This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/uW_Gdpnt7OwD3cAseMegdu6xN8M.roa File: uW_Gdpnt7OwD3cAseMegdu6xN8M.roa (raw, json) Hash identifier: 3VkXuruUsY9wPEkXG/tiCZgs9rIhDAAbcoWQ4X0SwBM= Subject key identifier: B9:6F:C6:76:99:ED:EC:EC:03:DD:C0:2C:78:C7:A0:76:EE:B1:37:C3 Certificate issuer: /CN=3cd2aa71a93aa9c1327b73538a0478e4f782f6f7 Certificate serial: 019B7834CBE594A724CA7AFE81AD16876388 Authority key identifier: 3C:D2:AA:71:A9:3A:A9:C1:32:7B:73:53:8A:04:78:E4:F7:82:F6:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/uW_Gdpnt7OwD3cAseMegdu6xN8M.roa Signing time: Thu 01 Jan 2026 06:18:04 +0000 ROA not before: Thu 01 Jan 2026 06:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205091 IP address blocks: 91.217.211.0/24 maxlen: 24 2a12:81c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.crl rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.mft rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 12:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:cb:e5:94:a7:24:ca:7a:fe:81:ad:16:87:63:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cd2aa71a93aa9c1327b73538a0478e4f782f6f7 Validity Not Before: Jan 1 06:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b96fc67699edecec03ddc02c78c7a076eeb137c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e5:60:9b:e9:5e:87:4b:f1:87:49:25:b5:25: 32:25:51:fa:5b:d2:5b:92:7f:c9:54:c9:3e:30:8e: 97:be:62:97:39:c7:81:be:b0:74:4e:10:a4:a2:bd: 1c:eb:59:0f:81:c2:f6:fb:e3:77:2d:eb:13:e9:11: a0:b9:05:69:e2:81:a3:bc:bb:5d:89:00:bd:3a:0a: b3:fa:9c:51:c1:ee:a2:8a:e2:d5:06:c6:14:d9:ea: 4a:00:c4:86:c2:fe:a6:ed:e2:00:c7:88:d4:b6:6b: 5e:a8:a4:f3:88:80:39:b2:e4:2f:39:2c:01:6c:62: 56:2e:7f:25:f9:8b:82:55:a8:38:76:3b:2e:bc:5b: cc:3b:64:25:82:88:c4:7f:a9:44:36:7c:62:61:bd: df:6f:6c:81:c5:f3:c2:9a:2b:c1:ff:67:0c:e1:57: ed:e7:d1:af:bf:fe:a2:47:e2:49:04:4a:56:b8:f2: 5c:2e:e1:03:7e:39:c4:2e:c3:db:25:d5:df:18:19: b7:2f:2c:cb:30:1c:36:cb:98:3e:10:ee:15:f8:d7: fd:80:a6:03:b5:0c:44:e6:97:df:53:13:2f:38:af: 3e:d7:22:e6:8a:2f:e3:a6:10:85:bc:3d:d0:7e:9d: f2:3d:53:4a:c9:e3:1e:02:f1:b1:b2:13:79:bc:13: c4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:6F:C6:76:99:ED:EC:EC:03:DD:C0:2C:78:C7:A0:76:EE:B1:37:C3 X509v3 Authority Key Identifier: keyid:3C:D2:AA:71:A9:3A:A9:C1:32:7B:73:53:8A:04:78:E4:F7:82:F6:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNKqcak6qcEye3NTigR45PeC9vc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/uW_Gdpnt7OwD3cAseMegdu6xN8M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/757f2b-4f01-4e70-b3d5-4fdba867e47a/1/PNKqcak6qcEye3NTigR45PeC9vc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.211.0/24 