This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/UvgyBgOzHTQDzWi6cnHA2njdpvM.roa File: UvgyBgOzHTQDzWi6cnHA2njdpvM.roa (raw, json) Hash identifier: xdpWkWkyRuQL/K7aVANN7k1/VR0FGdYagQBYTL/qVNY= Subject key identifier: 52:F8:32:06:03:B3:1D:34:03:CD:68:BA:72:71:C0:DA:78:DD:A6:F3 Certificate issuer: /CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9 Certificate serial: 019B7AC8A19379233DBC3AFC72C6C349A9F7 Authority key identifier: 17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/UvgyBgOzHTQDzWi6cnHA2njdpvM.roa Signing time: Thu 01 Jan 2026 18:18:47 +0000 ROA not before: Thu 01 Jan 2026 18:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47951 IP address blocks: 91.103.136.0/24 maxlen: 24 2a13:1d40::/30 maxlen: 30 2a13:1d44::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.mft rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a1:93:79:23:3d:bc:3a:fc:72:c6:c3:49:a9:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9 Validity Not Before: Jan 1 18:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52f8320603b31d3403cd68ba7271c0da78dda6f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f4:64:bd:43:ee:e6:1c:28:4e:f6:f0:4c:6c: ff:f3:68:5e:7e:9c:cf:09:1e:76:7e:11:ad:7e:f9: 57:e4:81:6a:26:ef:33:c3:15:18:97:51:04:a3:0d: af:57:80:de:de:85:ba:45:09:d1:f4:54:ef:b2:54: 06:5a:ce:5d:29:ca:c3:2f:dd:3a:51:ea:97:f1:ed: 67:b1:bb:8b:4b:e4:c0:38:2b:cf:3b:6d:e5:a1:04: ae:3e:56:67:9d:6b:e1:e5:cc:d4:da:33:13:36:90: 22:d8:14:da:6b:4f:64:bf:f8:25:d1:e7:5b:72:55: e7:ee:cc:14:f3:97:a2:ac:4d:65:48:d2:11:46:7a: 4a:9a:46:db:39:60:8d:8b:62:d5:0a:98:95:0d:11: 70:53:8f:a1:8a:11:d0:b8:7c:40:72:71:cd:a3:a5: d1:0c:ca:4a:77:bd:2f:c7:83:0a:a5:d8:2d:4e:1b: a6:cb:e4:b3:12:d3:ee:fe:b4:24:b6:3e:b0:52:15: 21:c9:0b:97:32:77:4c:c1:83:e4:0e:00:5d:c6:66: 8a:7b:60:b9:f2:b4:0f:c3:e4:15:d8:af:62:49:ba: 90:cd:6f:a0:25:49:1f:99:e6:cb:99:c1:75:ca:0a: 99:af:09:da:51:b5:5c:20:eb:37:ab:25:b4:8b:f0: 99:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F8:32:06:03:B3:1D:34:03:CD:68:BA:72:71:C0:DA:78:DD:A6:F3 X509v3 Authority Key Identifier: keyid:17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/UvgyBgOzHTQDzWi6cnHA2njdpvM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.103.136.0/24 IPv6: 2a13:1d40::/29 Signature Algorithm: sha256WithRSAEncryption 43:1c:2d:ec:18:e9:0f:58:07:0d:44:55:ca:48:c5:00:df:8c: de:27:86:24:c8:07:32:52:de:9b:69:ab:19:49:0c:8f:60:f9: 