This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/uvv9qPqkc14AyTkKhEshaclg-ro.roa File: uvv9qPqkc14AyTkKhEshaclg-ro.roa (raw, json) Hash identifier: oelEEgJXLeJc3nzjBLZO2ZEiqv1cxH4FuyLv/ZRpkA4= Subject key identifier: BA:FB:FD:A8:FA:A4:73:5E:00:C9:39:0A:84:4B:21:69:C9:60:FA:BA Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca Certificate serial: 019B7EA723925972F17A8129072D75549F89 Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/uvv9qPqkc14AyTkKhEshaclg-ro.roa Signing time: Fri 02 Jan 2026 12:20:41 +0000 ROA not before: Fri 02 Jan 2026 12:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207137 IP address blocks: 185.135.45.0/24 maxlen: 24 2a13:240::/48 maxlen: 48 2a13:240:1::/48 maxlen: 48 2a13:240:2::/48 maxlen: 48 2a13:240:3::/48 maxlen: 48 2a13:240:4::/48 maxlen: 48 2a13:240:5::/48 maxlen: 48 2a13:240:6::/48 maxlen: 48 2a13:240:7::/48 maxlen: 48 2a13:240:8::/48 maxlen: 48 2a13:240:9::/48 maxlen: 48 2a13:240:a::/48 maxlen: 48 2a13:240:b::/48 maxlen: 48 2a13:240:c::/48 maxlen: 48 2a13:240:d::/48 maxlen: 48 2a13:240:e::/48 maxlen: 48 2a13:240:f::/48 maxlen: 48 2a13:240:10::/48 maxlen: 48 2a13:240:4200::/40 maxlen: 40 2a13:240:4300::/40 maxlen: 40 2a13:240:4400::/40 maxlen: 40 2a13:240:4500::/40 maxlen: 40 2a13:240:4600::/40 maxlen: 40 2a13:240:4700::/40 maxlen: 40 2a13:240:4800::/40 maxlen: 40 2a13:240:4900::/40 maxlen: 40 2a13:240:4a00::/40 maxlen: 40 2a13:240:4b00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:23:92:59:72:f1:7a:81:29:07:2d:75:54:9f:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca Validity Not Before: Jan 2 12:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bafbfda8faa4735e00c9390a844b2169c960faba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a5:6a:ba:e4:ba:ef:b8:80:1a:f4:61:8d:4a: 82:85:30:e6:6f:b6:49:92:da:24:95:4b:70:b7:a8: 31:bb:66:e2:1e:7c:00:45:37:79:64:c1:19:02:2e: 77:5a:1a:5a:aa:4a:d7:13:0d:d9:77:05:67:45:31: f9:f3:c7:d1:75:5f:46:df:1b:02:bf:df:fa:b8:35: 47:d8:2a:00:ad:cd:fe:9e:46:4b:d2:de:11:e1:17: c7:ce:02:3f:88:6f:54:8d:0e:43:c3:c5:d3:9e:66: ef:f1:db:0b:a1:c0:a9:ba:15:00:34:18:91:73:ea: 6d:a6:41:c1:c2:66:e3:ee:f1:02:cb:c7:76:8d:be: 5d:3b:69:ec:65:c1:7e:9e:58:57:1e:0d:ff:67:97: f2:e6:e8:dc:9a:fb:36:c3:5b:b2:8c:5c:06:f2:7d: c7:c6:00:97:4c:fe:76:aa:69:d8:fe:d1:c9:de:39: 47:75:78:47:dc:24:76:d7:d2:31:d4:a8:92:2f:b2: 8a:a7:e3:c4:b9:3a:b0:c7:5f:a9:12:25:0c:3c:68: 8f:e0:c3:72:65:0e:77:7b:2c:90:ef:47:d2:73:62: cf:79:04:b0:6a:2c:98:51:b8:3f:d4:00:b6:05:8d: e8:c2:13:a5:a4:1f:62:64:b1:1d:b8:61:24:fb:e1: 62:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FB:FD:A8:FA:A4:73:5E:00:C9:39:0A:84:4B:21:69:C9:60:FA:BA X509v3 Authority Key Identifier: keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/uvv9qPqkc14AyTkKhEshaclg-ro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.135.45.0/24 IPv6: 2a13:240::-2a13:240:10:ffff:ffff:ffff:ffff:ffff 2a13:240:4200::-2a13:240:4bff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption b3:bd:44:8d:e6:49:1b:8f:ce:d8:b4:c3:3f:1a:23:c3:32:b5: a3:0c:98:09:dc:5a:1f:12:cc:08:ae:7b:ae:00:b9:3a:b1:1a: dc:49:b0:b0:1c:10:dc:0f:0f:bd:9a:1f:8d:5e:a3:42:57:52: 65:12:f8:a5:a6:06:22:68:d2:9f:8c:a9:b5:77:04:95:8d:a0: 87:c9:d9:99:97:6f:86:14:09:6d:a0:e7:1a:3e:74:e1:d7:fd: 84:56:f5:f6:d5:f5:6e:d0:02:53:69:b4:5c:bb:94:e0:e3:ae: fe:cb:3d:57:29:3a:c0:05:83:b6:aa:c6:e0:b9:3f:94:98:70: d7:6d:f9:db:62:fd:0c:46:56:9a:19:58:c6:93:b7:9d:ed:64: cb:e9:a9:95:3a:1d:93:8d:04:2d:1d:e7:b4:ca:81:a4:f1:54: 3f:80:cd:e4:6a:8a:92:6b:f0:16:35:85:39:66:84:72:60:71: 70:0b:d5:04:5c:b4:b1:ab:96:c0:20:f8:ee:93:3a:72:3d:50: e9:12:80:ac:cf:e5:ca:d1:be:dd:de:0e:db:74:7e:44:ef:82: b0:db:37:af:02:70:49:87:4e:45:4f:7e:ca:98:6a:8b:3b:14: a5:e3:b9:ef:09:2e:35:ac:b4:24:bd:27:46:44:e2:59:3e:35: 4d:7c:c1:99 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt+pyOSWXLxeoEpBy11VJ+JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYmY1NTMwNDJmMWE0MzgyN2RjMDM0NTAwYmJkMTA2OGE3 Mjk3Y2EwHhcNMjYwMTAyMTIyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWZiZmRhOGZhYTQ3MzVlMDBjOTM5MGE4NDRiMjE2OWM5NjBmYWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaVquuS677iAGvRhjUqChTDmb7ZJ ktoklUtwt6gxu2biHnwARTd5ZMEZAi53WhpaqkrXEw3ZdwVnRTH588fRdV9G3xsC v9/6uDVH2CoArc3+nkZL0t4R4RfHzgI/iG9UjQ5Dw8XTnmbv8dsLocCpuhUANBiR c+ptpkHBwmbj7vECy8d2jb5dO2nsZcF+nlhXHg3/Z5fy5ujcmvs2w1uyjFwG8n3H xgCXTP52qmnY/tHJ3jlHdXhH3CR219Ix1KiSL7KKp+PEuTqwx1+pEiUMPGiP4MNy ZQ53eyyQ70fSc2LPeQSwaiyYUbg/1AC2BY3owhOlpB9iZLEduGEk++Fi6wIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFLr7/aj6pHNeAMk5CoRLIWnJYPq6MB8GA1UdIwQY MBaAFHC/VTBC8aQ4J9wDRQC70QaKcpfKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYt NTM1ODQwMWZiNzk2LzEvdXZ2OXFQcWtjMTRBeVRrS2hFc2hhY2xnLXJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYtNTM1ODQwMWZiNzk2 LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAMBAIAATAGAwQAuYctMCoE AgACMCQwEAMFBioTAkADBwAqEwJAABAwEAMGASoTAkBCAwYCKhMCQEgwDQYJKoZI hvcNAQELBQADggEBALO9RI3mSRuPzti0wz8aI8MytaMMmAncWh8SzAiue64AuTqx GtxJsLAcENwPD72aH41eo0JXUmUS+KWmBiJo0p+MqbV3BJWNoIfJ2ZmXb4YUCW2g 5xo+dOHX/YRW9fbV9W7QAlNptFy7lODjrv7LPVcpOsAFg7aqxuC5P5SYcNdt+dti /QxGVpoZWMaTt53tZMvpqZU6HZONBC0d57TKgaTxVD+AzeRqipJr8BY1hTlmhHJg cXAL1QRctLGrlsAg+O6TOnI9UOkSgKzP5crRvt3eDtt0fkTvgrDbN68CcEmHTkVP fsqYaos7FKXjue8JLjWstCS9J0ZE4lk+NU18wZk= -----END CERTIFICATE-----Generated at Sun Jan 25 17:48:26 2026 by rpki-client