This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Uv8jTBn7bNQr7D3epY0gNz8Wl0Y.roa File: Uv8jTBn7bNQr7D3epY0gNz8Wl0Y.roa (raw, json) Hash identifier: aH4B/Cqo4PxK4QF0/ZP8eTrvzOg7otgS0KxJxRiOWL8= Subject key identifier: 52:FF:23:4C:19:FB:6C:D4:2B:EC:3D:DE:A5:8D:20:37:3F:16:97:46 Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C7FFDDFF072B1D29D9A33DFB8D2FB4B Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Uv8jTBn7bNQr7D3epY0gNz8Wl0Y.roa Signing time: Fri 02 Jan 2026 02:18:41 +0000 ROA not before: Fri 02 Jan 2026 02:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2280 IP address blocks: 90.84.11.0/24 maxlen: 24 90.84.14.0/23 maxlen: 24 90.84.15.0/24 maxlen: 24 90.84.16.0/21 maxlen: 24 90.84.39.0/24 maxlen: 24 90.84.40.0/21 maxlen: 24 90.84.154.0/23 maxlen: 23 90.84.154.0/24 maxlen: 24 90.84.155.0/24 maxlen: 24 90.84.168.0/21 maxlen: 24 90.84.176.0/21 maxlen: 24 90.84.184.0/21 maxlen: 24 90.84.184.0/24 maxlen: 24 90.84.192.0/21 maxlen: 24 90.84.240.0/21 maxlen: 24 90.84.251.0/24 maxlen: 24 90.84.252.0/23 maxlen: 24 90.84.253.0/24 maxlen: 24 90.84.254.0/24 maxlen: 24 2a01:c9c0:8000::/48 maxlen: 48 2a01:c9c0:800f::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:fd:df:f0:72:b1:d2:9d:9a:33:df:b8:d2:fb:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52ff234c19fb6cd42bec3ddea58d20373f169746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4c:4f:e9:b8:ef:4e:fb:4c:0e:5b:63:48:44: 6f:e2:23:60:84:a0:dd:39:8d:24:51:9e:72:6c:c0: 6c:ae:ec:51:7c:b7:3c:95:7f:9b:79:2c:d4:f7:ac: 7b:75:32:c4:bc:69:a7:11:fc:12:1f:66:99:fc:d0: 5b:b4:ad:d1:45:9b:d0:31:b0:42:cc:bc:76:e8:32: 41:91:03:8e:91:3e:6e:17:d1:c8:96:2b:d2:7e:95: 34:9b:83:de:f8:ac:33:2e:bf:53:89:80:aa:d2:28: ca:f8:a8:9e:58:89:5f:a2:7e:c7:3b:de:ed:aa:73: 99:09:8d:74:5b:ea:eb:48:45:44:10:17:02:5e:34: 45:c0:bb:a8:06:cc:09:58:d7:9d:16:d9:a4:61:9e: 1a:29:a2:3d:9b:42:e5:ce:6b:26:9e:30:d1:83:a5: 94:87:b6:fc:53:46:b7:be:f8:2f:98:aa:3e:b0:d6: 6c:39:f6:6f:dd:ee:fe:3a:2a:4e:dc:3d:be:8f:d1: 12:9e:9d:5f:6e:54:07:1c:ab:3c:a7:82:a1:66:88: d4:f3:4d:2e:f5:db:8c:ec:d4:aa:ec:ed:ef:67:9d: fe:88:c6:c3:ef:5b:2a:b9:ff:8b:9f:44:36:32:cd: 3e:34:4a:d7:dc:a3:07:d8:d8:9a:46:74:22:6c:54: 0c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FF:23:4C:19:FB:6C:D4:2B:EC:3D:DE:A5:8D:20:37:3F:16:97:46 X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Uv8jTBn7bNQr7D3epY0gNz8Wl0Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 90.84.11.0/24 