This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/u0rrwecw3ubOxlMWibDzWHGFQeE.roa File: u0rrwecw3ubOxlMWibDzWHGFQeE.roa (raw, json) Hash identifier: PPKjE8PKmukpw4GpWagL0x0PZuUxYtWJ2kQC/cAQIfc= Subject key identifier: BB:4A:EB:C1:E7:30:DE:E6:CE:C6:53:16:89:B0:F3:58:71:85:41:E1 Certificate issuer: /CN=839a9a1b7e11fde77e4e1f57ff11864cee21f165 Certificate serial: 019B79113E6A1BA9E217823D2F34C811BF2E Authority key identifier: 83:9A:9A:1B:7E:11:FD:E7:7E:4E:1F:57:FF:11:86:4C:EE:21:F1:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/u0rrwecw3ubOxlMWibDzWHGFQeE.roa Signing time: Thu 01 Jan 2026 10:18:51 +0000 ROA not before: Thu 01 Jan 2026 10:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62168 IP address blocks: 141.105.118.0/24 maxlen: 24 2a01:8f80:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.mft rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:3e:6a:1b:a9:e2:17:82:3d:2f:34:c8:11:bf:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=839a9a1b7e11fde77e4e1f57ff11864cee21f165 Validity Not Before: Jan 1 10:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb4aebc1e730dee6cec6531689b0f358718541e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e5:79:f0:01:8a:86:cc:2d:75:41:6a:15:3c: 09:2e:67:94:33:6e:9d:15:6a:b1:2e:89:94:5c:32: 2d:3b:2f:a5:ca:c7:90:d7:45:8e:93:9c:55:c6:78: 43:0f:35:5d:7a:c6:a1:4e:13:0d:25:4a:48:01:96: 7c:d1:13:5a:95:fa:22:0f:0c:0d:84:d3:cb:9b:c8: 9b:3a:d3:bb:b7:5b:56:e6:9b:ea:1c:8e:b8:d7:f9: 02:4a:f4:34:a2:f3:3b:de:41:92:d0:1d:2a:a5:c0: ad:be:97:b9:67:de:a2:24:ff:ef:75:f1:34:45:ed: 88:4a:17:3f:b0:3f:99:4a:8b:b2:4c:1a:96:75:8c: dc:97:6f:04:41:fb:26:cb:53:12:cb:f0:9d:31:7f: d6:0e:0b:71:5c:ca:c0:e5:77:d2:6b:ee:b0:7a:ab: af:e5:87:21:c2:b2:c6:ee:3c:9c:59:aa:ef:a7:26: 11:80:03:0b:b2:c2:9a:13:a3:03:63:88:fe:6f:2b: 5a:d5:b7:65:1a:4e:92:84:cc:a9:db:ee:ef:f1:73: 0c:ce:61:42:26:0b:6d:2b:84:20:5f:c6:bc:70:d2: b2:37:aa:f6:8e:40:b6:ea:58:01:ae:26:2b:0c:91: 1e:a0:64:50:65:b3:4d:e1:6a:15:b4:30:7b:a8:35: 07:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:4A:EB:C1:E7:30:DE:E6:CE:C6:53:16:89:B0:F3:58:71:85:41:E1 X509v3 Authority Key Identifier: keyid:83:9A:9A:1B:7E:11:FD:E7:7E:4E:1F:57:FF:11:86:4C:EE:21:F1:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/u0rrwecw3ubOxlMWibDzWHGFQeE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.105.118.0/24 IPv6: 2a01:8f80:100::/40 Signature Algorithm: sha256WithRSAEncryption 23:c7:25:e5:ec:07:92:ea:64:d3:9b:06:3f:f6:a7:ce:73:4b: 