This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/upe_y__Du9TvKSsDqZ0-I55ZEjw.roa File: upe_y__Du9TvKSsDqZ0-I55ZEjw.roa (raw, json) Hash identifier: y2jQtmoxxOc2+rQ9Pw++pUMACCETO5uefrOutVfnpeQ= Subject key identifier: BA:97:BF:CB:FF:C3:BB:D4:EF:29:2B:03:A9:9D:3E:23:9E:59:12:3C Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B8D87640B79A71CCDB58CEFF02C00952A Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/upe_y__Du9TvKSsDqZ0-I55ZEjw.roa Signing time: Mon 05 Jan 2026 09:40:18 +0000 ROA not before: Mon 05 Jan 2026 09:40:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 82.153.208.0/22 maxlen: 22 89.213.58.0/24 maxlen: 24 89.213.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:87:64:0b:79:a7:1c:cd:b5:8c:ef:f0:2c:00:95:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 5 09:40:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba97bfcbffc3bbd4ef292b03a99d3e239e59123c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1a:9a:35:ef:28:4e:4b:24:2a:0d:11:bb:45: 62:be:c8:86:df:a9:9f:ec:86:32:89:b7:4b:6b:f8: 6c:a1:1f:e7:0e:90:8c:22:64:85:25:45:42:ca:6f: 9e:0d:88:14:85:a0:e6:7b:49:2e:d4:f8:75:f4:fe: f6:ce:8c:c4:5b:47:4a:bc:84:9b:f4:e2:4f:d8:ea: 27:fd:4b:d5:a5:7e:67:26:2e:9e:b7:21:f8:9d:31: 72:32:3e:e7:ff:24:5c:67:73:1d:58:9b:ee:89:7c: 7e:4d:ab:9c:76:99:14:84:a1:91:97:dc:da:2f:d8: e0:f7:58:54:40:35:02:a9:bc:66:ed:c5:ae:2c:a4: 33:b9:8e:72:31:d5:e8:76:1d:ce:42:69:f9:8d:72: b7:02:db:fb:82:b4:d3:b5:3e:38:2a:da:e0:f8:56: c3:7a:27:de:8e:91:b2:3a:bb:38:21:2f:67:75:51: f8:4f:20:a9:71:2e:39:70:8a:2d:3b:3a:9c:3f:48: 5e:ed:48:ff:5b:b7:17:5e:ad:84:15:d6:0b:c8:f4: 06:5a:d4:12:51:af:5d:68:53:c4:79:6b:09:31:0d: 48:87:12:50:ee:a9:15:97:99:e9:2d:29:d3:e4:38: 2a:01:03:e2:2f:fc:2f:fa:25:9c:85:59:e2:0f:c6: 6c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:97:BF:CB:FF:C3:BB:D4:EF:29:2B:03:A9:9D:3E:23:9E:59:12:3C X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/upe_y__Du9TvKSsDqZ0-I55ZEjw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.208.0/22 89.213.58.0/24 89.213.228.0/24 Signature Algorithm: sha256WithRSAEncryption a8:fa:24:76:07:f9:1f:1a:f2:2f:27:22:ad:18:6e:e1:54:13: fb:7b:61:4f:04:d1:28:fd:51:44:06:72:4c:da:43:b1:a5:b6: d6:5e:66:ec:c5:d4:81:a1:e7:17:ba:9d:25:21:a6:b8:25:81: 56:e2:7f:69:85:2c:a4:ba:c3:99:ce:52:7f:ce:36:8b:12:bd: 75:02:1e:f0:c3:46:0d:75:53:98:cf:b2:71:98:d8:6d:b3:17: 07:12:d7:bd:ba:0d:d2:28:b2:fa:32:52:97:7b:6d:d2:ca:95: df:6c:41:74:10:97:de:78:97:ee:bb:ab:b3:f9:8f:cc:27:e7: 64:80:a0:c0:f4:c3:69:d1:63:6b:ae:b0:5f:c2:f8:5e:e6:fc: bf:ec:71:1f:6f:7f:1c:af:be:20:05:bd:eb:22:e6:fe:4f:32: 83:62:bb:4e:55:79:da:9d:24:88:bf:d3:fa:bb:36:d8:ea:cd: 73:c3:de:fa:51:3d:d2:46:2c:4b:14:c9:1d:34:78:ce:38:ef: 7b:87:51:04:20:de:f5:9a:ce:aa:8a:d0:03:46:0f:d8:f1:de: 4b:0b:7e:35:eb:ea:91:e9:af:8e:d0:c4:89:f9:0a:60:ff:74: ff:a0:6b:2f:1a:0c:0c:6b:fe:16:ad:0f:68:27:59:07:1d:28: e2:b0:76:23 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZuNh2QLeacczbWM7/AsAJUqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTA1MDk0MDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTk3YmZjYmZmYzNiYmQ0ZWYyOTJiMDNhOTlkM2UyMzllNTkxMjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBqaNe8oTkskKg0Ru0VivsiG36mf 7IYyibdLa/hsoR/nDpCMImSFJUVCym+eDYgUhaDme0ku1Ph19P72zozEW0dKvISb 9OJP2Oon/UvVpX5nJi6etyH4nTFyMj7n/yRcZ3MdWJvuiXx+TaucdpkUhKGRl9za L9jg91hUQDUCqbxm7cWuLKQzuY5yMdXodh3OQmn5jXK3Atv7grTTtT44Ktrg+FbD eifejpGyOrs4IS9ndVH4TyCpcS45cIotOzqcP0he7Uj/W7cXXq2EFdYLyPQGWtQS Ua9daFPEeWsJMQ1IhxJQ7qkVl5npLSnT5DgqAQPiL/wv+iWchVniD8Zs2wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLqXv8v/w7vU7ykrA6mdPiOeWRI8MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvdXBlX3lfX0R1OVR2S1NzRHFaMC1JNTVaRWp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCUpnQAwQA WdU6AwQAWdXkMA0GCSqGSIb3DQEBCwUAA4IBAQCo+iR2B/kfGvIvJyKtGG7hVBP7 e2FPBNEo/VFEBnJM2kOxpbbWXmbsxdSBoecXup0lIaa4JYFW4n9phSykusOZzlJ/ zjaLEr11Ah7ww0YNdVOYz7JxmNhtsxcHEte9ug3SKLL6MlKXe23SypXfbEF0EJfe eJfuu6uz+Y/MJ+dkgKDA9MNp0WNrrrBfwvhe5vy/7HEfb38cr74gBb3rIub+TzKD YrtOVXnanSSIv9P6uzbY6s1zw976UT3SRixLFMkdNHjOOO97h1EEIN71ms6qitAD Rg/Y8d5LC3416+qR6a+O0MSJ+Qpg/3T/oGsvGgwMa/4WrQ9oJ1kHHSjisHYj -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:26 2026 by rpki-client