This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ulMvleh0KpHzaZnOGnMAPRh_7go.roa File: ulMvleh0KpHzaZnOGnMAPRh_7go.roa (raw, json) Hash identifier: f+kd+NW6NmqPoqPYmJohSpoAXQXjo50jBTIPGaMt3IY= Subject key identifier: BA:53:2F:95:E8:74:2A:91:F3:69:99:CE:1A:73:00:3D:18:7F:EE:0A Certificate issuer: /CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a Certificate serial: 019B7C12A3E5B3F98BBA7C803AA0340104CF Authority key identifier: 38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ulMvleh0KpHzaZnOGnMAPRh_7go.roa Signing time: Fri 02 Jan 2026 00:19:14 +0000 ROA not before: Fri 02 Jan 2026 00:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43187 IP address blocks: 91.198.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.crl rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.mft rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:a3:e5:b3:f9:8b:ba:7c:80:3a:a0:34:01:04:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3830792b5e3bbac9f370d4cae7aba2a5cdba7a0a Validity Not Before: Jan 2 00:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba532f95e8742a91f36999ce1a73003d187fee0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c6:ed:7a:44:8b:ae:72:13:00:18:e8:40:ec: c5:9e:7a:ca:44:8d:8a:d9:ff:54:00:01:7b:51:92: 33:e9:dc:f7:31:cd:84:3d:b2:69:31:86:1d:27:77: db:9f:2e:07:81:31:1e:bb:57:7e:f5:1e:21:5f:bb: d7:5d:74:b0:ea:28:06:ab:1b:92:82:64:2b:16:f0: 05:dc:bb:44:ed:4e:42:b2:9f:82:84:9e:c0:53:1d: 66:48:37:85:a2:fd:72:c9:74:d3:98:2c:86:03:14: 7f:dc:e7:da:70:6b:d8:bb:8b:e0:0a:8a:d6:a2:31: 50:79:4b:c3:48:b8:00:99:33:68:89:e2:b1:91:71: fc:8f:45:04:43:00:4c:81:61:3b:6f:5e:d2:33:37: 99:c1:f0:42:80:61:7a:11:13:ae:b6:4a:ba:47:43: 8a:7e:21:65:0e:68:6c:43:1e:67:8b:a4:57:90:e1: 55:60:62:1f:8a:06:39:c6:0c:26:dc:4f:c2:e2:cb: b1:e1:be:ac:ac:dc:a6:2d:41:4a:10:56:ca:07:77: e4:79:32:e2:c4:84:2d:a3:80:9a:1a:6c:8e:4d:97: fe:17:e3:53:8c:9b:84:f4:56:30:48:b2:ff:63:69: 60:a1:a5:b7:f4:8d:32:59:54:83:e1:9e:f1:aa:b5: 04:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:53:2F:95:E8:74:2A:91:F3:69:99:CE:1A:73:00:3D:18:7F:EE:0A X509v3 Authority Key Identifier: keyid:38:30:79:2B:5E:3B:BA:C9:F3:70:D4:CA:E7:AB:A2:A5:CD:BA:7A:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODB5K147usnzcNTK56uipc26ego.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ulMvleh0KpHzaZnOGnMAPRh_7go.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c1ce51-19eb-4096-bdb9-1bffa74a3b1d/1/ODB5K147usnzcNTK56uipc26ego.