This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/UBImtmTpT9AJK4XiVIvbMq--q_s.roa File: UBImtmTpT9AJK4XiVIvbMq--q_s.roa (raw, json) Hash identifier: NijKBNgwerk44M+DxExLCS24gu6T722sFHFMOCujRn0= Subject key identifier: 50:12:26:B6:64:E9:4F:D0:09:2B:85:E2:54:8B:DB:32:AF:BE:AB:FB Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Certificate serial: 019B7C807A46BDBE206207A72E67F7221DA6 Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/UBImtmTpT9AJK4XiVIvbMq--q_s.roa Signing time: Fri 02 Jan 2026 02:19:13 +0000 ROA not before: Fri 02 Jan 2026 02:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 188.74.161.0/24 maxlen: 24 188.74.162.0/24 maxlen: 24 188.74.165.0/24 maxlen: 24 188.74.166.0/24 maxlen: 24 188.74.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:7a:46:bd:be:20:62:07:a7:2e:67:f7:22:1d:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Validity Not Before: Jan 2 02:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=501226b664e94fd0092b85e2548bdb32afbeabfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:79:13:76:1a:11:b2:23:79:b1:fd:0a:8c:8b: 98:0d:5b:00:50:f6:57:f8:6a:7f:59:47:5d:8c:43: 74:22:d0:f4:fc:a2:7f:ed:8e:cb:d0:dc:29:81:0a: 8c:4d:b3:63:1f:48:e0:ad:5a:8f:26:60:f8:ab:b4: 0c:0d:dd:81:46:b6:db:cb:8c:4b:ef:e6:81:50:d3: f0:e4:eb:a1:f7:91:b8:d1:15:da:aa:32:5f:5f:01: a5:7f:a1:3e:2b:29:11:bf:ca:e3:10:29:cf:35:a9: 05:f0:04:ed:95:21:fb:bd:94:21:c8:99:82:43:3d: 45:e6:05:47:a2:e3:7c:2c:e1:69:e7:b0:ce:1d:16: 2f:d7:fe:8d:90:56:02:f0:7c:5d:4a:fa:71:33:e4: da:a4:1d:63:36:69:13:d0:87:d8:cd:12:59:15:ff: de:a3:31:74:a8:33:e5:51:5f:38:28:ec:ed:ac:41: 03:86:14:58:bf:89:75:61:05:eb:cd:0c:a8:ff:f5: b9:56:a0:28:5a:e6:72:17:18:da:b0:7e:5b:16:95: 92:b7:46:bf:b4:8f:a4:13:c0:76:91:19:be:78:be: ca:95:1e:a9:dd:f1:6a:8b:89:19:39:43:90:d5:59: cb:7e:62:0b:8c:91:d6:bf:a8:bc:5c:a9:58:8d:88: f3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:12:26:B6:64:E9:4F:D0:09:2B:85:E2:54:8B:DB:32:AF:BE:AB:FB X509v3 Authority Key Identifier: keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/UBImtmTpT9AJK4XiVIvbMq--q_s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.74.161.0-188.74.162.255 188.74.165.0-188.74.167.255 Signature Algorithm: sha256WithRSAEncryption 72:f3:4c:31:eb:e8:c7:c8:00:71:5e:3b:50:18:cc:64:26:81: d9:3f:6f:8d:c1:44:8c:c3:75:e4:7f:48:30:62:e6:49:dd:08: 89:4b:32:b8:41:d9:f0:cc:e8:30:7d:b3:10:4c:24:c8:0e:66: b7:6d:46:62:b9:f2:97:33:69:aa:38:05:14:41:fa:9b:df:6d: 36:45:28:49:f1:0e:e4:a5:a2:76:d1:58:9b:2a:c0:5d:58:71: 36:96:92:3b:59:b8:0f:27:d2:5f:ed:56:13:33:96:0d:b4:ae: 3d:f8:8a:33:1a:b7:d8:e6:07:8e:24:80:35:ac:59:41:dd:4b: 4d:b5:5c:f6:95:0b:df:a0:af:ac:c3:a4:fb:3c:13:80:1c:de: 85:3d:95:41:e7:83:5d:df:7a:5e:f7:6d:5d:a0:1c:ef:db:f3: 20:18:9f:da:58:51:59:59:70:43:95:32:37:e0:d4:a0:1b:0b: 9c:70:da:07:ec:f8:4b:fc:ae:a6:76:0c:96:b7:04:91:8a:59: 16:33:bd:29:77:7f:d5:16:17:71:56:b1:72:92:7d:9b:4b:82: d6:6e:7b:8e:19:31:47:bb:0c:29:ec:d7:dc:c0:de:3c:cf:30: 07:2a:95:a6:96:69:c4:35:17:9a:8f:8e:f4:aa:e0:7a:4c:c5: fc:dd:2e:4e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt8gHpGvb4gYgenLmf3Ih2mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4 ZDFkMjYwHhcNMjYwMTAyMDIxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDEyMjZiNjY0ZTk0ZmQwMDkyYjg1ZTI1NDhiZGIzMmFmYmVhYmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nkTdhoRsiN5sf0KjIuYDVsAUPZX +Gp/WUddjEN0ItD0/KJ/7Y7L0NwpgQqMTbNjH0jgrVqPJmD4q7QMDd2BRrbby4xL 7+aBUNPw5Ouh95G40RXaqjJfXwGlf6E+KykRv8rjECnPNakF8ATtlSH7vZQhyJmC Qz1F5gVHouN8LOFp57DOHRYv1/6NkFYC8HxdSvpxM+TapB1jNmkT0IfYzRJZFf/e ozF0qDPlUV84KOztrEEDhhRYv4l1YQXrzQyo//W5VqAoWuZyFxjasH5bFpWSt0a/ tI+kE8B2kRm+eL7KlR6p3fFqi4kZOUOQ1VnLfmILjJHWv6i8XKlYjYjzkQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFFASJrZk6U/QCSuF4lSL2zKvvqv7MB8GA1UdIwQY MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt ZmE5Y2I1MWNkMGYxLzEvVUJJbXRtVHBUOUFKSzRYaVZJdmJNcS0tcV9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAC8SqED BAC8SqIwDAMEALxKpQMEA7xKoDANBgkqhkiG9w0BAQsFAAOCAQEAcvNMMevox8gA cV47UBjMZCaB2T9vjcFEjMN15H9IMGLmSd0IiUsyuEHZ8MzoMH2zEEwkyA5mt21G YrnylzNpqjgFFEH6m99tNkUoSfEO5KWidtFYmyrAXVhxNpaSO1m4DyfSX+1WEzOW DbSuPfiKMxq32OYHjiSANaxZQd1LTbVc9pUL36CvrMOk+zwTgBzehT2VQeeDXd96 XvdtXaAc79vzIBif2lhRWVlwQ5UyN+DUoBsLnHDaB+z4S/yupnYMlrcEkYpZFjO9 KXd/1RYXcVaxcpJ9m0uC1m57jhkxR7sMKezX3MDePM8wByqVppZpxDUXmo+O9Krg ekzF/N0uTg== -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:27 2026 by rpki-client