This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/uFl_ZizKGWHrxXUyCquBDXz3y3k.roa File: uFl_ZizKGWHrxXUyCquBDXz3y3k.roa (raw, json) Hash identifier: /TpoOOO6sEekhbdoi+eDFkK9983+dY21TSBKPL3C0K8= Subject key identifier: B8:59:7F:66:2C:CA:19:61:EB:C5:75:32:0A:AB:81:0D:7C:F7:CB:79 Certificate issuer: /CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789 Certificate serial: 019BB6A3FF4DFA3F27C831EA37F3A454478C Authority key identifier: FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/uFl_ZizKGWHrxXUyCquBDXz3y3k.roa Signing time: Tue 13 Jan 2026 09:15:59 +0000 ROA not before: Tue 13 Jan 2026 09:15:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47295 IP address blocks: 93.90.128.0/20 maxlen: 24 194.48.144.0/22 maxlen: 32 2a03:2400::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.mft rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:a3:ff:4d:fa:3f:27:c8:31:ea:37:f3:a4:54:47:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789 Validity Not Before: Jan 13 09:15:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8597f662cca1961ebc575320aab810d7cf7cb79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:74:be:0b:2a:5a:fd:1d:34:8d:90:40:e5:4e: 80:49:22:0c:b3:5a:c1:40:37:70:0b:c5:c9:2d:65: 0c:08:04:66:d8:fc:4c:f9:40:17:3b:82:2e:38:98: bc:37:e3:73:e5:2c:06:cf:29:b7:be:48:c4:aa:be: f7:d6:c1:b7:c3:4f:ff:4c:d3:71:30:59:5d:e2:a3: f5:c5:50:49:9d:2c:e6:fc:38:f5:f2:33:8e:dd:70: dc:4d:a7:b1:08:44:39:60:d6:1b:79:a3:dc:39:5c: 47:fb:a2:80:34:27:2b:ba:74:06:56:c7:5f:d9:0b: 7a:71:28:7c:46:35:67:4b:0e:3c:33:80:39:9c:2f: 5b:6e:06:f0:ce:82:92:c5:ce:21:78:55:42:6d:17: 9a:66:f3:05:e2:35:7d:0c:f3:f1:81:31:dd:9f:8f: bd:89:fb:a3:76:48:26:8a:23:ba:2c:1a:87:e3:e4: f2:43:22:a4:31:6f:a4:85:94:68:7b:44:0a:c6:f2: 48:73:3d:ea:d6:bc:ce:9a:a1:05:e9:8f:e0:ea:c0: b4:36:e8:41:46:9b:e8:a0:6c:ba:3a:7e:9e:4f:5e: a0:6c:84:83:d8:03:78:3c:2e:d2:57:f6:78:56:aa: 16:c2:e2:dc:31:85:63:68:74:6f:3b:80:37:6b:16: aa:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:59:7F:66:2C:CA:19:61:EB:C5:75:32:0A:AB:81:0D:7C:F7:CB:79 X509v3 Authority Key Identifier: keyid:FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/uFl_ZizKGWHrxXUyCquBDXz3y3k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.90.128.0/20 194.48.144.0/22 IPv6: 2a03:2400::/29 Signature Algorithm: sha256WithRSAEncryption 8d:3e:df:af:4e:ae:f2:0f:61:5f:cc:7f:ff:5f:ed:88:c1:3d: 2b:53:2f:d0:2e:6c:d9:7c:96:b6:ac:a0:e5:65:36:61:b4:51: 