This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/uyIjwniMfa9updg5K14M9RIPv9I.roa File: uyIjwniMfa9updg5K14M9RIPv9I.roa (raw, json) Hash identifier: ItCshraw6s4mCSDEC9Q2bvDLX/zDu9qjIlpJDeEtrR8= Subject key identifier: BB:22:23:C2:78:8C:7D:AF:6E:A5:D8:39:2B:5E:0C:F5:12:0F:BF:D2 Certificate issuer: /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37 Certificate serial: 019B76EB4006D825696720A88BAE37956B2A Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/uyIjwniMfa9updg5K14M9RIPv9I.roa Signing time: Thu 01 Jan 2026 00:18:07 +0000 ROA not before: Thu 01 Jan 2026 00:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40065 IP address blocks: 37.77.80.0/21 maxlen: 24 74.113.236.0/23 maxlen: 24 103.143.178.0/23 maxlen: 24 172.96.38.0/23 maxlen: 24 192.198.184.0/23 maxlen: 24 199.36.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:40:06:d8:25:69:67:20:a8:8b:ae:37:95:6b:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37 Validity Not Before: Jan 1 00:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb2223c2788c7daf6ea5d8392b5e0cf5120fbfd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:84:28:68:0c:46:c9:5a:35:bd:4d:26:2e:4a: 49:11:61:a9:27:29:cf:2b:93:d4:09:17:d4:6a:23: 00:65:23:14:3f:c1:84:10:b6:1f:7c:3d:d1:8c:8b: 9d:bf:9a:74:7b:5e:16:a0:25:10:cf:f8:31:fa:3b: e8:b7:00:04:24:6b:a3:19:1c:85:64:0b:d8:bf:f1: 38:98:f0:aa:92:28:d2:8c:1c:ad:4c:ad:73:84:7e: 10:b6:db:8c:3f:51:09:8e:e1:e2:f2:64:64:c8:47: f3:0b:09:57:fa:63:7e:61:a9:5d:a8:9d:96:80:c7: a7:09:90:0d:26:39:35:f3:43:54:37:3a:b9:6f:20: 47:ab:36:a0:45:8c:25:73:5a:eb:66:08:24:3b:3a: fe:5c:29:2c:37:f1:df:f8:bd:0b:37:ec:bc:6e:60: d9:71:8b:a1:5b:76:1d:96:e7:d0:f2:db:48:ed:e0: bf:4d:7d:2b:22:c1:09:87:41:a2:4b:76:14:ea:51: ab:98:f3:b4:6e:7b:ce:bb:26:50:a1:7e:88:b0:aa: 4f:1f:ea:05:85:17:49:19:0b:c3:72:fe:83:43:9a: ca:0d:9e:ba:3f:1d:cb:6e:6c:d6:87:b8:d8:a1:8b: 87:3f:25:b6:f0:c8:d8:39:a0:ba:ac:64:bf:74:01: 42:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:22:23:C2:78:8C:7D:AF:6E:A5:D8:39:2B:5E:0C:F5:12:0F:BF:D2 X509v3 Authority Key Identifier: keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/uyIjwniMfa9updg5K14M9RIPv9I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.77.80.0/21 74.113.236.0/23 103.143.178.0/23 172.96.38.0/23 192.198.184.0/23 199.36.102.0/23 Signature Algorithm: sha256WithRSAEncryption 46:f2:85:7a:cf:32:52:f7:5e:4b:c9:1f:eb:5e:34:a8:eb:1b: 5e:7d:1f:19:de:8a:2b:0f:4c:a3:50:1a:f8:a7:0a:a0:af:b2: