This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/upaT00PjhI5nNd4ZXYb_aGz7FKQ.roa File: upaT00PjhI5nNd4ZXYb_aGz7FKQ.roa (raw, json) Hash identifier: 2Rk/P9oSpdtf8edjp9QJY+dBNX8kPTP7ILwi67bXY+8= Subject key identifier: BA:96:93:D3:43:E3:84:8E:67:35:DE:19:5D:86:FF:68:6C:FB:14:A4 Certificate issuer: /CN=ea8b2cd11f85987898547450c9217811fcdea28b Certificate serial: 019B775968B3DF3033B9155164EC981E472D Authority key identifier: EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/upaT00PjhI5nNd4ZXYb_aGz7FKQ.roa Signing time: Thu 01 Jan 2026 02:18:26 +0000 ROA not before: Thu 01 Jan 2026 02:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15935 IP address blocks: 81.30.224.0/19 maxlen: 19 81.30.229.0/24 maxlen: 24 81.30.246.0/23 maxlen: 23 93.185.48.0/20 maxlen: 20 95.173.64.0/19 maxlen: 19 95.173.64.0/23 maxlen: 23 95.173.68.0/23 maxlen: 23 109.238.32.0/20 maxlen: 20 213.195.192.0/18 maxlen: 18 217.66.160.0/19 maxlen: 19 217.66.160.0/24 maxlen: 24 217.66.166.0/24 maxlen: 24 217.66.178.0/24 maxlen: 24 217.66.179.0/24 maxlen: 24 217.66.188.0/23 maxlen: 23 217.66.190.0/24 maxlen: 24 217.66.191.0/24 maxlen: 24 2a02:570::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:68:b3:df:30:33:b9:15:51:64:ec:98:1e:47:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea8b2cd11f85987898547450c9217811fcdea28b Validity Not Before: Jan 1 02:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba9693d343e3848e6735de195d86ff686cfb14a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:17:77:dd:6c:89:53:3e:c4:9d:88:25:53:a1: 3e:27:b1:79:81:c7:b0:28:e0:de:a3:28:db:95:d7: 61:78:bd:20:57:fa:c6:46:89:56:ce:63:c5:40:23: c2:fa:60:42:6f:2d:b7:a7:54:7f:a0:da:e9:1c:e4: b0:d1:f5:b2:df:57:80:cf:0f:69:23:3f:18:56:33: 07:31:79:24:f3:04:35:4f:89:71:ee:2c:c5:91:06: 9f:b9:c0:ae:21:c1:79:9b:94:76:08:dc:82:b0:f7: 17:73:0d:13:71:00:a5:21:e7:d1:8a:98:51:7c:e9: db:d3:1d:fb:6f:c1:e7:8f:33:36:ab:f3:8a:b8:cd: 3e:1f:7b:8d:67:cc:9a:fe:aa:cf:b0:e4:3d:d8:a1: 28:13:dc:9d:b9:8f:9f:c5:19:93:2c:fc:51:be:c9: 89:61:f3:ec:ef:af:5e:a1:95:ea:3a:3e:15:62:3d: 6c:22:34:24:a8:11:15:df:ad:3a:b7:21:3b:a5:46: c6:be:bf:b4:fd:0d:76:08:cd:75:4e:28:ef:88:6a: 5b:18:eb:62:66:0c:37:1b:44:86:48:c1:b6:ae:e7: d6:ea:d4:3e:61:17:f4:4f:f8:d1:24:72:3e:56:77: 69:40:83:60:e4:f3:0f:9d:f7:00:e6:f7:68:cc:d7: 66:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:96:93:D3:43:E3:84:8E:67:35:DE:19:5D:86:FF:68:6C:FB:14:A4 X509v3 Authority Key Identifier: keyid:EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/upaT00PjhI5nNd4ZXYb_aGz7FKQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.30.224.0/19 93.185.48.0/20 95.173.64.0/19 109.238.32.0/20 213.195.192.0/18 