This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/vUVrsBxk_ZUy0s2IP3gA1vQjVcc.roa File: vUVrsBxk_ZUy0s2IP3gA1vQjVcc.roa (raw, json) Hash identifier: jdQIPt1Uhbi952qXzHWO2e5b80hHvTs1H8idT8nlc+Y= Subject key identifier: BD:45:6B:B0:1C:64:FD:95:32:D2:CD:88:3F:78:00:D6:F4:23:55:C7 Certificate issuer: /CN=baab3f0885b5566b9b1533d2096df68e549fec3e Certificate serial: 019B77C72AD371278941678F35822E5F949C Authority key identifier: BA:AB:3F:08:85:B5:56:6B:9B:15:33:D2:09:6D:F6:8E:54:9F:EC:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqs_CIW1VmubFTPSCW32jlSf7D4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/vUVrsBxk_ZUy0s2IP3gA1vQjVcc.roa Signing time: Thu 01 Jan 2026 04:18:19 +0000 ROA not before: Thu 01 Jan 2026 04:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51134 IP address blocks: 91.216.168.0/24 maxlen: 24 91.230.144.0/24 maxlen: 24 185.252.196.0/22 maxlen: 24 2a0c:3240::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.mft rsync://rpki.ripe.net/repository/DEFAULT/uqs_CIW1VmubFTPSCW32jlSf7D4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:2a:d3:71:27:89:41:67:8f:35:82:2e:5f:94:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baab3f0885b5566b9b1533d2096df68e549fec3e Validity Not Before: Jan 1 04:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd456bb01c64fd9532d2cd883f7800d6f42355c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:71:c6:0f:50:a3:c6:89:bc:06:b3:68:9a:ab: 7b:d9:36:38:d3:4f:d4:0e:67:cd:94:0f:69:fe:fb: 99:60:e9:6e:09:ff:6d:6b:16:fd:73:ce:bd:e0:ae: 61:90:95:ce:79:0a:c0:54:34:89:73:09:08:65:2d: 29:4f:21:7b:e6:26:04:f2:31:6c:b3:f6:35:a1:d0: cf:75:9c:ba:40:29:d4:9b:e5:dd:e3:5a:81:44:df: 25:81:8a:ca:aa:bc:d1:55:5c:4d:66:d1:ac:ca:bb: 55:09:bc:f6:b4:5b:0e:31:29:ac:00:a6:96:c1:7d: 82:4f:a3:05:d9:fb:5a:ec:e9:32:31:e3:a0:b0:8b: 51:44:9a:1f:4a:c3:aa:ee:b4:3a:50:6c:ba:0e:4a: 24:b5:f4:5f:95:19:f4:4d:bd:27:78:40:be:24:5b: f2:7b:8a:40:c3:ef:7e:17:0b:88:8d:1a:19:04:e6: 10:88:48:d7:29:b5:37:e0:f8:71:d1:52:d5:d1:18: 1d:43:5a:2a:3d:8d:5d:2f:93:f0:d2:b4:15:92:9a: b0:a5:80:66:55:c1:c3:a7:b0:1a:b7:73:a1:de:4d: 08:81:03:a0:36:c3:28:0f:f0:66:d2:b2:6d:e8:e6: e3:8c:0a:17:43:8e:00:62:7d:fe:04:1b:4a:69:6a: f8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:45:6B:B0:1C:64:FD:95:32:D2:CD:88:3F:78:00:D6:F4:23:55:C7 X509v3 Authority Key Identifier: keyid:BA:AB:3F:08:85:B5:56:6B:9B:15:33:D2:09:6D:F6:8E:54:9F:EC:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqs_CIW1VmubFTPSCW32jlSf7D4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/vUVrsBxk_ZUy0s2IP3gA1vQjVcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd111c-2d7f-44f3-9eb6-9af13f836879/1/uqs_CIW1VmubFTPSCW32jlSf7D4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.168.0/24 