This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/uOsbUN7cy0tE4z7UdBm3d5V39gI.roa File: uOsbUN7cy0tE4z7UdBm3d5V39gI.roa (raw, json) Hash identifier: 4lZyd6hRUzTbzA108sOMla+DbCbzWNvltg5Nlq/cyFM= Subject key identifier: B8:EB:1B:50:DE:DC:CB:4B:44:E3:3E:D4:74:19:B7:77:95:77:F6:02 Certificate issuer: /CN=526c618d15bb712e3ebae06a8b181697a5e407b8 Certificate serial: 019B7758DB26C44873300A384BB0544BBB4C Authority key identifier: 52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/uOsbUN7cy0tE4z7UdBm3d5V39gI.roa Signing time: Thu 01 Jan 2026 02:17:50 +0000 ROA not before: Thu 01 Jan 2026 02:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213123 IP address blocks: 94.231.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.mft rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:db:26:c4:48:73:30:0a:38:4b:b0:54:4b:bb:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=526c618d15bb712e3ebae06a8b181697a5e407b8 Validity Not Before: Jan 1 02:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8eb1b50dedccb4b44e33ed47419b7779577f602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ab:b4:be:13:57:27:45:06:3a:f1:57:cb:6c: 7f:27:1d:96:1b:1e:78:66:4c:a6:49:6b:0c:c9:65: 1a:cc:00:60:54:42:14:e9:58:94:f1:b9:99:60:e4: 17:14:61:80:a0:d6:93:40:54:e8:13:d5:2f:d2:56: b0:f7:52:42:50:30:f1:f0:96:a4:94:dc:4d:94:b4: 5c:5f:f5:eb:e0:2c:c7:af:5c:66:86:b4:68:72:3a: 63:f6:6e:bb:f0:61:58:54:f9:12:17:73:08:ed:3b: 14:78:8c:da:89:02:1a:f6:b8:6f:97:5b:5a:d3:54: 3b:78:47:a7:52:32:a2:7e:be:ad:32:f0:16:da:88: 7c:dc:3b:cc:9d:14:da:b7:22:4b:ae:91:d4:d8:a9: 87:8f:90:1d:af:51:a0:a5:3f:80:ca:13:39:35:06: ad:08:eb:a1:e6:5c:e2:1b:ce:c3:8f:8b:1e:fb:b2: 5f:3e:ce:3c:11:cb:ef:19:8d:cc:ac:39:0e:01:2a: fe:d3:7a:1d:b7:22:88:91:43:81:8a:79:af:08:8c: d8:53:7f:ad:47:dd:d3:35:bf:67:d1:07:3e:b9:75: 5c:36:22:69:5e:54:ed:3a:4b:65:dd:72:1c:01:42: ce:96:df:77:c7:08:aa:8a:ba:fe:18:98:7a:8b:ce: 0f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:EB:1B:50:DE:DC:CB:4B:44:E3:3E:D4:74:19:B7:77:95:77:F6:02 X509v3 Authority Key Identifier: keyid:52:6C:61:8D:15:BB:71:2E:3E:BA:E0:6A:8B:18:16:97:A5:E4:07:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmxhjRW7cS4-uuBqixgWl6XkB7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/uOsbUN7cy0tE4z7UdBm3d5V39gI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/260cf2-8850-43f8-a7f2-9273fc016f7d/1/UmxhjRW7cS4-uuBqixgWl6XkB7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.231.197.0/24 Signature Algorithm: sha256WithRSAEncryption 