90.84.14.0-90.84.23.255 90.84.39.0-90.84.47.255 90.84.154.0/23 90.84.168.0-90.84.199.255 90.84.240.0/21 90.84.251.0-90.84.254.255 IPv6: 2a01:c9c0:8000::/48 2a01:c9c0:800f::/48 Signature Algorithm: sha256WithRSAEncryption 07:09:fe:7a:b5:cc:81:f7:ad:62:85:fe:4a:d2:5c:64:6d:15: 48:d5:24:9b:d4:7b:08:3d:d1:61:e2:f9:49:77:5a:ac:98:b5: dc:df:68:0d:f9:28:e7:d1:89:d5:56:83:08:a7:02:a7:b4:f1: fe:13:70:87:df:1c:92:91:e3:2d:d1:cb:c4:ba:21:54:e0:3e: a0:00:31:78:72:a7:d1:94:55:e1:bd:e9:ce:69:61:91:1f:b6: 64:91:66:6d:92:13:46:8e:39:9f:16:f7:69:33:0b:3f:80:c3: 9f:90:7d:1d:7e:e0:dc:85:4a:c2:4a:f8:7f:5e:04:5d:06:ab: d8:58:fd:f9:9b:5d:b6:69:a0:df:90:d1:1d:40:45:64:44:39: c6:c8:59:7d:ae:e2:69:b2:98:2a:b3:f9:e8:60:e9:b5:6e:6e: c0:44:2c:8e:91:70:19:52:40:53:04:5e:90:69:31:42:5f:92: 0e:63:37:d7:fd:5d:73:e7:fc:8d:84:32:76:e5:b1:09:cc:5b: 43:0f:ab:aa:bf:c3:4c:56:9c:18:80:2e:9f:f5:1b:85:64:ec: 6b:3f:ae:48:de:bd:1e:fd:56:fa:88:04:83:9d:ac:55:53:6f: 4d:0e:1b:30:f6:7d:8d:2d:da:ae:b8:6d:f1:fa:0d:4a:5d:ca: 20:1a:9f:60 -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgISAZt8f/3f8HKx0p2aM9+40vtLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmZmMjM0YzE5ZmI2Y2Q0MmJlYzNkZGVhNThkMjAzNzNmMTY5NzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkxP6bjvTvtMDltjSERv4iNghKDd OY0kUZ5ybMBsruxRfLc8lX+beSzU96x7dTLEvGmnEfwSH2aZ/NBbtK3RRZvQMbBC zLx26DJBkQOOkT5uF9HIlivSfpU0m4Pe+KwzLr9TiYCq0ijK+KieWIlfon7HO97t qnOZCY10W+rrSEVEEBcCXjRFwLuoBswJWNedFtmkYZ4aKaI9m0LlzmsmnjDRg6WU h7b8U0a3vvgvmKo+sNZsOfZv3e7+OipO3D2+j9ESnp1fblQHHKs8p4KhZojU800u 9duM7NSq7O3vZ53+iMbD71squf+Ln0Q2Ms0+NErX3KMH2NiaRnQibFQMTwIDAQAB o4ICZzCCAmMwHQYDVR0OBBYEFFL/I0wZ+2zUK+w93qWNIDc/FpdGMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvVXY4alRCbjdiTlFyN0QzZXBZMGdOejhXbDBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH0GCCsGAQUFBwEHAQH/BG4wbDBQBAIAATBKAwQAWlQLMAwD BAFaVA4DBANaVBAwDAMEAFpUJwMEBFpUIAMEAVpUmjAMAwQDWlSoAwQDWlTAAwQD WlTwMAwDBABaVPsDBABaVP4wGAQCAAIwEgMHACoBycCAAAMHACoBycCADzANBgkq hkiG9w0BAQsFAAOCAQEABwn+erXMgfetYoX+StJcZG0VSNUkm9R7CD3RYeL5SXda rJi13N9oDfko59GJ1VaDCKcCp7Tx/hNwh98ckpHjLdHLxLohVOA+oAAxeHKn0ZRV 4b3pzmlhkR+2ZJFmbZITRo45nxb3aTMLP4DDn5B9HX7g3IVKwkr4f14EXQar2Fj9 +Ztdtmmg35DRHUBFZEQ5xshZfa7iabKYKrP56GDptW5uwEQsjpFwGVJAUwRekGkx Ql+SDmM31/1dc+f8jYQyduWxCcxbQw+rqr/DTFacGIAun/UbhWTsaz+uSN69Hv1W +ogEg52sVVNvTQ4bMPZ9jS3arrht8foNSl3KIBqfYA== -----END CERTIFICATE-----Generated at Thu Jan 22 23:35:14 2026 by rpki-client