This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/Unv8xse6AR-bpDkn4c3FOxQwV28.roa File: Unv8xse6AR-bpDkn4c3FOxQwV28.roa (raw, json) Hash identifier: a6YUsdpa0x0/jXJNF3YRlOq4zwmfV6aN7LgABeabB6s= Subject key identifier: 52:7B:FC:C6:C7:BA:01:1F:9B:A4:39:27:E1:CD:C5:3B:14:30:57:6F Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F8466E9CAB556E797995720031AE6B0 Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/Unv8xse6AR-bpDkn4c3FOxQwV28.roa Signing time: Fri 02 Jan 2026 16:22:22 +0000 ROA not before: Fri 02 Jan 2026 16:22:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55002 IP address blocks: 213.14.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:66:e9:ca:b5:56:e7:97:99:57:20:03:1a:e6:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=527bfcc6c7ba011f9ba43927e1cdc53b1430576f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:50:a5:06:b7:a2:b7:bb:b7:a3:90:0e:24:0b: 50:13:90:b8:a7:26:5a:b7:88:dd:64:2d:0d:83:f1: 0b:f4:43:59:d1:66:f5:e8:35:d5:26:91:dd:66:8f: 68:92:71:f8:ac:db:ef:1f:94:d1:1d:0b:10:06:b8: d4:0c:fd:09:34:56:dd:00:84:71:48:9e:4c:5b:37: 50:0e:52:fb:0b:43:c3:a1:38:a5:7e:22:d3:19:6e: 01:db:aa:84:34:96:40:cd:ff:c4:b4:14:0b:d1:ce: 00:48:07:97:18:5b:ba:5f:33:a5:d0:aa:84:85:ab: 3a:c6:f9:54:15:c9:40:16:36:ea:8d:e1:1f:ab:32: 76:34:f4:84:a7:da:5a:5d:74:c6:5c:d4:f9:b5:b8: 82:e4:ac:67:fc:42:7d:68:27:2a:7e:fc:dd:7e:51: d3:bd:25:6b:fa:c1:58:b1:cc:cb:08:5f:9a:ab:a9: d4:1b:3c:62:1e:50:9f:45:39:d7:15:d5:41:fc:7a: 61:3e:1d:71:ef:bc:2b:2d:c4:93:25:ad:59:a8:0b: 03:bf:be:73:2a:57:a7:c4:2d:c9:11:e9:4d:de:ab: f7:d4:9e:d2:39:00:48:ff:1f:25:f8:df:a5:8a:c2: 9d:bb:77:78:0b:90:ab:90:bc:ac:6d:96:ef:29:2a: b4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7B:FC:C6:C7:BA:01:1F:9B:A4:39:27:E1:CD:C5:3B:14:30:57:6F X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/Unv8xse6AR-bpDkn4c3FOxQwV28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.14.215.0/24 Signature Algorithm: sha256WithRSAEncryption 78:1c:1e:12:4f:e4:6a:d1:8d:1e:63:5e:8f:d1:16:47:f0:a1: 4c:69:26:53:ae:a1:ad:ef:22:c4:69:b2:96:68:10:37:74:83: 9e:cd:a5:ff:10:c5:97:81:17:4f:44:62:a7:09:22:92:f3:65: 6c:e9:be:84:94:ee:01:65:f2:94:58:5b:6a:3d:87:f0:35:5d: f3:89:ed:d1:b8:1f:13:24:e2:cf:ce:57:cf:10:e2:ed:93:17: 5a:de:fd:7a:c5:85:3b:9f:c9:24:1c:12:65:23:06:dc:22:ef: 9e:e4:b3:00:5c:87:28:a7:eb:3d:f1:d5:e8:5d:82:64:01:da: c2:bb:83:87:67:99:d4:18:3a:9b:f1:34:f4:08:b9:bc:75:f4: 87:b8:bd:6d:12:e5:4b:49:78:22:67:ed:b9:ea:aa:37:0f:c1: fc:26:19:77:18:00:8f:98:ed:2d:0b:b0:62:08:b9:b9:83:30: c3:e4:12:e1:3e:45:7a:2b:58:f0:d6:6f:63:52:f7:4c:6b:0b: f2:39:6e:95:61:7e:e8:52:22:7b:3b:11:ed:3b:6d:96:d3:4f: 7c:75:fe:97:4d:46:78:b3:dd:a1:1a:c5:e4:f9:91:d7:18:56: d4:bc:b2:1c:8b:f1:35:3e:54:6a:bf:71:ff:05:30:6c:5b:a1: e9:f9:10:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hGbpyrVW55eZVyADGuawMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjdiZmNjNmM3YmEwMTFmOWJhNDM5MjdlMWNkYzUzYjE0MzA1NzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVClBreit7u3o5AOJAtQE5C4pyZa t4jdZC0Ng/EL9ENZ0Wb16DXVJpHdZo9oknH4rNvvH5TRHQsQBrjUDP0JNFbdAIRx SJ5MWzdQDlL7C0PDoTilfiLTGW4B26qENJZAzf/EtBQL0c4ASAeXGFu6XzOl0KqE has6xvlUFclAFjbqjeEfqzJ2NPSEp9paXXTGXNT5tbiC5Kxn/EJ9aCcqfvzdflHT vSVr+sFYsczLCF+aq6nUGzxiHlCfRTnXFdVB/HphPh1x77wrLcSTJa1ZqAsDv75z KlenxC3JEelN3qv31J7SOQBI/x8l+N+lisKdu3d4C5CrkLysbZbvKSq0pQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFJ7/MbHugEfm6Q5J+HNxTsUMFdvMB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvVW52OHhzZTZBUi1icERrbjRjM0ZPeFF3VjI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Q7XMA0G CSqGSIb3DQEBCwUAA4IBAQB4HB4ST+Rq0Y0eY16P0RZH8KFMaSZTrqGt7yLEabKW aBA3dIOezaX/EMWXgRdPRGKnCSKS82Vs6b6ElO4BZfKUWFtqPYfwNV3zie3RuB8T JOLPzlfPEOLtkxda3v16xYU7n8kkHBJlIwbcIu+e5LMAXIcop+s98dXoXYJkAdrC u4OHZ5nUGDqb8TT0CLm8dfSHuL1tEuVLSXgiZ+256qo3D8H8Jhl3GACPmO0tC7Bi CLm5gzDD5BLhPkV6K1jw1m9jUvdMawvyOW6VYX7oUiJ7OxHtO22W0098df6XTUZ4 s92hGsXk+ZHXGFbUvLIci/E1PlRqv3H/BTBsW6Hp+RBs -----END CERTIFICATE-----Generated at Tue Jan 20 14:14:20 2026 by rpki-client