This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/uhntlKjBrjmsB5zpNv4Ivi8fJo4.roa File: uhntlKjBrjmsB5zpNv4Ivi8fJo4.roa (raw, json) Hash identifier: UhvVJpc9d5wticsU3CR7GjyvAj6/9Qp45GEUXOxWo/g= Subject key identifier: BA:19:ED:94:A8:C1:AE:39:AC:07:9C:E9:36:FE:08:BE:2F:1F:26:8E Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa Certificate serial: 019B76EADDE6ECE7F74E2A2217F1304A5D07 Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/uhntlKjBrjmsB5zpNv4Ivi8fJo4.roa Signing time: Thu 01 Jan 2026 00:17:42 +0000 ROA not before: Thu 01 Jan 2026 00:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203 IP address blocks: 91.206.20.0/24 maxlen: 24 91.206.21.0/24 maxlen: 24 185.68.44.0/24 maxlen: 24 185.68.45.0/24 maxlen: 24 185.68.46.0/24 maxlen: 24 185.68.47.0/24 maxlen: 24 185.161.233.0/24 maxlen: 24 185.161.234.0/24 maxlen: 24 185.161.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:dd:e6:ec:e7:f7:4e:2a:22:17:f1:30:4a:5d:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa Validity Not Before: Jan 1 00:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba19ed94a8c1ae39ac079ce936fe08be2f1f268e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:29:5c:be:7e:e1:5d:dd:5f:9e:2d:6f:51:05: c8:11:72:2f:78:fc:e9:9e:b4:2b:32:22:7f:a0:6f: c7:35:76:bb:79:84:eb:0e:68:22:ba:b9:50:ef:f5: 95:81:44:1d:9a:dd:98:c6:74:0a:a8:82:bd:59:8f: 1c:c3:9a:f3:7b:93:a0:c2:3b:75:59:bf:de:07:fe: cb:39:cc:53:fd:ec:d6:9d:3a:ab:62:1f:57:0e:64: fe:ad:0b:12:cd:57:72:27:11:72:79:25:f8:9f:b0: f2:2c:64:c1:b5:12:75:8c:51:b5:e4:c8:60:4a:3b: 6b:9a:d4:7f:75:9e:40:9f:22:8a:fe:92:7b:3d:21: dd:77:be:ee:08:18:92:bf:c0:b5:bd:17:8b:a4:d1: e7:ea:0c:d9:3e:60:6c:b3:41:e4:c5:71:2a:5b:55: 77:89:b6:68:94:4a:77:5d:05:54:a9:9d:00:84:a4: da:1b:ea:e9:ab:6e:1f:30:e0:5d:b5:e6:50:08:c7: b1:89:02:92:a4:a9:23:af:53:b0:23:41:fc:d4:47: ed:0b:1b:58:bb:d3:d6:1e:d6:52:33:04:b0:d0:d1: db:29:e5:b7:e9:8c:6d:97:eb:6f:ab:73:c3:48:42: d3:2c:31:42:93:ad:30:47:a5:a3:18:59:75:cc:19: 85:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:19:ED:94:A8:C1:AE:39:AC:07:9C:E9:36:FE:08:BE:2F:1F:26:8E X509v3 Authority Key Identifier: keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/uhntlKjBrjmsB5zpNv4Ivi8fJo4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.20.0/23 185.68.44.0/22 185.161.233.0-185.161.235.255 Signature Algorithm: sha256WithRSAEncryption 