This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/UcrjdhQUtMyXZBZ14yoz47DP1KQ.roa File: UcrjdhQUtMyXZBZ14yoz47DP1KQ.roa (raw, json) Hash identifier: pwlq/+c8DXzCaRg9hbORmAoeOdAKmI0H3fOLHE09GyY= Subject key identifier: 51:CA:E3:76:14:14:B4:CC:97:64:16:75:E3:2A:33:E3:B0:CF:D4:A4 Certificate issuer: /CN=950082a85946722c7fc1c864f0fbd80dc54dcd29 Certificate serial: 019B7910EBFF3F41C47E261C433BB8B2926F Authority key identifier: 95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/UcrjdhQUtMyXZBZ14yoz47DP1KQ.roa Signing time: Thu 01 Jan 2026 10:18:30 +0000 ROA not before: Thu 01 Jan 2026 10:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 91.240.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:eb:ff:3f:41:c4:7e:26:1c:43:3b:b8:b2:92:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=950082a85946722c7fc1c864f0fbd80dc54dcd29 Validity Not Before: Jan 1 10:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51cae3761414b4cc97641675e32a33e3b0cfd4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bf:9e:d6:ae:5b:07:ed:fa:5d:75:72:16:85: 80:03:d0:82:10:2f:07:b1:94:44:16:f1:ad:63:2b: 5f:90:60:02:2c:3b:e0:a4:99:42:f6:c4:5c:d9:97: 08:57:34:64:e1:ce:b1:c3:59:04:80:8f:91:d4:86: ea:85:3c:e1:94:96:7c:60:59:be:7d:29:cb:7e:38: 3d:55:f4:23:c7:6b:cd:42:e2:75:55:5d:41:db:22: 1b:f2:2d:78:b7:39:4a:5a:6f:43:68:88:6e:a9:85: a5:83:d2:98:f4:e5:81:92:3b:f0:35:5a:9e:aa:f3: 96:ef:d7:1e:71:23:15:01:dd:2e:82:4c:e3:47:95: a9:f1:3a:28:61:85:ea:98:c3:f8:e9:0d:2f:47:1c: 95:d0:79:bf:c3:07:17:07:ee:66:bc:3b:ba:98:8b: c7:2b:de:20:45:74:aa:79:68:72:20:7f:23:44:f8: 88:dd:85:53:57:20:69:ac:1e:2d:1d:ac:9a:00:29: 5f:2b:26:55:cd:33:c4:9f:99:de:17:93:d9:53:71: 87:1d:05:5f:73:4d:51:7a:ab:2c:87:da:56:95:21: 9f:70:e3:cd:39:7c:3a:e9:ca:db:47:eb:fe:c6:94: 75:2f:fe:f4:fc:51:64:24:aa:18:ee:e9:46:6f:e8: dd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:CA:E3:76:14:14:B4:CC:97:64:16:75:E3:2A:33:E3:B0:CF:D4:A4 X509v3 Authority Key Identifier: keyid:95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/UcrjdhQUtMyXZBZ14yoz47DP1KQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.233.0/24 Signature Algorithm: sha256WithRSAEncryption 08:be:cb:0e:e0:10:aa:70:0a:62:be:74:aa:b1:38:8b:6d:62: 58:85:88:47:89:51:e9:c2:dd:8f:41:02:3e:c8:77:20:60:28: 3c:dd:68:05:4b:92:a9:cb:b4:03:81:37:73:44:3e:99:e2:ff: 16:0a:45:32:bd:fa:41:11:2e:bc:a7:96:8e:a2:9b:56:0a:77: ca:31:d2:ac:20:7a:33:02:e1:06:a3:86:36:7e:a1:82:eb:15: ae:29:11:e4:0c:19:32:e1:f0:fb:ce:4e:55:3c:69:44:38:1f: c8:f1:7e:66:5e:6c:09:4f:d7:d3:b7:27:45:25:01:c2:9f:21: f6:f1:46:7d:4d:00:55:e3:85:30:84:3a:50:fc:f4:fc:2f:28: 02:5f:59:1e:ad:6c:10:cd:44:e2:c4:b0:b3:d6:85:c7:49:52: 18:5a:ce:63:75:5b:46:14:f3:ee:f3:01:79:d6:07:93:af:c0: 13:33:5c:13:30:0a:67:dc:d3:c8:c9:b8:9f:90:3c:aa:42:c3: c6:26:44:7f:c7:a2:e9:74:27:c4:03:75:9d:b1:39:79:19:1b: d8:08:96:1e:4b:66:66:8c:82:d6:9c:cf:ac:97:3c:d2:a9:31: b0:7a:f9:bf:97:cc:9c:2e:54:19:5f:73:60:cc:cb:e5:4c:17: a4:2c:0c:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EOv/P0HEfiYcQzu4spJvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MDA4MmE4NTk0NjcyMmM3ZmMxYzg2NGYwZmJkODBkYzU0 ZGNkMjkwHhcNMjYwMTAxMTAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWNhZTM3NjE0MTRiNGNjOTc2NDE2NzVlMzJhMzNlM2IwY2ZkNGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7+e1q5bB+36XXVyFoWAA9CCEC8H sZREFvGtYytfkGACLDvgpJlC9sRc2ZcIVzRk4c6xw1kEgI+R1IbqhTzhlJZ8YFm+ fSnLfjg9VfQjx2vNQuJ1VV1B2yIb8i14tzlKWm9DaIhuqYWlg9KY9OWBkjvwNVqe qvOW79cecSMVAd0ugkzjR5Wp8TooYYXqmMP46Q0vRxyV0Hm/wwcXB+5mvDu6mIvH K94gRXSqeWhyIH8jRPiI3YVTVyBprB4tHayaAClfKyZVzTPEn5neF5PZU3GHHQVf c01Reqssh9pWlSGfcOPNOXw66crbR+v+xpR1L/70/FFkJKoY7ulGb+jdJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFHK43YUFLTMl2QWdeMqM+Owz9SkMB8GA1UdIwQY MBaAFJUAgqhZRnIsf8HIZPD72A3FTc0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFFDQ3FGbEdjaXhfd2NoazhQdllEY1ZOelNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zNGU0MGYtZTFkMi00ZDI5LTg5YzUt YzY5YTdmMDNlMThmLzEvVWNyamRoUVV0TXlYWkJaMTR5b3o0N0RQMUtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8zNGU0MGYtZTFkMi00ZDI5LTg5YzUtYzY5YTdmMDNlMThm LzEvbFFDQ3FGbEdjaXhfd2NoazhQdllEY1ZOelNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/DpMA0G CSqGSIb3DQEBCwUAA4IBAQAIvssO4BCqcApivnSqsTiLbWJYhYhHiVHpwt2PQQI+ yHcgYCg83WgFS5Kpy7QDgTdzRD6Z4v8WCkUyvfpBES68p5aOoptWCnfKMdKsIHoz AuEGo4Y2fqGC6xWuKRHkDBky4fD7zk5VPGlEOB/I8X5mXmwJT9fTtydFJQHCnyH2 8UZ9TQBV44UwhDpQ/PT8LygCX1kerWwQzUTixLCz1oXHSVIYWs5jdVtGFPPu8wF5 1geTr8ATM1wTMApn3NPIybifkDyqQsPGJkR/x6LpdCfEA3WdsTl5GRvYCJYeS2Zm jILWnM+slzzSqTGwevm/l8ycLlQZX3NgzMvlTBekLAxU -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:56 2026 by rpki-client