This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/UeHrvynok458nbOMxnfDo2XoOCg.roa
File: UeHrvynok458nbOMxnfDo2XoOCg.roa (raw, json)
Hash identifier: mBftsmERWzpGKsnXFmodVRrKomChx92ReubqAs5GrrQ=
Subject key identifier: 51:E1:EB:BF:29:E8:93:8E:7C:9D:B3:8C:C6:77:C3:A3:65:E8:38:28
Certificate issuer: /CN=77bdd75f2efc244f86a321b150e62936a14029db
Certificate serial: 019B797E134281B9AC809E3324895F12ABA4
Authority key identifier: 77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/UeHrvynok458nbOMxnfDo2XoOCg.roa
Signing time: Thu 01 Jan 2026 12:17:44 +0000
ROA not before: Thu 01 Jan 2026 12:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 195.234.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Jan 2026 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:13:42:81:b9:ac:80:9e:33:24:89:5f:12:ab:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bdd75f2efc244f86a321b150e62936a14029db
Validity
Not Before: Jan 1 12:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51e1ebbf29e8938e7c9db38cc677c3a365e83828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c9:f5:1e:bf:7a:06:4d:06:85:5e:a0:c5:74:
56:fc:69:00:a6:40:0b:18:2c:2d:2b:0a:97:38:6d:
56:63:df:c6:7a:85:53:4d:54:92:6d:57:87:3e:72:
3d:69:4d:9a:f1:83:4e:8d:62:4e:ad:2c:7b:f1:10:
40:ab:ae:7f:d4:cb:38:df:73:0f:15:be:e4:3a:a4:
ef:a9:d8:01:14:a5:8f:3a:bb:96:85:2d:1b:f4:e2:
14:59:9b:9b:d6:0e:31:93:b7:6d:af:d6:0a:94:e5:
fb:83:04:d4:eb:d2:15:ba:d0:91:6c:74:88:dc:d5:
34:9e:79:be:cb:6d:73:3d:97:dc:23:a3:1a:bb:ca:
71:ee:37:ce:1a:0b:69:8a:64:2b:87:82:43:b5:35:
29:f2:f8:61:2e:99:44:68:1a:e0:c5:72:94:5a:81:
59:68:0c:f7:57:df:11:cb:42:3a:e3:13:b5:29:1d:
5d:d7:e2:b9:a5:0b:9e:c9:3e:78:38:e1:21:55:cb:
80:27:46:a1:52:b8:26:ca:d8:1f:bb:5f:7b:65:3e:
c9:58:4e:24:ea:1a:5c:13:be:d7:1a:12:3f:48:d4:
ef:71:ad:72:fe:2c:1f:5e:b5:ae:24:03:34:4c:72:
64:03:76:b2:b8:d8:9d:3a:ed:a8:51:7f:2a:78:dd:
35:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E1:EB:BF:29:E8:93:8E:7C:9D:B3:8C:C6:77:C3:A3:65:E8:38:28
X509v3 Authority Key Identifier:
keyid:77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/UeHrvynok458nbOMxnfDo2XoOCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.155.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:2f:6d:bf:c0:79:d8:3c:31:e8:00:14:aa:ec:6b:8b:93:7c:
80:30:9c:d2:29:56:1b:17:c4:f9:fe:5f:0e:b6:62:64:db:e0:
7b:0e:1c:38:ef:dc:5d:77:ae:f5:8f:dc:68:18:91:07:26:1e:
95:c6:8d:22:96:8a:df:6a:b0:04:73:b7:37:4e:05:ce:d7:6e:
df:d9:68:c9:34:56:ed:75:4b:40:42:47:a4:ac:5a:d4:c8:0c:
db:5b:95:66:07:16:61:b6:c1:d9:29:3b:ca:c6:cd:ff:a3:44:
fc:6c:e7:6e:89:9f:66:ac:17:43:3b:42:8b:e2:77:3e:42:0f:
6d:0e:28:56:ed:9b:bb:b0:86:b9:fa:fd:b3:08:aa:7b:9c:41:
10:80:93:d1:96:a9:c1:71:14:9c:07:1a:fd:5d:96:c7:77:ad:
3a:70:ca:ae:73:ec:39:3e:2a:33:dc:1b:4b:10:14:62:55:9d:
03:de:46:cd:42:f0:2f:1c:8a:28:d5:cd:a1:21:16:c4:25:8e:
99:e0:05:79:cb:7d:78:d6:58:10:99:cc:1c:93:c4:e1:1a:8e:
46:5a:be:02:21:c8:9f:3e:60:8d:e7:2c:20:ba:ce:56:a0:37:
17:7a:4d:52:b1:17:bb:69:98:20:bf:e7:b4:63:10:db:bb:80:
1d:71:f3:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5fhNCgbmsgJ4zJIlfEqukMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YmRkNzVmMmVmYzI0NGY4NmEzMjFiMTUwZTYyOTM2YTE0
MDI5ZGIwHhcNMjYwMTAxMTIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWUxZWJiZjI5ZTg5MzhlN2M5ZGIzOGNjNjc3YzNhMzY1ZTgzODI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycn1Hr96Bk0GhV6gxXRW/GkApkAL
GCwtKwqXOG1WY9/GeoVTTVSSbVeHPnI9aU2a8YNOjWJOrSx78RBAq65/1Ms433MP
Fb7kOqTvqdgBFKWPOruWhS0b9OIUWZub1g4xk7dtr9YKlOX7gwTU69IVutCRbHSI
3NU0nnm+y21zPZfcI6Mau8px7jfOGgtpimQrh4JDtTUp8vhhLplEaBrgxXKUWoFZ
aAz3V98Ry0I64xO1KR1d1+K5pQueyT54OOEhVcuAJ0ahUrgmytgfu197ZT7JWE4k
6hpcE77XGhI/SNTvca1y/iwfXrWuJAM0THJkA3ayuNidOu2oUX8qeN01wwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFHh678p6JOOfJ2zjMZ3w6Nl6DgoMB8GA1UdIwQY
MBaAFHe9118u/CRPhqMhsVDmKTahQCnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDczWFh5NzhKRS1Hb3lHeFVPWXBOcUZBS2RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8yNmEzNGUtMjA5NC00ZTc2LWExZWEt
MWRlZGJlN2I1YmFmLzEvVWVIcnZ5bm9rNDU4bmJPTXhuZkRvMlhvT0NnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8yNmEzNGUtMjA5NC00ZTc2LWExZWEtMWRlZGJlN2I1YmFm
LzEvZDczWFh5NzhKRS1Hb3lHeFVPWXBOcUZBS2RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+qbMA0G
CSqGSIb3DQEBCwUAA4IBAQBLL22/wHnYPDHoABSq7GuLk3yAMJzSKVYbF8T5/l8O
tmJk2+B7Dhw479xdd671j9xoGJEHJh6Vxo0ilorfarAEc7c3TgXO127f2WjJNFbt
dUtAQkekrFrUyAzbW5VmBxZhtsHZKTvKxs3/o0T8bOduiZ9mrBdDO0KL4nc+Qg9t
DihW7Zu7sIa5+v2zCKp7nEEQgJPRlqnBcRScBxr9XZbHd606cMquc+w5Pioz3BtL
EBRiVZ0D3kbNQvAvHIoo1c2hIRbEJY6Z4AV5y3141lgQmcwck8ThGo5GWr4CIcif
PmCN5ywgus5WoDcXek1SsRe7aZggv+e0YxDbu4AdcfNB
-----END CERTIFICATE-----
Generated at Fri Jan 2 09:29:51 2026 by rpki-client