This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/UAiwwOtSHKg_Uwg-V-1NlpmU_dU.roa File: UAiwwOtSHKg_Uwg-V-1NlpmU_dU.roa (raw, json) Hash identifier: zELOTAhMC2HJGH8Stw4zDI7zr2am/BzXFs2CoFd4+xw= Subject key identifier: 50:08:B0:C0:EB:52:1C:A8:3F:53:08:3E:57:ED:4D:96:99:94:FD:D5 Certificate issuer: /CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab Certificate serial: 019B7EA74BA0D04A1EAC6C2E41052734AF40 Authority key identifier: 0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/UAiwwOtSHKg_Uwg-V-1NlpmU_dU.roa Signing time: Fri 02 Jan 2026 12:20:51 +0000 ROA not before: Fri 02 Jan 2026 12:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60592 IP address blocks: 91.224.58.0/24 maxlen: 24 193.150.130.0/23 maxlen: 23 193.150.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.mft rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:4b:a0:d0:4a:1e:ac:6c:2e:41:05:27:34:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab Validity Not Before: Jan 2 12:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5008b0c0eb521ca83f53083e57ed4d969994fdd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cc:56:fc:b4:f9:90:dd:1b:81:6b:d5:64:37: 41:c3:bb:12:c6:a7:ac:6e:55:da:ef:49:31:19:5a: 01:a1:f2:c9:2c:e8:90:0a:ca:af:30:c6:08:da:10: df:2a:59:bf:02:79:59:85:3c:6e:34:54:7e:40:20: 43:ec:cd:2d:4e:00:96:6e:ab:fe:8b:ce:34:fc:ec: cf:bb:12:b5:31:d9:31:26:2f:f6:2f:a5:ef:f4:73: ba:11:88:f6:fc:73:85:db:d8:24:46:cc:14:cd:ff: fd:eb:27:df:17:74:61:88:72:94:c9:65:a6:28:6f: bf:1a:0d:c6:48:95:a1:e7:6c:ef:ee:30:0c:7a:d6: 80:c4:e5:35:14:f7:86:d5:66:7a:ee:0c:45:0b:c9: 5b:4f:c9:06:a1:0b:76:d5:ea:e6:02:dd:c6:06:5d: 8a:f6:b4:4c:ed:86:5e:ba:6e:5b:01:07:fd:1f:5a: 7d:fd:f6:82:6f:db:ce:be:fc:ad:1e:2b:9a:51:57: 9f:b4:14:d3:fe:c1:19:98:f3:f8:53:ee:61:81:33: f9:42:25:62:3b:41:19:f8:65:42:f7:c5:a0:bc:f3: d0:78:52:9f:44:cd:7c:fa:eb:c6:be:6b:71:db:43: d1:db:07:79:e9:ab:ce:19:02:b8:58:ab:21:18:df: b2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:08:B0:C0:EB:52:1C:A8:3F:53:08:3E:57:ED:4D:96:99:94:FD:D5 X509v3 Authority Key Identifier: keyid:0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/UAiwwOtSHKg_Uwg-V-1NlpmU_dU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.58.0/24 193.150.130.0-193.150.133.255 Signature Algorithm: sha256WithRSAEncryption bc:b5:f6:e2:bd:b5:2c:3a:0a:bd:e5:d6:b7:a0:84:03:23:87: 00:29:bd:cf:b9:0b:12:36:98:90:fe:b5:5e:c2:a0:3d:c5:ee: