This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/uLKZdDovNYh-DpBqqKP-yEKFq6g.roa File: uLKZdDovNYh-DpBqqKP-yEKFq6g.roa (raw, json) Hash identifier: VXKMVBqqwBpyEzSrFgtoLzoyOdF5dlP0dTicEmqV8zw= Subject key identifier: B8:B2:99:74:3A:2F:35:88:7E:0E:90:6A:A8:A3:FE:C8:42:85:AB:A8 Certificate issuer: /CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb Certificate serial: 019B7EA584577114364029B87A8F29FF468F Authority key identifier: 9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/uLKZdDovNYh-DpBqqKP-yEKFq6g.roa Signing time: Fri 02 Jan 2026 12:18:54 +0000 ROA not before: Fri 02 Jan 2026 12:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8879 IP address blocks: 81.89.224.0/19 maxlen: 24 84.201.64.0/18 maxlen: 24 212.62.64.0/19 maxlen: 24 2a00:1348::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:84:57:71:14:36:40:29:b8:7a:8f:29:ff:46:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb Validity Not Before: Jan 2 12:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8b299743a2f35887e0e906aa8a3fec84285aba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:27:f4:6b:1d:5e:2d:8b:c6:07:1c:63:7a:23: c5:72:8c:f4:8b:3d:2f:9b:ef:9e:6a:d8:7f:77:c3: 53:29:a9:af:5a:48:d7:d4:ca:dc:98:a3:74:e7:19: 58:2c:40:95:4e:10:56:71:16:11:a8:86:d5:f6:b6: b6:99:83:c3:c6:4f:50:2d:e1:77:7a:11:6b:da:a8: 41:36:f0:4e:00:02:0c:2d:c8:63:2b:d9:e7:d6:9a: 79:8f:9f:47:ad:14:0e:2f:84:ad:46:76:72:63:e4: c0:d5:49:a6:d0:0d:ca:a2:42:5f:26:63:34:76:e8: 17:3c:6f:59:75:73:1a:49:b2:1b:1a:67:89:56:41: c4:4e:35:69:1e:db:08:d6:79:c3:47:7c:68:26:90: 4d:3c:e7:fd:10:77:a2:1a:06:b6:19:c6:58:14:4e: 2c:3e:6e:07:a2:28:a2:d3:99:46:18:02:17:a1:d4: e2:1b:ef:fc:19:46:fd:7a:55:4f:fb:b7:b6:48:ae: 59:c5:65:86:65:8e:a1:e3:8e:97:95:ce:09:52:a6: 61:f2:1e:bc:be:6b:77:b8:b3:0b:7b:04:fe:f6:ba: d0:8f:29:63:ef:39:01:97:88:88:11:7e:47:f8:d7: df:ff:13:94:c9:ce:b2:b5:ae:8f:8a:35:97:71:22: e7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B2:99:74:3A:2F:35:88:7E:0E:90:6A:A8:A3:FE:C8:42:85:AB:A8 X509v3 Authority Key Identifier: keyid:9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/uLKZdDovNYh-DpBqqKP-yEKFq6g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.89.224.0/19 84.201.64.0/18 212.62.64.0/19 IPv6: 2a00:1348::/32 Signature Algorithm: sha256WithRSAEncryption 95:6e:71:dd:0b:2a:b6:73:7d:76:42:13:1e:5e:28:87:07:81: 2a:4a:78:23:f8:fb:c2:ee:a3:c4:f3:93:c6:5b:38:7e:26:17: 