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.7.0/24 Signature Algorithm: sha256WithRSAEncryption 67:b7:9c:8a:44:f2:75:89:e6:9d:a5:ff:b1:1c:30:33:51:9e: 9a:fc:d1:3d:d8:ad:fe:ad:6f:35:d1:a0:84:aa:cd:7c:ba:65: 50:bf:2a:41:f5:cc:fe:94:db:29:57:b8:bd:25:18:71:81:fc: 62:65:1a:d8:07:28:c1:12:c1:84:b0:56:18:a8:c6:28:77:ec: ca:97:50:dc:13:70:02:3f:48:e8:5e:2e:4a:fd:be:d0:a6:22: 59:7e:92:74:7b:0b:2b:5a:08:4f:75:ba:18:96:8d:09:6c:b0: df:40:5a:b2:d0:34:2a:2f:79:37:bb:30:2d:87:29:a6:fd:b3: f2:7f:6a:df:01:19:eb:26:10:1a:e2:72:8f:94:e1:03:3c:63: c9:f0:6b:02:f3:7e:e1:1d:b9:b8:68:c1:8c:9b:4b:50:01:52: bd:7e:c5:f3:23:3d:3b:ef:15:53:de:7a:25:ce:77:19:3e:3e: 26:aa:eb:1c:04:ff:e9:45:5d:a1:f8:71:6c:2a:6d:a8:3f:fc: 21:82:2f:7c:b1:b5:57:cd:8e:33:d6:75:c3:df:d8:ae:d8:3a: 97:19:a3:bc:ee:1c:5a:20:06:8a:33:6c:6b:ef:b6:f4:2a:99: 2e:39:7c:9b:91:ae:b6:45:80:7b:f7:58:7b:b5:1a:1a:0f:8c: 44:42:4f:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EqPls/mLunyAOqA0AQTPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MzA3OTJiNWUzYmJhYzlmMzcwZDRjYWU3YWJhMmE1Y2Ri YTdhMGEwHhcNMjYwMTAyMDAxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTUzMmY5NWU4NzQyYTkxZjM2OTk5Y2UxYTczMDAzZDE4N2ZlZTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMbtekSLrnITABjoQOzFnnrKRI2K 2f9UAAF7UZIz6dz3Mc2EPbJpMYYdJ3fbny4HgTEeu1d+9R4hX7vXXXSw6igGqxuS gmQrFvAF3LtE7U5Csp+ChJ7AUx1mSDeFov1yyXTTmCyGAxR/3OfacGvYu4vgCorW ojFQeUvDSLgAmTNoieKxkXH8j0UEQwBMgWE7b17SMzeZwfBCgGF6EROutkq6R0OK fiFlDmhsQx5ni6RXkOFVYGIfigY5xgwm3E/C4sux4b6srNymLUFKEFbKB3fkeTLi xIQto4CaGmyOTZf+F+NTjJuE9FYwSLL/Y2lgoaW39I0yWVSD4Z7xqrUE2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLpTL5XodCqR82mZzhpzAD0Yf+4KMB8GA1UdIwQY MBaAFDgweSteO7rJ83DUyueroqXNunoKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0RCNUsxNDd1c256Y05USzU2dWlwYzI2ZWdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9jMWNlNTEtMTllYi00MDk2LWJkYjkt MWJmZmE3NGEzYjFkLzEvdWxNdmxlaDBLcEh6YVpuT0duTUFQUmhfN2dvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9jMWNlNTEtMTllYi00MDk2LWJkYjktMWJmZmE3NGEzYjFk LzEvT0RCNUsxNDd1c256Y05USzU2dWlwYzI2ZWdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8YHMA0G CSqGSIb3DQEBCwUAA4IBAQBnt5yKRPJ1ieadpf+xHDAzUZ6a/NE92K3+rW810aCE qs18umVQvypB9cz+lNspV7i9JRhxgfxiZRrYByjBEsGEsFYYqMYod+zKl1DcE3AC P0joXi5K/b7QpiJZfpJ0ewsrWghPdboYlo0JbLDfQFqy0DQqL3k3uzAthymm/bPy f2rfARnrJhAa4nKPlOEDPGPJ8GsC837hHbm4aMGMm0tQAVK9fsXzIz077xVT3nol zncZPj4mquscBP/pRV2h+HFsKm2oP/whgi98sbVXzY4z1nXD39iu2DqXGaO87hxa IAaKM2xr77b0KpkuOXybka62RYB791h7tRoaD4xEQk+H -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:48 2026 by rpki-client