ad:a7:cd:54:1d:56:0f:c0:67:22:36:ca:92:f1:68:df:91:a9: b3:49:45:9b:c8:dc:a3:d6:71:d3:45:b8:f6:1f:b8:0c:51:81: cd:90:fb:a3:f8:48:ff:81:69:d7:8a:1e:e0:a9:47:c1:d6:5d: 7a:65:e7:4b:f5:a5:20:93:73:c1:d6:69:9e:17:42:82:e9:4c: 86:59:fd:8d:45:2b:42:d5:10:b9:31:c8:ce:16:69:6d:db:e9: 38:0a:a9:73:32:ee:70:3b:38:35:13:b5:3a:74:b2:47:5f:e2: 5f:6c:bd:e9:04:8e:bb:dc:d5:ac:5c:8d:84:08:9c:fc:95:3e: 65:b5:69:27:45:b1:46:12:c1:ba:67:39:7e:f2:04:e8:08:d1: 76:ca:59:12:14:1a:ee:51:a0:d0:c5:c4:d4:d3:35:c7:f3:7e: e3:35:ca:83:9f:96:4c:5d:33:fb:10:17:4b:d1:3e:1b:fd:c1: b3:b1:b6:8c:b5:44:cd:48:40:71:7a:27:c5:e6:75:86:4a:50: 1c:70:96:28:93:fa:01:c3:fb:a2:97:fd:76:93:f3:cd:1d:36: 8f:42:9f:ea -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt+p0ug0EoerGwuQQUnNK9AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYWJkNjgyYzFhOGZjNTAzN2FkYmY2ODE0M2FlNzdmZDAw ZjM4YWIwHhcNMjYwMTAyMTIyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDA4YjBjMGViNTIxY2E4M2Y1MzA4M2U1N2VkNGQ5Njk5OTRmZGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMxW/LT5kN0bgWvVZDdBw7sSxqes blXa70kxGVoBofLJLOiQCsqvMMYI2hDfKlm/AnlZhTxuNFR+QCBD7M0tTgCWbqv+ i840/OzPuxK1MdkxJi/2L6Xv9HO6EYj2/HOF29gkRswUzf/96yffF3RhiHKUyWWm KG+/Gg3GSJWh52zv7jAMetaAxOU1FPeG1WZ67gxFC8lbT8kGoQt21ermAt3GBl2K 9rRM7YZeum5bAQf9H1p9/faCb9vOvvytHiuaUVeftBTT/sEZmPP4U+5hgTP5QiVi O0EZ+GVC98WgvPPQeFKfRM18+uvGvmtx20PR2wd56avOGQK4WKshGN+yXQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFFAIsMDrUhyoP1MIPlftTZaZlP3VMB8GA1UdIwQY MBaAFAur1oLBqPxQN62/aBQ653/QDzirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzZ2V2dzR29fRkEzcmI5b0ZEcm5mOUFQT0tzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9iYzQwMWEtNjkzOC00ZmRjLTljNmUt ZmFjM2Q1NTQzYTJjLzEvVUFpd3dPdFNIS2dfVXdnLVYtMU5scG1VX2RVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9iYzQwMWEtNjkzOC00ZmRjLTljNmUtZmFjM2Q1NTQzYTJj LzEvQzZ2V2dzR29fRkEzcmI5b0ZEcm5mOUFQT0tzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAW+A6MAwD BAHBloIDBAHBloQwDQYJKoZIhvcNAQELBQADggEBALy19uK9tSw6Cr3l1reghAMj hwApvc+5CxI2mJD+tV7CoD3F7q2nzVQdVg/AZyI2ypLxaN+RqbNJRZvI3KPWcdNF uPYfuAxRgc2Q+6P4SP+BadeKHuCpR8HWXXpl50v1pSCTc8HWaZ4XQoLpTIZZ/Y1F K0LVELkxyM4WaW3b6TgKqXMy7nA7ODUTtTp0skdf4l9svekEjrvc1axcjYQInPyV PmW1aSdFsUYSwbpnOX7yBOgI0XbKWRIUGu5RoNDFxNTTNcfzfuM1yoOflkxdM/sQ F0vRPhv9wbOxtoy1RM1IQHF6J8XmdYZKUBxwliiT+gHD+6KX/XaT880dNo9Cn+o= -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:00 2026 by rpki-client