This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/uOBfT9dJzAeP5L062tP2bPLjN00.roa File: uOBfT9dJzAeP5L062tP2bPLjN00.roa (raw, json) Hash identifier: YXcsdR0InWSwo1kicGcvoiEoVtpo1uOcvHTUXcUr4mo= Subject key identifier: B8:E0:5F:4F:D7:49:CC:07:8F:E4:BD:3A:DA:D3:F6:6C:F2:E3:37:4D Certificate issuer: /CN=562e8e050d384502eb797f5e944931a66fdd555a Certificate serial: 019B7B3674ECE068DE25514250BFCCFBB377 Authority key identifier: 56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/uOBfT9dJzAeP5L062tP2bPLjN00.roa Signing time: Thu 01 Jan 2026 20:18:44 +0000 ROA not before: Thu 01 Jan 2026 20:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15626 IP address blocks: 91.199.45.0/24 maxlen: 24 91.235.128.0/24 maxlen: 24 185.237.204.0/23 maxlen: 23 195.54.163.0/24 maxlen: 24 2a06:c6c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.crl rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:74:ec:e0:68:de:25:51:42:50:bf:cc:fb:b3:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=562e8e050d384502eb797f5e944931a66fdd555a Validity Not Before: Jan 1 20:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8e05f4fd749cc078fe4bd3adad3f66cf2e3374d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e4:a1:95:c4:e6:7b:06:20:bf:2e:79:ba:34: c9:b7:df:7f:70:ed:40:3c:c7:ff:cf:ad:1f:3f:c7: f0:2d:06:63:55:f6:19:37:a1:df:52:6c:88:50:bf: 8e:ff:7c:aa:88:5f:5d:16:78:11:48:a7:7b:fd:c6: 9a:ce:ba:df:a5:5e:2c:ad:eb:4c:ac:66:0e:b1:f0: 3c:0c:15:e2:47:99:0e:ad:3d:65:99:df:4b:4e:47: a0:6f:d0:6e:07:7e:fd:e5:03:de:c0:40:2c:5c:95: bb:29:cf:61:06:a0:6b:5d:2d:ee:ca:55:db:87:40: e9:96:1f:cf:d5:04:27:28:2b:70:a5:dc:6c:b6:38: 5e:d3:0a:a2:37:9e:a1:6b:07:ce:2f:44:28:94:e3: fd:24:a8:43:cd:8a:d0:a9:d5:60:ad:f1:ba:c7:9f: 77:c8:55:b8:96:75:0e:d1:6e:e9:76:0c:c3:35:f9: 9f:44:96:78:bb:4a:be:42:32:d4:64:72:b9:6e:56: d8:7f:7b:9a:40:ae:c5:7b:62:f6:86:08:dd:ec:f2: a5:a9:e4:f9:ee:d0:34:4c:fd:f5:8d:1f:84:80:4f: f9:7e:be:f2:dd:a2:03:3b:74:3a:1d:6e:80:6d:1c: 03:24:6a:7d:c6:d6:bc:fd:3a:75:39:05:c6:3e:90: 5a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E0:5F:4F:D7:49:CC:07:8F:E4:BD:3A:DA:D3:F6:6C:F2:E3:37:4D X509v3 Authority Key Identifier: keyid:56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/uOBfT9dJzAeP5L062tP2bPLjN00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.45.0/24 91.235.128.0/24 185.237.204.0/23 195.54.163.0/24 IPv6: 2a06:c6c0:1::/48 Signature Algorithm: sha256WithRSAEncryption 5d:53:6a:60:23:e6:16:41:ea:a6:1c:c2:d3:f8:d7:11:b3:e1: 