This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/Uo9-W2ZV65vRiK7JyaEHx54nLwM.roa File: Uo9-W2ZV65vRiK7JyaEHx54nLwM.roa (raw, json) Hash identifier: UJ7a0gKDZTd9yEENvLgRe2acSSS/hxOdpooHg+CZtds= Subject key identifier: 52:8F:7E:5B:66:55:EB:9B:D1:88:AE:C9:C9:A1:07:C7:9E:27:2F:03 Certificate issuer: /CN=04e32c43f969ba417ba36d0721b1d9d50624c40f Certificate serial: 019B7758A2BE6E8EBE0F6C61F8CB34C9EAFD Authority key identifier: 04:E3:2C:43:F9:69:BA:41:7B:A3:6D:07:21:B1:D9:D5:06:24:C4:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOMsQ_lpukF7o20HIbHZ1QYkxA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/Uo9-W2ZV65vRiK7JyaEHx54nLwM.roa Signing time: Thu 01 Jan 2026 02:17:36 +0000 ROA not before: Thu 01 Jan 2026 02:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205936 IP address blocks: 86.106.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.mft rsync://rpki.ripe.net/repository/DEFAULT/BOMsQ_lpukF7o20HIbHZ1QYkxA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:a2:be:6e:8e:be:0f:6c:61:f8:cb:34:c9:ea:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04e32c43f969ba417ba36d0721b1d9d50624c40f Validity Not Before: Jan 1 02:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=528f7e5b6655eb9bd188aec9c9a107c79e272f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:5c:f5:25:ca:2e:11:23:42:5a:15:77:bf:15: 29:89:21:6d:2d:27:07:3e:c1:52:2a:3e:76:24:c0: ec:67:16:20:5b:ff:c1:79:7c:9a:34:aa:fb:d5:2a: 3a:00:91:9e:da:3c:34:8a:33:45:c4:6e:87:05:8b: 7a:ca:10:23:39:67:9f:4e:97:03:74:6a:d7:c1:02: c1:ea:9b:15:15:b8:c4:5f:4f:93:b4:d3:21:86:14: 57:68:98:d4:58:4f:02:a7:75:e0:d7:78:f7:4a:3c: 10:32:ed:af:5a:99:a0:58:82:c7:5a:5c:35:b1:7c: bb:7e:ba:68:4c:af:06:7e:ae:2e:37:03:d9:18:a6: 9d:c1:a6:dd:21:c3:b0:6f:df:9f:c1:ec:5d:27:a4: fa:ae:0c:e7:39:bf:16:c0:f9:4a:d9:ac:04:93:f4: ae:cc:85:87:82:78:c9:64:c0:97:19:73:42:ee:33: f4:be:80:b5:0b:b2:21:64:0d:e3:fa:ab:24:96:30: ac:89:75:94:25:7f:4b:97:a7:c8:41:7c:e1:0d:ef: 33:d9:1b:a0:d1:77:d3:7a:35:0e:99:a5:f7:42:c1: d5:1c:e7:8f:99:01:fa:38:e7:47:fb:4f:45:98:33: bb:ef:9a:3e:94:6f:60:6b:7d:5a:af:1c:78:26:b5: b3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:8F:7E:5B:66:55:EB:9B:D1:88:AE:C9:C9:A1:07:C7:9E:27:2F:03 X509v3 Authority Key Identifier: keyid:04:E3:2C:43:F9:69:BA:41:7B:A3:6D:07:21:B1:D9:D5:06:24:C4:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOMsQ_lpukF7o20HIbHZ1QYkxA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/Uo9-W2ZV65vRiK7JyaEHx54nLwM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/316f15-bcb5-422c-92a0-826a48eefd96/1/BOMsQ_lpukF7o20HIbHZ1QYkxA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.106.76.