This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/uGLn1rNehfP8gUHfuPWItHTs-Q4.roa File: uGLn1rNehfP8gUHfuPWItHTs-Q4.roa (raw, json) Hash identifier: rbb+/QdbyMdZWalyD4M+Cib5fxLsrq9/EvfwTaumIsE= Subject key identifier: B8:62:E7:D6:B3:5E:85:F3:FC:81:41:DF:B8:F5:88:B4:74:EC:F9:0E Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Certificate serial: 019B7E386D0E28863301A9926F3997F9766D Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/uGLn1rNehfP8gUHfuPWItHTs-Q4.roa Signing time: Fri 02 Jan 2026 10:19:45 +0000 ROA not before: Fri 02 Jan 2026 10:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 91.238.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:6d:0e:28:86:33:01:a9:92:6f:39:97:f9:76:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Validity Not Before: Jan 2 10:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b862e7d6b35e85f3fc8141dfb8f588b474ecf90e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d9:f0:e1:e9:b6:b3:92:d6:3e:53:2e:60:7c: 62:fc:bc:af:b8:ee:29:85:e4:77:d4:2d:87:59:52: eb:f9:bb:09:c1:ed:ea:49:3c:f8:a9:ed:48:f0:b7: 86:13:14:24:8d:61:06:94:d0:cf:97:21:a9:bb:f4: 56:aa:8c:be:7a:7c:ba:16:91:fa:84:26:02:8c:98: 4c:d4:31:07:c2:66:59:06:be:7c:f2:57:f5:8f:8f: 9e:55:06:96:e5:5c:2d:6e:91:90:b5:d6:37:4d:ac: a9:06:ba:9c:49:19:a5:2c:b8:f3:00:e0:0d:eb:6e: f3:15:c5:9e:25:e2:ca:8e:ae:68:c5:22:32:5d:90: f4:ac:43:f5:7e:65:26:1c:c4:d4:4e:98:c3:fa:fa: 46:98:75:aa:02:c3:f4:cd:68:03:fe:1b:65:a4:59: 9e:45:0b:21:55:6e:a1:30:7a:39:2f:8d:16:c5:a6: 04:39:20:68:9f:fb:79:ac:3c:72:d6:7e:bd:ed:e6: 3a:04:7c:b2:75:e5:f4:b5:c7:b2:fe:45:13:8c:09: 60:4f:af:0c:ca:10:c5:e0:a2:d8:dc:81:e7:db:17: 02:32:30:54:a6:9b:4d:10:db:1b:31:11:0c:3c:3f: c3:b3:1d:ea:c6:ed:29:b6:28:9e:a7:ee:47:35:7a: 3a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:62:E7:D6:B3:5E:85:F3:FC:81:41:DF:B8:F5:88:B4:74:EC:F9:0E X509v3 Authority Key Identifier: keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/uGLn1rNehfP8gUHfuPWItHTs-Q4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.238.70.0/24 Signature Algorithm: sha256WithRSAEncryption c6:92:91:49:95:eb:0b:d1:00:c1:fc:c0:0a:db:e1:37:6c:5a: 83:b8:65:79:83:00:8b:1a:89:b3:55:97:ce:57:e9:00:ae:29: 5b:81:db:de:ee:98:98:70:dd:9c:4b:f9:a9:f2:35:d7:e5:5b: ba:e8:dc:a5:34:e6:9f:c4:bd:31:a3:1f:5e:24:82:34:9b:33: 39:39:14:83:04:31:c7:8e:b6:2f:d6:68:44:d9:2b:9d:1c:6c: 33:93:83:0b:7e:ad:9d:8e:04:ce:9f:ed:32:e0:4f:47:a4:44: 8b:c6:7e:71:a2:a7:55:23:cb:ed:91:1d:71:11:52:f1:68:e1: be:9f:57:a5:18:9f:14:5e:1b:0e:af:9a:0d:6d:6f:8d:45:ec: 0b:fa:4a:85:91:aa:45:a6:dd:ab:44:89:c8:79:7a:b1:9f:8a: 8e:2c:30:f5:58:55:21:c8:b9:65:c1:8d:a0:41:f0:e3:6e:a6: 33:3c:dc:6d:37:68:73:9e:83:49:17:84:47:df:0a:e7:84:ed: 89:4a:04:83:67:98:3f:1d:d5:96:96:5c:3c:f3:17:cc:db:4d: 57:d2:73:d0:75:e5:ea:f5:43:a7:c1:49:27:38:63:4f:b8:dd: 9f:da:7d:22:9f:16:d2:da:86:d5:7f:d1:b2:58:06:8c:72:21: 1f:b3:04:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OG0OKIYzAamSbzmX+XZtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYjJiYjdiYWQ1MGYxOTIxODEwYTAyOGU3OGVkZDY1Zjgx ZjZhN2QwHhcNMjYwMTAyMTAxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODYyZTdkNmIzNWU4NWYzZmM4MTQxZGZiOGY1ODhiNDc0ZWNmOTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtnw4em2s5LWPlMuYHxi/LyvuO4p heR31C2HWVLr+bsJwe3qSTz4qe1I8LeGExQkjWEGlNDPlyGpu/RWqoy+eny6FpH6 hCYCjJhM1DEHwmZZBr588lf1j4+eVQaW5VwtbpGQtdY3TaypBrqcSRmlLLjzAOAN 627zFcWeJeLKjq5oxSIyXZD0rEP1fmUmHMTUTpjD+vpGmHWqAsP0zWgD/htlpFme RQshVW6hMHo5L40WxaYEOSBon/t5rDxy1n697eY6BHyydeX0tcey/kUTjAlgT68M yhDF4KLY3IHn2xcCMjBUpptNENsbMREMPD/Dsx3qxu0ptiiep+5HNXo6LQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLhi59azXoXz/IFB37j1iLR07PkOMB8GA1UdIwQY MBaAFE+yu3utUPGSGBCgKOeO3WX4H2p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYt MjdmYmM5OWVhM2M2LzEvdUdMbjFyTmVoZlA4Z1VIZnVQV0l0SFRzLVE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYtMjdmYmM5OWVhM2M2 LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+5GMA0G CSqGSIb3DQEBCwUAA4IBAQDGkpFJlesL0QDB/MAK2+E3bFqDuGV5gwCLGomzVZfO V+kArilbgdve7piYcN2cS/mp8jXX5Vu66NylNOafxL0xox9eJII0mzM5ORSDBDHH jrYv1mhE2SudHGwzk4MLfq2djgTOn+0y4E9HpESLxn5xoqdVI8vtkR1xEVLxaOG+ n1elGJ8UXhsOr5oNbW+NRewL+kqFkapFpt2rRInIeXqxn4qOLDD1WFUhyLllwY2g QfDjbqYzPNxtN2hznoNJF4RH3wrnhO2JSgSDZ5g/HdWWllw88xfM201X0nPQdeXq 9UOnwUknOGNPuN2f2n0inxbS2obVf9GyWAaMciEfswRF -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:38 2026 by rpki-client