This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/u2WfF9In72cKbk56xhUnLtQds5E.roa File: u2WfF9In72cKbk56xhUnLtQds5E.roa (raw, json) Hash identifier: lXqEAMd861hGDluqkgvGTYLqDE2FQJtnTBvspyPWGQ4= Subject key identifier: BB:65:9F:17:D2:27:EF:67:0A:6E:4E:7A:C6:15:27:2E:D4:1D:B3:91 Certificate issuer: /CN=b63a3094439cac0f555701286cd54373bce6cb50 Certificate serial: 019BE5E63F2B98F478E8A94705F0265ED3F4 Authority key identifier: B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/u2WfF9In72cKbk56xhUnLtQds5E.roa Signing time: Thu 22 Jan 2026 13:30:30 +0000 ROA not before: Thu 22 Jan 2026 13:30:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211995 IP address blocks: 91.191.194.0/24 maxlen: 24 91.191.195.0/24 maxlen: 24 91.191.196.0/24 maxlen: 24 91.191.197.0/24 maxlen: 24 91.191.198.0/24 maxlen: 24 91.191.199.0/24 maxlen: 24 91.191.200.0/24 maxlen: 24 91.191.201.0/24 maxlen: 24 91.191.202.0/24 maxlen: 24 91.191.203.0/24 maxlen: 24 91.191.204.0/24 maxlen: 24 91.191.205.0/24 maxlen: 24 130.0.11.0/24 maxlen: 24 185.127.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:e6:3f:2b:98:f4:78:e8:a9:47:05:f0:26:5e:d3:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b63a3094439cac0f555701286cd54373bce6cb50 Validity Not Before: Jan 22 13:30:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb659f17d227ef670a6e4e7ac615272ed41db391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:44:71:83:d6:c0:00:0d:54:60:ac:38:46:6d: a7:10:fa:3a:25:a8:bc:3a:0a:67:bf:b4:ec:74:97: aa:05:9e:39:b5:38:0a:b4:c2:43:23:ef:dd:ef:b3: f5:88:28:d0:fa:13:8c:e0:5f:a1:bf:14:63:4f:3c: 04:9a:02:80:f1:99:ff:29:8e:6c:13:c0:87:f3:34: ff:d7:d0:6e:e9:45:9f:09:df:6d:89:71:9d:61:4f: 54:9d:cb:b5:01:c8:94:10:7f:ab:0c:fb:25:19:37: c3:60:99:e2:5f:a7:22:35:f6:99:7b:ac:74:3b:0e: c2:34:79:51:30:5e:d9:26:df:f7:3a:6c:92:3a:df: e0:10:c2:6c:05:05:b8:56:96:09:4d:86:0b:d5:5c: 28:f6:76:bd:d5:8c:4b:b7:8c:54:c4:a3:f2:40:09: 59:60:d7:85:f3:3d:0e:33:49:d1:15:86:c7:fa:a5: b2:46:41:13:25:1b:1e:76:d3:ca:85:83:72:f2:42: 24:cf:38:97:fb:bc:e1:e4:60:a0:13:52:99:70:b9: 47:c0:3a:ed:9b:05:1c:bd:c4:0a:91:ae:64:4b:07: 92:0a:65:ab:04:50:83:c7:2a:61:8e:98:fa:20:86: 9d:24:7d:8f:24:e9:7e:79:1c:29:36:12:36:3d:7e: 84:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:65:9F:17:D2:27:EF:67:0A:6E:4E:7A:C6:15:27:2E:D4:1D:B3:91 X509v3 Authority Key Identifier: keyid:B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/u2WfF9In72cKbk56xhUnLtQds5E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.191.194.0-91.191.205.255 130.0.11.0/24 185.127.40.0/24 Signature