This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/uUeH5mKF_Qw7Oc_4stmRN3i314Y.roa File: uUeH5mKF_Qw7Oc_4stmRN3i314Y.roa (raw, json) Hash identifier: xAUhZzajaLeZ3m7sf1e4AQ6awgIPIqab9bj8m7MnWj4= Subject key identifier: B9:47:87:E6:62:85:FD:0C:3B:39:CF:F8:B2:D9:91:37:78:B7:D7:86 Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F8397B895D4E3C94F77467D84C1BA8A Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/uUeH5mKF_Qw7Oc_4stmRN3i314Y.roa Signing time: Fri 02 Jan 2026 16:21:29 +0000 ROA not before: Fri 02 Jan 2026 16:21:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 188.72.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:97:b8:95:d4:e3:c9:4f:77:46:7d:84:c1:ba:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b94787e66285fd0c3b39cff8b2d9913778b7d786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b8:36:3b:f3:a5:01:dd:05:bc:1f:a8:3f:4b: 5f:fd:20:b9:c5:e6:23:a1:5b:83:2e:80:6e:d0:1c: 65:88:67:fa:2b:f5:19:61:90:53:e8:86:b2:20:8d: bc:59:de:29:6e:18:16:a3:89:7f:c0:21:0c:f5:6f: b9:ec:76:a8:22:33:b7:b4:92:c2:5e:fe:30:71:03: d6:83:76:89:ae:87:b0:e5:9c:2a:9c:16:15:b7:85: f5:c7:c8:d2:bc:11:5e:f3:09:e3:04:d6:dd:e9:d3: 15:5f:ce:bb:d7:c3:94:bb:83:c2:14:15:92:23:3c: ad:1a:61:b6:b3:e4:10:86:9b:84:74:83:15:90:3c: b6:f4:b6:35:19:3e:92:ff:24:96:18:f3:40:b9:5e: bc:e8:77:d5:c3:fd:d9:21:61:38:45:2a:0b:cd:c2: 0d:88:41:a8:fe:42:4e:e9:e4:40:e1:39:61:7d:d3: 4e:0f:65:35:95:fd:3e:07:f2:f8:ea:ab:c5:37:2a: b3:95:07:14:9c:8d:d0:cb:46:29:07:4d:84:a6:9e: 6b:73:2d:97:5b:9c:a2:cd:2f:4b:66:e0:68:9c:ed: 1a:87:d5:1c:07:f4:b5:45:52:8e:7c:3a:bd:e6:ce: 28:8d:86:b2:34:61:9e:b8:56:ba:9a:6f:63:b2:e9: d9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:47:87:E6:62:85:FD:0C:3B:39:CF:F8:B2:D9:91:37:78:B7:D7:86 X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/uUeH5mKF_Qw7Oc_4stmRN3i314Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.72.93.0/24 Signature Algorithm: sha256WithRSAEncryption 76:70:c2:10:e0:6c:e3:33:6c:73:6a:1c:06:f6:10:e3:e4:4a: 1a:05:15:25:7b:05:2b:55:c3:93:a2:f8:c0:0d:db:6f:ca:d8: 8b:c5:8f:3d:da:da:69:26:12:f8:9b:e5:32:b9:19:b9:09:c0: 49:b6:ed:f5:d0:a1:ab:d7:6d:52:57:07:1e:f6:55:39:5c:13: bb:19:dd:80:9e:7d:a4:25:bd:39:ce:d6:e7:f0:d4:69:6d:4c: 68:b1:33:63:30:ca:99:91:6e:fb:7d:90:37:95:ab:db:d3:c4: 5d:02:cb:49:d7:66:12:11:12:d3:2e:10:05:0f:b3:c1:b9:d4: 72:59:f2:e5:e5:1e:6d:b5:de:2d:f0:a6:40:11:7d:98:3f:6e: 80:68:1a:c9:26:3a:9e:41:3f:f5:d4:0b:c5:80:7d:a6:c8:f9: 5b:75:19:ff:fb:07:c5:a5:b9:ec:6a:26:5c:90:41:fb:3c:64: 27:1d:50:86:b2:e0:79:16:ca:cd:f9:7c:2f:b7:db:41:23:dd: be:68:42:1b:ab:b5:22:9d:01:d0:26:87:5d:5b:05:3b:1e:18: 26:5f:29:7d:f3:1c:4e:f5:1a:67:fa:cb:53:37:f7:ec:9b:5b: c2:84:20:6a:e7:e3:9a:51:c8:91:10:e5:4b:b2:cb:b4:f2:70: 04:87:27:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g5e4ldTjyU93Rn2EwbqKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTQ3ODdlNjYyODVmZDBjM2IzOWNmZjhiMmQ5OTEzNzc4YjdkNzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrg2O/OlAd0FvB+oP0tf/SC5xeYj oVuDLoBu0BxliGf6K/UZYZBT6IayII28Wd4pbhgWo4l/wCEM9W+57HaoIjO3tJLC Xv4wcQPWg3aJroew5ZwqnBYVt4X1x8jSvBFe8wnjBNbd6dMVX86718OUu4PCFBWS IzytGmG2s+QQhpuEdIMVkDy29LY1GT6S/ySWGPNAuV686HfVw/3ZIWE4RSoLzcIN iEGo/kJO6eRA4TlhfdNOD2U1lf0+B/L46qvFNyqzlQcUnI3Qy0YpB02Epp5rcy2X W5yizS9LZuBonO0ah9UcB/S1RVKOfDq95s4ojYayNGGeuFa6mm9jsunZFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLlHh+Zihf0MOznP+LLZkTd4t9eGMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvdVVlSDVtS0ZfUXc3T2NfNHN0bVJOM2kzMTRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvEhdMA0G CSqGSIb3DQEBCwUAA4IBAQB2cMIQ4GzjM2xzahwG9hDj5EoaBRUlewUrVcOTovjA DdtvytiLxY892tppJhL4m+UyuRm5CcBJtu310KGr121SVwce9lU5XBO7Gd2Ann2k Jb05ztbn8NRpbUxosTNjMMqZkW77fZA3lavb08RdAstJ12YSERLTLhAFD7PBudRy WfLl5R5ttd4t8KZAEX2YP26AaBrJJjqeQT/11AvFgH2myPlbdRn/+wfFpbnsaiZc kEH7PGQnHVCGsuB5FsrN+Xwvt9tBI92+aEIbq7UinQHQJoddWwU7HhgmXyl98xxO 9Rpn+stTN/fsm1vChCBq5+OaUciREOVLssu08nAEhyfy -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:26 2026 by rpki-client