This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/ujIv5ibwk7O8CuKrrObWSuY9ixw.roa File: ujIv5ibwk7O8CuKrrObWSuY9ixw.roa (raw, json) Hash identifier: uyKuMxYBLBajRvKuN93YXKhpmNRzqN7OmBRhFePEwMI= Subject key identifier: BA:32:2F:E6:26:F0:93:B3:BC:0A:E2:AB:AC:E6:D6:4A:E6:3D:8B:1C Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA53841703D390B4D82C67F6F177BA8 Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/ujIv5ibwk7O8CuKrrObWSuY9ixw.roa Signing time: Thu 01 Jan 2026 22:19:43 +0000 ROA not before: Thu 01 Jan 2026 22:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44586 IP address blocks: 83.228.89.0/24 maxlen: 24 213.91.173.0/24 maxlen: 24 213.91.191.0/24 maxlen: 24 2a01:5a8:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:38:41:70:3d:39:0b:4d:82:c6:7f:6f:17:7b:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba322fe626f093b3bc0ae2abace6d64ae63d8b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:87:1c:45:97:91:1d:f4:bb:30:4b:33:90:c2: 18:a0:63:ee:7e:26:f2:1d:ac:b3:6f:1d:78:64:fd: 52:65:cd:b4:26:0c:8d:e1:9c:e2:2e:19:14:74:21: 67:e5:bd:70:d7:f7:29:f5:f9:7a:31:06:a5:64:8e: 47:e7:74:cb:ed:d4:ce:4a:34:89:59:df:3a:de:e7: cb:26:bf:53:65:ae:68:59:c3:d2:bd:ed:5e:b0:ef: c8:51:50:9f:a0:8c:93:c5:1f:26:02:2f:99:76:a8: 1d:ad:db:bb:8b:bf:47:51:2c:d3:36:4f:f2:d2:81: 7c:a5:08:ce:63:e2:43:c7:e5:30:04:a7:47:34:f5: b7:99:12:42:65:5d:c2:40:07:f0:55:21:76:ef:74: d1:93:b4:01:31:ae:47:57:7f:fb:c1:36:e1:a0:4a: 1f:13:ee:fb:1a:b9:09:6a:b7:dc:dd:47:26:e3:ba: a7:4f:cc:9c:d9:da:2f:78:30:bf:f0:ef:b4:69:30: 72:2e:19:66:ab:2b:8b:25:04:5e:85:c9:2c:07:bd: 1c:5f:6c:87:de:19:f8:43:c1:b5:ac:ea:ba:28:1d: 3f:7c:8b:83:51:3e:b7:40:3e:95:b4:b3:7f:3e:e6: a4:a9:0c:8d:ec:d3:94:08:7a:4d:b8:8c:fc:c1:04: 2a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:32:2F:E6:26:F0:93:B3:BC:0A:E2:AB:AC:E6:D6:4A:E6:3D:8B:1C X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/ujIv5ibwk7O8CuKrrObWSuY9ixw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.228.89.0/24 213.91.173.0/24 213.91.191.0/24 IPv6: 2a01:5a8:8::/48 Signature Algorithm: sha256WithRSAEncryption 69:52:32:a1:90:27:b9:3e:1b:df:49:a3:f0:be:af:2d:3f:97: 12:8e:41:f9:46:c0:3b:77:ce:42:0b:bb:d7:2d:8f:6b:9c:2f: 7d:55:23:9f:68:ba:a5:e5:0f:de:2a:dd:0d:08:8f:cf:cf:28: 05:2f:d4:c7:41:77:67:2f:13:88:4e:4d:2d:6e:86:fc:6c:fe: a1:55:1f:c8:ce:48:d1:83:2d:83:ca:69:d4:9a:db:76:c3:4b: 9e:e0:f2:24:5b:d9:e9:eb:73:98:9c:8d:9e:3a:20:77:e2:87: da:75:5a:89:f5:b5:63:06:ac:8a:29:6d:e0:93:c6:ab:c2:4f: 5a:d8:7b:da:6a:ba:c0:1a:94:6c:5e:33:fa:2f:97:36:04:db: e9:b2:b7:c5:1a:2c:01:56:83:d2:8c:a6:df:e1:fa:3c:1f:ca: b9:c7:00:c5:8d:eb:5c:02:ed:a7:49:d2:d1:72:92:ad:56:1b: 3b:af:e9:89:d7:a9:9a:b2:4c:dc:4f:47:57:fe:b3:e9:3f:24: ad:93:1e:e6:47:9b:20:67:23:d4:c4:10:6f:f8:df:ec:d1:33: 34:e2:16:99:dc:e9:49:1f:5a:58:e1:f0:a7:13:59:fa:50:3c: 21:2b:49:39:41:a7:d7:8b:46:d0:d6:56:c5:61:8c:63:a4:6e: 79:d8:bf:85 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt7pThBcD05C02Cxn9vF3uoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTMyMmZlNjI2ZjA5M2IzYmMwYWUyYWJhY2U2ZDY0YWU2M2Q4YjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4ccRZeRHfS7MEszkMIYoGPufiby Hayzbx14ZP1SZc20JgyN4ZziLhkUdCFn5b1w1/cp9fl6MQalZI5H53TL7dTOSjSJ Wd863ufLJr9TZa5oWcPSve1esO/IUVCfoIyTxR8mAi+Zdqgdrdu7i79HUSzTNk/y 0oF8pQjOY+JDx+UwBKdHNPW3mRJCZV3CQAfwVSF273TRk7QBMa5HV3/7wTbhoEof E+77GrkJarfc3Ucm47qnT8yc2doveDC/8O+0aTByLhlmqyuLJQRehcksB70cX2yH 3hn4Q8G1rOq6KB0/fIuDUT63QD6VtLN/PuakqQyN7NOUCHpNuIz8wQQqZQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFLoyL+Ym8JOzvAriq6zm1krmPYscMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvdWpJdjVpYndrN084Q3VLcnJPYldTdVk5aXh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAU+RZAwQA 1VutAwQA1Vu/MA8EAgACMAkDBwAqAQWoAAgwDQYJKoZIhvcNAQELBQADggEBAGlS MqGQJ7k+G99Jo/C+ry0/lxKOQflGwDt3zkILu9ctj2ucL31VI59ouqXlD94q3Q0I j8/PKAUv1MdBd2cvE4hOTS1uhvxs/qFVH8jOSNGDLYPKadSa23bDS57g8iRb2enr c5icjZ46IHfih9p1Won1tWMGrIopbeCTxqvCT1rYe9pqusAalGxeM/ovlzYE2+my t8UaLAFWg9KMpt/h+jwfyrnHAMWN61wC7adJ0tFykq1WGzuv6YnXqZqyTNxPR1f+ s+k/JK2THuZHmyBnI9TEEG/43+zRMzTiFpnc6UkfWljh8KcTWfpQPCErSTlBp9eL RtDWVsVhjGOkbnnYv4U= -----END CERTIFICATE-----Generated at Mon Jan 26 10:24:18 2026 by rpki-client