Algorithm: sha256WithRSAEncryption 14:ec:59:e2:5b:9b:3e:c8:8a:7c:a8:1d:d9:69:99:01:cd:c1: fb:57:ed:21:cb:48:26:04:1c:f0:72:6d:63:6a:08:0d:90:6c: 13:d5:d2:e8:66:7c:11:b7:d2:a1:98:0a:39:10:d3:bd:39:55: c9:b6:0f:d2:8d:da:3d:f5:18:10:79:d7:e0:15:3c:d3:70:cf: 72:15:bc:f5:96:da:26:f1:dd:7b:42:22:bc:20:cd:79:a7:bb: cd:ff:b5:f0:da:4c:f9:ea:89:6d:22:65:e6:45:dd:dc:e6:aa: 92:47:8a:0c:14:d0:5f:ab:13:c8:66:87:70:2d:70:5e:2d:e2: 54:00:50:f6:c5:8c:0e:bd:ec:95:73:35:31:41:25:6d:b5:87: 36:81:7c:63:9a:01:e9:c1:1e:20:0a:5a:56:7e:14:42:4a:6c: b8:b6:6d:46:b9:25:74:8b:59:6b:a4:b7:b9:a2:4f:9e:c0:4f: 22:4f:67:6a:49:9d:cb:2a:0e:96:c0:20:63:c6:65:1f:9f:7e: 85:b3:f3:d9:7a:fc:44:97:01:a4:c7:af:91:5c:ce:9d:af:03: 06:a8:c9:9a:18:3e:bc:77:54:bf:3e:fc:6c:38:5e:e9:a8:fd: 8b:be:52:46:20:bf:6f:d8:de:dd:a2:ad:93:a1:6e:32:d9:81: 93:33:5d:4a -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZvl5j8rmPR46KlHBfAmXtP0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2M2EzMDk0NDM5Y2FjMGY1NTU3MDEyODZjZDU0MzczYmNl NmNiNTAwHhcNMjYwMTIyMTMzMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjY1OWYxN2QyMjdlZjY3MGE2ZTRlN2FjNjE1MjcyZWQ0MWRiMzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtERxg9bAAA1UYKw4Rm2nEPo6Jai8 Ogpnv7TsdJeqBZ45tTgKtMJDI+/d77P1iCjQ+hOM4F+hvxRjTzwEmgKA8Zn/KY5s E8CH8zT/19Bu6UWfCd9tiXGdYU9Uncu1AciUEH+rDPslGTfDYJniX6ciNfaZe6x0 Ow7CNHlRMF7ZJt/3OmySOt/gEMJsBQW4VpYJTYYL1Vwo9na91YxLt4xUxKPyQAlZ YNeF8z0OM0nRFYbH+qWyRkETJRsedtPKhYNy8kIkzziX+7zh5GCgE1KZcLlHwDrt mwUcvcQKka5kSweSCmWrBFCDxyphjpj6IIadJH2PJOl+eRwpNhI2PX6EuwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFLtlnxfSJ+9nCm5OesYVJy7UHbORMB8GA1UdIwQY MBaAFLY6MJRDnKwPVVcBKGzVQ3O85stQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGpvd2xFT2NyQTlWVndFb2JOVkRjN3pteTFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9lNGQyMGYtNmRjOC00OTdkLWE4ZDYt OWRkZGQ2ODAyMDg4LzEvdTJXZkY5SW43MmNLYms1NnhoVW5MdFFkczVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9lNGQyMGYtNmRjOC00OTdkLWE4ZDYtOWRkZGQ2ODAyMDg4 LzEvdGpvd2xFT2NyQTlWVndFb2JOVkRjN3pteTFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAFbv8ID BAFbv8wDBACCAAsDBAC5fygwDQYJKoZIhvcNAQELBQADggEBABTsWeJbmz7Iinyo HdlpmQHNwftX7SHLSCYEHPBybWNqCA2QbBPV0uhmfBG30qGYCjkQ0705Vcm2D9KN 2j31GBB51+AVPNNwz3IVvPWW2ibx3XtCIrwgzXmnu83/tfDaTPnqiW0iZeZF3dzm qpJHigwU0F+rE8hmh3AtcF4t4lQAUPbFjA697JVzNTFBJW21hzaBfGOaAenBHiAK WlZ+FEJKbLi2bUa5JXSLWWukt7miT57ATyJPZ2pJncsqDpbAIGPGZR+ffoWz89l6 /ESXAaTHr5Fczp2vAwaoyZoYPrx3VL8+/Gw4Xumo/Yu+UkYgv2/Y3t2irZOhbjLZ gZMzXUo= -----END CERTIFICATE-----Generated at Tue Feb 10 06:00:53 2026 by rpki-client