This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/xUUV-CZdo9Ukf7sKRtxgVj_1MqU.roa File: xUUV-CZdo9Ukf7sKRtxgVj_1MqU.roa (raw, json) Hash identifier: jpUT41SLpbot+5R4BFOYYkdz+MS0rf+UNRgr8WOjpTM= Subject key identifier: C5:45:15:F8:26:5D:A3:D5:24:7F:BB:0A:46:DC:60:56:3F:F5:32:A5 Certificate issuer: /CN=419b379a246412810e8a8052a62a39688ca34579 Certificate serial: 019B7B36812DA904E6D4AC51284991740582 Authority key identifier: 41:9B:37:9A:24:64:12:81:0E:8A:80:52:A6:2A:39:68:8C:A3:45:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/xUUV-CZdo9Ukf7sKRtxgVj_1MqU.roa Signing time: Thu 01 Jan 2026 20:18:48 +0000 ROA not before: Thu 01 Jan 2026 20:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56932 IP address blocks: 91.225.48.0/22 maxlen: 22 193.176.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:81:2d:a9:04:e6:d4:ac:51:28:49:91:74:05:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=419b379a246412810e8a8052a62a39688ca34579 Validity Not Before: Jan 1 20:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c54515f8265da3d5247fbb0a46dc60563ff532a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3a:df:f2:4e:db:9e:68:2a:0d:63:6f:f3:d0: a2:c9:58:92:64:41:85:c6:be:66:7c:a5:c2:ed:ac: 31:22:ed:5d:d6:1e:0e:9c:ba:96:ba:a3:db:61:f4: b5:91:ac:ac:41:73:8f:1a:ce:71:6f:37:85:8d:65: 65:a7:d8:c5:2a:f7:13:73:cd:fe:e0:5d:e0:61:8c: dd:a2:db:73:81:66:c8:b2:1c:22:70:99:2f:ec:1f: 96:c9:de:d0:31:2c:1f:59:0a:af:d0:37:c1:66:59: 87:5e:70:8d:fb:c5:f2:4e:b3:93:e2:62:f1:e8:50: e4:2a:7a:1b:3f:da:62:1e:f8:1b:61:95:53:b2:bf: ed:61:c1:3f:66:a0:6d:78:21:9e:9a:78:06:35:91: 56:d7:52:51:23:4b:46:0e:89:0b:b4:af:df:c6:a7: 88:9a:c4:a9:51:61:1a:b2:09:92:d9:80:04:20:f2: 7e:40:d5:ae:68:78:7f:20:0c:de:df:26:f5:2f:1b: 33:ed:ac:f1:e0:6d:cd:ff:d8:25:1c:89:da:66:00: 82:78:96:3f:14:05:11:9c:e4:64:e9:22:6f:85:b8: 21:2d:77:a2:94:28:be:2f:88:44:60:1b:db:1c:46: 02:bc:c7:dc:f9:a9:11:18:e2:1c:d9:50:b6:cd:d1: cf:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:45:15:F8:26:5D:A3:D5:24:7F:BB:0A:46:DC:60:56:3F:F5:32:A5 X509v3 Authority Key Identifier: keyid:41:9B:37:9A:24:64:12:81:0E:8A:80:52:A6:2A:39:68:8C:A3:45:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/xUUV-CZdo9Ukf7sKRtxgVj_1MqU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.225.48.0/22 193.176.248.0/22 Signature Algorithm: sha256WithRSAEncryption 67:02:95:d1:89:37:65:88:8f:de:22:79:8a:9b:d7:53:87:36: 