This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/upv2bkah2kmcgwzii9vlsV1YYx0.roa File: upv2bkah2kmcgwzii9vlsV1YYx0.roa (raw, json) Hash identifier: DdoCoWJ4MAXwMUb9LrgBORU0OoZ8wqZEHBq3WjBn6lw= Subject key identifier: BA:9B:F6:6E:46:A1:DA:49:9C:83:0C:E2:8B:DB:E5:B1:5D:58:63:1D Certificate issuer: /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9 Certificate serial: 019B7AC809B5B7EE771F7C22E804655D1882 Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/upv2bkah2kmcgwzii9vlsV1YYx0.roa Signing time: Thu 01 Jan 2026 18:18:08 +0000 ROA not before: Thu 01 Jan 2026 18:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43463 IP address blocks: 91.224.93.0/24 maxlen: 24 185.36.80.0/24 maxlen: 24 185.36.82.0/24 maxlen: 24 185.36.83.0/24 maxlen: 24 185.244.249.0/24 maxlen: 24 185.244.250.0/24 maxlen: 24 185.244.251.0/24 maxlen: 24 185.255.192.0/22 maxlen: 22 193.46.83.0/24 maxlen: 24 2a00:ea60:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 21:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:09:b5:b7:ee:77:1f:7c:22:e8:04:65:5d:18:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9 Validity Not Before: Jan 1 18:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba9bf66e46a1da499c830ce28bdbe5b15d58631d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e6:bd:c1:1d:dd:0c:17:a4:10:66:16:da:cc: 87:0c:53:ff:0c:6e:80:28:88:d3:d9:58:81:ab:34: 81:9c:05:9f:86:24:11:56:bb:0f:b7:32:4a:fe:e4: 1c:1c:e5:e2:04:93:d7:a0:40:be:8f:bf:32:d1:f8: eb:c9:0e:1a:ea:51:b1:3b:92:a0:3c:08:e4:5c:8d: 2c:d7:69:f1:3d:17:e3:8b:6d:ec:8f:25:a7:ca:32: e4:38:8a:0b:c8:8d:31:cc:f3:1b:51:6f:41:0b:5e: a0:cb:66:79:a5:16:b4:73:e9:2a:09:ca:a1:19:51: ba:d7:b0:30:cd:6b:d7:6e:f8:86:b1:0c:d1:84:8f: 7d:a3:f3:03:51:95:73:50:95:04:86:6b:bd:64:4a: 0d:97:dd:67:67:4f:32:1e:cc:fa:be:cb:62:d1:45: 84:1f:11:2e:95:d5:32:4f:09:13:96:3d:c7:56:5d: 58:8a:f5:9d:45:7d:16:2f:26:91:cd:2a:81:91:7c: 9b:e3:99:77:a4:94:fc:9f:bc:25:b5:00:0e:e0:7e: 25:ce:6f:6a:3c:7f:1f:cb:3b:3c:cf:09:49:7c:98: ba:c2:47:48:26:87:17:79:24:5c:a2:1c:37:45:89: a5:49:0d:66:12:6e:a3:d9:4f:b3:5d:13:c1:ae:4c: 21:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9B:F6:6E:46:A1:DA:49:9C:83:0C:E2:8B:DB:E5:B1:5D:58:63:1D X509v3 Authority Key Identifier: keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/upv2bkah2kmcgwzii9vlsV1YYx0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.93.0/24 185.36.80.0/24 185.36.82.0/23 185.244.249.0-185.244.251.255 185.255.192.0/22 193.46.83.0/24 IPv6: 2a00:ea60:200::/40 Signature Algorithm: sha256WithRSAEncryption 