This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/UlEC3VpAKX5fgFyuoTuBA8htBuc.roa File: UlEC3VpAKX5fgFyuoTuBA8htBuc.roa (raw, json) Hash identifier: OCopTvk4i816iUhH+QXazE3VcJpYfdLODiRXhmC1WXY= Subject key identifier: 52:51:02:DD:5A:40:29:7E:5F:80:5C:AE:A1:3B:81:03:C8:6D:06:E7 Certificate issuer: /CN=358c77cd40183c4115b2bf0dce716e0bc5d0bfd5 Certificate serial: 019B7C7F5722CD77C0ED0790FAEA10FB6498 Authority key identifier: 35:8C:77:CD:40:18:3C:41:15:B2:BF:0D:CE:71:6E:0B:C5:D0:BF:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NYx3zUAYPEEVsr8NznFuC8XQv9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/UlEC3VpAKX5fgFyuoTuBA8htBuc.roa Signing time: Fri 02 Jan 2026 02:17:58 +0000 ROA not before: Fri 02 Jan 2026 02:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196849 IP address blocks: 91.206.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.mft rsync://rpki.ripe.net/repository/DEFAULT/NYx3zUAYPEEVsr8NznFuC8XQv9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:57:22:cd:77:c0:ed:07:90:fa:ea:10:fb:64:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=358c77cd40183c4115b2bf0dce716e0bc5d0bfd5 Validity Not Before: Jan 2 02:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=525102dd5a40297e5f805caea13b8103c86d06e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c9:21:32:6c:26:57:55:98:92:85:9b:fe:5c: 34:9c:7a:9f:ea:40:0d:85:a2:7d:31:4c:dd:d5:31: 3c:ba:ed:81:2a:00:23:a8:58:a3:65:d7:c0:31:3c: d5:f3:72:5f:54:18:22:d3:a5:d9:70:00:8b:45:c6: 01:36:f8:20:ba:1a:29:df:4a:eb:81:c2:cf:37:00: dc:b6:91:fd:31:e3:d5:18:5e:4f:20:c2:51:c6:f8: f7:ae:21:86:76:10:be:91:18:d4:3f:b0:c4:42:6d: e0:6d:a7:84:75:a8:61:69:90:99:73:29:bc:eb:d9: 1f:bb:55:5b:19:e8:35:63:88:2f:0e:d0:aa:9c:54: 32:21:75:71:2f:68:94:db:8c:02:5f:e9:0d:9e:de: 22:95:be:38:30:1f:26:b7:a5:b4:58:15:d8:a2:f2: 54:c0:7c:73:0b:d2:02:0d:3f:20:c0:48:1c:7d:9e: ca:2c:b6:49:b4:dc:00:fc:d3:c0:c4:1a:d4:62:31: 0f:fb:85:d0:d5:c2:c8:c7:a3:fa:a8:94:8e:24:ab: fd:3e:f0:89:7a:b3:fd:67:ba:51:62:71:da:8e:9c: 63:3d:de:49:6d:74:bb:e1:d8:4b:a9:4a:df:3c:89: 01:e6:7c:a4:c7:cc:99:74:1e:11:50:8c:87:89:d6: bb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:51:02:DD:5A:40:29:7E:5F:80:5C:AE:A1:3B:81:03:C8:6D:06:E7 X509v3 Authority Key Identifier: keyid:35:8C:77:CD:40:18:3C:41:15:B2:BF:0D:CE:71:6E:0B:C5:D0:BF:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NYx3zUAYPEEVsr8NznFuC8XQv9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/UlEC3VpAKX5fgFyuoTuBA8htBuc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea2b41-7dc6-45a4-aa08-3151a1794b97/1/NYx3zUAYPEEVsr8NznFuC8XQv9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.91.