This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/uOdM0HaYrm9ssDjW8FvHnuA2ea0.roa File: uOdM0HaYrm9ssDjW8FvHnuA2ea0.roa (raw, json) Hash identifier: 61P08wU4MuXomQI9LNTPbGuYgSvHUpRRhzxSAPpCJWk= Subject key identifier: B8:E7:4C:D0:76:98:AE:6F:6C:B0:38:D6:F0:5B:C7:9E:E0:36:79:AD Certificate issuer: /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d Certificate serial: 019B7835083C37AF22DF89A748BAABC0417E Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/uOdM0HaYrm9ssDjW8FvHnuA2ea0.roa Signing time: Thu 01 Jan 2026 06:18:19 +0000 ROA not before: Thu 01 Jan 2026 06:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34665 IP address blocks: 89.19.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:08:3c:37:af:22:df:89:a7:48:ba:ab:c0:41:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d Validity Not Before: Jan 1 06:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8e74cd07698ae6f6cb038d6f05bc79ee03679ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:02:a4:4b:69:64:16:2c:d9:9a:a3:e0:67:ef: 99:d4:52:d0:fe:0f:38:12:ab:ce:f3:4f:45:ea:49: 94:92:4a:d2:0c:da:bd:3a:65:70:13:d8:1c:1b:b9: 88:17:ec:04:89:5c:b4:c8:a8:32:0f:83:87:e4:f5: 60:a2:5f:2f:68:42:21:7e:d8:02:56:a8:be:a9:8a: 98:3b:17:b9:e7:c0:1f:6e:c8:a0:a2:95:8d:97:e2: 08:a5:50:32:1d:88:b5:e4:a3:15:03:1e:ae:e9:85: 3c:1d:3a:6a:17:80:49:2c:2e:87:da:20:08:fe:08: 36:fd:ac:7d:8f:50:73:97:fd:48:30:91:91:e9:0e: 8e:ca:2e:37:e2:f7:00:a4:6d:38:5e:45:ee:7e:32: 93:14:7d:ad:09:33:5b:1a:6b:dd:00:5e:55:65:fb: 55:9c:18:1b:3a:18:1f:c1:da:43:78:69:1d:f2:56: f2:2a:94:f2:03:8f:09:18:9b:c9:33:8e:03:4a:16: 47:98:39:ef:f1:43:f6:07:aa:98:79:00:64:66:53: 38:99:76:77:00:8a:d7:dd:c9:b0:f0:b0:24:49:b6: 79:0b:fe:30:3d:da:59:4a:f1:fc:75:02:63:37:1d: 8f:a8:89:68:b5:b5:d4:67:58:c8:68:89:35:ef:96: 84:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E7:4C:D0:76:98:AE:6F:6C:B0:38:D6:F0:5B:C7:9E:E0:36:79:AD X509v3 Authority Key Identifier: keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/uOdM0HaYrm9ssDjW8FvHnuA2ea0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.19.218.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:f5:75:71:52:56:d5:2f:74:ff:d2:f2:4e:c8:b5:73:5a:18: 76:3a:6a:06:68:7b:7a:2d:32:f9:9a:69:fd:a0:f7:83:bd:a5: 55:62:be:8f:40:69:8e:fb:b1:30:57:fb:8f:c1:1a:24:e0:da: f4:5b:4f:48:70:c9:30:4e:01:d1:be:74:42:f7:11:7e:51:12: 2f:d3:fc:7a:67:b3:30:40:ab:3c:3b:ed:23:36:65:87:0d:9e: 48:14:43:0a:a4:d8:7c:65:6a:96:91:93:25:c2:27:3f:86:1c: fb:f5:f7:f0:5d:25:ea:cb:fa:ed:76:62:53:b2:0b:1b:54:b6: fa:c5:bb:78:5b:e1:8a:23:04:a4:19:69:ab:6b:dc:93:ef:93: 8d:66:22:f6:9a:bd:8f:d5:bf:b1:e1:2a:bf:fc:05:d6:6a:1b: 79:ad:4c:26:11:b6:a2:8d:9f:f3:c4:d3:cc:bc:f7:e7:2b:98: c1:a7:fc:b0:a2:01:79:1c:f3:7d:df:8c:0e:5c:9f:a0:a8:bb: 96:4a:24:b9:28:b3:46:89:7d:d0:00:d8:1b:f1:af:22:f1:ba: 13:e8:6a:ed:38:a8:34:59:2c:82:f3:af:75:43:18:27:a4:ce: ab:0d:5e:e4:ec:8c:d5:7a:19:a7:72:19:fe:5d:31:a0:4b:72: de:b3:52:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NQg8N68i34mnSLqrwEF+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZWJiNjkxYjI0ZjI4NzkyNTNlM2E2YTQ1ZTBiNWM1MjY3 M2IwOWQwHhcNMjYwMTAxMDYxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGU3NGNkMDc2OThhZTZmNmNiMDM4ZDZmMDViYzc5ZWUwMzY3OWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AKkS2lkFizZmqPgZ++Z1FLQ/g84 EqvO809F6kmUkkrSDNq9OmVwE9gcG7mIF+wEiVy0yKgyD4OH5PVgol8vaEIhftgC Vqi+qYqYOxe558AfbsigopWNl+IIpVAyHYi15KMVAx6u6YU8HTpqF4BJLC6H2iAI /gg2/ax9j1Bzl/1IMJGR6Q6Oyi434vcApG04XkXufjKTFH2tCTNbGmvdAF5VZftV nBgbOhgfwdpDeGkd8lbyKpTyA48JGJvJM44DShZHmDnv8UP2B6qYeQBkZlM4mXZ3 AIrX3cmw8LAkSbZ5C/4wPdpZSvH8dQJjNx2PqIlotbXUZ1jIaIk175aEJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLjnTNB2mK5vbLA41vBbx57gNnmtMB8GA1UdIwQY MBaAFC7rtpGyTyh5JT46akXgtcUmc7CdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAt ZGEzZTExOTJjZGY2LzEvdU9kTTBIYVlybTlzc0RqVzhGdkhudUEyZWEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAtZGEzZTExOTJjZGY2 LzEvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRPaMA0G CSqGSIb3DQEBCwUAA4IBAQCM9XVxUlbVL3T/0vJOyLVzWhh2OmoGaHt6LTL5mmn9 oPeDvaVVYr6PQGmO+7EwV/uPwRok4Nr0W09IcMkwTgHRvnRC9xF+URIv0/x6Z7Mw QKs8O+0jNmWHDZ5IFEMKpNh8ZWqWkZMlwic/hhz79ffwXSXqy/rtdmJTsgsbVLb6 xbt4W+GKIwSkGWmra9yT75ONZiL2mr2P1b+x4Sq//AXWaht5rUwmEbaijZ/zxNPM vPfnK5jBp/ywogF5HPN934wOXJ+gqLuWSiS5KLNGiX3QANgb8a8i8boT6GrtOKg0 WSyC8691QxgnpM6rDV7k7IzVehmnchn+XTGgS3Les1Kr -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:22 2026 by rpki-client