This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/gU5BEfZwa7XqNb3-pzbtPHmYYdE.roa File: gU5BEfZwa7XqNb3-pzbtPHmYYdE.roa (raw, json) Hash identifier: Xi44fSULW0WT4qNGxlYFDI86KAd6c7/Wo7ga2NhHQlQ= Subject key identifier: 81:4E:41:11:F6:70:6B:B5:EA:35:BD:FE:A7:36:ED:3C:79:98:61:D1 Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Certificate serial: 019B7DC880D812FF66715E1D7BC8E0622F5C Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/gU5BEfZwa7XqNb3-pzbtPHmYYdE.roa Signing time: Fri 02 Jan 2026 08:17:30 +0000 ROA not before: Fri 02 Jan 2026 08:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42065 IP address blocks: 91.108.0.0/22 maxlen: 24 91.108.24.0/21 maxlen: 24 91.108.32.0/23 maxlen: 24 91.108.52.0/24 maxlen: 24 94.124.176.0/22 maxlen: 23 94.124.178.0/23 maxlen: 24 95.140.92.0/24 maxlen: 24 95.140.94.0/24 maxlen: 24 95.161.0.0/18 maxlen: 24 95.161.88.0/22 maxlen: 24 95.161.95.0/24 maxlen: 24 95.161.96.0/23 maxlen: 24 95.161.102.0/23 maxlen: 24 95.161.104.0/23 maxlen: 24 95.161.124.0/24 maxlen: 24 95.161.125.0/24 maxlen: 24 95.161.127.0/24 maxlen: 24 185.51.60.0/22 maxlen: 24 2a00:11d8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:80:d8:12:ff:66:71:5e:1d:7b:c8:e0:62:2f:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Validity Not Before: Jan 2 08:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=814e4111f6706bb5ea35bdfea736ed3c799861d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a2:03:e6:46:cb:51:9d:e0:df:7b:8b:df:2d: c1:59:09:69:19:bd:6b:67:cd:94:05:3d:94:db:fe: 0d:55:d9:70:fa:ab:a7:8c:d0:b9:5d:b7:85:b0:05: ea:ca:57:f3:90:1f:79:c4:57:36:9d:7b:2f:46:a7: f5:07:cb:cd:af:99:75:6d:c2:33:ef:5e:cd:8c:17: ba:b6:74:94:90:05:2e:d2:69:c2:1c:1b:bf:08:95: f3:6c:31:2f:b9:a5:5a:e6:4b:21:fe:2e:71:2d:f7: 04:83:41:f7:92:20:a0:85:9f:6b:be:ee:5f:0d:2f: ad:f7:45:ef:fb:66:2a:bf:17:7e:23:1d:0c:e0:7a: 63:39:87:5c:54:6d:8c:62:22:d7:09:53:d2:68:e7: d8:1d:34:69:b4:35:f1:91:a4:0a:6a:0a:0b:89:6b: 43:bd:49:4b:8e:72:5c:6b:92:22:f8:45:d1:14:f2: 30:b2:8b:6c:6e:a1:e0:e0:83:18:a8:49:83:17:9b: 3f:27:91:75:e3:7e:6d:6a:29:bd:c0:b3:81:4e:d7: dc:9e:48:ce:2f:f6:7b:36:47:e7:de:54:bb:88:b5: 8f:13:12:33:96:8b:b2:41:80:32:86:70:4e:00:f6: 46:5a:37:95:b8:9b:88:4e:c2:79:19:1a:2f:3d:bb: c0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:4E:41:11:F6:70:6B:B5:EA:35:BD:FE:A7:36:ED:3C:79:98:61:D1 X509v3 Authority Key Identifier: keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/gU5BEfZwa7XqNb3-pzbtPHmYYdE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.108.0.0/22 91.108.24.0-91.108.33.255 91.108.52.0/24 94.124.176.0/22 95.140.92.0/24 95.140.94.0/24 95.161.0.0/18 95.161.88.0/22 