This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ugU8Y9FG84b1BugV6DQZOEYlSC4.roa File: ugU8Y9FG84b1BugV6DQZOEYlSC4.roa (raw, json) Hash identifier: yfTItoNu5W38zOpZyo+VODcCsGUnE/HhxvLYKSZ4EU8= Subject key identifier: BA:05:3C:63:D1:46:F3:86:F5:06:E8:15:E8:34:19:38:46:25:48:2E Certificate issuer: /CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8 Certificate serial: 019B7E387422C024CD30333D816B1987167E Authority key identifier: 78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ugU8Y9FG84b1BugV6DQZOEYlSC4.roa Signing time: Fri 02 Jan 2026 10:19:47 +0000 ROA not before: Fri 02 Jan 2026 10:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197709 IP address blocks: 91.242.231.0/24 maxlen: 24 185.238.60.0/24 maxlen: 24 192.162.144.0/22 maxlen: 22 193.227.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:74:22:c0:24:cd:30:33:3d:81:6b:19:87:16:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8 Validity Not Before: Jan 2 10:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba053c63d146f386f506e815e83419384625482e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:21:7b:03:e0:fd:5a:a7:ba:82:ad:3d:5f:92: 34:65:76:37:cf:ba:f6:9c:ba:45:dc:35:b2:eb:21: 98:0d:5e:c1:82:84:8e:55:c8:5d:e4:b6:2f:e6:1a: f8:9d:98:25:07:73:30:f1:0b:8b:01:91:d4:f2:f2: de:c6:eb:05:7d:db:48:b9:51:88:e9:46:5f:26:2e: 04:de:57:04:0a:76:4d:b2:d4:75:48:12:28:b7:e2: 7d:01:83:cd:b9:66:3c:de:55:17:15:fb:95:a7:a3: da:0d:93:d7:92:c9:96:a4:f8:31:2d:ba:70:39:38: 0f:49:b5:76:dd:bf:5a:3c:98:05:8c:87:d3:9c:75: 24:da:26:29:fd:89:03:f0:07:4d:64:3b:2d:8c:b1: 8b:0f:fd:6d:0b:9f:c2:4f:e6:04:bb:d8:35:85:9f: 22:ea:35:ef:a3:f2:6d:b2:c4:5f:0d:ef:8c:c6:c5: f5:d3:99:91:fe:7e:a2:ef:04:d4:c5:83:47:d8:33: f1:f3:2e:8c:13:30:0c:35:41:9b:50:ea:b9:09:74: 6b:ec:84:19:db:4c:d5:d5:7c:6d:ac:8d:fd:7c:b0: 3a:f4:60:41:2a:97:29:0f:54:a8:6d:1c:5c:d8:ac: c4:35:0b:4b:1b:43:61:e4:7a:35:a3:93:ac:0c:83: e5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:05:3C:63:D1:46:F3:86:F5:06:E8:15:E8:34:19:38:46:25:48:2E X509v3 Authority Key Identifier: keyid:78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ugU8Y9FG84b1BugV6DQZOEYlSC4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.242.231.0/24 185.238.60.0/24 192.162.144.0/22 193.227.112.0/24 Signature Algorithm: sha256WithRSAEncryption 71:44:92:52:b1:83:77:0c:50:81:5c:02:a8:b1:4a:a8:2e:25: 29:d7:86:94:32:c1:6c:8b:0e:d9:a4:0b:0f:0f:16:d3:da:ce: 