71:62:d1:95:82:4e:93:ab:90:cd:eb:d1:29:48:24:1a:9c:8b: 51:f8:88:61:02:a0:39:18:2f:12:d6:e7:35:04:c2:5e:5a:e8: 8f:5a:10:1a:f1:ee:84:f1:93:a0:f6:b7:70:af:2f:cb:f1:8a: 87:03:fc:db:8d:31:f7:1c:91:b5:36:ae:34:1c:eb:05:72:41: bd:3d:75:b7:1e:53:5e:3c:a5:e8:32:e7:3f:0c:ad:d0:63:c7: 1b:17:94:6d:7e:70:d1:84:cd:71:a2:1f:50:a2:15:d8:b8:1b: 4e:cb:e9:af:7e:f7:71:93:a3:b6:84:6f:3b:a1:5b:79:e4:f3: 2a:c2:f6:ea:2d:22:a9:54:f9:c4:d8:b9:cb:ac:b5:35:94:cd: 0d:32:5f:94:ac:f6:41:31:1c:b0:1d:53:b5:d6:0f:dd:60:8e: ce:85:56:e9:c3:b2:87:99:3e:fd:78:55:14:14:41:77:3c:f3: 09:73:f7:5d:a3:a5:5f:e7:7d:a4:20:39:81:90:77:ee:68:2d: e5:78:54:cb:8a:0e:cf:c3:ff:fa:81:68:82:8f:a6:af:8b:b1: b7:a6:9b:08:2c:cc:8c:00:57:b8:ad:e6:97:3a:3a:b0:1c:61: 8e:73:7f:eb -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt7NnTs4GjeJVFCUL/M+7N3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2MmU4ZTA1MGQzODQ1MDJlYjc5N2Y1ZTk0NDkzMWE2NmZk ZDU1NWEwHhcNMjYwMTAxMjAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGUwNWY0ZmQ3NDljYzA3OGZlNGJkM2FkYWQzZjY2Y2YyZTMzNzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuShlcTmewYgvy55ujTJt99/cO1A PMf/z60fP8fwLQZjVfYZN6HfUmyIUL+O/3yqiF9dFngRSKd7/caazrrfpV4sretM rGYOsfA8DBXiR5kOrT1lmd9LTkegb9BuB3795QPewEAsXJW7Kc9hBqBrXS3uylXb h0Dplh/P1QQnKCtwpdxstjhe0wqiN56hawfOL0QolOP9JKhDzYrQqdVgrfG6x593 yFW4lnUO0W7pdgzDNfmfRJZ4u0q+QjLUZHK5blbYf3uaQK7Fe2L2hgjd7PKlqeT5 7tA0TP31jR+EgE/5fr7y3aIDO3Q6HW6AbRwDJGp9xta8/Tp1OQXGPpBa0QIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFLjgX0/XScwHj+S9OtrT9mzy4zdNMB8GA1UdIwQY MBaAFFYujgUNOEUC63l/XpRJMaZv3VVaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmk2T0JRMDRSUUxyZVg5ZWxFa3hwbV9kVlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jMmYxODItYmI2Ny00M2Q4LThlYTUt OTVjNTAwMWJmYzcwLzEvdU9CZlQ5ZEp6QWVQNUwwNjJ0UDJiUExqTjAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9jMmYxODItYmI2Ny00M2Q4LThlYTUtOTVjNTAwMWJmYzcw LzEvVmk2T0JRMDRSUUxyZVg5ZWxFa3hwbV9kVlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQAW8ctAwQA W+uAAwQBue3MAwQAwzajMA8EAgACMAkDBwAqBsbAAAEwDQYJKoZIhvcNAQELBQAD ggEBAF1TamAj5hZB6qYcwtP41xGz4XFi0ZWCTpOrkM3r0SlIJBqci1H4iGECoDkY LxLW5zUEwl5a6I9aEBrx7oTxk6D2t3CvL8vxiocD/NuNMfcckbU2rjQc6wVyQb09 dbceU148pegy5z8MrdBjxxsXlG1+cNGEzXGiH1CiFdi4G07L6a9+93GTo7aEbzuh W3nk8yrC9uotIqlU+cTYucustTWUzQ0yX5Ss9kExHLAdU7XWD91gjs6FVunDsoeZ Pv14VRQUQXc88wlz912jpV/nfaQgOYGQd+5oLeV4VMuKDs/D//qBaIKPpq+Lsbem mwgszIwAV7it5pc6OrAcYY5zf+s= -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:22 2026 by rpki-client