This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/UHPrs3fTWAGncbw93gObHz404mM.roa File: UHPrs3fTWAGncbw93gObHz404mM.roa (raw, json) Hash identifier: Ly87OJ3bcfOFr+MaCdeJuDqxDXCXJ38vySRXLeTObdM= Subject key identifier: 50:73:EB:B3:77:D3:58:01:A7:71:BC:3D:DE:03:9B:1F:3E:34:E2:63 Certificate issuer: /CN=22877298dae5d5a3beabca16e92d1a141e948627 Certificate serial: 019B78A2C01F86DDAEDB7199367A3E36C722 Authority key identifier: 22:87:72:98:DA:E5:D5:A3:BE:AB:CA:16:E9:2D:1A:14:1E:94:86:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/UHPrs3fTWAGncbw93gObHz404mM.roa Signing time: Thu 01 Jan 2026 08:18:10 +0000 ROA not before: Thu 01 Jan 2026 08:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.115.88.0/24 maxlen: 24 185.115.89.0/24 maxlen: 24 185.115.90.0/24 maxlen: 24 185.115.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:c0:1f:86:dd:ae:db:71:99:36:7a:3e:36:c7:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22877298dae5d5a3beabca16e92d1a141e948627 Validity Not Before: Jan 1 08:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5073ebb377d35801a771bc3dde039b1f3e34e263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:23:31:95:63:e5:99:fc:bf:15:98:e3:58:5a: 14:e3:fc:15:2e:f4:3e:66:f2:e8:97:c1:c5:e8:ab: 56:eb:2b:4c:75:61:3c:6c:91:b8:d4:19:61:7a:2e: 25:ce:81:99:29:45:47:c2:0f:f5:63:83:7f:3e:fe: a7:06:05:1e:5e:67:fe:0f:91:25:32:6f:f1:06:0c: 5c:3d:9f:34:5a:f3:5b:c3:47:16:38:87:89:c1:07: d8:16:10:cf:0c:91:63:9d:1c:ce:2d:71:ec:6e:dd: f2:48:99:5d:b5:a9:f2:d1:59:9b:8e:ed:0e:9c:48: 57:14:a7:31:61:31:ed:38:4b:e5:f1:d0:f1:0c:70: c0:44:0a:8d:ce:08:37:84:f5:33:19:8b:e9:ff:5a: f9:26:99:11:61:26:67:a0:5d:e2:64:d1:64:cc:5f: 35:53:e3:02:16:0f:ce:0f:99:d0:1f:1e:62:17:6e: f0:46:75:58:1d:50:ed:e6:e3:a1:ed:cf:8f:f7:92: 61:02:82:9a:39:9d:a8:21:39:1e:fa:a9:4f:5d:c7: 6a:ea:ee:b3:98:1c:d2:01:40:28:3d:11:0f:45:24: 9f:2d:b8:27:7c:90:fa:86:e1:c4:22:b7:fe:b7:1c: 35:70:97:59:97:23:23:ba:f5:13:d4:02:43:19:ed: de:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:73:EB:B3:77:D3:58:01:A7:71:BC:3D:DE:03:9B:1F:3E:34:E2:63 X509v3 Authority Key Identifier: keyid:22:87:72:98:DA:E5:D5:A3:BE:AB:CA:16:E9:2D:1A:14:1E:94:86:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/UHPrs3fTWAGncbw93gObHz404mM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.115.88.0/22 Signature Algorithm: sha256WithRSAEncryption 80:4c:19:ba:84:61:05:a0:bb:df:ab:4c:91:3e:46:5b:97:93: