This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/UuOnxKKINXGrGno4BgqG1wRiVJE.roa File: UuOnxKKINXGrGno4BgqG1wRiVJE.roa (raw, json) Hash identifier: qOk1balDAYueDzPokwNkuPz8mml9IxTXWfQ4Usp7bxE= Subject key identifier: 52:E3:A7:C4:A2:88:35:71:AB:1A:7A:38:06:0A:86:D7:04:62:54:91 Certificate issuer: /CN=4074a1c0383ad5eb0f0588e4c3394ba34010a621 Certificate serial: 019B7F8522E1CBAC0D74CFF39FB7BFEFA64D Authority key identifier: 40:74:A1:C0:38:3A:D5:EB:0F:05:88:E4:C3:39:4B:A3:40:10:A6:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/UuOnxKKINXGrGno4BgqG1wRiVJE.roa Signing time: Fri 02 Jan 2026 16:23:10 +0000 ROA not before: Fri 02 Jan 2026 16:23:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6453 IP address blocks: 91.197.46.0/24 maxlen: 24 91.197.47.0/24 maxlen: 24 91.232.100.0/24 maxlen: 24 91.232.101.0/24 maxlen: 24 185.81.140.0/24 maxlen: 24 185.81.141.0/24 maxlen: 24 185.81.142.0/24 maxlen: 24 185.81.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.crl rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:22:e1:cb:ac:0d:74:cf:f3:9f:b7:bf:ef:a6:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4074a1c0383ad5eb0f0588e4c3394ba34010a621 Validity Not Before: Jan 2 16:23:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52e3a7c4a2883571ab1a7a38060a86d704625491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:33:72:ed:06:6c:ea:d4:ee:d7:89:72:8f:a5: ce:6c:f1:26:e4:ce:84:85:c9:68:b9:74:d7:6c:b7: 1a:71:c1:a4:c7:2c:44:36:25:f1:0e:dd:4b:04:51: 0f:2e:94:dd:f3:21:93:94:23:ea:ed:16:95:7b:66: 6c:55:31:ed:f6:19:06:59:b0:b7:a2:2a:7c:21:a6: 61:7f:70:54:36:7f:3d:f4:e1:e9:7c:77:cf:cb:76: 4a:dc:3f:9d:76:ed:06:77:0e:0d:29:ba:8f:e2:e1: 0b:ad:0d:cc:98:ed:9d:3b:bc:be:c9:60:3f:5e:8c: 46:68:d6:30:ae:22:82:47:0c:55:46:37:f1:ac:c2: 1d:4c:a4:d7:5c:88:72:69:e1:d7:bf:bc:ae:78:ba: 8e:0e:22:36:4f:53:12:3f:57:bd:87:d8:72:50:c2: 62:b7:f7:f2:ce:17:6f:4e:a5:4f:48:67:b1:7d:b3: a4:78:60:a0:bd:64:c6:e9:30:41:22:f4:8a:f1:04: d1:1b:7e:fb:57:28:0a:f6:42:2c:e7:62:cb:65:63: 95:98:1b:2b:9e:28:2e:30:b6:16:d4:9a:c8:05:ff: 2d:71:35:fc:a7:d5:a3:42:c9:b4:af:aa:d5:ef:e4: 7a:9b:8f:f2:d6:75:e2:d3:83:db:04:3c:c6:1b:e6: 10:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E3:A7:C4:A2:88:35:71:AB:1A:7A:38:06:0A:86:D7:04:62:54:91 X509v3 Authority Key Identifier: keyid:40:74:A1:C0:38:3A:D5:EB:0F:05:88:E4:C3:39:4B:A3:40:10:A6:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/UuOnxKKINXGrGno4BgqG1wRiVJE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.197.46.0/23 91.232.100.0/23 185.81.140.0/22 Signature