This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Ueee4jtIzb9zFE7TdxtoZOrgjzU.roa File: Ueee4jtIzb9zFE7TdxtoZOrgjzU.roa (raw, json) Hash identifier: HSgAoXCQNW8WXNhCayLcTS0W+5w6TAS0F8HGV+OwgK8= Subject key identifier: 51:E7:9E:E2:3B:48:CD:BF:73:14:4E:D3:77:1B:68:64:EA:E0:8F:35 Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F854270C51E17EC1BBFD29831D45C67 Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Ueee4jtIzb9zFE7TdxtoZOrgjzU.roa Signing time: Fri 02 Jan 2026 16:23:18 +0000 ROA not before: Fri 02 Jan 2026 16:23:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204300 IP address blocks: 91.242.75.0/24 maxlen: 24 194.35.52.0/22 maxlen: 24 195.138.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:42:70:c5:1e:17:ec:1b:bf:d2:98:31:d4:5c:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51e79ee23b48cdbf73144ed3771b6864eae08f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:00:79:c0:18:ea:ae:1e:79:5d:24:70:59:87: 48:72:72:cf:43:0e:0c:88:6d:47:68:c2:1c:c4:92: 07:a9:c4:07:ca:d4:18:d3:d5:92:44:90:31:12:36: 2b:df:39:30:c0:dd:39:15:4f:31:9e:fe:73:de:4a: 48:99:fc:1e:6b:0a:d7:07:6d:54:05:de:85:a0:c4: 6d:f0:38:23:61:dc:18:f6:e9:b4:c2:e4:c8:e1:7e: ea:e0:56:97:e4:9e:df:ef:6c:18:1f:9f:5d:f2:25: 80:8c:20:08:11:10:db:f2:e3:27:1d:39:0a:80:6f: 33:7d:16:e1:bb:74:46:a6:ec:25:8d:5e:88:15:ca: 2c:bf:47:9c:49:ef:59:65:9a:96:69:b6:c7:6f:ca: 1d:21:72:a9:50:40:98:0f:1f:05:2b:4b:28:b6:e1: 43:23:aa:d7:78:03:45:da:1b:e1:62:52:8c:4a:6a: 7f:f0:53:5b:14:9b:10:8e:0a:9b:fe:dd:d2:7e:66: bb:98:1b:b5:7b:d0:67:30:6f:02:3e:2e:6b:ad:42: 07:b8:c0:24:7e:e8:6d:35:96:10:eb:07:a5:41:b8: 52:38:74:e6:e8:2c:8c:fb:45:16:45:f3:c9:b3:a5: d9:70:7d:0b:58:c0:59:78:ff:87:c9:a4:e6:bd:a1: c8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E7:9E:E2:3B:48:CD:BF:73:14:4E:D3:77:1B:68:64:EA:E0:8F:35 X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Ueee4jtIzb9zFE7TdxtoZOrgjzU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.242.75.0/24 194.35.52.0/22 195.138.118.0/24 Signature Algorithm: sha256WithRSAEncryption 84:f6:dc:e7:70:da:93:64:76:a1:bb:2d:57:56:f3:5a:ad:5b: 53:44:23:b4:7b:0f:aa:82:bf:b6:85:b8:5c:30:f3:b0:0e:ae: d4:aa:5e:3e:d6:d4:a1:1d:63:87:37:9c:85:5b:4b:ad:82:af: bd:33:46:3f:5b:21:24:ff:89:87:88:1a:37:97:79:44:3c:fd: 6d:d0:a7:d9:d8:bc:63:7f:81:ef:2b:81:e7:89:c6:3b:30:75: 4f:9f:94:49:fb:dd:35:24:86:f1:2d:fc:96:61:a3:9e:d3:bb: 0e:65:50:b7:4a:44:d7:24:f2:29:a0:4d:2e:59:77:b6:ce:98: 4f:7f:c0:1a:c7:78:55:28:ef:75:a8:fe:e5:7e:94:4e:b3:ef: 91:18:4b:61:fa:a6:54:8b:ba:84:6e:07:1f:c8:e9:14:9c:b7: b6:f2:42:c1:3d:13:f8:07:84:51:41:9f:77:63:05:7a:6d:b3: 73:4a:6a:f0:07:e3:0c:98:79:97:69:7d:cc:4c:5a:b8:03:f3: 8c:94:6e:eb:53:6f:ce:e8:ce:d2:ce:65:11:6a:20:2d:fb:5e: cb:04:bf:3b:90:0e:a9:df:f2:3d:c1:bc:52:0b:1e:f9:26:48: e6:2c:ef:bf:ed:8f:6d:c7:60:6c:41:ed:58:d4:5a:8d:71:ac: ea:b1:cc:c0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hUJwxR4X7Bu/0pgx1FxnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWU3OWVlMjNiNDhjZGJmNzMxNDRlZDM3NzFiNjg2NGVhZTA4ZjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAB5wBjqrh55XSRwWYdIcnLPQw4M iG1HaMIcxJIHqcQHytQY09WSRJAxEjYr3zkwwN05FU8xnv5z3kpImfweawrXB21U Bd6FoMRt8DgjYdwY9um0wuTI4X7q4FaX5J7f72wYH59d8iWAjCAIERDb8uMnHTkK gG8zfRbhu3RGpuwljV6IFcosv0ecSe9ZZZqWabbHb8odIXKpUECYDx8FK0sotuFD I6rXeANF2hvhYlKMSmp/8FNbFJsQjgqb/t3Sfma7mBu1e9BnMG8CPi5rrUIHuMAk fuhtNZYQ6welQbhSOHTm6CyM+0UWRfPJs6XZcH0LWMBZeP+HyaTmvaHI/QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFHnnuI7SM2/cxRO03cbaGTq4I81MB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvVWVlZTRqdEl6Yjl6RkU3VGR4dG9aT3JnanpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW/JLAwQC wiM0AwQAw4p2MA0GCSqGSIb3DQEBCwUAA4IBAQCE9tzncNqTZHahuy1XVvNarVtT RCO0ew+qgr+2hbhcMPOwDq7Uql4+1tShHWOHN5yFW0utgq+9M0Y/WyEk/4mHiBo3 l3lEPP1t0KfZ2Lxjf4HvK4HnicY7MHVPn5RJ+901JIbxLfyWYaOe07sOZVC3SkTX JPIpoE0uWXe2zphPf8Aax3hVKO91qP7lfpROs++RGEth+qZUi7qEbgcfyOkUnLe2 8kLBPRP4B4RRQZ93YwV6bbNzSmrwB+MMmHmXaX3MTFq4A/OMlG7rU2/O6M7SzmUR aiAt+17LBL87kA6p3/I9wbxSCx75JkjmLO+/7Y9tx2BsQe1Y1FqNcazqsczA -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:17 2026 by rpki-client