64:ec:8c:7b:3b:f9:6c:fa:3b:13:0e:ad:bc:c8:e1:1e:9e:85: 27:11:72:a3:45:79:f7:62:57:07:8a:46:cf:8e:65:7f:c5:a8: 4d:d9:d4:d4:2e:80:e9:2c:17:e7:2c:d8:d6:04:43:e5:9d:52: 37:15:14:c6:37:ed:a1:d0:62:87:45:79:44:72:e8:ab:80:7d: 55:a5:49:4f:7e:23:33:a3:77:c6:04:80:79:86:43:69:1e:0a: 21:f0:50:fb:ac:50:d6:25:b7:dc:1a:1a:89:5d:1e:96:a7:bb: 85:36:9c:6d:c0:31:ec:62:2a:ad:54:ae:82:20:ef:32:cc:d9: f8:bf:fc:cb:a3:06:98:ea:66:6e:7b:80:62:7b:e5:15:b9:9c: c4:49:f0:bb:be:af:51:cb:34:08:d3:25:a0:96:ac:f5:af:e9: 7a:88:5a:a1:af:d8:6e:1f:97:c7:cb:df:9f:4b:af:54:bd:5f: 3f:7a:1c:bd:01:1e:b1:af:a6:bd:58:2d:84:6b:f4:4f:75:c7: f3:16:b2:5a:2c:58:89:9b:42:31:d5:d1:a7:10:34:37:9f:e0: 7d:d8:07:3a:7d:4b:79:e1:82:97:ab:95:a0:da:72:b5:a0:20: 48:46:7c:10 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt5ET5qG6niF4I9LzTIEb8uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzOWE5YTFiN2UxMWZkZTc3ZTRlMWY1N2ZmMTE4NjRjZWUy MWYxNjUwHhcNMjYwMTAxMTAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjRhZWJjMWU3MzBkZWU2Y2VjNjUzMTY4OWIwZjM1ODcxODU0MWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+V58AGKhswtdUFqFTwJLmeUM26d FWqxLomUXDItOy+lyseQ10WOk5xVxnhDDzVdesahThMNJUpIAZZ80RNalfoiDwwN hNPLm8ibOtO7t1tW5pvqHI641/kCSvQ0ovM73kGS0B0qpcCtvpe5Z96iJP/vdfE0 Re2IShc/sD+ZSouyTBqWdYzcl28EQfsmy1MSy/CdMX/WDgtxXMrA5XfSa+6wequv 5YchwrLG7jycWarvpyYRgAMLssKaE6MDY4j+byta1bdlGk6ShMyp2+7v8XMMzmFC JgttK4QgX8a8cNKyN6r2jkC26lgBriYrDJEeoGRQZbNN4WoVtDB7qDUH5QIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFLtK68HnMN7mzsZTFomw81hxhUHhMB8GA1UdIwQY MBaAFIOamht+Ef3nfk4fV/8RhkzuIfFlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzVxYUczNFJfZWQtVGg5WF94R0dUTzRoOFdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NjdiZDAtYjBlZi00MTE0LWE1OGUt ZmY4NmJmODgxNjQ4LzEvdTBycndlY3czdWJPeGxNV2liRHpXSEdGUWVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83NjdiZDAtYjBlZi00MTE0LWE1OGUtZmY4NmJmODgxNjQ4 LzEvZzVxYUczNFJfZWQtVGg5WF94R0dUTzRoOFdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAjWl2MA4E AgACMAgDBgAqAY+AATANBgkqhkiG9w0BAQsFAAOCAQEAI8cl5ewHkupk05sGP/an znNLZOyMezv5bPo7Ew6tvMjhHp6FJxFyo0V592JXB4pGz45lf8WoTdnU1C6A6SwX 5yzY1gRD5Z1SNxUUxjftodBih0V5RHLoq4B9VaVJT34jM6N3xgSAeYZDaR4KIfBQ +6xQ1iW33BoaiV0elqe7hTacbcAx7GIqrVSugiDvMszZ+L/8y6MGmOpmbnuAYnvl FbmcxEnwu76vUcs0CNMloJas9a/peohaoa/Ybh+Xx8vfn0uvVL1fP3ocvQEesa+m vVgthGv0T3XH8xayWixYiZtCMdXRpxA0N5/gfdgHOn1LeeGCl6uVoNpytaAgSEZ8 EA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:33 2026 by rpki-client