This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/uTNM_Qx3Kksos1PgtvUNZevyWHs.roa File: uTNM_Qx3Kksos1PgtvUNZevyWHs.roa (raw, json) Hash identifier: 5x2Iwvw5H8NZducy/95N1nopK5CCb4aO6OaFpQG4yP0= Subject key identifier: B9:33:4C:FD:0C:77:2A:4B:28:B3:53:E0:B6:F5:0D:65:EB:F2:58:7B Certificate issuer: /CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59 Certificate serial: 019B7D5D23646A1E5A69190CDAC9508BE648 Authority key identifier: 0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/uTNM_Qx3Kksos1PgtvUNZevyWHs.roa Signing time: Fri 02 Jan 2026 06:20:14 +0000 ROA not before: Fri 02 Jan 2026 06:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201754 IP address blocks: 91.198.56.0/24 maxlen: 24 193.42.218.0/24 maxlen: 24 2001:678:fec::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:23:64:6a:1e:5a:69:19:0c:da:c9:50:8b:e6:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59 Validity Not Before: Jan 2 06:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9334cfd0c772a4b28b353e0b6f50d65ebf2587b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:61:2d:a9:a6:f3:48:76:fc:d1:f3:d0:f9:ea: ee:c3:62:ed:54:42:6e:43:24:b5:e7:6f:e2:7a:1d: 38:f2:e3:a3:3e:ba:1b:72:73:af:7d:49:73:9f:ff: 6d:3a:af:15:49:75:07:5d:1b:4d:ba:ac:e6:f3:3c: 44:77:5c:47:0c:e0:d3:6b:8f:52:01:a7:bd:85:49: 57:9a:65:20:cb:71:b0:f9:35:6d:5f:16:49:67:8c: a1:f2:50:07:6f:e8:79:c5:ba:e9:db:43:9c:b9:e1: ce:ee:1d:35:8e:04:b6:f8:71:42:c4:8a:d4:fa:40: 56:a6:e8:2e:38:28:d0:a2:f4:52:1b:63:1b:58:8f: 5b:bb:3e:db:10:41:be:77:6c:ad:ee:60:72:12:48: df:4f:b4:f4:df:40:ac:16:75:d4:16:4d:ec:13:bb: 5c:b8:4f:71:64:41:be:85:b1:58:a5:3e:75:12:04: cc:fa:dc:c5:77:71:62:ce:7d:1c:c5:66:94:a1:76: 30:eb:3d:cc:8e:8c:43:13:25:99:c3:8b:d8:ed:90: cf:d5:56:c5:37:69:19:e7:31:e9:0a:88:2c:df:eb: 10:f9:fe:b2:33:9c:2a:90:c8:25:68:b5:61:96:3f: ba:f5:b2:5f:60:50:e0:de:19:d2:c5:34:ea:8c:68: 93:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:33:4C:FD:0C:77:2A:4B:28:B3:53:E0:B6:F5:0D:65:EB:F2:58:7B X509v3 Authority Key Identifier: keyid:0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/uTNM_Qx3Kksos1PgtvUNZevyWHs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.56.0/24 193.42.218.0/24 IPv6: 2001:678:fec::/48 Signature Algorithm: sha256WithRSAEncryption 55:31:02:92:23:c0:1b:b6:b6:20:32:b5:dc:18:b9:c6:77:90: a6:d4:d2:ab:e0:ef:bd:a8:10:e0:b2:47:cd:e4:9e:14:15:09: 98:99:d6:b7:85:92:45:3d:c1:9e:db:57:d5:56:45:b9:0a:37: