This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/UWF7E4cVtQE-lQUIvag_klM8KLs.roa File: UWF7E4cVtQE-lQUIvag_klM8KLs.roa (raw, json) Hash identifier: KMbshq9iLXw3Qdew7eTcBbE+kEUvJ0UEHkUK7P+m8RE= Subject key identifier: 51:61:7B:13:87:15:B5:01:3E:95:05:08:BD:A8:3F:92:53:3C:28:BB Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA49EC44669D7BD42E63C3E52FE7CE2 Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/UWF7E4cVtQE-lQUIvag_klM8KLs.roa Signing time: Thu 01 Jan 2026 22:19:04 +0000 ROA not before: Thu 01 Jan 2026 22:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199669 IP address blocks: 109.196.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:9e:c4:46:69:d7:bd:42:e6:3c:3e:52:fe:7c:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51617b138715b5013e950508bda83f92533c28bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:68:56:23:da:17:96:b6:4a:47:f3:c3:6c:23: 62:4f:b3:7b:5f:a6:30:9b:2d:c2:e4:81:2a:a1:6f: 0f:19:9a:94:b1:d9:86:89:be:6f:f9:14:ad:44:ec: 0e:d7:3e:65:8f:2b:50:6d:c7:65:b9:22:fa:0e:07: 1c:37:12:4c:3a:cc:ec:e7:53:d5:53:eb:6d:e9:ae: f1:fa:f1:90:c7:3b:a1:42:be:89:f6:52:bc:b3:8e: 37:84:66:d8:34:97:c4:15:8d:30:49:02:19:6b:58: 03:76:df:ae:81:0a:a0:99:c3:ed:da:17:a2:b4:d3: 81:6a:1c:f3:60:30:31:d7:0d:58:41:e1:1a:a2:14: 25:61:91:fa:47:2e:2c:6a:ac:85:2b:68:ee:0f:b6: 58:7f:e5:5a:eb:16:32:e0:15:18:f0:75:b0:ba:e5: e8:5f:32:15:be:60:14:4d:ff:60:35:d7:de:85:71: 3f:6c:b3:66:c0:44:87:ed:a2:7e:52:e7:8a:5c:67: 49:c7:e7:c7:b1:51:07:0f:07:20:bf:07:b7:84:6b: f7:f8:1a:11:2b:5a:2e:c0:d0:c1:05:03:6f:03:17: 7f:e5:97:7e:bd:58:22:a0:9a:cc:07:0b:27:87:de: 53:a9:a8:4e:0f:af:a7:a7:5f:4f:35:84:e0:64:e4: 43:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:61:7B:13:87:15:B5:01:3E:95:05:08:BD:A8:3F:92:53:3C:28:BB X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/UWF7E4cVtQE-lQUIvag_klM8KLs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.196.166.0/24 Signature Algorithm: sha256WithRSAEncryption 76:00:c0:64:f8:0e:43:d7:be:b4:56:88:13:57:99:8a:50:ae: f9:2f:6f:03:01:d9:77:78:c3:12:c2:96:7f:75:5c:30:8f:ca: 8b:f5:e3:b9:72:8f:b8:1c:a8:54:70:50:17:b8:fd:91:e6:32: 46:70:c0:2a:18:e5:32:b1:19:71:48:18:6b:21:07:f2:b2:34: ef:0e:2d:6b:87:d1:07:93:ca:5c:af:b8:63:bb:ab:8b:3b:21: c5:67:c3:f4:8a:3a:93:f6:62:ad:46:58:31:d6:ce:68:2e:87: 1a:ee:0d:02:4d:ab:0b:63:3e:a8:aa:72:09:84:c5:27:0d:c0: f5:20:64:81:1e:19:fa:1e:75:1f:72:ef:6e:76:54:e1:69:5e: a3:28:54:36:9f:2a:a2:43:50:7b:37:ee:31:92:5b:79:69:c0: b9:73:6c:be:f8:ad:9f:2a:16:9e:63:c9:61:ed:40:f7:02:2d: 9d:fe:1b:fe:e3:03:0f:9a:87:bd:e8:91:ff:72:00:7b:2a:4c: 2c:2d:8d:37:68:ff:07:ad:08:13:6c:b5:71:37:f2:80:e2:27: b1:c0:f7:42:6d:da:06:95:19:d4:24:8b:f9:0a:bd:d4:fe:17: 21:ed:65:b1:78:c4:ce:ac:78:38:fe:de:08:b7:13:86:06:eb: 7d:a8:c2:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pJ7ERmnXvULmPD5S/nziMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTYxN2IxMzg3MTViNTAxM2U5NTA1MDhiZGE4M2Y5MjUzM2MyOGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmhWI9oXlrZKR/PDbCNiT7N7X6Yw my3C5IEqoW8PGZqUsdmGib5v+RStROwO1z5ljytQbcdluSL6DgccNxJMOszs51PV U+tt6a7x+vGQxzuhQr6J9lK8s443hGbYNJfEFY0wSQIZa1gDdt+ugQqgmcPt2hei tNOBahzzYDAx1w1YQeEaohQlYZH6Ry4saqyFK2juD7ZYf+Va6xYy4BUY8HWwuuXo XzIVvmAUTf9gNdfehXE/bLNmwESH7aJ+UueKXGdJx+fHsVEHDwcgvwe3hGv3+BoR K1ouwNDBBQNvAxd/5Zd+vVgioJrMBwsnh95TqahOD6+np19PNYTgZORD5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFFhexOHFbUBPpUFCL2oP5JTPCi7MB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvVVdGN0U0Y1Z0UUUtbFFVSXZhZ19rbE04S0xzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbcSmMA0G CSqGSIb3DQEBCwUAA4IBAQB2AMBk+A5D1760VogTV5mKUK75L28DAdl3eMMSwpZ/ dVwwj8qL9eO5co+4HKhUcFAXuP2R5jJGcMAqGOUysRlxSBhrIQfysjTvDi1rh9EH k8pcr7hju6uLOyHFZ8P0ijqT9mKtRlgx1s5oLoca7g0CTasLYz6oqnIJhMUnDcD1 IGSBHhn6HnUfcu9udlThaV6jKFQ2nyqiQ1B7N+4xklt5acC5c2y++K2fKhaeY8lh 7UD3Ai2d/hv+4wMPmoe96JH/cgB7KkwsLY03aP8HrQgTbLVxN/KA4iexwPdCbdoG lRnUJIv5Cr3U/hch7WWxeMTOrHg4/t4ItxOGBut9qMKA -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:26 2026 by rpki-client