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:56:29:57:5d:b9:98:14:12:d1:f0:39:7b:21:22:e7:4c:0f: ba:3c:de:47:05:d8:dd:e2:83:1c:36:78:3f:80:02:3e:7f:6b: 4e:a4:20:d3:e1:61:f8:40:01:3e:4b:cd:90:03:d4:2a:e5:17: 1e:69:0c:88:27:01:07:c5:e1:f2:0c:77:45:f6:aa:46:20:84: 47:26:e1:79:9c:2c:77:46:f9:0f:9d:01:fb:a9:70:99:f7:75: d7:6d:59:da:33:62:ad:81:78:2a:ee:78:f9:c4:de:46:d1:a6: 67:03:57:dd:54:a0:b6:d1:aa:a3:76:d8:6b:73:1b:06:cd:22: 40:67:f9:a0:11:4a:3c:37:9c:bc:df:b3:80:4a:98:8a:1b:13: 19:20:23:45:f4:08:f8:bb:93:ed:d9:f8:fd:30:90:de:33:a9: 43:9d:90:35:43:c1:4e:f7:24:56:37:20:7e:72:58:40:a4:b2: 68:99:29:17:af:bb:2a:04:cc:e0:b5:eb:d4:cf:d0:a0:4e:d9: 6d:08:c1:73:0a:b4:57:3e:d0:48:4a:7f:31:ae:9d:3c:c3:0f: a7:f8:db:67:f9:e5:a2:79:d8:33:a0:3c:ec:02:8a:92:b0:3a: 6c:64:93:94:fe:e2:a1:83:81:6d:7c:90:88:48:f7:b0:82:58: 64:dc:99:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WKK+bo6+D2xh+Ms0yer9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0ZTMyYzQzZjk2OWJhNDE3YmEzNmQwNzIxYjFkOWQ1MDYy NGM0MGYwHhcNMjYwMTAxMDIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjhmN2U1YjY2NTVlYjliZDE4OGFlYzljOWExMDdjNzllMjcyZjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lz1JcouESNCWhV3vxUpiSFtLScH PsFSKj52JMDsZxYgW//BeXyaNKr71So6AJGe2jw0ijNFxG6HBYt6yhAjOWefTpcD dGrXwQLB6psVFbjEX0+TtNMhhhRXaJjUWE8Cp3Xg13j3SjwQMu2vWpmgWILHWlw1 sXy7frpoTK8Gfq4uNwPZGKadwabdIcOwb9+fwexdJ6T6rgznOb8WwPlK2awEk/Su zIWHgnjJZMCXGXNC7jP0voC1C7IhZA3j+qskljCsiXWUJX9Ll6fIQXzhDe8z2Rug 0XfTejUOmaX3QsHVHOePmQH6OOdH+09FmDO775o+lG9ga31arxx4JrWz/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFKPfltmVeub0YiuycmhB8eeJy8DMB8GA1UdIwQY MBaAFATjLEP5abpBe6NtByGx2dUGJMQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk9Nc1FfbHB1a0Y3bzIwSEliSFoxUVlreEE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zMTZmMTUtYmNiNS00MjJjLTkyYTAt ODI2YTQ4ZWVmZDk2LzEvVW85LVcyWlY2NXZSaUs3SnlhRUh4NTRuTHdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8zMTZmMTUtYmNiNS00MjJjLTkyYTAtODI2YTQ4ZWVmZDk2 LzEvQk9Nc1FfbHB1a0Y3bzIwSEliSFoxUVlreEE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVmpMMA0G CSqGSIb3DQEBCwUAA4IBAQBrVilXXbmYFBLR8Dl7ISLnTA+6PN5HBdjd4oMcNng/ gAI+f2tOpCDT4WH4QAE+S82QA9Qq5RceaQyIJwEHxeHyDHdF9qpGIIRHJuF5nCx3 RvkPnQH7qXCZ93XXbVnaM2KtgXgq7nj5xN5G0aZnA1fdVKC20aqjdthrcxsGzSJA Z/mgEUo8N5y837OASpiKGxMZICNF9Aj4u5Pt2fj9MJDeM6lDnZA1Q8FO9yRWNyB+ clhApLJomSkXr7sqBMzgtevUz9CgTtltCMFzCrRXPtBISn8xrp08ww+n+Ntn+eWi edgzoDzsAoqSsDpsZJOU/uKhg4FtfJCISPewglhk3JmT -----END CERTIFICATE-----Generated at Tue Feb 10 01:23:42 2026 by rpki-client