Algorithm: sha256WithRSAEncryption b5:45:29:df:5d:26:ff:2c:65:3c:f4:77:94:83:12:30:df:cd: 0a:7f:45:0d:6b:db:37:6b:ac:ae:8a:00:11:2a:8d:2a:96:4e: 14:0c:67:a4:d5:0a:1a:3f:a8:5d:c9:c3:04:66:0b:f3:a7:31: 85:7a:7d:c3:2e:47:c2:e1:57:8c:8e:c4:5a:07:9a:18:32:4e: 7d:29:0c:4f:2a:a6:4a:c9:56:d3:76:c5:3d:7b:ef:91:da:b9: 71:62:da:b6:cc:d6:6f:b6:74:9f:fd:2f:06:86:cd:eb:55:47: 88:e3:ff:09:25:62:e7:8b:63:89:32:f9:fb:86:40:31:50:86: 12:e7:20:98:95:c2:e1:98:f5:aa:d2:bc:03:67:1a:dc:2b:59: a7:db:80:93:04:23:ff:40:e4:68:e0:29:f3:cd:0a:24:70:76: 3f:9f:5d:16:5a:6e:bd:78:4a:aa:c4:44:9b:4d:6a:69:79:f2: 3f:46:ab:f1:41:8a:80:74:f9:84:d3:21:e6:fc:91:99:f2:52: 60:c4:93:08:5b:4e:84:57:4c:f2:85:61:41:50:9a:22:67:03: 99:14:aa:d0:bf:4f:8e:dd:46:99:47:37:9f:b6:a7:3e:bf:d2: 52:19:e0:99:9f:9e:52:57:1c:7b:2b:8c:52:7e:54:f1:72:83: 70:74:a1:30 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hSLhy6wNdM/zn7e/76ZNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwNzRhMWMwMzgzYWQ1ZWIwZjA1ODhlNGMzMzk0YmEzNDAx MGE2MjEwHhcNMjYwMTAyMTYyMzEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmUzYTdjNGEyODgzNTcxYWIxYTdhMzgwNjBhODZkNzA0NjI1NDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjNy7QZs6tTu14lyj6XObPEm5M6E hclouXTXbLcaccGkxyxENiXxDt1LBFEPLpTd8yGTlCPq7RaVe2ZsVTHt9hkGWbC3 oip8IaZhf3BUNn899OHpfHfPy3ZK3D+ddu0Gdw4NKbqP4uELrQ3MmO2dO7y+yWA/ XoxGaNYwriKCRwxVRjfxrMIdTKTXXIhyaeHXv7yueLqODiI2T1MSP1e9h9hyUMJi t/fyzhdvTqVPSGexfbOkeGCgvWTG6TBBIvSK8QTRG377VygK9kIs52LLZWOVmBsr niguMLYW1JrIBf8tcTX8p9WjQsm0r6rV7+R6m4/y1nXi04PbBDzGG+YQ2wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFLjp8SiiDVxqxp6OAYKhtcEYlSRMB8GA1UdIwQY MBaAFEB0ocA4OtXrDwWI5MM5S6NAEKYhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUhTaHdEZzYxZXNQQllqa3d6bExvMEFRcGlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8zMDRhYWEtNGNlNS00MDY1LWIwNzMt MjZjMzM2NTE1M2FmLzEvVXVPbnhLS0lOWEdyR25vNEJncUcxd1JpVkpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8zMDRhYWEtNGNlNS00MDY1LWIwNzMtMjZjMzM2NTE1M2Fm LzEvUUhTaHdEZzYxZXNQQllqa3d6bExvMEFRcGlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW8UuAwQB W+hkAwQCuVGMMA0GCSqGSIb3DQEBCwUAA4IBAQC1RSnfXSb/LGU89HeUgxIw380K f0UNa9s3a6yuigARKo0qlk4UDGek1QoaP6hdycMEZgvzpzGFen3DLkfC4VeMjsRa B5oYMk59KQxPKqZKyVbTdsU9e++R2rlxYtq2zNZvtnSf/S8Ghs3rVUeI4/8JJWLn i2OJMvn7hkAxUIYS5yCYlcLhmPWq0rwDZxrcK1mn24CTBCP/QORo4CnzzQokcHY/ n10WWm69eEqqxESbTWppefI/RqvxQYqAdPmE0yHm/JGZ8lJgxJMIW06EV0zyhWFB UJoiZwOZFKrQv0+O3UaZRzeftqc+v9JSGeCZn55SVxx7K4xSflTxcoNwdKEw -----END CERTIFICATE-----Generated at Wed Jan 21 13:19:09 2026 by rpki-client