5c:06:66:0a:d9:ca:23:b4:ce:91:82:77:1a:2b:d0:0b:77:8a: 5b:25:34:f5:e1:88:68:0f:3c:a5:04:f4:a1:37:39:93:e5:bf: b4:7a:8b:72:da:12:b2:2b:72:9e:0c:46:c2:22:42:3d:02:44: 56:6e:9b:79:b0:34:28:2b:a3:95:f7:1a:c9:fe:54:ad:6a:bf: 01:be:fc:05:8e:41:81:a3:30:74:85:9c:05:b9:7d:90:d8:63: dc:f8:81:c0:d8:62:23:aa:80:61:f0:ac:50:1c:79:7f:41:1d: d6:08:8d:0e:33:4e:9e:17:8d:6b:7f:44:db:70:d2:91:95:a2: fb:5b:e6:f9:cb:e1:12:a3:50:06:3f:62:42:6f:10:cf:b7:b6: 1c:20:d5:71:14:9f:49:c4:54:4c:3e:af:40:5a:6f:ba:c4:f1: d7:cb:18:03:0d:03:03:4d:79:b6:78:98:38:72:bc:1a:5b:b9: 53:ca:13:66:a2:4b:4b:80:4a:8c:14:d8:99:be:92:b3:7f:1c: c9:0b:29:54:33:0d:d9:17:3e:fa:c9:bb:3d:56:85:c1:e3:94: db:4d:c5:66 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZu2o/9N+j8nyDHqN/OkVEeMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYmI1ZTJlMGZkOTgzMmQ3M2IxZWY4ZjllNDg2ZmZkMDBi M2Q3ODkwHhcNMjYwMTEzMDkxNTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODU5N2Y2NjJjY2ExOTYxZWJjNTc1MzIwYWFiODEwZDdjZjdjYjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnS+Cypa/R00jZBA5U6ASSIMs1rB QDdwC8XJLWUMCARm2PxM+UAXO4IuOJi8N+Nz5SwGzym3vkjEqr731sG3w0//TNNx MFld4qP1xVBJnSzm/Dj18jOO3XDcTaexCEQ5YNYbeaPcOVxH+6KANCcrunQGVsdf 2Qt6cSh8RjVnSw48M4A5nC9bbgbwzoKSxc4heFVCbReaZvMF4jV9DPPxgTHdn4+9 ifujdkgmiiO6LBqH4+TyQyKkMW+khZRoe0QKxvJIcz3q1rzOmqEF6Y/g6sC0NuhB RpvooGy6On6eT16gbISD2AN4PC7SV/Z4VqoWwuLcMYVjaHRvO4A3axaqlQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFLhZf2Ysyhlh68V1MgqrgQ1898t5MB8GA1UdIwQY MBaAFPy7Xi4P2YMtc7Hvj55Ib/0As9eJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0x0ZUxnX1pneTF6c2UtUG5raHZfUUN6MTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8zNTNmM2QtNmFmYS00ZTMxLTkxYTkt NWU2YTkyZTdmNjhmLzEvdUZsX1ppektHV0hyeFhVeUNxdUJEWHozeTNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8zNTNmM2QtNmFmYS00ZTMxLTkxYTktNWU2YTkyZTdmNjhm LzEvX0x0ZUxnX1pneTF6c2UtUG5raHZfUUN6MTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEXVqAAwQC wjCQMA0EAgACMAcDBQMqAyQAMA0GCSqGSIb3DQEBCwUAA4IBAQCNPt+vTq7yD2Ff zH//X+2IwT0rUy/QLmzZfJa2rKDlZTZhtFFcBmYK2cojtM6RgncaK9ALd4pbJTT1 4YhoDzylBPShNzmT5b+0eoty2hKyK3KeDEbCIkI9AkRWbpt5sDQoK6OV9xrJ/lSt ar8BvvwFjkGBozB0hZwFuX2Q2GPc+IHA2GIjqoBh8KxQHHl/QR3WCI0OM06eF41r f0TbcNKRlaL7W+b5y+ESo1AGP2JCbxDPt7YcINVxFJ9JxFRMPq9AWm+6xPHXyxgD DQMDTXm2eJg4crwaW7lTyhNmoktLgEqMFNiZvpKzfxzJCylUMw3ZFz76ybs9VoXB 45TbTcVm -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:10 2026 by rpki-client