IPv6: 2a12:81c0::/29 Signature Algorithm: sha256WithRSAEncryption 62:7f:ff:68:d5:ab:8b:a0:44:0f:8e:b9:0d:02:75:5b:9c:e8: a8:a3:ad:50:84:8a:95:21:19:90:55:40:25:ed:a3:fb:d9:97: 16:40:ed:f7:6b:1c:fc:99:99:8d:38:ca:a7:5a:a6:db:9a:2b: 75:35:9d:17:fa:30:5c:52:58:5f:db:52:c3:7a:65:94:cb:4a: 27:36:ec:16:4e:28:e4:1c:11:01:30:aa:d2:49:ea:fb:98:23: 3a:bd:f0:3f:45:b1:fa:32:74:26:8d:e3:18:ce:62:0c:53:97: 68:e8:db:64:ca:15:39:2b:eb:f6:ab:6a:8b:38:54:2c:e5:90: ee:5d:7d:7b:b1:fb:ac:0f:5a:00:9a:ef:f2:fc:2e:da:5d:59: 7a:e9:23:08:bd:04:36:93:65:cd:0e:3e:dc:92:31:72:23:54: 07:62:a3:33:b1:5e:6a:c0:f0:b2:5a:c1:d8:1e:8f:20:61:97: 61:57:3d:28:a1:d6:00:1c:ed:ea:70:6b:38:90:f7:09:3d:95: 93:76:23:57:7d:31:e4:cc:94:8d:7b:b2:e3:ef:e0:5d:95:25: d4:8a:a0:df:f6:bb:95:db:66:89:4c:0f:f4:19:65:c4:35:27: 1a:f7:b6:9e:6d:55:5a:80:e4:9c:bb:87:4a:b4:ca:a6:27:7b: 54:24:a7:34 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NMvllKckynr+ga0Wh2OIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZDJhYTcxYTkzYWE5YzEzMjdiNzM1MzhhMDQ3OGU0Zjc4 MmY2ZjcwHhcNMjYwMTAxMDYxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTZmYzY3Njk5ZWRlY2VjMDNkZGMwMmM3OGM3YTA3NmVlYjEzN2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOVgm+leh0vxh0kltSUyJVH6W9Jb kn/JVMk+MI6XvmKXOceBvrB0ThCkor0c61kPgcL2++N3LesT6RGguQVp4oGjvLtd iQC9Ogqz+pxRwe6iiuLVBsYU2epKAMSGwv6m7eIAx4jUtmteqKTziIA5suQvOSwB bGJWLn8l+YuCVag4djsuvFvMO2QlgojEf6lENnxiYb3fb2yBxfPCmivB/2cM4Vft 59Gvv/6iR+JJBEpWuPJcLuEDfjnELsPbJdXfGBm3LyzLMBw2y5g+EO4V+Nf9gKYD tQxE5pffUxMvOK8+1yLmii/jphCFvD3Qfp3yPVNKyeMeAvGxshN5vBPEywIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLlvxnaZ7ezsA93ALHjHoHbusTfDMB8GA1UdIwQY MBaAFDzSqnGpOqnBMntzU4oEeOT3gvb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE5LcWNhazZxY0V5ZTNOVGlnUjQ1UGVDOXZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83NTdmMmItNGYwMS00ZTcwLWIzZDUt NGZkYmE4NjdlNDdhLzEvdVdfR2RwbnQ3T3dEM2NBc2VNZWdkdTZ4TjhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83NTdmMmItNGYwMS00ZTcwLWIzZDUtNGZkYmE4NjdlNDdh LzEvUE5LcWNhazZxY0V5ZTNOVGlnUjQ1UGVDOXZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW9nTMA0E AgACMAcDBQMqEoHAMA0GCSqGSIb3DQEBCwUAA4IBAQBif/9o1auLoEQPjrkNAnVb nOioo61QhIqVIRmQVUAl7aP72ZcWQO33axz8mZmNOMqnWqbbmit1NZ0X+jBcUlhf 21LDemWUy0onNuwWTijkHBEBMKrSSer7mCM6vfA/RbH6MnQmjeMYzmIMU5do6Ntk yhU5K+v2q2qLOFQs5ZDuXX17sfusD1oAmu/y/C7aXVl66SMIvQQ2k2XNDj7ckjFy I1QHYqMzsV5qwPCyWsHYHo8gYZdhVz0oodYAHO3qcGs4kPcJPZWTdiNXfTHkzJSN e7Lj7+BdlSXUiqDf9ruV22aJTA/0GWXENSca97aebVVagOScu4dKtMqmJ3tUJKc0 -----END CERTIFICATE-----Generated at Fri Jan 30 18:39:05 2026 by rpki-client