This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/uTHa6sFwz7iHdcsHyP4fqm0OW5k.roa File: uTHa6sFwz7iHdcsHyP4fqm0OW5k.roa (raw, json) Hash identifier: v43HCGHUrt3AhlDzq1vOZbFXiCOEf6fmSyNlKWtvXnE= Subject key identifier: B9:31:DA:EA:C1:70:CF:B8:87:75:CB:07:C8:FE:1F:AA:6D:0E:5B:99 Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Certificate serial: 019B77C757820EB294374058DA6F320B3814 Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/uTHa6sFwz7iHdcsHyP4fqm0OW5k.roa Signing time: Thu 01 Jan 2026 04:18:31 +0000 ROA not before: Thu 01 Jan 2026 04:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7018 IP address blocks: 89.187.9.0/24 maxlen: 24 89.187.20.0/24 maxlen: 24 89.187.27.0/24 maxlen: 24 89.187.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 02:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:57:82:0e:b2:94:37:40:58:da:6f:32:0b:38:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Validity Not Before: Jan 1 04:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b931daeac170cfb88775cb07c8fe1faa6d0e5b99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:52:97:fe:c2:ff:bc:a2:fb:13:01:d8:4a:e6: 61:bb:a2:d0:f0:cb:40:2e:cf:37:79:ca:cf:1e:4a: 3f:e3:5c:de:0d:4a:4e:47:53:06:1c:78:fd:43:1e: 2b:35:31:45:5b:ff:6f:fe:a5:c5:5e:59:f3:52:07: 6f:70:e4:13:c0:4d:22:8a:e7:a6:15:a4:e4:54:28: 25:78:e3:c2:52:45:0e:d0:06:0a:7c:d8:6d:5c:e8: 25:b4:08:4a:38:19:cb:6c:f2:ca:b8:16:72:53:a0: fe:93:e4:67:b8:fc:89:c7:5e:9d:6f:bf:e1:22:49: 02:7b:35:f6:db:f3:b8:6e:11:c3:86:ab:46:94:97: 89:c0:b3:3d:39:07:3a:79:23:34:68:14:04:cd:c6: c9:83:1d:ea:d6:09:38:c2:4a:6e:c1:f3:cb:54:04: 8c:92:01:01:fc:1f:93:e6:79:9f:78:2d:95:47:9f: f0:6f:2f:b2:4b:b6:e2:c8:dc:dd:1b:ae:ed:b0:3f: 1e:80:4a:55:6d:7f:ab:c5:fe:72:41:0f:24:74:65: d8:03:3a:67:ab:a5:94:42:fb:f8:30:5b:b4:59:b4: 3d:7f:f2:8e:8d:c8:f2:4c:75:f6:04:1f:d7:a1:5d: 05:6b:8f:05:ca:94:e1:36:11:2c:10:1e:ab:97:93: 76:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:31:DA:EA:C1:70:CF:B8:87:75:CB:07:C8:FE:1F:AA:6D:0E:5B:99 X509v3 Authority Key Identifier: keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/uTHa6sFwz7iHdcsHyP4fqm0OW5k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.187.9.0/24 89.187.20.0/24 89.187.27.0/24 89.187.31.0/24 Signature Algorithm: sha256WithRSAEncryption ea:8b:5d:3e:78:29:a0:18:62:e9:6c:51:a7:2a:66:03:87:d0: 24:bb:0c:e1:88:c3:83:44:ee:df:91:fe:90:5e:e4:74:9a:a9: 7c:f6:cd:aa:5f:15:02:e2:24:f8:d7:3d:91:0f:e5:1b:27:9e: 7f:62:88:2c:4d:45:02:b7:f2:38:62:81:1c:7e:9b:9c:12:a0: 46:fd:bb:14:53:1b:2e:b2:29:36:13:2a:8f:2e:1f:ae:75:a3: 6e:29:81:d6:37:ba:7c:43:4f:9e:f8:31:ad:ba:09:b1:3d:6b: c6:df:99:d8:1f:39:b3:d0:8a:3c:d6:1c:c7:e7:cd:69:92:b8: be:e3:12:8b:0a:90:50:c4:ac:4f:d5:30:76:3a:14:98:b2:3a: be:a3:c3:da:8e:a3:aa:a1:5e:cc:c4:c3:d7:64:0d:ac:70:71: 9c:23:08:ca:ee:28:2c:bf:09:71:b9:12:cc:75:56:b0:41:48: 5b:82:77:f9:73:f1:a1:50:76:ab:54:2c:9d:35:90:71:a2:d9: d8:61:e4:78:d1:6b:79:57:94:f1:81:18:b9:02:91:73:51:fc: eb:09:81:ed:15:be:64:00:99:32:d7:25:a6:be:5f:ad:1f:e2: 2d:9b:ff:2d:5f:3d:8c:48:ae:7b:18:9d:63:0b:c1:ae:c8:27: cd:18:1c:5f -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3x1eCDrKUN0BY2m8yCzgUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw YmYwNTUwHhcNMjYwMTAxMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTMxZGFlYWMxNzBjZmI4ODc3NWNiMDdjOGZlMWZhYTZkMGU1Yjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlKX/sL/vKL7EwHYSuZhu6LQ8MtA Ls83ecrPHko/41zeDUpOR1MGHHj9Qx4rNTFFW/9v/qXFXlnzUgdvcOQTwE0iiuem FaTkVCgleOPCUkUO0AYKfNhtXOgltAhKOBnLbPLKuBZyU6D+k+RnuPyJx16db7/h IkkCezX22/O4bhHDhqtGlJeJwLM9OQc6eSM0aBQEzcbJgx3q1gk4wkpuwfPLVASM kgEB/B+T5nmfeC2VR5/wby+yS7biyNzdG67tsD8egEpVbX+rxf5yQQ8kdGXYAzpn q6WUQvv4MFu0WbQ9f/KOjcjyTHX2BB/XoV0Fa48FypThNhEsEB6rl5N2JwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLkx2urBcM+4h3XLB8j+H6ptDluZMB8GA1UdIwQY MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt NDVjZmM4NTdkZGRkLzEvdVRIYTZzRnd6N2lIZGNzSHlQNGZxbTBPVzVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWbsJAwQA WbsUAwQAWbsbAwQAWbsfMA0GCSqGSIb3DQEBCwUAA4IBAQDqi10+eCmgGGLpbFGn KmYDh9AkuwzhiMODRO7fkf6QXuR0mql89s2qXxUC4iT41z2RD+UbJ55/YogsTUUC t/I4YoEcfpucEqBG/bsUUxsusik2EyqPLh+udaNuKYHWN7p8Q0+e+DGtugmxPWvG 35nYHzmz0Io81hzH581pkri+4xKLCpBQxKxP1TB2OhSYsjq+o8PajqOqoV7MxMPX ZA2scHGcIwjK7igsvwlxuRLMdVawQUhbgnf5c/GhUHarVCydNZBxotnYYeR40Wt5 V5TxgRi5ApFzUfzrCYHtFb5kAJky1yWmvl+tH+Itm/8tXz2MSK57GJ1jC8GuyCfN GBxf -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:14 2026 by rpki-client