This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/uNs7lPFNPshEKIeKrT9kYzvj6PU.roa File: uNs7lPFNPshEKIeKrT9kYzvj6PU.roa (raw, json) Hash identifier: 1d4TVLPu2hGqSAh+/9a4WZpxJbG8fGNAEg4csKG4Azw= Subject key identifier: B8:DB:3B:94:F1:4D:3E:C8:44:28:87:8A:AD:3F:64:63:3B:E3:E8:F5 Certificate issuer: /CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e Certificate serial: 019B7FF2874DAD574D45E98970921B43BBB2 Authority key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/uNs7lPFNPshEKIeKrT9kYzvj6PU.roa Signing time: Fri 02 Jan 2026 18:22:39 +0000 ROA not before: Fri 02 Jan 2026 18:22:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209576 IP address blocks: 91.132.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:87:4d:ad:57:4d:45:e9:89:70:92:1b:43:bb:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e Validity Not Before: Jan 2 18:22:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8db3b94f14d3ec84428878aad3f64633be3e8f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2c:2d:4e:7d:bd:ca:11:77:2b:1c:55:fe:e6: 8a:92:ff:1f:9d:ee:ae:2d:b4:0c:c1:f8:a3:6b:f7: 28:ba:af:fa:e9:91:c6:23:07:e0:8e:fb:ed:cf:b1: 00:30:fc:85:1e:f6:20:6d:9b:68:8c:6e:a8:f9:ef: dd:61:77:ad:66:86:7e:a2:dd:51:a9:57:d9:9f:bb: 25:fd:54:90:81:e5:b1:80:cf:ba:21:c2:d2:be:38: 9a:35:41:9b:a4:e2:79:fc:de:2a:cb:92:cb:33:66: 8b:47:f5:8e:97:fb:43:3d:32:75:f8:69:18:57:0f: 44:15:4b:06:e7:18:cc:0a:5c:91:56:5d:e7:4a:75: c1:d1:1a:41:bf:50:e7:22:b8:95:18:2d:62:43:c1: 00:fd:8b:9d:12:5e:7b:a0:c6:cf:a4:ca:6d:ec:e7: 4c:70:06:5c:d6:21:0c:ab:d6:8b:31:14:a0:70:59: e1:aa:65:50:be:28:6b:a0:a8:b3:6e:19:95:72:1d: f3:77:14:92:6e:e1:20:9f:cc:e7:b4:b4:63:bf:f1: 9a:78:95:40:e6:f0:84:0b:23:eb:2d:34:cc:90:4d: 7b:04:c0:7c:b1:19:42:97:93:b9:18:56:4a:ad:52: 15:5f:a7:32:2f:e4:2f:ac:59:bb:bd:65:8e:d3:17: 07:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DB:3B:94:F1:4D:3E:C8:44:28:87:8A:AD:3F:64:63:3B:E3:E8:F5 X509v3 Authority Key Identifier: keyid:10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/uNs7lPFNPshEKIeKrT9kYzvj6PU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.132.66.0/24 Signature Algorithm: sha256WithRSAEncryption c3:4f:c6:b6:4b:f4:65:d2:80:e3:39:da:a9:e0:a5:54:43:86: d8:da:70:23:a1:12:6f:09:65:0d:e9:2f:5a:5a:2f:77:e7:de: f1:b1:90:cb:9e:38:91:0c:ba:48:6c:28:fb:d1:7e:d6:94:db: f9:e7:a6:b2:ea:08:f7:77:58:3f:d0:67:cb:a4:d3:27:cd:00: d4:48:44:6c:30:17:ad:52:0e:53:70:e5:ea:60:7f:a8:83:72: ea:d4:42:a4:6b:45:f9:2b:10:50:51:06:5f:85:73:18:fa:ae: 02:cc:69:0e:dd:3b:07:24:be:cc:bc:2c:cd:53:ba:16:7e:47: 9f:f4:d7:c1:94:da:b5:34:bd:ca:eb:84:83:e6:7d:2b:1d:a1: 18:3b:75:32:d9:a2:ab:78:60:21:13:3a:c3:d3:42:06:f3:cd: 23:bb:90:bb:c2:0d:5c:8f:9e:de:50:3c:cc:73:0e:c6:dd:e5: 1c:30:49:b7:da:2c:18:b5:66:7b:ba:2a:3e:6b:54:ff:9b:00: 1c:6a:bd:d2:ba:e9:9d:51:02:bf:a8:1b:56:6f:81:0f:b0:d3: b8:e1:de:f5:cc:e3:e7:c5:68:53:68:20:94:04:e9:c6:06:e5: b9:36:9e:ba:b0:8c:f4:87:80:9c:97:45:4a:22:2f:3b:84:e7: 7b:db:75:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8odNrVdNRemJcJIbQ7uyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNzMxMmE1MDE2YTNjZGNjMGI3ZTYxZGM3OWY1NWQzZDVl Y2IzN2UwHhcNMjYwMTAyMTgyMjM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGRiM2I5NGYxNGQzZWM4NDQyODg3OGFhZDNmNjQ2MzNiZTNlOGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliwtTn29yhF3KxxV/uaKkv8fne6u LbQMwfija/couq/66ZHGIwfgjvvtz7EAMPyFHvYgbZtojG6o+e/dYXetZoZ+ot1R qVfZn7sl/VSQgeWxgM+6IcLSvjiaNUGbpOJ5/N4qy5LLM2aLR/WOl/tDPTJ1+GkY Vw9EFUsG5xjMClyRVl3nSnXB0RpBv1DnIriVGC1iQ8EA/YudEl57oMbPpMpt7OdM cAZc1iEMq9aLMRSgcFnhqmVQvihroKizbhmVch3zdxSSbuEgn8zntLRjv/GaeJVA 5vCECyPrLTTMkE17BMB8sRlCl5O5GFZKrVIVX6cyL+QvrFm7vWWO0xcH1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLjbO5TxTT7IRCiHiq0/ZGM74+j1MB8GA1UdIwQY MBaAFBBzEqUBajzcwLfmHcefVdPV7LN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUhNU3BRRnFQTnpBdC1ZZHg1OVYwOVhzczM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC85OWY1YzMtNmI3NS00OGJjLWE4YWEt M2ZkYmE5NzY5MzAyLzEvdU5zN2xQRk5Qc2hFS0llS3JUOWtZenZqNlBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC85OWY1YzMtNmI3NS00OGJjLWE4YWEtM2ZkYmE5NzY5MzAy LzEvRUhNU3BRRnFQTnpBdC1ZZHg1OVYwOVhzczM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW4RCMA0G CSqGSIb3DQEBCwUAA4IBAQDDT8a2S/Rl0oDjOdqp4KVUQ4bY2nAjoRJvCWUN6S9a Wi93597xsZDLnjiRDLpIbCj70X7WlNv556ay6gj3d1g/0GfLpNMnzQDUSERsMBet Ug5TcOXqYH+og3Lq1EKka0X5KxBQUQZfhXMY+q4CzGkO3TsHJL7MvCzNU7oWfkef 9NfBlNq1NL3K64SD5n0rHaEYO3Uy2aKreGAhEzrD00IG880ju5C7wg1cj57eUDzM cw7G3eUcMEm32iwYtWZ7uio+a1T/mwAcar3SuumdUQK/qBtWb4EPsNO44d71zOPn xWhTaCCUBOnGBuW5Np66sIz0h4Ccl0VKIi87hOd723Ut -----END CERTIFICATE-----Generated at Mon Jan 26 04:42:35 2026 by rpki-client