This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/uNpGJTkDf9vfyQ-rWsMHOZPhKY4.roa File: uNpGJTkDf9vfyQ-rWsMHOZPhKY4.roa (raw, json) Hash identifier: DmupEvIL4K/NQQ7P0WNq04y0+5V0bCdj/6N1toh/r7g= Subject key identifier: B8:DA:46:25:39:03:7F:DB:DF:C9:0F:AB:5A:C3:07:39:93:E1:29:8E Certificate issuer: /CN=cad794ac601ce2505b65f975a7d516a2f00a5b31 Certificate serial: 019B797E58BDD86C4E12D44339A044AF302A Authority key identifier: CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/uNpGJTkDf9vfyQ-rWsMHOZPhKY4.roa Signing time: Thu 01 Jan 2026 12:18:01 +0000 ROA not before: Thu 01 Jan 2026 12:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401838 IP address blocks: 77.90.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:58:bd:d8:6c:4e:12:d4:43:39:a0:44:af:30:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31 Validity Not Before: Jan 1 12:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8da462539037fdbdfc90fab5ac3073993e1298e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0f:b0:f5:90:76:05:a7:57:fd:dc:59:1c:2d: 5a:09:64:6d:0a:8f:c6:99:6e:e2:dd:19:e1:53:b1: c2:1f:18:00:63:83:4d:b3:f4:39:53:c4:cc:d8:73: 39:c3:1e:0b:cb:9f:77:67:c5:45:ec:76:5b:21:d2: b9:7c:57:e5:b5:42:c4:39:ff:2d:dd:19:f6:9d:ae: 5f:91:2c:75:bb:9f:60:b9:0a:44:7b:0c:0a:d1:b9: 76:e2:27:25:05:eb:93:8e:6a:0f:58:ad:a1:6e:ff: fc:72:dc:7b:d5:43:a8:c5:1b:9f:2a:dd:8b:db:97: 8e:44:e8:f6:d5:67:3c:c8:fb:a0:96:41:2e:9d:61: 23:2e:b1:70:75:f8:e4:c1:77:b1:2d:96:a5:ae:16: 38:7e:a0:dc:56:a1:65:0b:bb:13:4f:a4:ee:67:c3: 93:a1:44:5c:02:d9:78:c8:d7:c6:d4:8a:97:7d:22: 32:eb:4c:e5:bf:1a:6c:9a:5b:03:aa:c3:d0:36:32: 1b:37:06:9c:42:55:65:9e:c7:19:3f:08:8b:51:8a: 18:ad:e3:b7:51:5d:e8:26:9e:d9:66:52:75:2d:92: 51:df:ea:00:52:4f:4b:09:ae:e3:0f:3d:f0:c1:ff: 2b:37:70:d1:44:cd:d1:4e:b7:fa:0e:1b:59:9e:d6: ed:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DA:46:25:39:03:7F:DB:DF:C9:0F:AB:5A:C3:07:39:93:E1:29:8E X509v3 Authority Key Identifier: keyid:CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/uNpGJTkDf9vfyQ-rWsMHOZPhKY4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.102.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:9f:80:50:df:38:46:48:d2:6a:e9:41:f8:7e:1a:79:09:dd: fd:7b:20:82:07:9b:42:15:cc:0a:59:af:00:a4:74:23:eb:f0: 9d:d0:8b:cd:66:06:a9:d8:91:f5:44:c6:33:4f:68:54:bb:e8: 2c:5b:19:19:4e:00:65:73:e3:b6:42:c2:0a:56:53:13:fe:5f: 63:ea:88:75:4d:a7:bb:53:ae:39:13:ed:4d:79:a2:59:b2:7c: 69:4a:25:8c:6f:c8:15:60:3c:e1:32:8c:3c:93:e7:55:4c:2f: 55:53:25:49:b6:93:c9:26:76:15:f9:ae:51:1e:65:57:f3:04: 00:b0:d6:85:ef:dd:5c:19:ff:60:4f:f5:cd:47:cb:b9:ed:5e: 63:0c:31:a2:38:0d:d7:43:d4:ae:22:04:32:2f:a7:01:0a:b5: 01:e8:ad:a1:fb:dc:2f:ec:88:de:cc:f5:c0:bd:52:6e:71:62: d2:94:3b:71:52:5e:51:5e:b4:6b:52:59:df:06:4f:08:77:cf: 8c:8c:b5:fe:28:2d:4e:22:b2:1b:0b:95:6e:83:ae:ce:6f:b7: f7:af:e0:f0:59:f6:18:f8:b8:ea:45:01:0e:8a:e7:2b:a8:fa: a1:06:c6:0c:ac:d1:e6:9b:df:8e:c8:a6:95:19:de:d0:14:8f: 8f:f5:90:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fli92GxOEtRDOaBErzAqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZDc5NGFjNjAxY2UyNTA1YjY1Zjk3NWE3ZDUxNmEyZjAw YTViMzEwHhcNMjYwMTAxMTIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGRhNDYyNTM5MDM3ZmRiZGZjOTBmYWI1YWMzMDczOTkzZTEyOThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw+w9ZB2BadX/dxZHC1aCWRtCo/G mW7i3RnhU7HCHxgAY4NNs/Q5U8TM2HM5wx4Ly593Z8VF7HZbIdK5fFfltULEOf8t 3Rn2na5fkSx1u59guQpEewwK0bl24iclBeuTjmoPWK2hbv/8ctx71UOoxRufKt2L 25eOROj21Wc8yPuglkEunWEjLrFwdfjkwXexLZalrhY4fqDcVqFlC7sTT6TuZ8OT oURcAtl4yNfG1IqXfSIy60zlvxpsmlsDqsPQNjIbNwacQlVlnscZPwiLUYoYreO3 UV3oJp7ZZlJ1LZJR3+oAUk9LCa7jDz3wwf8rN3DRRM3RTrf6DhtZntbtLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLjaRiU5A3/b38kPq1rDBzmT4SmOMB8GA1UdIwQY MBaAFMrXlKxgHOJQW2X5dafVFqLwClsxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXRlVXJHQWM0bEJiWmZsMXA5VVdvdkFLV3pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mOWE0YmUtZDc5Yy00MTkyLWE2YjMt M2I5ODhmMTg4ZDkxLzEvdU5wR0pUa0RmOXZmeVEtcldzTUhPWlBoS1k0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9mOWE0YmUtZDc5Yy00MTkyLWE2YjMtM2I5ODhmMTg4ZDkx LzEveXRlVXJHQWM0bEJiWmZsMXA5VVdvdkFLV3pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVpmMA0G CSqGSIb3DQEBCwUAA4IBAQBvn4BQ3zhGSNJq6UH4fhp5Cd39eyCCB5tCFcwKWa8A pHQj6/Cd0IvNZgap2JH1RMYzT2hUu+gsWxkZTgBlc+O2QsIKVlMT/l9j6oh1Tae7 U645E+1NeaJZsnxpSiWMb8gVYDzhMow8k+dVTC9VUyVJtpPJJnYV+a5RHmVX8wQA sNaF791cGf9gT/XNR8u57V5jDDGiOA3XQ9SuIgQyL6cBCrUB6K2h+9wv7IjezPXA vVJucWLSlDtxUl5RXrRrUlnfBk8Id8+MjLX+KC1OIrIbC5Vug67Ob7f3r+DwWfYY +LjqRQEOiucrqPqhBsYMrNHmm9+OyKaVGd7QFI+P9ZCO -----END CERTIFICATE-----Generated at Wed Jan 21 05:20:40 2026 by rpki-client