This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/ulPpireG9CM8idNuV-lYH5N8mIA.roa File: ulPpireG9CM8idNuV-lYH5N8mIA.roa (raw, json) Hash identifier: iqY+kaCP0vVDgPyHBj3BJih3werU/KaEYHAloIQUi98= Subject key identifier: BA:53:E9:8A:B7:86:F4:23:3C:89:D3:6E:57:E9:58:1F:93:7C:98:80 Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f Certificate serial: 019B7A5A9D5BB144B6218A319B8DABBBA829 Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/ulPpireG9CM8idNuV-lYH5N8mIA.roa Signing time: Thu 01 Jan 2026 16:18:37 +0000 ROA not before: Thu 01 Jan 2026 16:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 83.147.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 11:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:9d:5b:b1:44:b6:21:8a:31:9b:8d:ab:bb:a8:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f Validity Not Before: Jan 1 16:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba53e98ab786f4233c89d36e57e9581f937c9880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a3:e7:34:ae:6b:bc:b9:70:9c:0f:43:c1:b1: 01:8c:1b:8c:cd:33:c5:e8:5c:40:60:46:21:8d:0a: c4:00:44:90:58:e4:20:8f:2a:f0:87:3b:b7:07:8d: 78:51:61:b2:28:6e:0b:d6:5d:1f:4d:f7:a6:89:a2: 0c:cb:ac:b3:d1:a1:f6:43:84:bb:08:81:b9:ec:67: 45:04:bf:64:8e:e1:86:e9:e8:6f:90:95:12:12:f7: 94:7a:bd:51:c3:1c:d0:88:be:cd:f2:6b:0e:73:00: 0e:a7:25:ca:bf:c5:d8:7c:e9:25:cd:a8:50:3d:1f: ad:59:51:dd:42:c7:68:37:bc:7a:82:60:70:2f:57: c1:a1:e5:fe:dd:e1:02:6b:04:6d:cb:71:a2:97:73: 7b:ab:76:62:b9:25:c0:cb:14:90:ec:1a:f8:34:a8: d1:f1:d8:b2:ee:8f:50:86:72:37:2e:b1:c6:39:2c: f9:f2:4f:04:1b:14:5c:8a:3c:5d:2e:2c:ba:61:27: 4b:b7:3b:ed:54:78:ec:b9:b1:90:b9:2f:b9:2e:52: 09:b6:75:03:86:58:77:23:d5:b3:85:4f:85:17:2b: de:13:b3:36:2e:4a:91:de:d2:b6:d2:7d:fc:25:86: 81:29:68:8a:17:93:1b:28:8a:6c:bc:93:34:1a:06: f8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:53:E9:8A:B7:86:F4:23:3C:89:D3:6E:57:E9:58:1F:93:7C:98:80 X509v3 Authority Key Identifier: keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/ulPpireG9CM8idNuV-lYH5N8mIA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.147.40.0/22 Signature Algorithm: sha256WithRSAEncryption 32:fa:a8:e2:ac:df:67:5d:39:47:c6:ac:f6:d6:21:65:4b:ea: 56:5b:a0:ac:38:9f:cc:4e:97:99:a9:1b:fe:8e:0f:cb:9b:4a: 00:df:83:de:6d:e5:eb:ba:db:ce:db:1a:f8:5c:6d:00:44:67: 37:a8:05:7d:d0:f9:ff:74:1d:7a:62:05:16:d9:45:bc:99:aa: a4:59:7d:88:5c:cc:79:a9:22:06:47:35:ba:ff:93:ff:86:bb: d8:14:a3:a1:a2:77:c8:fa:30:af:6e:30:bb:6b:61:5a:12:c9: 7d:45:a6:15:0b:ac:27:63:c4:6d:d2:06:59:90:c2:25:ba:c0: 94:25:ae:e5:7b:96:97:a4:3e:4d:f5:3a:2b:6c:66:66:43:f2: c9:00:22:e8:3f:e7:f5:ee:b4:47:75:59:72:14:40:18:f9:04: b8:d1:b6:7c:df:ad:bf:5f:d4:f0:c7:e4:1c:85:97:27:51:53: 59:0b:36:67:49:d6:36:34:89:02:1c:91:f1:6c:f2:dc:2c:b0: db:e0:1a:72:f5:42:e8:c4:b7:3f:8a:7f:04:e2:16:52:e7:dc: f6:42:8e:9e:dc:46:01:38:75:cb:89:ae:6c:6f:d9:ea:4a:0f: d2:52:65:ac:dc:e2:60:bf:0e:f2:66:0b:9b:1e:cd:de:6f:1c: 89:ff:75:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wp1bsUS2IYoxm42ru6gpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm MzBjOWYwHhcNMjYwMTAxMTYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTUzZTk4YWI3ODZmNDIzM2M4OWQzNmU1N2U5NTgxZjkzN2M5ODgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKPnNK5rvLlwnA9DwbEBjBuMzTPF 6FxAYEYhjQrEAESQWOQgjyrwhzu3B414UWGyKG4L1l0fTfemiaIMy6yz0aH2Q4S7 CIG57GdFBL9kjuGG6ehvkJUSEveUer1RwxzQiL7N8msOcwAOpyXKv8XYfOklzahQ PR+tWVHdQsdoN7x6gmBwL1fBoeX+3eECawRty3Gil3N7q3ZiuSXAyxSQ7Br4NKjR 8diy7o9QhnI3LrHGOSz58k8EGxRcijxdLiy6YSdLtzvtVHjsubGQuS+5LlIJtnUD hlh3I9WzhU+FFyveE7M2LkqR3tK20n38JYaBKWiKF5MbKIpsvJM0Ggb4HwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLpT6Yq3hvQjPInTblfpWB+TfJiAMB8GA1UdIwQY MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt MDhkMTI3MGMyZTcxLzEvdWxQcGlyZUc5Q004aWROdVYtbFlINU44bUlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU5MoMA0G CSqGSIb3DQEBCwUAA4IBAQAy+qjirN9nXTlHxqz21iFlS+pWW6CsOJ/MTpeZqRv+ jg/Lm0oA34PebeXrutvO2xr4XG0ARGc3qAV90Pn/dB16YgUW2UW8maqkWX2IXMx5 qSIGRzW6/5P/hrvYFKOhonfI+jCvbjC7a2FaEsl9RaYVC6wnY8Rt0gZZkMIlusCU Ja7le5aXpD5N9TorbGZmQ/LJACLoP+f17rRHdVlyFEAY+QS40bZ8362/X9Twx+Qc hZcnUVNZCzZnSdY2NIkCHJHxbPLcLLDb4Bpy9ULoxLc/in8E4hZS59z2Qo6e3EYB OHXLia5sb9nqSg/SUmWs3OJgvw7yZgubHs3ebxyJ/3XS -----END CERTIFICATE-----Generated at Fri Jan 9 17:04:38 2026 by rpki-client