This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/UL-CgnrNPYQJO2OLIuI1mhSYtDA.roa File: UL-CgnrNPYQJO2OLIuI1mhSYtDA.roa (raw, json) Hash identifier: GGk+R1Gc40YBitEs0cmNl7DC/ssfY6330gew4Jn1Fl8= Subject key identifier: 50:BF:82:82:7A:CD:3D:84:09:3B:63:8B:22:E2:35:9A:14:98:B4:30 Certificate issuer: /CN=fad92323d22b44275dcecd4de295b44794623e92 Certificate serial: 019B79103AD87F8E1363BF951B5C4E703F20 Authority key identifier: FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/UL-CgnrNPYQJO2OLIuI1mhSYtDA.roa Signing time: Thu 01 Jan 2026 10:17:45 +0000 ROA not before: Thu 01 Jan 2026 10:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50893 IP address blocks: 91.216.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:3a:d8:7f:8e:13:63:bf:95:1b:5c:4e:70:3f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fad92323d22b44275dcecd4de295b44794623e92 Validity Not Before: Jan 1 10:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50bf82827acd3d84093b638b22e2359a1498b430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ce:f9:dc:f3:7f:ab:1a:32:77:34:7d:03:3f: bd:52:ac:76:04:0e:e5:eb:70:96:62:84:fa:72:27: 00:75:91:2c:fa:60:e2:e3:0e:75:69:9b:05:8e:4c: 6e:f7:d2:ab:f6:de:42:32:97:10:7a:8a:b4:aa:32: 61:72:49:fa:68:8a:72:24:a3:39:59:6d:16:a2:17: 39:e6:7f:92:40:b5:eb:d5:1a:9f:0a:61:09:9c:47: 85:4f:9a:7f:47:3d:7c:a6:0c:1c:61:bb:40:c1:97: 95:0f:1e:fd:63:14:92:3a:2a:fc:5c:8b:f8:7e:bf: 9f:fb:cd:0a:2b:12:32:cc:35:24:c6:c7:6e:13:ac: 70:01:85:57:8e:91:cf:d8:ed:a5:3a:88:c9:bb:72: 53:0b:55:11:be:eb:51:da:d6:8f:bb:2c:53:89:a8: 18:af:7e:5f:18:f8:d1:4e:9a:ea:83:b8:d8:65:29: 37:66:5f:6c:4b:a7:66:9b:50:8c:58:f8:ae:87:b8: 1c:88:a9:df:86:dc:6f:38:17:ff:2b:01:17:be:7d: f7:56:17:cf:1c:e6:ca:df:9b:7c:8f:f1:da:32:9d: 3e:49:90:a8:c4:e2:d6:c2:10:db:09:3e:7b:73:38: db:d3:61:64:e7:c0:3a:5e:39:6d:b1:5e:8c:75:32: 77:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BF:82:82:7A:CD:3D:84:09:3B:63:8B:22:E2:35:9A:14:98:B4:30 X509v3 Authority Key Identifier: keyid:FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/UL-CgnrNPYQJO2OLIuI1mhSYtDA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.1.0/24 Signature Algorithm: sha256WithRSAEncryption 24:c5:33:9a:6d:c1:24:8b:cd:71:82:ed:43:9a:af:fc:ac:f4: eb:ef:de:1e:38:5e:5a:4e:f7:f1:63:3c:4b:74:48:0b:2a:e3: 06:14:4d:33:1e:3b:97:b8:27:c4:36:06:80:a4:9b:da:1b:93: fc:e5:eb:7b:cc:f0:17:4b:41:fe:84:c9:a8:83:77:e4:26:55: 55:01:f3:fc:d8:70:27:0f:37:ea:5e:f3:08:6e:dd:dd:a9:15: d1:1b:47:20:58:14:a1:57:fb:88:8d:99:77:b1:4c:69:c7:19: 7c:2e:5f:c9:5c:34:ea:04:74:fa:8e:f9:fc:fb:ac:95:3d:25: 2f:b4:7b:e7:d7:54:89:80:15:59:85:3d:f3:a3:e3:1d:e2:52: c7:0a:28:7b:9b:b9:bd:6a:a5:46:5c:53:00:c3:2b:14:f0:0b: e4:cd:8f:3a:90:d2:2b:6b:20:88:ab:c7:ab:1d:54:95:b7:b9: c7:f9:92:28:f9:06:df:f7:86:95:19:37:64:06:c5:00:aa:ad: ec:57:5e:e9:a5:47:d7:5a:fb:e1:74:a9:d7:36:af:b2:f8:fe: 3d:c4:3a:72:f9:e3:96:86:31:7b:f5:ee:03:cd:ee:55:1d:7a: f4:ef:d6:17:e6:60:3d:05:a5:89:de:5e:88:9d:cb:4f:bd:70: 69:12:b1:22 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5EDrYf44TY7+VG1xOcD8gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZDkyMzIzZDIyYjQ0Mjc1ZGNlY2Q0ZGUyOTViNDQ3OTQ2 MjNlOTIwHhcNMjYwMTAxMTAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGJmODI4MjdhY2QzZDg0MDkzYjYzOGIyMmUyMzU5YTE0OThiNDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs753PN/qxoydzR9Az+9Uqx2BA7l 63CWYoT6cicAdZEs+mDi4w51aZsFjkxu99Kr9t5CMpcQeoq0qjJhckn6aIpyJKM5 WW0Wohc55n+SQLXr1RqfCmEJnEeFT5p/Rz18pgwcYbtAwZeVDx79YxSSOir8XIv4 fr+f+80KKxIyzDUkxsduE6xwAYVXjpHP2O2lOojJu3JTC1URvutR2taPuyxTiagY r35fGPjRTprqg7jYZSk3Zl9sS6dmm1CMWPiuh7gciKnfhtxvOBf/KwEXvn33VhfP HObK35t8j/HaMp0+SZCoxOLWwhDbCT57czjb02Fk58A6XjltsV6MdTJ3zwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFFC/goJ6zT2ECTtjiyLiNZoUmLQwMB8GA1UdIwQY MBaAFPrZIyPSK0QnXc7NTeKVtEeUYj6SMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS10a2pJOUlyUkNkZHpzMU40cFcwUjVSaVBwSS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvNDlmM2FkLWVmOWUtNGZjNC05NWM0 LTRmMzcwMTFlZTU4MS8xL1VMLUNnbnJOUFlRSk8yT0xJdUkxbWhTWXREQS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODMvNDlmM2FkLWVmOWUtNGZjNC05NWM0LTRmMzcwMTFlZTU4 MS8xLzEtdGtqSTlJclJDZGR6czFONHBXMFI1UmlQcEkuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABb2AEw DQYJKoZIhvcNAQELBQADggEBACTFM5ptwSSLzXGC7UOar/ys9Ovv3h44XlpO9/Fj PEt0SAsq4wYUTTMeO5e4J8Q2BoCkm9obk/zl63vM8BdLQf6EyaiDd+QmVVUB8/zY cCcPN+pe8whu3d2pFdEbRyBYFKFX+4iNmXexTGnHGXwuX8lcNOoEdPqO+fz7rJU9 JS+0e+fXVImAFVmFPfOj4x3iUscKKHubub1qpUZcUwDDKxTwC+TNjzqQ0itrIIir x6sdVJW3ucf5kij5Bt/3hpUZN2QGxQCqrexXXumlR9da++F0qdc2r7L4/j3EOnL5 45aGMXv17gPN7lUdevTv1hfmYD0FpYneXoidy0+9cGkSsSI= -----END CERTIFICATE-----Generated at Tue Feb 10 06:06:51 2026 by rpki-client