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:bc:7d:52:ce:92:10:24:1f:4f:94:27:cd:87:83:50:72:3d: 9d:49:15:c0:df:f5:9a:b4:ea:f7:df:49:cb:f6:52:cd:38:96: 0b:f2:e8:0f:f0:05:41:cb:ca:89:0a:a9:d1:05:f6:a0:01:38: 3e:ce:7f:dc:31:7d:5a:ed:27:04:7b:5b:5b:e3:dc:af:b5:97: 68:c5:af:1f:0f:fc:24:e4:dd:e3:d4:08:5f:e9:26:d8:c8:58: 27:38:e7:ef:6c:e7:25:0f:8b:23:ed:a3:32:76:c2:58:53:e5: 4e:b9:02:7f:36:ef:5e:ca:c2:ed:75:37:01:12:b1:3f:c4:24: ee:d8:19:96:52:5b:27:7d:80:05:dc:8e:e1:cb:bf:c1:07:cf: b7:b8:54:4d:d0:90:34:97:52:f3:b8:12:5f:66:3e:40:5d:8c: 33:14:1d:60:bb:50:5c:38:fd:18:47:40:d6:15:a8:91:f4:b9: a8:47:e9:a7:60:d8:64:76:ac:a3:93:5c:da:52:6a:92:1f:00: 0f:c5:40:0b:06:18:c4:08:b1:1f:a6:81:72:4e:75:34:d8:02: 2b:40:33:03:81:07:4d:b1:5b:3f:96:27:29:4f:a1:2b:3b:85: bc:33:73:b5:25:3f:cb:49:3c:28:e8:57:8f:95:bd:20:ab:d3: 5e:f6:27:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f1cizXfA7QeQ+uoQ+2SYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1OGM3N2NkNDAxODNjNDExNWIyYmYwZGNlNzE2ZTBiYzVk MGJmZDUwHhcNMjYwMTAyMDIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjUxMDJkZDVhNDAyOTdlNWY4MDVjYWVhMTNiODEwM2M4NmQwNmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78khMmwmV1WYkoWb/lw0nHqf6kAN haJ9MUzd1TE8uu2BKgAjqFijZdfAMTzV83JfVBgi06XZcACLRcYBNvgguhop30rr gcLPNwDctpH9MePVGF5PIMJRxvj3riGGdhC+kRjUP7DEQm3gbaeEdahhaZCZcym8 69kfu1VbGeg1Y4gvDtCqnFQyIXVxL2iU24wCX+kNnt4ilb44MB8mt6W0WBXYovJU wHxzC9ICDT8gwEgcfZ7KLLZJtNwA/NPAxBrUYjEP+4XQ1cLIx6P6qJSOJKv9PvCJ erP9Z7pRYnHajpxjPd5JbXS74dhLqUrfPIkB5nykx8yZdB4RUIyHida7bwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFJRAt1aQCl+X4BcrqE7gQPIbQbnMB8GA1UdIwQY MBaAFDWMd81AGDxBFbK/Dc5xbgvF0L/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTll4M3pVQVlQRUVWc3I4TnpuRnVDOFhRdjlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lYTJiNDEtN2RjNi00NWE0LWFhMDgt MzE1MWExNzk0Yjk3LzEvVWxFQzNWcEFLWDVmZ0Z5dW9UdUJBOGh0QnVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lYTJiNDEtN2RjNi00NWE0LWFhMDgtMzE1MWExNzk0Yjk3 LzEvTll4M3pVQVlQRUVWc3I4TnpuRnVDOFhRdjlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW85bMA0G CSqGSIb3DQEBCwUAA4IBAQBOvH1SzpIQJB9PlCfNh4NQcj2dSRXA3/WatOr330nL 9lLNOJYL8ugP8AVBy8qJCqnRBfagATg+zn/cMX1a7ScEe1tb49yvtZdoxa8fD/wk 5N3j1Ahf6SbYyFgnOOfvbOclD4sj7aMydsJYU+VOuQJ/Nu9eysLtdTcBErE/xCTu 2BmWUlsnfYAF3I7hy7/BB8+3uFRN0JA0l1LzuBJfZj5AXYwzFB1gu1BcOP0YR0DW FaiR9LmoR+mnYNhkdqyjk1zaUmqSHwAPxUALBhjECLEfpoFyTnU02AIrQDMDgQdN sVs/licpT6ErO4W8M3O1JT/LSTwo6FePlb0gq9Ne9ift -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:15 2026 by rpki-client