94:69:5a:e9:c9:83:79:84:96:b6:55:43:9c:08:8e:4d:27:65: 74:2e:b6:10:e9:28:b5:da:d7:51:09:51:40:99:9f:fb:a8:aa: 75:ee:db:c5:dd:91:00:7d:ae:78:ba:88:75:b7:fe:3c:30:02: a3:69:52:07:22:fa:7b:c0:b9:34:a9:b5:37:51:ac:84:16:45: 9c:85:57:4e:83:84:08:55:97:d2:70:23:b3:77:4f:4f:58:74: 8c:5a:a6:fc:2d:3a:c4:23:ff:2d:31:9b:8c:a5:6b:82:85:76: 4e:04:81:c1:f2:53:cc:22:80:a8:76:b1:84:58:75:3a:2a:0e: e8:2d:af:f6:e1:40:91:8f:0f:f7:b6:d9:50:7f:02:64:4b:86: 4a:e4:69:98:ae:21:0d:e0:16:9f:93:06:c6:f7:37:6b:5e:06: 6f:fb:e5:cd:6a:c8:51:ca:a7:cb:45:3f:70:7c:04:1d:92:bd: dc:d4:c1:ce:52:21:29:4d:53:d7:7e:53:60:18:45:c3:17:30: 06:f2:11:07:e8:58:17:e1:53:57:30:1f:af:32:d8:ee:cb:f6: 1f:f1:a9:9c:89:63:b8:b1:9d:94:9f:3b:7e:6c:62:17:97:f8: 14:f9:37:02:ea:ee:8c:43:27:52:4e:69:79:a5:da:47:77:41: 35:ae:2c:36 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt26t3m7Of3TioiF/EwSl0HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NzQyMTBjMjg0MTNlMjYyODQ4MjJhYmU4M2FkNmQ3YzBm NzY0ZmEwHhcNMjYwMTAxMDAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTE5ZWQ5NGE4YzFhZTM5YWMwNzljZTkzNmZlMDhiZTJmMWYyNjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySlcvn7hXd1fni1vUQXIEXIvePzp nrQrMiJ/oG/HNXa7eYTrDmgiurlQ7/WVgUQdmt2YxnQKqIK9WY8cw5rze5Ogwjt1 Wb/eB/7LOcxT/ezWnTqrYh9XDmT+rQsSzVdyJxFyeSX4n7DyLGTBtRJ1jFG15Mhg SjtrmtR/dZ5AnyKK/pJ7PSHdd77uCBiSv8C1vReLpNHn6gzZPmBss0HkxXEqW1V3 ibZolEp3XQVUqZ0AhKTaG+rpq24fMOBdteZQCMexiQKSpKkjr1OwI0H81EftCxtY u9PWHtZSMwSw0NHbKeW36Yxtl+tvq3PDSELTLDFCk60wR6WjGFl1zBmFGwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFLoZ7ZSowa45rAec6Tb+CL4vHyaOMB8GA1UdIwQY MBaAFDR0IQwoQT4mKEgiq+g61tfA92T6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8zZTk5MTYtNGY4YS00YjA4LTg5Yzkt YjBjNzRiNzZlMTgyLzEvdWhudGxLakJyam1zQjV6cE52NEl2aThmSm80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8zZTk5MTYtNGY4YS00YjA4LTg5YzktYjBjNzRiNzZlMTgy LzEvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBW84UAwQC uUQsMAwDBAC5oekDBAK5oegwDQYJKoZIhvcNAQELBQADggEBAJRpWunJg3mElrZV Q5wIjk0nZXQuthDpKLXa11EJUUCZn/uoqnXu28XdkQB9rni6iHW3/jwwAqNpUgci +nvAuTSptTdRrIQWRZyFV06DhAhVl9JwI7N3T09YdIxapvwtOsQj/y0xm4yla4KF dk4EgcHyU8wigKh2sYRYdToqDugtr/bhQJGPD/e22VB/AmRLhkrkaZiuIQ3gFp+T Bsb3N2teBm/75c1qyFHKp8tFP3B8BB2SvdzUwc5SISlNU9d+U2AYRcMXMAbyEQfo WBfhU1cwH68y2O7L9h/xqZyJY7ixnZSfO35sYheX+BT5NwLq7oxDJ1JOaXml2kd3 QTWuLDY= -----END CERTIFICATE-----Generated at Thu Jan 22 09:48:28 2026 by rpki-client