9c:24:aa:74:b4:d6:9d:1c:93:32:bb:09:26:d6:33:62:28:94: 0b:c0:c9:fa:03:bf:78:04:c0:13:32:4d:d5:9c:85:11:0b:71: e6:bd:2b:3a:f6:b1:9a:52:2d:6f:4f:96:bb:03:18:4e:3c:75: 7f:e9:53:71:e4:c9:56:ca:0a:53:57:99:aa:74:4a:16:f7:70: 7c:2c:f1:00:34:bd:53:69:af:00:d5:04:c4:43:90:f6:30:46: 9d:2b:54:ed:19:d5:e7:bf:ca:22:b9:42:8a:b2:9f:89:55:f2: c0:e7:a1:87:e1:d6:ba:d9:b3:d5:14:8c:52:92:ff:60:c0:bb: 81:4e:18:9e:40:ce:e1:b4:4e:e4:94:d8:c1:5a:dd:b8:4d:58: 60:13:55:88:85:8a:0c:5d:a7:37:41:e3:23:35:d1:3f:ae:de: d7:4d:4b:c3:10:a2:14:6c:f5:77:0a:b2:60:b5:76:fd:76:34: 59:77:91:ac:1d:3b:16:2d:95:ee:9e:95:80:8c:04:dd:8d:3f: f6:e4:22:8b:22:4b:ba:2e:dd:cf:ce:ae:d6:aa:fb:70:8f:b7: 21:e3:c6:ae:9b:c1:b9:34:21:28:88:eb:90:8c:f7:09:0c:0f: 9a:aa:6d:5f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NoEtqQTm1KxRKEmRdAWCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxOWIzNzlhMjQ2NDEyODEwZThhODA1MmE2MmEzOTY4OGNh MzQ1NzkwHhcNMjYwMTAxMjAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTQ1MTVmODI2NWRhM2Q1MjQ3ZmJiMGE0NmRjNjA1NjNmZjUzMmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzrf8k7bnmgqDWNv89CiyViSZEGF xr5mfKXC7awxIu1d1h4OnLqWuqPbYfS1kaysQXOPGs5xbzeFjWVlp9jFKvcTc83+ 4F3gYYzdottzgWbIshwicJkv7B+Wyd7QMSwfWQqv0DfBZlmHXnCN+8XyTrOT4mLx 6FDkKnobP9piHvgbYZVTsr/tYcE/ZqBteCGemngGNZFW11JRI0tGDokLtK/fxqeI msSpUWEasgmS2YAEIPJ+QNWuaHh/IAze3yb1Lxsz7azx4G3N/9glHInaZgCCeJY/ FAURnORk6SJvhbghLXeilCi+L4hEYBvbHEYCvMfc+akRGOIc2VC2zdHPSQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMVFFfgmXaPVJH+7CkbcYFY/9TKlMB8GA1UdIwQY MBaAFEGbN5okZBKBDoqAUqYqOWiMo0V5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVpzM21pUmtFb0VPaW9CU3BpbzVhSXlqUlhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yMDI1NmUtMWUwMy00MDBhLTk4Nzgt ZmNjODllY2U1OTA2LzEveFVVVi1DWmRvOVVrZjdzS1J0eGdWal8xTXFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8yMDI1NmUtMWUwMy00MDBhLTk4NzgtZmNjODllY2U1OTA2 LzEvUVpzM21pUmtFb0VPaW9CU3BpbzVhSXlqUlhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW+EwAwQC wbD4MA0GCSqGSIb3DQEBCwUAA4IBAQBnApXRiTdliI/eInmKm9dThzacJKp0tNad HJMyuwkm1jNiKJQLwMn6A794BMATMk3VnIURC3HmvSs69rGaUi1vT5a7AxhOPHV/ 6VNx5MlWygpTV5mqdEoW93B8LPEANL1Taa8A1QTEQ5D2MEadK1TtGdXnv8oiuUKK sp+JVfLA56GH4da62bPVFIxSkv9gwLuBThieQM7htE7klNjBWt24TVhgE1WIhYoM Xac3QeMjNdE/rt7XTUvDEKIUbPV3CrJgtXb9djRZd5GsHTsWLZXunpWAjATdjT/2 5CKLIku6Lt3Pzq7Wqvtwj7ch48aum8G5NCEoiOuQjPcJDA+aqm1f -----END CERTIFICATE-----Generated at Mon Feb 9 22:23:28 2026 by rpki-client