a2:d8:94:e9:64:79:aa:76:9f:5f:2a:c4:08:b7:05:33:c1:ec: c2:d2:ac:19:85:3b:59:a2:4d:92:31:08:66:1c:d8:9b:cf:65: 9e:8c:93:3c:bd:be:4d:df:f2:c1:86:f4:fb:4d:c1:cb:53:8b: ac:b4:58:d3:d6:2a:10:fd:bb:52:60:45:7b:b8:14:7b:1e:bc: d4:48:59:44:cf:1b:34:d5:dc:e8:cd:e8:de:9d:ad:8d:48:19: 85:cb:9c:b7:e8:64:be:8f:d6:57:93:fa:fd:2f:46:51:d7:ae: 17:a9:75:d7:43:ed:2e:f0:24:90:d3:af:74:89:ed:6a:98:8e: 85:97:1b:08:c1:c6:cf:11:2b:34:b9:f4:98:7f:28:55:db:5e: af:80:74:1d:a9:46:8b:1a:d4:64:95:18:ac:ba:56:7d:94:d9: 80:37:4c:43:21:03:5a:2a:9e:87:ce:3b:ce:9f:3f:4e:23:e3: b3:42:a6:87:ea:5d:19:cf:22:13:ff:41:34:f5:5c:c7:62:44: 68:c8:4a:df -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt9XSNkah5aaRkM2slQi+ZIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOGFhZTE4OWM2M2NlYjU2NDNjYjA4MDMyN2JjYWEzYjBl ZjhhNTkwHhcNMjYwMTAyMDYyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTMzNGNmZDBjNzcyYTRiMjhiMzUzZTBiNmY1MGQ2NWViZjI1ODdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA82EtqabzSHb80fPQ+eruw2LtVEJu QyS152/ieh048uOjProbcnOvfUlzn/9tOq8VSXUHXRtNuqzm8zxEd1xHDODTa49S Aae9hUlXmmUgy3Gw+TVtXxZJZ4yh8lAHb+h5xbrp20OcueHO7h01jgS2+HFCxIrU +kBWpuguOCjQovRSG2MbWI9buz7bEEG+d2yt7mByEkjfT7T030CsFnXUFk3sE7tc uE9xZEG+hbFYpT51EgTM+tzFd3Fizn0cxWaUoXYw6z3MjoxDEyWZw4vY7ZDP1VbF N2kZ5zHpCogs3+sQ+f6yM5wqkMglaLVhlj+69bJfYFDg3hnSxTTqjGiTvQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFLkzTP0MdypLKLNT4Lb1DWXr8lh7MB8GA1UdIwQY MBaAFAyKrhicY861ZDywgDJ7yqOw74pZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRElxdUdKeGp6clZrUExDQU1udktvN0R2aWxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81MDE1ZjYtMGJkMC00OWY5LWI4NTQt YjZiYTg2Y2YzMWY5LzEvdVROTV9ReDNLa3NvczFQZ3R2VU5aZXZ5V0hzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81MDE1ZjYtMGJkMC00OWY5LWI4NTQtYjZiYTg2Y2YzMWY5 LzEvRElxdUdKeGp6clZrUExDQU1udktvN0R2aWxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAW8Y4AwQA wSraMA8EAgACMAkDBwAgAQZ4D+wwDQYJKoZIhvcNAQELBQADggEBAFUxApIjwBu2 tiAytdwYucZ3kKbU0qvg772oEOCyR83knhQVCZiZ1reFkkU9wZ7bV9VWRbkKN6LY lOlkeap2n18qxAi3BTPB7MLSrBmFO1miTZIxCGYc2JvPZZ6Mkzy9vk3f8sGG9PtN wctTi6y0WNPWKhD9u1JgRXu4FHsevNRIWUTPGzTV3OjN6N6drY1IGYXLnLfoZL6P 1leT+v0vRlHXrhepdddD7S7wJJDTr3SJ7WqYjoWXGwjBxs8RKzS59Jh/KFXbXq+A dB2pRosa1GSVGKy6Vn2U2YA3TEMhA1oqnofOO86fP04j47NCpofqXRnPIhP/QTT1 XMdiRGjISt8= -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:11 2026 by rpki-client