a1:df:dd:c2:32:27:54:d3:69:bb:f7:b7:27:e0:39:e7:24:c7: fe:3d:7b:39:92:ba:79:ff:05:e6:86:00:94:9b:b4:23:d5:79: 3d:38:a7:73:49:ec:a9:a7:40:af:d4:06:8d:a1:d0:e4:36:ca: 5f:6c:d6:b0:b7:9d:a2:30:51:95:22:90:30:da:b6:23:4c:9f: 5e:b7:72:de:21:28:82:b7:45:2b:7c:f0:8b:1b:39:f1:8a:60: da:8e:8b:3d:f3:7e:d3:f8:f5:5a:e0:05:59:2a:19:2b:ec:62: 23:fc:8c:fa:3c:60:6d:2c:7b:19:b8:92:48:4d:a8:d4:d7:40: a1:76:ba:13:4a:46:68:b2:42:9a:e9:92:c8:e9:7f:a2:78:8e: 54:5e:f5:af:14:48:b1:54:fa:7c:17:d5:b7:4a:3a:c4:e3:06: 41:17:0f:89:9f:f2:28:c2:87:38:e0:30:7b:df:13:95:ee:90: b0:c7:dd:0a:c2:f0:5f:b1:3e:fc:f6:e6:a0:00:c6:80:23:3f: 56:2c:36:ea:8a:90:e3:68:ba:d0:54:46:ad:ca:e0:89:50:a0: ab:bf:76:3c -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt260AG2CVpZyCoi643lWsqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNWQ0YTMyOTcwMmUyYzk4MzFjZDM2MjYyYmJiN2ZhN2I5 N2RlMzcwHhcNMjYwMTAxMDAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjIyMjNjMjc4OGM3ZGFmNmVhNWQ4MzkyYjVlMGNmNTEyMGZiZmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIQoaAxGyVo1vU0mLkpJEWGpJynP K5PUCRfUaiMAZSMUP8GEELYffD3RjIudv5p0e14WoCUQz/gx+jvotwAEJGujGRyF ZAvYv/E4mPCqkijSjBytTK1zhH4QttuMP1EJjuHi8mRkyEfzCwlX+mN+YaldqJ2W gMenCZANJjk180NUNzq5byBHqzagRYwlc1rrZggkOzr+XCksN/Hf+L0LN+y8bmDZ cYuhW3YdlufQ8ttI7eC/TX0rIsEJh0GiS3YU6lGrmPO0bnvOuyZQoX6IsKpPH+oF hRdJGQvDcv6DQ5rKDZ66Px3LbmzWh7jYoYuHPyW28MjYOaC6rGS/dAFCLwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFLsiI8J4jH2vbqXYOSteDPUSD7/SMB8GA1UdIwQY MBaAFDpdSjKXAuLJgxzTYmK7t/p7l943MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2wxS01wY0M0c21ESE5OaVlydTMtbnVYM2pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80YmQ2NjEtOWIwYy00NTYwLWIxZDEt MmNlYThlMTUzNjMyLzEvdXlJanduaU1mYTl1cGRnNUsxNE05UklQdjlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS80YmQ2NjEtOWIwYy00NTYwLWIxZDEtMmNlYThlMTUzNjMy LzEvT2wxS01wY0M0c21ESE5OaVlydTMtbnVYM2pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQDJU1QAwQB SnHsAwQBZ4+yAwQBrGAmAwQBwMa4AwQBxyRmMA0GCSqGSIb3DQEBCwUAA4IBAQBG 8oV6zzJS915LyR/rXjSo6xtefR8Z3oorD0yjUBr4pwqgr7Kh393CMidU02m797cn 4DnnJMf+PXs5krp5/wXmhgCUm7Qj1Xk9OKdzSeypp0Cv1AaNodDkNspfbNawt52i MFGVIpAw2rYjTJ9et3LeISiCt0UrfPCLGznximDajos9837T+PVa4AVZKhkr7GIj /Iz6PGBtLHsZuJJITajU10ChdroTSkZoskKa6ZLI6X+ieI5UXvWvFEixVPp8F9W3 SjrE4wZBFw+Jn/Iowoc44DB73xOV7pCwx90KwvBfsT789uagAMaAIz9WLDbqipDj aLrQVEatyuCJUKCrv3Y8 -----END CERTIFICATE-----Generated at Tue Jan 20 06:02:50 2026 by rpki-client