70:30:07:fc:4c:07:be:6f:f7:02:fe:36:da:3f:39:92:ee:0f: f3:f5:4e:62:15:30:17:55:ff:f9:e6:a7:ea:03:68:b2:44:8b: 63:1d:1a:82:62:52:fd:f2:4e:2d:88:1d:b1:5c:57:48:f2:46: bd:8c:cc:cf:40:e5:95:ec:92:b7:8b:72:f6:15:e7:e0:ec:cc: 6d:e5:d6:f3:ba:3f:46:d4:d6:30:93:3f:ee:78:e4:ae:62:9f: 55:9f:fd:d3:a2:21:9a:6f:82:5e:6c:a2:dc:20:5b:8d:2c:5a: bd:cc:10:ad:19:42:04:bd:52:0b:e4:ea:e3:50:03:36:8c:ad: da:0e:31:26:64:af:1e:bd:9a:46:ce:8e:4d:bb:73:c6:e6:42: e5:28:07:37:b5:06:1e:8e:7c:67:6e:dd:32:51:73:09:9d:91: 53:97:ed:c7:99:09:7a:63:eb:ad:59:95:18:29:85:9b:50:dd: 1f:50:17:9e:5a:0d:42:d9:2b:23:b6:fa:7c:20:75:fc:47:7f: ac:f5:aa:95:48:f9:97:1a:fa:1e:68:8d:69:fe:73:20:67:d2: 04:4a:01:a6:36:3f:df:31:b2:15:11:df:07:d2:3e:3c:4c:24: 33:09:6a:7d:4e:0b:f8:6d:77:dc:99:38:55:17:88:06:28:83: c0:42:58:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WNsmxEhzMAo4S7BUS7tMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNmM2MThkMTViYjcxMmUzZWJhZTA2YThiMTgxNjk3YTVl NDA3YjgwHhcNMjYwMTAxMDIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGViMWI1MGRlZGNjYjRiNDRlMzNlZDQ3NDE5Yjc3Nzk1NzdmNjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6u0vhNXJ0UGOvFXy2x/Jx2WGx54 ZkymSWsMyWUazABgVEIU6ViU8bmZYOQXFGGAoNaTQFToE9Uv0law91JCUDDx8Jak lNxNlLRcX/Xr4CzHr1xmhrRocjpj9m678GFYVPkSF3MI7TsUeIzaiQIa9rhvl1ta 01Q7eEenUjKifr6tMvAW2oh83DvMnRTatyJLrpHU2KmHj5Adr1GgpT+AyhM5NQat COuh5lziG87Dj4se+7JfPs48EcvvGY3MrDkOASr+03odtyKIkUOBinmvCIzYU3+t R93TNb9n0Qc+uXVcNiJpXlTtOktl3XIcAULOlt93xwiqirr+GJh6i84P1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLjrG1De3MtLROM+1HQZt3eVd/YCMB8GA1UdIwQY MBaAFFJsYY0Vu3EuPrrgaosYFpel5Ae4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVW14aGpSVzdjUzQtdXVCcWl4Z1dsNlhrQjdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8yNjBjZjItODg1MC00M2Y4LWE3ZjIt OTI3M2ZjMDE2ZjdkLzEvdU9zYlVON2N5MHRFNHo3VWRCbTNkNVYzOWdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8yNjBjZjItODg1MC00M2Y4LWE3ZjItOTI3M2ZjMDE2Zjdk LzEvVW14aGpSVzdjUzQtdXVCcWl4Z1dsNlhrQjdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXufFMA0G CSqGSIb3DQEBCwUAA4IBAQBwMAf8TAe+b/cC/jbaPzmS7g/z9U5iFTAXVf/55qfq A2iyRItjHRqCYlL98k4tiB2xXFdI8ka9jMzPQOWV7JK3i3L2Fefg7Mxt5dbzuj9G 1NYwkz/ueOSuYp9Vn/3ToiGab4JebKLcIFuNLFq9zBCtGUIEvVIL5OrjUAM2jK3a DjEmZK8evZpGzo5Nu3PG5kLlKAc3tQYejnxnbt0yUXMJnZFTl+3HmQl6Y+utWZUY KYWbUN0fUBeeWg1C2Ssjtvp8IHX8R3+s9aqVSPmXGvoeaI1p/nMgZ9IESgGmNj/f MbIVEd8H0j48TCQzCWp9Tgv4bXfcmThVF4gGKIPAQliv -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:04 2026 by rpki-client