This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/uiEPOruYyynMnv0DkemAao-QO_M.roa File: uiEPOruYyynMnv0DkemAao-QO_M.roa (raw, json) Hash identifier: zwZ/t6zJRBJasigAc2EM1YRTTVM6B1E25xzsECcPnU8= Subject key identifier: BA:21:0F:3A:BB:98:CB:29:CC:9E:FD:03:91:E9:80:6A:8F:90:3B:F3 Certificate issuer: /CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1 Certificate serial: 019B791105FDE33D756C17F8ED92BED93E71 Authority key identifier: 60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/uiEPOruYyynMnv0DkemAao-QO_M.roa Signing time: Thu 01 Jan 2026 10:18:37 +0000 ROA not before: Thu 01 Jan 2026 10:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21887 IP address blocks: 178.157.48.0/20 maxlen: 24 185.239.68.0/22 maxlen: 24 212.50.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.mft rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:05:fd:e3:3d:75:6c:17:f8:ed:92:be:d9:3e:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60dad95ba2b1eb3dd7738002fc68aa95588c3bf1 Validity Not Before: Jan 1 10:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba210f3abb98cb29cc9efd0391e9806a8f903bf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:23:1c:d5:54:de:2e:de:e8:cb:6c:28:07:eb: f5:86:6f:65:90:1f:a9:d6:6d:42:77:93:21:6d:65: c9:9a:83:bf:9d:13:e8:9d:d5:39:17:36:0b:d3:a8: a5:79:30:2c:3b:a5:7b:e3:d9:53:0b:6a:f5:7d:20: b0:fa:c1:5d:c6:c5:e5:cc:98:8c:63:29:0b:b5:fe: ba:48:47:0d:2c:e6:f9:71:c9:f2:42:61:5d:90:4f: fb:ce:47:6c:67:4c:b6:ba:02:58:d8:d0:56:9e:3c: a6:fe:a4:85:43:4f:82:a0:c7:50:e5:06:41:7d:4b: be:48:51:33:9f:2c:4d:65:b9:2b:b8:12:48:56:12: c5:b0:b5:d8:c9:a1:0c:11:36:1c:ef:be:b6:e8:f6: a5:5a:6c:e0:bb:9c:f6:3e:09:db:cc:55:5c:86:c2: 35:95:df:34:2e:26:af:98:cf:fd:f3:f9:d9:53:c1: 05:e9:ca:e3:f4:8c:2b:70:eb:99:35:f8:9f:62:c5: 8c:7e:3d:1c:66:2e:59:ee:88:1c:ab:9a:83:e0:7b: 67:e2:c1:80:7a:4c:39:9c:2b:56:d8:06:80:43:31: 59:c9:5f:88:df:2e:82:bc:5d:a3:80:7c:49:36:24: 71:18:0a:07:95:b6:7f:a9:fa:3f:38:43:e1:69:72: d8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:21:0F:3A:BB:98:CB:29:CC:9E:FD:03:91:E9:80:6A:8F:90:3B:F3 X509v3 Authority Key Identifier: keyid:60:DA:D9:5B:A2:B1:EB:3D:D7:73:80:02:FC:68:AA:95:58:8C:3B:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/uiEPOruYyynMnv0DkemAao-QO_M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/448ba0-a438-4f59-885b-4218b2b6963a/1/YNrZW6Kx6z3Xc4AC_GiqlViMO_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.157.48.0/20 185.239.68.0/22 212.50.224.0/19 Signature Algorithm: sha256WithRSAEncryption 