91.230.144.0/24 185.252.196.0/22 IPv6: 2a0c:3240::/29 Signature Algorithm: sha256WithRSAEncryption 1a:6d:f9:89:d5:cc:d1:f4:3e:2c:17:e1:c9:ff:ab:7a:29:c7: e6:07:e9:8d:53:4a:6e:6c:2d:cc:4e:1e:89:e6:c0:a7:b9:a5: d6:69:39:b1:22:41:40:1c:77:10:d7:cf:a2:d7:2b:20:41:98: a7:6f:e6:b6:a8:00:81:17:cd:fa:c1:9a:82:c4:98:9f:1c:98: 6e:77:81:6b:9e:27:61:a7:72:7d:f9:1a:fe:cd:7e:b1:63:b7: 6b:a8:87:8e:7f:ff:56:dc:eb:a9:d4:46:a0:fb:64:e8:b8:28: 6c:c7:ba:58:53:d5:f9:89:77:c8:22:3f:48:89:bf:4f:97:60: 7a:a8:24:95:aa:ac:9d:ff:63:f1:56:78:a0:44:73:bf:b6:c6: bf:32:9c:40:56:bd:3e:c7:6c:eb:7b:56:20:ca:63:6a:9f:80: 4c:a8:77:f4:bc:16:7a:a6:f2:9e:53:16:48:8b:a6:a4:e6:d9: 8b:05:71:44:49:94:74:22:b2:ec:42:80:f5:62:54:e4:b4:94: c1:98:73:09:bd:c2:0f:ba:5e:37:8b:d1:c8:11:2f:df:b3:16: 34:0f:75:d9:55:c3:c0:e5:dc:2e:bf:32:04:dd:f3:3b:85:f2: b7:8b:11:f2:cc:1d:81:35:2d:d6:75:50:5f:90:f4:f7:4f:0c: 31:9b:4b:d3 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt3xyrTcSeJQWePNYIuX5ScMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWIzZjA4ODViNTU2NmI5YjE1MzNkMjA5NmRmNjhlNTQ5 ZmVjM2UwHhcNMjYwMTAxMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDQ1NmJiMDFjNjRmZDk1MzJkMmNkODgzZjc4MDBkNmY0MjM1NWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnHGD1Cjxom8BrNomqt72TY400/U DmfNlA9p/vuZYOluCf9taxb9c8694K5hkJXOeQrAVDSJcwkIZS0pTyF75iYE8jFs s/Y1odDPdZy6QCnUm+Xd41qBRN8lgYrKqrzRVVxNZtGsyrtVCbz2tFsOMSmsAKaW wX2CT6MF2fta7OkyMeOgsItRRJofSsOq7rQ6UGy6DkoktfRflRn0Tb0neEC+JFvy e4pAw+9+FwuIjRoZBOYQiEjXKbU34Phx0VLV0RgdQ1oqPY1dL5Pw0rQVkpqwpYBm VcHDp7Aat3Oh3k0IgQOgNsMoD/Bm0rJt6ObjjAoXQ44AYn3+BBtKaWr4MQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFL1Fa7AcZP2VMtLNiD94ANb0I1XHMB8GA1UdIwQY MBaAFLqrPwiFtVZrmxUz0glt9o5Un+w+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFzX0NJVzFWbXViRlRQU0NXMzJqbFNmN0Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jZDExMWMtMmQ3Zi00NGYzLTllYjYt OWFmMTNmODM2ODc5LzEvdlVWcnNCeGtfWlV5MHMySVAzZ0ExdlFqVmNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9jZDExMWMtMmQ3Zi00NGYzLTllYjYtOWFmMTNmODM2ODc5 LzEvdXFzX0NJVzFWbXViRlRQU0NXMzJqbFNmN0Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAW9ioAwQA W+aQAwQCufzEMA0EAgACMAcDBQMqDDJAMA0GCSqGSIb3DQEBCwUAA4IBAQAabfmJ 1czR9D4sF+HJ/6t6KcfmB+mNU0pubC3MTh6J5sCnuaXWaTmxIkFAHHcQ18+i1ysg QZinb+a2qACBF836wZqCxJifHJhud4Frnidhp3J9+Rr+zX6xY7drqIeOf/9W3Oup 1Eag+2TouChsx7pYU9X5iXfIIj9Iib9Pl2B6qCSVqqyd/2PxVnigRHO/tsa/MpxA Vr0+x2zre1YgymNqn4BMqHf0vBZ6pvKeUxZIi6ak5tmLBXFESZR0IrLsQoD1YlTk tJTBmHMJvcIPul43i9HIES/fsxY0D3XZVcPA5dwuvzIE3fM7hfK3ixHyzB2BNS3W dVBfkPT3Twwxm0vT -----END CERTIFICATE-----Generated at Tue Jan 27 08:30:19 2026 by rpki-client