This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/uPPMfzvppi6crx_fwjzm4FFjaiU.roa File: uPPMfzvppi6crx_fwjzm4FFjaiU.roa (raw, json) Hash identifier: T1v7WU4SmcRloZpbTO6KaFpsrh4cykq4OEhmzqxfj88= Subject key identifier: B8:F3:CC:7F:3B:E9:A6:2E:9C:AF:1F:DF:C2:3C:E6:E0:51:63:6A:25 Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Certificate serial: 019B791038B6538936F441A71E24308DF8EE Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/uPPMfzvppi6crx_fwjzm4FFjaiU.roa Signing time: Thu 01 Jan 2026 10:17:44 +0000 ROA not before: Thu 01 Jan 2026 10:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25160 IP address blocks: 195.216.191.0/24 maxlen: 24 213.182.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:38:b6:53:89:36:f4:41:a7:1e:24:30:8d:f8:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Validity Not Before: Jan 1 10:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8f3cc7f3be9a62e9caf1fdfc23ce6e051636a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2e:f8:48:a7:9e:be:cc:bc:db:e3:9e:79:72: 57:db:34:df:17:9e:7f:cc:2a:26:f3:3c:ec:5c:d4: b0:17:9f:10:8a:06:6a:7d:55:c5:06:9c:b8:6b:dd: 80:54:be:72:fe:c9:6f:d6:c3:b7:ad:11:3f:cf:94: 93:a0:a2:98:3c:be:3f:03:3b:1d:9b:c2:9a:4c:db: 2e:7a:bf:fe:6c:f9:51:fc:1b:f4:c8:9c:91:f1:e9: d6:6e:95:8b:c2:6b:3d:6c:15:61:e5:47:2d:3d:30: d5:89:37:a9:4a:6a:48:21:9d:fd:97:db:3a:53:27: 1c:c3:d9:5a:75:22:73:c1:e8:e2:33:ec:b0:dd:82: bb:18:57:22:6c:de:fb:56:8a:57:4a:11:a6:26:bf: 31:42:7a:69:54:09:bf:3b:c1:8e:13:80:2f:2a:62: 2e:57:79:a0:ea:c6:32:1c:eb:4a:6f:7e:e3:e4:c8: aa:42:fe:37:a4:79:f3:14:9d:4e:36:ca:84:05:9b: b6:b7:24:20:57:3a:d7:f4:c5:95:d6:7b:3b:a4:79: 9b:0f:57:d7:25:d0:2b:19:f8:25:91:7e:8f:9d:0d: f9:30:53:ae:29:8d:fa:59:38:89:b2:b5:29:d2:ab: 57:c5:bc:6c:85:00:6d:7b:16:12:93:e4:5f:33:8d: c1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F3:CC:7F:3B:E9:A6:2E:9C:AF:1F:DF:C2:3C:E6:E0:51:63:6A:25 X509v3 Authority Key Identifier: keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/uPPMfzvppi6crx_fwjzm4FFjaiU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.216.191.0/24 213.182.192.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:f8:16:37:ed:73:c5:de:46:91:e6:5c:ae:b3:65:fd:1c:03: cd:e5:5b:a2:8f:1c:59:36:66:3e:67:30:9b:ca:28:cb:57:b6: 1d:a5:15:e9:f2:f1:72:87:5e:16:64:e7:30:18:04:60:85:5b: 81:4f:11:fa:c9:b5:3c:6d:ca:cb:66:2a:9c:ea:c2:af:2e:4e: 11:2e:35:1d:bd:30:1b:a3:d8:f1:3c:fb:6c:43:67:69:96:bc: 27:ca:f3:9b:fd:09:ac:37:c5:e0:ba:8b:05:a9:c8:1a:d6:d1: 0a:4c:f8:44:7e:1c:1d:eb:29:ef:cb:56:5f:61:f9:6d:28:ce: 78:4a:3d:af:40:30:a2:8b:3d:b3:ce:60:63:f1:02:34:b6:50: f0:ab:61:cf:b1:46:0d:72:70:76:d5:17:39:59:a6:7a:29:83: a6:f0:97:66:1d:da:9b:52:ef:f3:32:ed:3b:f8:ce:0b:9c:eb: aa:93:a8:73:31:80:03:69:cb:4a:ba:da:9e:bf:6f:7b:6e:33: b1:45:4c:d2:02:eb:49:08:c5:49:2b:d0:05:1f:13:33:a1:3a: 89:f3:d8:52:07:87:81:29:14:70:f6:55:5f:0e:35:9f:eb:00: b3:bf:e8:bd:c3:a7:3e:c5:9c:19:83:fc:47:dd:6c:c0:68:17: 77:30:4a:d5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EDi2U4k29EGnHiQwjfjuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy MTVkYTcwHhcNMjYwMTAxMTAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGYzY2M3ZjNiZTlhNjJlOWNhZjFmZGZjMjNjZTZlMDUxNjM2YTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi74SKeevsy82+OeeXJX2zTfF55/ zCom8zzsXNSwF58QigZqfVXFBpy4a92AVL5y/slv1sO3rRE/z5SToKKYPL4/Azsd m8KaTNsuer/+bPlR/Bv0yJyR8enWbpWLwms9bBVh5UctPTDViTepSmpIIZ39l9s6 Uyccw9ladSJzwejiM+yw3YK7GFcibN77VopXShGmJr8xQnppVAm/O8GOE4AvKmIu V3mg6sYyHOtKb37j5MiqQv43pHnzFJ1ONsqEBZu2tyQgVzrX9MWV1ns7pHmbD1fX JdArGfglkX6PnQ35MFOuKY36WTiJsrUp0qtXxbxshQBtexYSk+RfM43BWQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLjzzH876aYunK8f38I85uBRY2olMB8GA1UdIwQY MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct OWU0MTNlYmY0MmYzLzEvdVBQTWZ6dnBwaTZjcnhfZndqem00RkZqYWlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw9i/AwQA 1bbAMA0GCSqGSIb3DQEBCwUAA4IBAQB6+BY37XPF3kaR5lyus2X9HAPN5VuijxxZ NmY+ZzCbyijLV7YdpRXp8vFyh14WZOcwGARghVuBTxH6ybU8bcrLZiqc6sKvLk4R LjUdvTAbo9jxPPtsQ2dplrwnyvOb/QmsN8XguosFqcga1tEKTPhEfhwd6ynvy1Zf YfltKM54Sj2vQDCiiz2zzmBj8QI0tlDwq2HPsUYNcnB21Rc5WaZ6KYOm8JdmHdqb Uu/zMu07+M4LnOuqk6hzMYADactKutqev297bjOxRUzSAutJCMVJK9AFHxMzoTqJ 89hSB4eBKRRw9lVfDjWf6wCzv+i9w6c+xZwZg/xH3WzAaBd3MErV -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:07 2026 by rpki-client