0c:3a:74:d9:88:fe:c6:d6:7e:08:e3:95:00:c3:89:b2:20:0f: f4:78:b2:e4:e2:76:0f:6b:39:83:e0:15:36:64:df:51:f9:ef: 10:48:09:8e:2c:2b:91:9c:43:94:91:7c:00:67:d5:09:e0:0e: 48:1f:10:ca:e1:58:f8:e5:93:5b:47:ac:4a:a7:87:1a:5b:9d: 87:40:19:c7:c3:e3:8f:32:f2:13:6d:6a:17:d0:f4:4a:8a:8b: 42:db:e6:6b:17:00:68:93:d2:98:01:bc:95:c6:d2:bc:81:3b: 61:8f:16:56:7d:41:cc:13:69:0f:c2:0d:3e:09:81:6d:8d:7f: b9:4b:a6:26:3d:38:13:f9:bc:87:0f:22:7d:05:d0:cb:4e:f0: 20:e3:0b:25:ee:2f:af:fc:e6:f4:c1:68:76:17:a8:5e:5f:76: ae:a4:7e:c2:7b:72:aa:51:48:c3:a7:4c:04:c2:a1:15:11:cc: 87:ba:9b:05:26:ee:09:9d:96:18:56:1e:23:1a:fd:57:3e:0e: 60:51:94:7e:06:9f:09:9b:5f:2e:ba:5c:e9:2d:76:3f:93:73: 20:19:11:1f:6b:02:29:f0:d9:bd:9b:ff:16:d4:92:ea:e9:68: c4:fa:fe:91:a2:00:24:d5:9f:03:15:37:18:93:7d:4e:cf:13: 7a:06:68:36 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EQX94z11bBf47ZK+2T5xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZGFkOTViYTJiMWViM2RkNzczODAwMmZjNjhhYTk1NTg4 YzNiZjEwHhcNMjYwMTAxMTAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTIxMGYzYWJiOThjYjI5Y2M5ZWZkMDM5MWU5ODA2YThmOTAzYmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiMc1VTeLt7oy2woB+v1hm9lkB+p 1m1Cd5MhbWXJmoO/nRPondU5FzYL06ileTAsO6V749lTC2r1fSCw+sFdxsXlzJiM YykLtf66SEcNLOb5ccnyQmFdkE/7zkdsZ0y2ugJY2NBWnjym/qSFQ0+CoMdQ5QZB fUu+SFEznyxNZbkruBJIVhLFsLXYyaEMETYc77626PalWmzgu5z2PgnbzFVchsI1 ld80LiavmM/98/nZU8EF6crj9IwrcOuZNfifYsWMfj0cZi5Z7ogcq5qD4Htn4sGA ekw5nCtW2AaAQzFZyV+I3y6CvF2jgHxJNiRxGAoHlbZ/qfo/OEPhaXLYiwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLohDzq7mMspzJ79A5HpgGqPkDvzMB8GA1UdIwQY MBaAFGDa2Vuises913OAAvxoqpVYjDvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU5yWlc2S3g2ejNYYzRBQ19HaXFsVmlNT19FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi80NDhiYTAtYTQzOC00ZjU5LTg4NWIt NDIxOGIyYjY5NjNhLzEvdWlFUE9ydVl5eW5NbnYwRGtlbUFhby1RT19NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi80NDhiYTAtYTQzOC00ZjU5LTg4NWItNDIxOGIyYjY5NjNh LzEvWU5yWlc2S3g2ejNYYzRBQ19HaXFsVmlNT19FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEsp0wAwQC ue9EAwQF1DLgMA0GCSqGSIb3DQEBCwUAA4IBAQAMOnTZiP7G1n4I45UAw4myIA/0 eLLk4nYPazmD4BU2ZN9R+e8QSAmOLCuRnEOUkXwAZ9UJ4A5IHxDK4Vj45ZNbR6xK p4caW52HQBnHw+OPMvITbWoX0PRKiotC2+ZrFwBok9KYAbyVxtK8gTthjxZWfUHM E2kPwg0+CYFtjX+5S6YmPTgT+byHDyJ9BdDLTvAg4wsl7i+v/Ob0wWh2F6heX3au pH7Ce3KqUUjDp0wEwqEVEcyHupsFJu4JnZYYVh4jGv1XPg5gUZR+Bp8Jm18uulzp LXY/k3MgGREfawIp8Nm9m/8W1JLq6WjE+v6RogAk1Z8DFTcYk31OzxN6Bmg2 -----END CERTIFICATE-----Generated at Mon Jan 12 11:17:19 2026 by rpki-client