3f:ad:f6:12:c3:ea:db:4b:a8:e5:31:13:7f:b2:66:e1:30:3d: 76:85:1b:10:5e:b6:3c:4b:2b:22:54:fc:96:46:5f:e7:8c:01: a0:f5:bb:81:51:b8:4c:d2:1e:67:ee:96:79:1b:de:3f:01:65: 11:34:ba:a9:44:2e:56:a6:df:f3:c9:ef:97:8a:f9:08:22:2a: 1c:a7:07:fc:97:48:b3:61:61:69:9c:77:5a:43:ef:81:13:5f: be:c1:90:b5:68:07:73:02:5a:81:a3:03:55:85:d9:4f:6e:44: ad:b7:d8:70:a7:b1:5c:4e:77:21:a8:09:6a:3f:7e:98:6b:53: 74:f2:44:6b:c6:68:9a:0f:4d:fb:00:80:64:56:12:8a:fb:5b: 1c:8e:92:fb:f0:b6:cf:d2:c3:dd:a2:03:15:61:db:c7:39:a0: ca:10:62:20:c9:c7:2b:6e:79:70:23:01:22:7e:81:73:45:4b: 01:b6:c2:b9:4e:b7:30:e4:87:81:64:f1:89:81:07:4c:b3:e1: 1e:db:2d:3d:a5:8d:d9:db:60:cd:82:6c:99:42:f9:09:e1:08: 49:14:06:d7:63:ea:3f:cf:17:80:4a:53:25:7d:fa:59:ea:dd: 4a:4b:3c:fb:de:64:65:15:8a:dc:27:e9:0a:b3:ba:68:a5:d4: 0c:03:95:1a -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt6yAm1t+53H3wi6ARlXRiCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNDlmYjE5MGY0YmQwZjU4MTVhOGU1NzlmMzY2YWQ1OGQ1 ZDQxZjkwHhcNMjYwMTAxMTgxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTliZjY2ZTQ2YTFkYTQ5OWM4MzBjZTI4YmRiZTViMTVkNTg2MzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOa9wR3dDBekEGYW2syHDFP/DG6A KIjT2ViBqzSBnAWfhiQRVrsPtzJK/uQcHOXiBJPXoEC+j78y0fjryQ4a6lGxO5Kg PAjkXI0s12nxPRfji23sjyWnyjLkOIoLyI0xzPMbUW9BC16gy2Z5pRa0c+kqCcqh GVG617AwzWvXbviGsQzRhI99o/MDUZVzUJUEhmu9ZEoNl91nZ08yHsz6vsti0UWE HxEuldUyTwkTlj3HVl1YivWdRX0WLyaRzSqBkXyb45l3pJT8n7wltQAO4H4lzm9q PH8fyzs8zwlJfJi6wkdIJocXeSRcohw3RYmlSQ1mEm6j2U+zXRPBrkwhJQIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFLqb9m5GodpJnIMM4ovb5bFdWGMdMB8GA1UdIwQY MBaAFL5J+xkPS9D1gVqOV582atWNXUH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmtuN0dROUwwUFdCV281WG56WnExWTFkUWZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iZDBkMTMtZTk4My00ZmY5LWI1MDct NWU2NTZmMWI0ODc2LzEvdXB2MmJrYWgya21jZ3d6aWk5dmxzVjFZWXgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9iZDBkMTMtZTk4My00ZmY5LWI1MDctNWU2NTZmMWI0ODc2 LzEvdmtuN0dROUwwUFdCV281WG56WnExWTFkUWZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDAyBAIAATAsAwQAW+BdAwQA uSRQAwQBuSRSMAwDBAC59PkDBAK59PgDBAK5/8ADBADBLlMwDgQCAAIwCAMGACoA 6mACMA0GCSqGSIb3DQEBCwUAA4IBAQA/rfYSw+rbS6jlMRN/smbhMD12hRsQXrY8 SysiVPyWRl/njAGg9buBUbhM0h5n7pZ5G94/AWURNLqpRC5Wpt/zye+XivkIIioc pwf8l0izYWFpnHdaQ++BE1++wZC1aAdzAlqBowNVhdlPbkStt9hwp7FcTnchqAlq P36Ya1N08kRrxmiaD037AIBkVhKK+1scjpL78LbP0sPdogMVYdvHOaDKEGIgyccr bnlwIwEifoFzRUsBtsK5Trcw5IeBZPGJgQdMs+Ee2y09pY3Z22DNgmyZQvkJ4QhJ FAbXY+o/zxeASlMlffpZ6t1KSzz73mRlFYrcJ+kKs7popdQMA5Ua -----END CERTIFICATE-----Generated at Wed Jan 21 04:03:40 2026 by rpki-client