ed:0d:6f:43 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4o0XSdCPfST2hZ0FXJdciMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy OWY5YzkwHhcNMjYwMTAxMDgxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmViYWZlOGQ3MTA0MDU1MjNlMDA5NDczMDA5ZmY5MWUyMWYxZTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK66lxsUz6NLYrEHVU1rcmCdqQYm eqvXCawp3FeqUfESZ7ZEqDVTDOOrXh5ODz1ekhvYDHSKkxCn/9kvNqCqiKBHVi98 UyR7tgGufPsXmZLUoBL18EMgBqRqTs3SItBp/bMhcrAcIKcVyUQRsBBZdjAqOVkp vm07Q9vm1wNckWY/odsHfSQYuUK5BoJjBDpdaZngLHzbu8s6Ns5rIpmPPhfDlgJu ucg2Bkoww7TS29+rXnAOFg8YCyBpiUZmRy56IkgOd+Ad9mhgG/XRY9l7SgIAeDvo wqvFT1VLsWsYQJdlKbLi31h7vwE8yNu9+bu0FN1bjbZYdkKLVwN3YytgbwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGvrr+jXEEBVI+AJRzAJ/5HiHx6WMB8GA1UdIwQY MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt NDlmOTgxZWU1OTgxLzEvYS11djZOY1FRRlVqNEFsSE1Bbl9rZUlmSHBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCU5P4AwQC W7rIMA0GCSqGSIb3DQEBCwUAA4IBAQBz8JpftCiymTxIjLNdkxNvjClfB30OpGtP daGioIdGdCSqoT15FVy6LLAmzS4CosrClqtNdWXwWPTf9bJSRgVZQGKAHXjNnre+ 0V68F+Z4qBqYKUghA1ng/XuAzAIXhomwtODL1f6xPX591d3ee7rhphQ4UCV++Fji vD/wVDashUAp0IldQ25Nv8KHz/BRAl+/6GnLtWflBNs0c7BAGzrXAz2O3phON0hC ++rTNqTPKrMrPEZUxMUubHlRX2MN3wVonFxYJ682ObR1oDvYfqtEpvMVVx+uWwzK Tdp8kHwOfYycIY4AvAmwerfyb8NcdALN/TMLTY9WL65/J0HtDW9D -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:39 2026 by rpki-client