5f:3a:ec:fd:fd:61:77:ff:9e:31:51:69:ba:84:6c:f9:66:fd: 96:cd:02:30:a9:da:e3:a1:02:f2:36:95:8d:0e:f4:a9:8f:b6: 6e:a5:cc:53:34:24:f6:14:da:5b:42:86:4c:b1:ca:19:19:67: e3:8c:6e:3e:2c:31:e8:d6:05:30:80:a1:f1:83:38:c2:1d:d7: d8:6e:37:7a:f7:82:c5:b5:4b:c9:87:c7:ab:4d:69:47:0f:f3: 00:fc:34:f3:fd:26:7e:32:b7:bb:b8:ca:e0:15:6b:43:7f:49: e5:61:23:77:63:34:3c:8f:72:c9:44:55:84:0d:b4:86:98:ef: 8a:65:b0:da:32:25:bc:b9:ad:c2:95:d8:8c:df:66:20:39:5b: 37:6b:79:5f:60:8b:d8:16:51:7c:90:4c:45:0c:8b:35:c6:20: a3:a1:9d:66:50:64:9c:2b:db:19:d7:9d:72:81:ec:ef:75:19: 1c:85:19:b4:ed:49:3e:df:96:40:bb:23:31:4a:95:73:9f:ad: 21:1f:98:9c:f5:d6:6e:62:17:ed:b6:d6:c0:5a:66:61:bd:de: e6:e7:d9:c9 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yKGTeSM9vDr8csbDSan3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MzJmMzM0ZDhhYmI2OGVmODIyNTQ2ZDhmNmY4ZTgxNTYz YzZmZDkwHhcNMjYwMTAxMTgxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmY4MzIwNjAzYjMxZDM0MDNjZDY4YmE3MjcxYzBkYTc4ZGRhNmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/RkvUPu5hwoTvbwTGz/82hefpzP CR52fhGtfvlX5IFqJu8zwxUYl1EEow2vV4De3oW6RQnR9FTvslQGWs5dKcrDL906 UeqX8e1nsbuLS+TAOCvPO23loQSuPlZnnWvh5czU2jMTNpAi2BTaa09kv/gl0edb clXn7swU85eirE1lSNIRRnpKmkbbOWCNi2LVCpiVDRFwU4+hihHQuHxAcnHNo6XR DMpKd70vx4MKpdgtThumy+SzEtPu/rQktj6wUhUhyQuXMndMwYPkDgBdxmaKe2C5 8rQPw+QV2K9iSbqQzW+gJUkfmebLmcF1ygqZrwnaUbVcIOs3qyW0i/CZJQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFL4MgYDsx00A81ounJxwNp43abzMB8GA1UdIwQY MBaAFBcy8zTYq7aO+CJUbY9vjoFWPG/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnpMek5OaXJ0bzc0SWxSdGoyLU9nVlk4YjlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83YmM4ZGEtY2I4Mi00YWJjLWIyZjAt MTNiNGI4MGM1NGJhLzEvVXZneUJnT3pIVFFEeldpNmNuSEEybmpkcHZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC83YmM4ZGEtY2I4Mi00YWJjLWIyZjAtMTNiNGI4MGM1NGJh LzEvRnpMek5OaXJ0bzc0SWxSdGoyLU9nVlk4YjlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW2eIMA0E AgACMAcDBQMqEx1AMA0GCSqGSIb3DQEBCwUAA4IBAQBDHC3sGOkPWAcNRFXKSMUA 34zeJ4YkyAcyUt6baasZSQyPYPlfOuz9/WF3/54xUWm6hGz5Zv2WzQIwqdrjoQLy NpWNDvSpj7ZupcxTNCT2FNpbQoZMscoZGWfjjG4+LDHo1gUwgKHxgzjCHdfYbjd6 94LFtUvJh8erTWlHD/MA/DTz/SZ+Mre7uMrgFWtDf0nlYSN3YzQ8j3LJRFWEDbSG mO+KZbDaMiW8ua3CldiM32YgOVs3a3lfYIvYFlF8kExFDIs1xiCjoZ1mUGScK9sZ 151ygezvdRkchRm07Uk+35ZAuyMxSpVzn60hH5ic9dZuYhftttbAWmZhvd7m59nJ -----END CERTIFICATE-----Generated at Mon Jan 26 14:43:23 2026 by rpki-client