This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/_ufCZrY4TTbi8Cz0nPgq82cNiQ8.roa File: _ufCZrY4TTbi8Cz0nPgq82cNiQ8.roa (raw, json) Hash identifier: BF3dwTjI1MgTJaLrGrPoxVSylxBpdMOVtLESfSrh5fE= Subject key identifier: FE:E7:C2:66:B6:38:4D:36:E2:F0:2C:F4:9C:F8:2A:F3:67:0D:89:0F Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Certificate serial: 019B7C8054639467C0CBE9C7835A8E2AF56F Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/_ufCZrY4TTbi8Cz0nPgq82cNiQ8.roa Signing time: Fri 02 Jan 2026 02:19:03 +0000 ROA not before: Fri 02 Jan 2026 02:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 91.190.189.0/24 maxlen: 24 92.61.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:54:63:94:67:c0:cb:e9:c7:83:5a:8e:2a:f5:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3 Validity Not Before: Jan 2 02:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fee7c266b6384d36e2f02cf49cf82af3670d890f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:37:9c:1f:7c:75:03:40:c2:d4:98:c1:5a:b3: b1:eb:37:5e:90:1e:14:d1:7e:09:e8:1a:5f:b6:da: 98:fd:d3:81:16:f7:e6:49:63:30:7b:35:79:5c:15: 5f:ad:46:df:24:88:ec:aa:b8:ad:f8:54:6d:7e:da: 27:0d:8d:73:98:a0:39:bc:ba:af:9d:17:82:44:b0: dd:f5:11:09:b8:73:ac:cb:d4:19:f7:41:44:56:d2: da:18:18:38:bc:ff:0c:69:6b:53:8c:cb:17:60:86: 9f:47:78:4f:ad:84:1e:e5:98:dc:f3:1e:c1:a2:21: 06:cd:64:21:90:1d:f9:54:38:e3:d2:22:89:de:c5: 0d:87:e8:8e:c9:1c:8e:fd:91:6f:3f:19:e6:9c:31: da:f9:bc:a4:ed:e6:e1:44:17:1b:50:26:8a:c1:c1: a8:ad:1b:8e:a7:33:d3:69:a1:0a:4c:49:71:d2:19: cc:32:78:35:e0:f3:24:3c:8c:d7:31:00:c3:92:e3: 0a:2b:58:71:0b:23:8c:05:45:b3:8a:af:13:6a:e2: 06:30:c5:3c:74:e3:be:5e:6a:69:25:ff:75:71:c0: 0f:52:d3:2e:c4:e5:9d:3b:eb:e3:28:84:d4:31:8c: 64:eb:ca:c6:94:1c:3a:88:3f:29:d5:d0:c9:b2:ca: cb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E7:C2:66:B6:38:4D:36:E2:F0:2C:F4:9C:F8:2A:F3:67:0D:89:0F X509v3 Authority Key Identifier: keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/_ufCZrY4TTbi8Cz0nPgq82cNiQ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.190.189.0/24 92.61.104.0/24 Signature Algorithm: sha256WithRSAEncryption 25:46:86:a4:b4:bd:40:e3:93:bb:69:8f:86:e3:0c:78:be:8e: f4:5e:f9:8e:04:75:01:25:e8:61:c0:7c:2e:f9:5e:68:23:fa: fc:99:0f:df:bf:ae:5e:27:bd:6d:89:d6:45:bf:ca:de:42:ae: 1d:36:67:2c:b4:3d:8e:98:aa:35:39:58:ad:2f:48:3a:61:a1: a2:a7:11:6e:33:70:36:5e:ce:f1:14:64:f2:ec:18:2d:1c:8f: 1b:3f:94:45:42:c7:ee:9b:63:31:2d:4a:bf:a3:69:8c:64:59: dc:7a:93:e3:0f:9f:97:20:0b:21:28:f2:e6:03:de:bd:ea:80: 4a:ee:db:ec:34:dc:af:71:7a:0b:ff:d3:72:75:74:dc:3f:21: 49:c3:50:cf:da:84:f7:d5:0e:fb:79:a2:07:53:13:15:a0:fa: 13:2d:2c:1b:91:e0:10:61:b2:d7:cf:db:bd:b9:23:e1:24:46: 84:9a:24:ca:e4:0e:9c:c4:78:e6:b8:dd:2d:96:b5:cf:7b:31: c7:a1:b0:59:1f:2e:28:e0:b9:01:41:79:f3:dc:35:0e:6d:91: 35:8d:6f:11:83:65:91:e1:bc:e1:d9:05:5a:d7:84:b8:9c:51: 98:81:52:d1:30:1c:67:1b:1e:de:f9:ba:05:c0:0d:3d:33:ac: a1:95:f9:b1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gFRjlGfAy+nHg1qOKvVvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw YzZmYzMwHhcNMjYwMTAyMDIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWU3YzI2NmI2Mzg0ZDM2ZTJmMDJjZjQ5Y2Y4MmFmMzY3MGQ4OTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDecH3x1A0DC1JjBWrOx6zdekB4U 0X4J6BpfttqY/dOBFvfmSWMwezV5XBVfrUbfJIjsqrit+FRtftonDY1zmKA5vLqv nReCRLDd9REJuHOsy9QZ90FEVtLaGBg4vP8MaWtTjMsXYIafR3hPrYQe5Zjc8x7B oiEGzWQhkB35VDjj0iKJ3sUNh+iOyRyO/ZFvPxnmnDHa+byk7ebhRBcbUCaKwcGo rRuOpzPTaaEKTElx0hnMMng14PMkPIzXMQDDkuMKK1hxCyOMBUWziq8TauIGMMU8 dOO+XmppJf91ccAPUtMuxOWdO+vjKITUMYxk68rGlBw6iD8p1dDJssrLUwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP7nwma2OE024vAs9Jz4KvNnDYkPMB8GA1UdIwQY MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt ZjFjMzNhYTJmZDUwLzEvX3VmQ1pyWTRUVGJpOEN6MG5QZ3E4MmNOaVE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW769AwQA XD1oMA0GCSqGSIb3DQEBCwUAA4IBAQAlRoaktL1A45O7aY+G4wx4vo70XvmOBHUB JehhwHwu+V5oI/r8mQ/fv65eJ71tidZFv8reQq4dNmcstD2OmKo1OVitL0g6YaGi pxFuM3A2Xs7xFGTy7BgtHI8bP5RFQsfum2MxLUq/o2mMZFncepPjD5+XIAshKPLm A9696oBK7tvsNNyvcXoL/9NydXTcPyFJw1DP2oT31Q77eaIHUxMVoPoTLSwbkeAQ YbLXz9u9uSPhJEaEmiTK5A6cxHjmuN0tlrXPezHHobBZHy4o4LkBQXnz3DUObZE1 jW8Rg2WR4bzh2QVa14S4nFGYgVLRMBxnGx7e+boFwA09M6yhlfmx -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:49 2026 by rpki-client