95.161.95.0-95.161.97.255 95.161.102.0-95.161.105.255 95.161.124.0/23 95.161.127.0/24 185.51.60.0/22 IPv6: 2a00:11d8::/32 Signature Algorithm: sha256WithRSAEncryption 2f:91:7e:04:5d:f4:db:21:62:eb:56:f9:e4:dd:49:d7:bb:b3: 33:71:b6:1f:4c:73:f7:bb:5c:e6:53:d0:09:63:88:11:c0:a1: 04:e5:d1:83:3c:46:8a:b2:37:a3:25:0a:94:56:af:18:fa:fb: 6d:8f:46:ed:f9:ed:14:bb:bd:1a:3d:27:c0:d4:d6:8d:88:a3: 2c:fe:80:a2:9c:94:05:aa:ef:40:58:16:18:e2:39:db:e9:23: b9:12:cc:fe:93:42:dd:35:f8:da:a4:f9:d1:7a:d7:7d:c1:bb: 98:62:14:db:a8:c4:59:70:ea:f0:6d:4b:d6:70:51:64:cd:e6: 2c:5c:e0:d5:c8:7f:62:50:20:34:44:4a:b2:07:54:c9:d3:5f: 38:f3:47:c3:b4:49:95:89:49:b4:ce:c8:59:2b:76:d7:99:ad: 31:e4:ea:da:67:32:1b:2f:1f:f2:57:7f:3c:9a:4c:21:25:f4: 1b:64:f3:5b:be:40:23:04:ed:0c:70:f6:e0:1c:96:62:95:6e: c0:10:54:b4:4f:21:17:ce:00:aa:2a:a2:38:61:18:2c:13:02: a9:f4:4f:21:6a:48:56:44:d4:87:4b:95:ec:36:d8:78:85:a1: 6f:80:24:12:ff:73:4c:0d:77:46:48:f4:f7:de:0d:80:ab:08: a7:c2:35:7b -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgISAZt9yIDYEv9mcV4de8jgYi9cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjhlN2UwMWZhZGE0OWMxYTUyZmExM2YzNjI2YzQxYjQx YTUxYjgwHhcNMjYwMTAyMDgxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTRlNDExMWY2NzA2YmI1ZWEzNWJkZmVhNzM2ZWQzYzc5OTg2MWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaID5kbLUZ3g33uL3y3BWQlpGb1r Z82UBT2U2/4NVdlw+qunjNC5XbeFsAXqylfzkB95xFc2nXsvRqf1B8vNr5l1bcIz 717NjBe6tnSUkAUu0mnCHBu/CJXzbDEvuaVa5ksh/i5xLfcEg0H3kiCghZ9rvu5f DS+t90Xv+2Yqvxd+Ix0M4HpjOYdcVG2MYiLXCVPSaOfYHTRptDXxkaQKagoLiWtD vUlLjnJca5Ii+EXRFPIwsotsbqHg4IMYqEmDF5s/J5F1435taim9wLOBTtfcnkjO L/Z7Nkfn3lS7iLWPExIzlouyQYAyhnBOAPZGWjeVuJuITsJ5GRovPbvAJQIDAQAB o4ICeTCCAnUwHQYDVR0OBBYEFIFOQRH2cGu16jW9/qc27Tx5mGHRMB8GA1UdIwQY MBaAFGIo5+AfraScGlL6E/NibEG0GlG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUt NzY3NDE2NTI1MTBkLzEvZ1U1QkVmWndhN1hxTmIzLXB6YnRQSG1ZWWRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUtNzY3NDE2NTI1MTBk LzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGOBggrBgEFBQcBBwEB/wR/MH0wbAQCAAEwZgMEAltsADAM AwQDW2wYAwQBW2wgAwQAW2w0AwQCXnywAwQAX4xcAwQAX4xeAwQGX6EAAwQCX6FY MAwDBABfoV8DBAFfoWAwDAMEAV+hZgMEAV+haAMEAV+hfAMEAF+hfwMEArkzPDAN BAIAAjAHAwUAKgAR2DANBgkqhkiG9w0BAQsFAAOCAQEAL5F+BF302yFi61b55N1J 17uzM3G2H0xz97tc5lPQCWOIEcChBOXRgzxGirI3oyUKlFavGPr7bY9G7fntFLu9 Gj0nwNTWjYijLP6AopyUBarvQFgWGOI52+kjuRLM/pNC3TX42qT50XrXfcG7mGIU 26jEWXDq8G1L1nBRZM3mLFzg1ch/YlAgNERKsgdUydNfOPNHw7RJlYlJtM7IWSt2 15mtMeTq2mcyGy8f8ld/PJpMISX0G2TzW75AIwTtDHD24ByWYpVuwBBUtE8hF84A qiqiOGEYLBMCqfRPIWpIVkTUh0uV7DbYeIWhb4AkEv9zTA13Rkj0994NgKsIp8I1 ew== -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:50 2026 by rpki-client