This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/uJrBPbJuAzhkVZXNYxGhegbxeZE.roa File: uJrBPbJuAzhkVZXNYxGhegbxeZE.roa (raw, json) Hash identifier: vkQaOQJuuFQiTy2ZPMpaydP0z5Y6YEBLnSoStn62x7Q= Subject key identifier: B8:9A:C1:3D:B2:6E:03:38:64:55:95:CD:63:11:A1:7A:06:F1:79:91 Certificate issuer: /CN=69fdfe8249f943aabad1881fca5836613a6a67bc Certificate serial: 019B7FF25160381342F857157796404068F3 Authority key identifier: 69:FD:FE:82:49:F9:43:AA:BA:D1:88:1F:CA:58:36:61:3A:6A:67:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/af3-gkn5Q6q60Ygfylg2YTpqZ7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/uJrBPbJuAzhkVZXNYxGhegbxeZE.roa Signing time: Fri 02 Jan 2026 18:22:25 +0000 ROA not before: Fri 02 Jan 2026 18:22:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39242 IP address blocks: 185.159.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.crl rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft rsync://rpki.ripe.net/repository/DEFAULT/af3-gkn5Q6q60Ygfylg2YTpqZ7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:51:60:38:13:42:f8:57:15:77:96:40:40:68:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fdfe8249f943aabad1881fca5836613a6a67bc Validity Not Before: Jan 2 18:22:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b89ac13db26e0338645595cd6311a17a06f17991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8f:18:3b:a9:af:6e:fa:7a:65:a8:80:b0:34: 75:6c:8f:4c:57:f4:f1:20:8c:59:1d:b3:20:1f:af: 32:54:60:05:15:04:b7:5e:6e:0a:f6:19:93:cd:ae: 76:08:dd:cc:16:54:54:4b:5d:73:d6:14:07:8a:fc: e8:60:49:52:10:2c:03:5e:f0:9e:10:e6:a0:63:3e: 99:b4:1d:f3:f8:c9:e5:b8:0f:d7:88:1a:6a:90:82: 50:9d:11:77:87:2f:a5:55:82:70:07:5b:3e:96:cc: 8a:de:6b:ff:a5:6a:44:15:14:c5:4a:e7:29:00:64: ba:74:00:84:84:da:6f:56:dc:16:f8:a0:62:e0:ed: 42:26:5d:2d:76:4b:49:3f:d6:a0:f4:78:a4:a6:8f: 4a:1a:db:3f:77:5e:96:bf:09:89:bf:82:6c:9c:46: 19:87:59:f0:20:b2:2e:99:9d:6e:b8:ec:3f:99:5d: f2:bf:b3:bb:ea:12:08:b2:68:1d:8d:fd:7b:6d:b9: c3:88:93:f3:bc:6f:bd:f6:23:30:75:a8:b3:9d:c9: ec:7f:67:f4:6c:f2:d1:ab:81:8c:43:93:cd:7d:98: f8:ec:d2:00:52:f9:87:57:83:1e:6d:a3:09:06:f0: c3:26:8e:36:56:4b:31:4d:43:a7:1a:11:4a:7f:c8: cd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9A:C1:3D:B2:6E:03:38:64:55:95:CD:63:11:A1:7A:06:F1:79:91 X509v3 Authority Key Identifier: keyid:69:FD:FE:82:49:F9:43:AA:BA:D1:88:1F:CA:58:36:61:3A:6A:67:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/af3-gkn5Q6q60Ygfylg2YTpqZ7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/uJrBPbJuAzhkVZXNYxGhegbxeZE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.159.236.0/24 