fc:ee:6b:2c:bc:31:13:b7:26:5f:cf:25:ea:0e:e6:46:ab:41: 05:d6:a6:95:9a:7b:ea:f0:a6:13:b6:e0:9d:95:a3:7e:7b:3d: d0:fd:4c:d0:39:35:da:22:34:c2:81:2b:e8:a7:70:e3:5a:5e: 4b:95:0b:ad:1b:9f:46:e9:a9:9c:ce:0b:ae:4c:7c:44:1e:ab: 19:c9:aa:2a:c2:1c:01:1c:9c:30:96:d3:b6:90:74:94:85:9b: 8c:2a:16:96:bc:7e:a4:5b:c5:bd:91:90:80:6e:2f:e1:02:51: ad:12:51:31:b4:57:b9:73:45:b2:ea:e6:75:58:dd:e0:37:3a: a1:0f:e6:58:eb:f0:24:10:f1:9b:26:eb:7a:13:87:3d:46:b3: c8:ff:de:89:05:ac:02:5d:81:fe:a2:a6:b1:b4:0b:5d:e8:16: fa:7b:9c:b9:6a:d0:e6:91:1e:c8:00:39:e3:05:1f:a3:78:aa: 82:44:c3:80:c4:ba:c8:14:b1:c2:ee:86:97:aa:e4:b1:8b:06: 34:f3:83:ae:38:fa:77:82:aa:63:f6:94:9d:9c:57:fe:c9:ec: 80:7d:a9:04:74:dd:2f:da:c6:59:0a:a5:42:74:bf:20:66:79: 05:d1:a7:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4osAfht2u23GZNno+NsciMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyODc3Mjk4ZGFlNWQ1YTNiZWFiY2ExNmU5MmQxYTE0MWU5 NDg2MjcwHhcNMjYwMTAxMDgxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDczZWJiMzc3ZDM1ODAxYTc3MWJjM2RkZTAzOWIxZjNlMzRlMjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyMxlWPlmfy/FZjjWFoU4/wVLvQ+ ZvLol8HF6KtW6ytMdWE8bJG41Blhei4lzoGZKUVHwg/1Y4N/Pv6nBgUeXmf+D5El Mm/xBgxcPZ80WvNbw0cWOIeJwQfYFhDPDJFjnRzOLXHsbt3ySJldtany0Vmbju0O nEhXFKcxYTHtOEvl8dDxDHDARAqNzgg3hPUzGYvp/1r5JpkRYSZnoF3iZNFkzF81 U+MCFg/OD5nQHx5iF27wRnVYHVDt5uOh7c+P95JhAoKaOZ2oITke+qlPXcdq6u6z mBzSAUAoPREPRSSfLbgnfJD6huHEIrf+txw1cJdZlyMjuvUT1AJDGe3egwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFBz67N301gBp3G8Pd4Dmx8+NOJjMB8GA1UdIwQY MBaAFCKHcpja5dWjvqvKFuktGhQelIYnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSW9keW1OcmwxYU8tcThvVzZTMGFGQjZVaGljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84NjUxYzUtYmQ3Ny00NjBkLTgzYmYt NTkzM2EwOWY3MmQxLzEvVUhQcnMzZlRXQUduY2J3OTNnT2JIejQwNG1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS84NjUxYzUtYmQ3Ny00NjBkLTgzYmYtNTkzM2EwOWY3MmQx LzEvSW9keW1OcmwxYU8tcThvVzZTMGFGQjZVaGljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXNYMA0G CSqGSIb3DQEBCwUAA4IBAQCATBm6hGEFoLvfq0yRPkZbl5P87mssvDETtyZfzyXq DuZGq0EF1qaVmnvq8KYTtuCdlaN+ez3Q/UzQOTXaIjTCgSvop3DjWl5LlQutG59G 6amczguuTHxEHqsZyaoqwhwBHJwwltO2kHSUhZuMKhaWvH6kW8W9kZCAbi/hAlGt ElExtFe5c0Wy6uZ1WN3gNzqhD+ZY6/AkEPGbJut6E4c9RrPI/96JBawCXYH+oqax tAtd6Bb6e5y5atDmkR7IADnjBR+jeKqCRMOAxLrIFLHC7oaXquSxiwY084OuOPp3 gqpj9pSdnFf+yeyAfakEdN0v2sZZCqVCdL8gZnkF0ad9 -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:10 2026 by rpki-client