This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/uwtLJFpRqIxSyEsmetJYpEp7D-8.roa File: uwtLJFpRqIxSyEsmetJYpEp7D-8.roa (raw, json) Hash identifier: bQ1x2vhBt39hjMm9WcBFuXmb8kxlKwL4lJ5Ll87ZxmI= Subject key identifier: BB:0B:4B:24:5A:51:A8:8C:52:C8:4B:26:7A:D2:58:A4:4A:7B:0F:EF Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Certificate serial: 019B7910080B757EAF319592DF3858B1C3EE Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/uwtLJFpRqIxSyEsmetJYpEp7D-8.roa Signing time: Thu 01 Jan 2026 10:17:32 +0000 ROA not before: Thu 01 Jan 2026 10:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212107 IP address blocks: 78.142.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:08:0b:75:7e:af:31:95:92:df:38:58:b1:c3:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Validity Not Before: Jan 1 10:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb0b4b245a51a88c52c84b267ad258a44a7b0fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:20:28:76:47:63:45:78:49:9d:51:86:ae:b9: a3:ea:63:58:27:bf:f8:15:b4:8c:65:99:bb:8c:dc: 06:fe:b0:fe:37:76:2d:f6:88:11:ae:14:f6:d3:f9: 75:74:3d:f0:90:4e:57:57:ba:fe:f8:31:76:ed:99: 3d:38:b6:cf:ef:c7:63:32:e2:9f:cf:66:ad:da:27: 79:89:c9:4c:39:e5:c5:d4:76:e0:23:b6:9d:33:2f: a8:41:56:88:32:d7:a8:f0:18:44:ce:63:c3:cb:67: b0:2a:e1:21:b1:d0:a5:47:c0:fb:d0:e0:44:cf:81: de:43:a7:da:46:88:f7:bd:c2:9d:ac:4a:49:c4:35: 11:4a:16:1f:62:5d:2f:3f:1f:f0:96:4d:c8:ab:79: 5d:0c:7b:d9:de:0e:3d:df:7a:77:10:c0:4c:79:46: 4d:a1:45:20:48:a0:a1:6b:a4:04:f0:57:fd:29:40: 60:d5:7e:e3:b5:77:0d:33:14:f2:2a:93:68:75:f3: 0b:9b:a6:b6:f0:d1:b4:d3:6a:b9:fa:7f:e5:09:5c: 88:b1:41:9a:66:10:3d:8d:9d:77:80:31:c2:a3:92: 91:65:3e:7f:8f:73:68:95:90:a9:c4:89:02:1b:f1: eb:e1:3d:64:70:e0:14:6f:54:c6:09:8f:75:31:5c: 4d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:0B:4B:24:5A:51:A8:8C:52:C8:4B:26:7A:D2:58:A4:4A:7B:0F:EF X509v3 Authority Key Identifier: keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/uwtLJFpRqIxSyEsmetJYpEp7D-8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.142.249.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:41:1a:f7:29:ae:b4:45:4a:cc:aa:b2:f7:4d:fc:4e:38:94: a1:49:e1:04:a4:43:6e:68:41:95:32:dc:d1:d3:00:5b:33:e3: 82:57:74:23:cb:38:d7:01:94:27:98:a6:4f:03:f4:62:88:36: 7b:3d:f6:f6:26:c1:c7:19:5b:e7:0d:ec:d1:c5:1f:2a:75:db: fa:21:27:91:15:dd:22:51:7e:c7:dc:da:f2:89:f6:59:fa:02: 11:de:87:e0:b2:16:a0:57:2f:e2:9a:8d:42:b4:51:22:fc:6c: 97:1d:08:09:80:13:46:13:ac:82:ee:84:79:d5:75:19:cb:8c: 4b:89:c1:f0:e2:30:33:06:98:53:c9:e1:25:e7:03:1b:ee:21: 31:13:e3:f8:f5:8b:af:5f:64:4b:30:de:83:e9:15:26:48:52: 00:74:37:db:de:9b:e1:8d:c3:55:76:47:38:05:25:bf:c1:36: 10:ba:2b:4e:f0:ac:71:bc:69:3e:3f:82:b2:bc:6e:19:41:b8: 98:4f:11:ab:cf:2f:9c:cb:03:37:10:54:f2:5e:90:19:26:b9: 0d:56:b8:e3:69:dd:40:97:5f:1a:e7:1a:7b:d3:e4:06:4d:31: e5:78:eb:68:56:b5:76:83:18:1a:86:3f:5d:ac:c0:19:4b:26: 1c:0d:91:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EAgLdX6vMZWS3zhYscPuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh ODBlOWUwHhcNMjYwMTAxMTAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjBiNGIyNDVhNTFhODhjNTJjODRiMjY3YWQyNThhNDRhN2IwZmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyAodkdjRXhJnVGGrrmj6mNYJ7/4 FbSMZZm7jNwG/rD+N3Yt9ogRrhT20/l1dD3wkE5XV7r++DF27Zk9OLbP78djMuKf z2at2id5iclMOeXF1HbgI7adMy+oQVaIMteo8BhEzmPDy2ewKuEhsdClR8D70OBE z4HeQ6faRoj3vcKdrEpJxDURShYfYl0vPx/wlk3Iq3ldDHvZ3g4933p3EMBMeUZN oUUgSKCha6QE8Ff9KUBg1X7jtXcNMxTyKpNodfMLm6a28NG002q5+n/lCVyIsUGa ZhA9jZ13gDHCo5KRZT5/j3NolZCpxIkCG/Hr4T1kcOAUb1TGCY91MVxNmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLsLSyRaUaiMUshLJnrSWKRKew/vMB8GA1UdIwQY MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt OWU3MWRjMjRhNjgzLzEvdXd0TEpGcFJxSXhTeUVzbWV0SllwRXA3RC04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATo75MA0G CSqGSIb3DQEBCwUAA4IBAQBaQRr3Ka60RUrMqrL3TfxOOJShSeEEpENuaEGVMtzR 0wBbM+OCV3QjyzjXAZQnmKZPA/RiiDZ7Pfb2JsHHGVvnDezRxR8qddv6ISeRFd0i UX7H3NryifZZ+gIR3ofgshagVy/imo1CtFEi/GyXHQgJgBNGE6yC7oR51XUZy4xL icHw4jAzBphTyeEl5wMb7iExE+P49YuvX2RLMN6D6RUmSFIAdDfb3pvhjcNVdkc4 BSW/wTYQuitO8KxxvGk+P4KyvG4ZQbiYTxGrzy+cywM3EFTyXpAZJrkNVrjjad1A l18a5xp70+QGTTHleOtoVrV2gxgahj9drMAZSyYcDZF5 -----END CERTIFICATE-----Generated at Sun Jan 25 16:38:01 2026 by rpki-client