2a:33:3d:3e:1b:86:61:e8:61:02:2b:75:fa:7c:26:73:87:82: a9:f5:43:17:cc:b9:30:10:bf:55:0a:ae:50:bb:b3:b8:27:53: 94:94:90:85:fd:3d:f8:ef:b6:a7:ee:72:7a:66:7d:9d:51:9e: 8b:78:f3:98:f2:6e:98:17:0c:70:86:70:38:7e:9e:71:5a:fa: fd:82:ed:c7:51:1b:65:53:1b:82:ab:13:e1:bd:01:48:18:8a: 33:49:6d:73:20:15:fa:83:e1:5e:09:19:e5:9f:be:72:02:8a: 56:be:b8:71:61:8a:a1:10:47:27:d0:e8:62:d2:ee:7e:6a:87: 2c:6c:fe:7b:fa:5f:ad:72:96:74:b4:26:e4:84:b9:3f:38:6d: 02:64:8a:68:75:21:55:cd:21:4f:d3:20:b3:1d:95:5e:7c:10: 52:05:cf:01:e6:6f:f8:ae:7b:ab:d4:ab:9d:8f:57:a6:57:d6: fc:5d:f5:91:94:9c:69:3f:05:53:3a:fd:f3:2c:c6:bd:a6:cc: a4:2a:4a:94:cb:72:b1:b5:a2:44:7b:1e:3d:40:8c:b3:79:69: ad:31:ff:cf -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt+pYRXcRQ2QCm4eo8p/0aPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNjMyZWRiNjM1YWE4ZjljNDBhMDQ5NWE3YTYzYmI2NTM5 NTgwYmIwHhcNMjYwMTAyMTIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGIyOTk3NDNhMmYzNTg4N2UwZTkwNmFhOGEzZmVjODQyODVhYmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuif0ax1eLYvGBxxjeiPFcoz0iz0v m++eath/d8NTKamvWkjX1MrcmKN05xlYLECVThBWcRYRqIbV9ra2mYPDxk9QLeF3 ehFr2qhBNvBOAAIMLchjK9nn1pp5j59HrRQOL4StRnZyY+TA1Umm0A3KokJfJmM0 dugXPG9ZdXMaSbIbGmeJVkHETjVpHtsI1nnDR3xoJpBNPOf9EHeiGga2GcZYFE4s Pm4Hoiii05lGGAIXodTiG+/8GUb9elVP+7e2SK5ZxWWGZY6h446Xlc4JUqZh8h68 vmt3uLMLewT+9rrQjylj7zkBl4iIEX5H+Nff/xOUyc6yta6PijWXcSLnrwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFLiymXQ6LzWIfg6Qaqij/shChauoMB8GA1UdIwQY MBaAFJtjLttjWqj5xAoElaemO7ZTlYC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTJNdTIyTmFxUG5FQ2dTVnA2WTd0bE9WZ0xzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kMDI5ODMtYjExYy00YmY3LWI0YjUt ZThjOWFkNWYwNTFhLzEvdUxLWmREb3ZOWWgtRHBCcXFLUC15RUtGcTZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9kMDI5ODMtYjExYy00YmY3LWI0YjUtZThjOWFkNWYwNTFh LzEvbTJNdTIyTmFxUG5FQ2dTVnA2WTd0bE9WZ0xzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFUVngAwQG VMlAAwQF1D5AMA0EAgACMAcDBQAqABNIMA0GCSqGSIb3DQEBCwUAA4IBAQCVbnHd Cyq2c312QhMeXiiHB4EqSngj+PvC7qPE85PGWzh+JhcqMz0+G4Zh6GECK3X6fCZz h4Kp9UMXzLkwEL9VCq5Qu7O4J1OUlJCF/T3477an7nJ6Zn2dUZ6LePOY8m6YFwxw hnA4fp5xWvr9gu3HURtlUxuCqxPhvQFIGIozSW1zIBX6g+FeCRnln75yAopWvrhx YYqhEEcn0Ohi0u5+aocsbP57+l+tcpZ0tCbkhLk/OG0CZIpodSFVzSFP0yCzHZVe fBBSBc8B5m/4rnur1Kudj1emV9b8XfWRlJxpPwVTOv3zLMa9psykKkqUy3KxtaJE ex49QIyzeWmtMf/P -----END CERTIFICATE-----Generated at Mon Feb 9 18:38:51 2026 by rpki-client