80:dd:7c:1b:c8:ca:2f:c9:09:9e:b6:f7:6d:54:db:95:d9:86: bb:90:63:03:7d:ef:2e:66:5c:8f:c7:b4:5f:83:ca:f2:ed:e9: c3:a4:d2:63:df:64:ee:2c:b6:b0:6a:ed:35:e0:0b:5c:b0:70: 60:db:a7:b0:d6:6c:7c:28:a2:37:5b:fa:65:ef:80:3d:45:a2: 6a:6e:ba:aa:e2:6b:6c:68:53:a4:c1:b9:4e:b8:7d:4d:58:4d: 93:78:f0:3d:f3:e0:cb:29:3c:e9:f6:09:d0:50:fd:8f:5c:aa: f4:1b:e6:85:a7:0a:d2:b1:4b:42:bd:d2:35:79:d5:f6:80:dc: e5:b3:c4:d7:b0:c2:38:c2:10:f2:2a:43:1f:86:55:d8:c0:f4: 3b:99:3a:ca:c4:13:e9:2a:c9:6b:74:87:80:62:5a:38:4e:de: 58:61:ba:f4:87:12:d0:55:24:96:3a:52:da:9d:9b:e8:e1:f5: f2:97:ef:0a:16:22:6f:ad:b0:cd:d4:d8:f7:ce:b3:86:6e:00: 00:8c:35:b0:e6:29:5e:05:3e:f5:6c:84:62:a3:27:80:b1:29: d9:03:bd:88 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+OHQiwCTNMDM9gWsZhxZ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4OGY1YjIxMGYzYzNlYjQyMDY1OTYwZTg1ZDA2MWU5ZDlk NjNhYjgwHhcNMjYwMTAyMTAxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTA1M2M2M2QxNDZmMzg2ZjUwNmU4MTVlODM0MTkzODQ2MjU0ODJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiF7A+D9Wqe6gq09X5I0ZXY3z7r2 nLpF3DWy6yGYDV7BgoSOVchd5LYv5hr4nZglB3Mw8QuLAZHU8vLexusFfdtIuVGI 6UZfJi4E3lcECnZNstR1SBIot+J9AYPNuWY83lUXFfuVp6PaDZPXksmWpPgxLbpw OTgPSbV23b9aPJgFjIfTnHUk2iYp/YkD8AdNZDstjLGLD/1tC5/CT+YEu9g1hZ8i 6jXvo/JtssRfDe+MxsX105mR/n6i7wTUxYNH2DPx8y6MEzAMNUGbUOq5CXRr7IQZ 20zV1XxtrI39fLA69GBBKpcpD1SobRxc2KzENQtLG0Nh5Ho1o5OsDIPlywIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLoFPGPRRvOG9QboFeg0GThGJUguMB8GA1UdIwQY MBaAFHiPWyEPPD60IGWWDoXQYenZ1jq4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUk5YklRODhQclFnWlpZT2hkQmg2ZG5XT3JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lMTAwYjUtNmYwYS00ZmU5LWJlZmIt YzRhY2I4OTY5YzQ5LzEvdWdVOFk5Rkc4NGIxQnVnVjZEUVpPRVlsU0M0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9lMTAwYjUtNmYwYS00ZmU5LWJlZmItYzRhY2I4OTY5YzQ5 LzEvZUk5YklRODhQclFnWlpZT2hkQmg2ZG5XT3JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAW/LnAwQA ue48AwQCwKKQAwQAweNwMA0GCSqGSIb3DQEBCwUAA4IBAQBxRJJSsYN3DFCBXAKo sUqoLiUp14aUMsFsiw7ZpAsPDxbT2s6A3XwbyMovyQmetvdtVNuV2Ya7kGMDfe8u ZlyPx7Rfg8ry7enDpNJj32TuLLawau014AtcsHBg26ew1mx8KKI3W/pl74A9RaJq brqq4mtsaFOkwblOuH1NWE2TePA98+DLKTzp9gnQUP2PXKr0G+aFpwrSsUtCvdI1 edX2gNzls8TXsMI4whDyKkMfhlXYwPQ7mTrKxBPpKslrdIeAYlo4Tt5YYbr0hxLQ VSSWOlLanZvo4fXyl+8KFiJvrbDN1Nj3zrOGbgAAjDWw5ileBT71bIRioyeAsSnZ A72I -----END CERTIFICATE-----Generated at Tue Jan 27 06:05:29 2026 by rpki-client