This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/UxOjp8XUs-Ky59G3Ao0aGxBbUxk.roa File: UxOjp8XUs-Ky59G3Ao0aGxBbUxk.roa (raw, json) Hash identifier: IG/Uj+pARjcg7xsZwOswZLWfcj4Zeh91EtnXY1KelO4= Subject key identifier: 53:13:A3:A7:C5:D4:B3:E2:B2:E7:D1:B7:02:8D:1A:1B:10:5B:53:19 Certificate issuer: /CN=cba0171a02d5e4a75fb40635545ae0064c8cccad Certificate serial: 019B78A345276500B695792DA0E83A9336F0 Authority key identifier: CB:A0:17:1A:02:D5:E4:A7:5F:B4:06:35:54:5A:E0:06:4C:8C:CC:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/UxOjp8XUs-Ky59G3Ao0aGxBbUxk.roa Signing time: Thu 01 Jan 2026 08:18:44 +0000 ROA not before: Thu 01 Jan 2026 08:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 91.213.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 05:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:45:27:65:00:b6:95:79:2d:a0:e8:3a:93:36:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cba0171a02d5e4a75fb40635545ae0064c8cccad Validity Not Before: Jan 1 08:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5313a3a7c5d4b3e2b2e7d1b7028d1a1b105b5319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a6:bc:58:3d:8a:fb:af:30:d1:63:c7:4d:a6: 72:4d:1f:cd:2b:86:35:10:73:71:a5:21:f9:97:29: eb:5d:fc:12:1b:38:c0:ec:8f:2c:47:5b:92:45:e5: 6e:14:9e:d5:ea:5b:79:25:70:5e:ea:3f:e9:33:e3: 7e:39:f8:3c:8d:03:e2:00:8a:35:65:a0:f7:15:aa: 46:48:5d:54:95:54:d2:3c:bc:64:36:7b:60:ed:d0: a5:a5:c5:71:f6:ed:5f:55:d2:02:c5:27:b6:78:f5: 44:b3:a1:8a:05:fc:d2:c2:7a:9e:50:d1:a1:fd:5b: 29:d9:9f:15:d0:9c:b0:8f:41:a1:82:2a:30:34:87: bf:70:61:d8:3b:bc:61:79:63:e2:8c:29:de:60:d8: 1c:88:12:22:00:84:a5:70:95:ef:40:05:53:37:cf: 05:1f:f1:76:ed:e5:c9:7a:d9:72:c4:2e:4b:85:ac: 9a:85:bf:9e:8c:24:34:09:d0:d3:bf:72:73:f1:7b: 0a:2c:23:ea:47:05:6b:e1:ca:38:a9:fc:b3:3d:46: 53:d7:92:49:53:18:c4:b2:52:40:96:2e:e6:93:98: 61:ff:6b:5a:47:a4:a8:5e:fe:d6:4d:13:15:93:fa: 61:1e:7a:51:3e:7a:99:bc:e2:98:98:dc:25:09:45: a1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:13:A3:A7:C5:D4:B3:E2:B2:E7:D1:B7:02:8D:1A:1B:10:5B:53:19 X509v3 Authority Key Identifier: keyid:CB:A0:17:1A:02:D5:E4:A7:5F:B4:06:35:54:5A:E0:06:4C:8C:CC:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/UxOjp8XUs-Ky59G3Ao0aGxBbUxk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.68.0/24 Signature Algorithm: sha256WithRSAEncryption b5:1d:11:40:ff:3a:4e:c1:b2:c9:76:9b:4f:dc:92:d2:25:fa: 