Signature Algorithm: sha256WithRSAEncryption 98:58:e6:11:21:8d:2e:16:fb:db:25:e0:41:8c:6c:e3:3a:f3: fd:2a:ef:e1:b4:57:55:0e:d5:bc:82:4f:54:0f:7b:ac:61:07: 25:21:13:c1:d2:1e:8f:ba:33:32:5f:86:95:31:ac:df:8f:52: 0c:a5:87:6e:40:e0:6c:7e:9b:5c:c3:20:bf:84:2e:84:64:bd: 15:c7:27:63:fd:3d:a0:cd:f6:c6:4e:66:fc:8b:05:1d:bc:3c: 3a:09:f4:0e:c0:92:a4:48:32:5e:c8:00:18:6c:71:af:b2:e9: 8d:a7:f8:29:36:5f:fc:b5:91:f1:a2:63:60:9b:55:5e:0c:59: 6f:3f:a6:1c:ea:c9:80:89:f5:b4:f3:d9:e9:60:45:22:91:d4: a2:1c:6e:00:d5:8a:90:78:3b:3e:fe:9f:48:08:ca:f6:31:24: d4:c1:9c:4a:ac:ab:f6:56:f4:b8:7e:ab:76:7e:7f:87:8e:8c: e3:b1:06:5a:f4:56:01:88:f2:88:a0:b8:d3:56:c2:fc:59:43: 83:ed:51:f8:2a:87:b5:3a:80:f9:1c:69:13:de:fe:9b:32:9e: 43:3b:d8:cd:bf:6d:6d:a0:30:e1:29:69:fe:b7:f7:77:5f:df: 5c:18:f6:76:88:ab:aa:f4:f0:c3:72:b4:45:5b:00:d7:50:2b: 45:6d:af:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8lFgOBNC+FcVd5ZAQGjzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZmRmZTgyNDlmOTQzYWFiYWQxODgxZmNhNTgzNjYxM2E2 YTY3YmMwHhcNMjYwMTAyMTgyMjI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODlhYzEzZGIyNmUwMzM4NjQ1NTk1Y2Q2MzExYTE3YTA2ZjE3OTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI8YO6mvbvp6ZaiAsDR1bI9MV/Tx IIxZHbMgH68yVGAFFQS3Xm4K9hmTza52CN3MFlRUS11z1hQHivzoYElSECwDXvCe EOagYz6ZtB3z+MnluA/XiBpqkIJQnRF3hy+lVYJwB1s+lsyK3mv/pWpEFRTFSucp AGS6dACEhNpvVtwW+KBi4O1CJl0tdktJP9ag9Hikpo9KGts/d16WvwmJv4JsnEYZ h1nwILIumZ1uuOw/mV3yv7O76hIIsmgdjf17bbnDiJPzvG+99iMwdaizncnsf2f0 bPLRq4GMQ5PNfZj47NIAUvmHV4MebaMJBvDDJo42VksxTUOnGhFKf8jNfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLiawT2ybgM4ZFWVzWMRoXoG8XmRMB8GA1UdIwQY MBaAFGn9/oJJ+UOqutGIH8pYNmE6ame8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWYzLWdrbjVRNnE2MFlnZnlsZzJZVHBxWjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jY2Y3NzctOTQ2NS00YTJlLTgxMTIt NzFkOGI4ODUwODUzLzEvdUpyQlBiSnVBemhrVlpYTll4R2hlZ2J4ZVpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9jY2Y3NzctOTQ2NS00YTJlLTgxMTItNzFkOGI4ODUwODUz LzEvYWYzLWdrbjVRNnE2MFlnZnlsZzJZVHBxWjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZ/sMA0G CSqGSIb3DQEBCwUAA4IBAQCYWOYRIY0uFvvbJeBBjGzjOvP9Ku/htFdVDtW8gk9U D3usYQclIRPB0h6PujMyX4aVMazfj1IMpYduQOBsfptcwyC/hC6EZL0Vxydj/T2g zfbGTmb8iwUdvDw6CfQOwJKkSDJeyAAYbHGvsumNp/gpNl/8tZHxomNgm1VeDFlv P6Yc6smAifW089npYEUikdSiHG4A1YqQeDs+/p9ICMr2MSTUwZxKrKv2VvS4fqt2 fn+HjozjsQZa9FYBiPKIoLjTVsL8WUOD7VH4Koe1OoD5HGkT3v6bMp5DO9jNv21t oDDhKWn+t/d3X99cGPZ2iKuq9PDDcrRFWwDXUCtFba/o -----END CERTIFICATE-----Generated at Mon Feb 9 20:11:12 2026 by rpki-client