217.66.160.0/19 IPv6: 2a02:570::/32 Signature Algorithm: sha256WithRSAEncryption a6:bd:15:5b:2e:9b:a1:cb:d9:6f:9d:d4:d7:b4:02:e8:e1:bf: 16:9c:b6:03:88:de:b8:ec:95:53:b5:1e:a4:20:bf:b0:d8:59: 83:b3:11:eb:1b:7c:97:fb:0e:28:d8:3b:88:41:61:90:30:04: 22:9f:4f:d5:9a:33:69:f9:ab:32:89:c1:57:69:e8:72:45:98: c7:2c:22:2d:6a:e9:26:1f:c0:50:12:62:fb:26:cf:cc:dc:17: 6e:ca:04:e7:6f:78:c7:ed:cf:53:5a:57:5c:41:c7:0b:bd:c8: 4e:2f:7a:66:54:d2:f7:0e:d9:70:5d:7a:00:66:18:45:01:a1: ff:4a:e5:53:8b:9f:d9:92:e4:59:a9:83:1c:45:1b:d0:f2:9b: 97:dd:c8:49:27:cc:1c:4a:29:3d:a7:5a:6d:07:cd:e1:58:ae: 18:2f:3f:2d:54:c9:e5:79:ce:fb:df:e7:44:d8:18:dc:29:de: e4:fd:f5:14:43:e9:eb:1d:8c:b6:66:b3:17:bc:ce:56:56:c2: 89:49:80:b1:37:b0:05:ad:d7:ee:eb:1b:07:97:2a:d0:7a:dc: 90:65:ed:14:8a:c6:b1:5b:b0:27:82:e0:86:56:71:77:fc:a2: 43:39:b0:3e:67:9b:2f:7f:76:07:a5:e5:07:3d:fa:fa:d1:87: 36:d3:8d:31 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt3WWiz3zAzuRVRZOyYHkctMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhOGIyY2QxMWY4NTk4Nzg5ODU0NzQ1MGM5MjE3ODExZmNk ZWEyOGIwHhcNMjYwMTAxMDIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTk2OTNkMzQzZTM4NDhlNjczNWRlMTk1ZDg2ZmY2ODZjZmIxNGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxd33WyJUz7EnYglU6E+J7F5gcew KODeoyjblddheL0gV/rGRolWzmPFQCPC+mBCby23p1R/oNrpHOSw0fWy31eAzw9p Iz8YVjMHMXkk8wQ1T4lx7izFkQafucCuIcF5m5R2CNyCsPcXcw0TcQClIefRiphR fOnb0x37b8HnjzM2q/OKuM0+H3uNZ8ya/qrPsOQ92KEoE9yduY+fxRmTLPxRvsmJ YfPs769eoZXqOj4VYj1sIjQkqBEV3606tyE7pUbGvr+0/Q12CM11TijviGpbGOti Zgw3G0SGSMG2rufW6tQ+YRf0T/jRJHI+VndpQINg5PMPnfcA5vdozNdmKwIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFLqWk9ND44SOZzXeGV2G/2hs+xSkMB8GA1UdIwQY MBaAFOqLLNEfhZh4mFR0UMkheBH83qKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNm9zczBSLUZtSGlZVkhSUXlTRjRFZnplb29zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8xZmY3ZWEtYmMxMy00YjU0LTg5OGQt MWQxY2QyMTUyNzVkLzEvdXBhVDAwUGpoSTVuTmQ0WlhZYl9hR3o3RktRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8xZmY3ZWEtYmMxMy00YjU0LTg5OGQtMWQxY2QyMTUyNzVk LzEvNm9zczBSLUZtSGlZVkhSUXlTRjRFZnplb29zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQFUR7gAwQE XbkwAwQFX61AAwQEbe4gAwQG1cPAAwQF2UKgMA0EAgACMAcDBQAqAgVwMA0GCSqG SIb3DQEBCwUAA4IBAQCmvRVbLpuhy9lvndTXtALo4b8WnLYDiN647JVTtR6kIL+w 2FmDsxHrG3yX+w4o2DuIQWGQMAQin0/VmjNp+asyicFXaehyRZjHLCItaukmH8BQ EmL7Js/M3BduygTnb3jH7c9TWldcQccLvchOL3pmVNL3DtlwXXoAZhhFAaH/SuVT i5/ZkuRZqYMcRRvQ8puX3chJJ8wcSik9p1ptB83hWK4YLz8tVMnlec773+dE2Bjc Kd7k/fUUQ+nrHYy2ZrMXvM5WVsKJSYCxN7AFrdfu6xsHlyrQetyQZe0UisaxW7An guCGVnF3/KJDObA+Z5svf3YHpeUHPfr60Yc2040x -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:39 2026 by rpki-client