6b:cb:fa:d0:e3:15:12:50:64:8b:58:de:da:83:cc:05:b7:95: 01:61:61:27:a6:e0:c8:38:cf:8f:14:1d:10:4a:6c:7d:d9:a7: 03:28:c3:67:6b:f8:83:00:cc:12:b0:2b:1f:d5:7d:4d:b5:6b: fb:af:46:88:89:d2:c6:a7:03:6d:9e:28:98:5c:fa:8e:ea:91: 72:b1:1b:2b:a1:e0:9e:bc:c7:0d:7e:62:9e:10:87:22:67:fa: 52:cd:12:df:37:9f:cc:ec:63:e0:ca:cc:81:54:14:2b:30:92: 19:4d:8a:a5:bd:30:59:58:f1:97:4a:6a:d4:29:a5:3f:58:f7: ac:d3:04:c2:31:f7:05:7d:b3:c6:b8:22:21:5c:89:66:a3:e8: b7:0b:7e:0f:11:0d:91:d7:49:47:92:d9:84:af:29:17:cd:1e: 25:0a:2c:d6:e1:f7:ed:dc:52:ef:10:c9:93:2a:92:de:eb:24: 2f:b8:06:d2:3f:49:a8:02:21:6e:a7:9f:75:9e:50:e1:d5:29: a3:18:78:44:ff:84:1a:da:8e:fd:db:52:ba:b2:cd:de:20:3c: 6a:29:b4:3e:8f:e4:9c:10:82:fa:83:b9:b1:aa:c3:e1:99:65: 9c:70:c8:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o0UnZQC2lXktoOg6kzbwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYTAxNzFhMDJkNWU0YTc1ZmI0MDYzNTU0NWFlMDA2NGM4 Y2NjYWQwHhcNMjYwMTAxMDgxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzEzYTNhN2M1ZDRiM2UyYjJlN2QxYjcwMjhkMWExYjEwNWI1MzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qa8WD2K+68w0WPHTaZyTR/NK4Y1 EHNxpSH5lynrXfwSGzjA7I8sR1uSReVuFJ7V6lt5JXBe6j/pM+N+Ofg8jQPiAIo1 ZaD3FapGSF1UlVTSPLxkNntg7dClpcVx9u1fVdICxSe2ePVEs6GKBfzSwnqeUNGh /Vsp2Z8V0Jywj0GhgiowNIe/cGHYO7xheWPijCneYNgciBIiAISlcJXvQAVTN88F H/F27eXJetlyxC5Lhayahb+ejCQ0CdDTv3Jz8XsKLCPqRwVr4co4qfyzPUZT15JJ UxjEslJAli7mk5hh/2taR6SoXv7WTRMVk/phHnpRPnqZvOKYmNwlCUWhkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFMTo6fF1LPisufRtwKNGhsQW1MZMB8GA1UdIwQY MBaAFMugFxoC1eSnX7QGNVRa4AZMjMytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTZBWEdnTFY1S2RmdEFZMVZGcmdCa3lNekswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC82NTQ0MzMtZTMyMC00MmFlLWJiNjEt NTcwYjE0ODMzNTM0LzEvVXhPanA4WFVzLUt5NTlHM0FvMGFHeEJiVXhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC82NTQ0MzMtZTMyMC00MmFlLWJiNjEtNTcwYjE0ODMzNTM0 LzEveTZBWEdnTFY1S2RmdEFZMVZGcmdCa3lNekswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9VEMA0G CSqGSIb3DQEBCwUAA4IBAQC1HRFA/zpOwbLJdptP3JLSJfpry/rQ4xUSUGSLWN7a g8wFt5UBYWEnpuDIOM+PFB0QSmx92acDKMNna/iDAMwSsCsf1X1NtWv7r0aIidLG pwNtniiYXPqO6pFysRsroeCevMcNfmKeEIciZ/pSzRLfN5/M7GPgysyBVBQrMJIZ TYqlvTBZWPGXSmrUKaU/WPes0wTCMfcFfbPGuCIhXIlmo+i3C34PEQ2R10lHktmE rykXzR4lCizW4fft3FLvEMmTKpLe6yQvuAbSP0moAiFup591nlDh1SmjGHhE/4Qa 2o7921K6ss3eIDxqKbQ+j+ScEIL6g7mxqsPhmWWccMjh -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:48 2026 by rpki-client