This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/UzSlGTe0E4r2h3-mqwUsXA6tkW4.roa File: UzSlGTe0E4r2h3-mqwUsXA6tkW4.roa (raw, json) Hash identifier: 3NTHI+VFb0fZ77Mu9ozHFottk1f/uLdKjfthkLLIXP8= Subject key identifier: 53:34:A5:19:37:B4:13:8A:F6:87:7F:A6:AB:05:2C:5C:0E:AD:91:6E Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Certificate serial: 019B7BA3224526851D28992AAD1629E389AB Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/UzSlGTe0E4r2h3-mqwUsXA6tkW4.roa Signing time: Thu 01 Jan 2026 22:17:27 +0000 ROA not before: Thu 01 Jan 2026 22:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 77.91.67.0/24 maxlen: 24 77.91.71.0/24 maxlen: 24 77.91.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:22:45:26:85:1d:28:99:2a:ad:16:29:e3:89:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Validity Not Before: Jan 1 22:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5334a51937b4138af6877fa6ab052c5c0ead916e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ef:66:84:ab:b5:80:d3:8f:58:90:6c:c4:bc: 4b:de:3f:d7:af:33:39:30:33:46:ae:4e:9a:e6:69: d6:e6:73:4d:b2:07:11:4d:32:2b:35:0c:5c:c3:7e: 81:80:2b:27:b6:24:8f:91:49:80:fb:9c:6b:85:7f: bb:24:9b:8a:6b:52:75:34:1c:f8:5c:2d:fc:57:3e: e8:02:f1:cd:70:2c:34:b9:95:2a:b4:3d:0e:73:96: fe:19:55:08:65:4d:e3:aa:1e:8f:7c:cb:e1:9e:73: b1:6c:bf:54:cc:57:af:a5:8b:58:35:05:aa:8a:02: 96:14:bd:c1:ad:67:99:e4:8f:f7:6f:03:c7:26:cf: d7:e4:e5:1f:02:5f:82:fe:fc:27:3c:82:c1:ed:01: cd:be:df:81:3c:3e:b5:c2:5a:53:2f:e3:bf:53:1b: a2:81:d2:32:93:37:02:8e:7d:a1:1d:7e:a2:1c:fa: a2:69:7a:30:8b:91:f0:b4:4a:10:2b:2b:3e:81:ce: ad:12:a5:79:a2:51:32:a9:9f:a4:9c:0d:57:c3:c5: f7:f7:7b:04:50:48:1f:44:a3:8e:32:52:e4:96:cb: 78:33:83:48:c6:20:6b:5a:54:42:0a:75:8a:1a:99: dc:22:7b:c7:2a:9b:6f:fc:7e:eb:e8:da:cb:af:8e: 8f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:34:A5:19:37:B4:13:8A:F6:87:7F:A6:AB:05:2C:5C:0E:AD:91:6E X509v3 Authority Key Identifier: keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/UzSlGTe0E4r2h3-mqwUsXA6tkW4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.91.67.0/24 77.91.71.0/24 77.91.79.0/24 Signature Algorithm: sha256WithRSAEncryption 56:45:e3:88:f6:0b:ac:c4:82:ce:36:54:f7:cd:09:69:2b:94: 83:15:06:ab:f5:de:5f:d4:9d:bb:13:1e:bd:9b:e7:45:4f:83: 6c:1b:fb:14:d5:94:e4:e7:ab:86:6d:d0:07:cc:f9:11:d0:30: a8:f1:0e:36:aa:b9:7c:92:fc:19:53:e3:10:33:68:4d:75:b3: 17:9b:f6:bf:24:d7:1a:e0:c4:65:2c:a6:40:a0:c7:b7:32:18: 1a:2d:10:dc:ee:b0:92:dd:81:23:40:14:f9:6c:99:cd:6a:9c: 1e:ce:6c:77:20:cc:33:bd:27:89:92:69:4c:81:1e:61:a6:6c: fa:a2:24:ae:bc:a8:02:1d:cc:c3:a1:fb:a5:a0:1d:ab:a6:16: f7:3d:8b:b8:61:7e:dc:d3:d3:3e:ba:be:28:8e:68:e4:27:25: 90:4e:ef:8c:f5:43:de:bb:5f:2e:14:9e:ff:44:73:e1:7d:a3: cc:ba:2f:23:50:10:f1:f9:3c:b9:f8:7e:2f:a6:16:62:ce:66: ae:4f:d5:5b:f9:1a:c8:90:95:0d:99:4c:5e:de:c2:18:81:72: 4f:27:bb:46:1d:f8:dd:38:66:a5:29:33:4d:ef:40:95:13:53: fd:d0:a8:f3:20:fe:e7:52:d9:8b:0b:6d:1f:3c:1e:fd:9e:d0: 90:78:c0:15 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7oyJFJoUdKJkqrRYp44mrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0 M2Q1MzUwHhcNMjYwMTAxMjIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzM0YTUxOTM3YjQxMzhhZjY4NzdmYTZhYjA1MmM1YzBlYWQ5MTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO9mhKu1gNOPWJBsxLxL3j/XrzM5 MDNGrk6a5mnW5nNNsgcRTTIrNQxcw36BgCsntiSPkUmA+5xrhX+7JJuKa1J1NBz4 XC38Vz7oAvHNcCw0uZUqtD0Oc5b+GVUIZU3jqh6PfMvhnnOxbL9UzFevpYtYNQWq igKWFL3BrWeZ5I/3bwPHJs/X5OUfAl+C/vwnPILB7QHNvt+BPD61wlpTL+O/Uxui gdIykzcCjn2hHX6iHPqiaXowi5HwtEoQKys+gc6tEqV5olEyqZ+knA1Xw8X393sE UEgfRKOOMlLklst4M4NIxiBrWlRCCnWKGpncInvHKptv/H7r6NrLr46PlQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFM0pRk3tBOK9od/pqsFLFwOrZFuMB8GA1UdIwQY MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt ZmVlOGVhZjczYjBkLzEvVXpTbEdUZTBFNHIyaDMtbXF3VXNYQTZ0a1c0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATVtDAwQA TVtHAwQATVtPMA0GCSqGSIb3DQEBCwUAA4IBAQBWReOI9gusxILONlT3zQlpK5SD FQar9d5f1J27Ex69m+dFT4NsG/sU1ZTk56uGbdAHzPkR0DCo8Q42qrl8kvwZU+MQ M2hNdbMXm/a/JNca4MRlLKZAoMe3MhgaLRDc7rCS3YEjQBT5bJnNapwezmx3IMwz vSeJkmlMgR5hpmz6oiSuvKgCHczDofuloB2rphb3PYu4YX7c09M+ur4ojmjkJyWQ Tu+M9UPeu18uFJ7/RHPhfaPMui8jUBDx+Ty5+H4vphZizmauT9Vb+RrIkJUNmUxe 3sIYgXJPJ7tGHfjdOGalKTNN70CVE1P90KjzIP7nUtmLC20fPB79ntCQeMAV -----END CERTIFICATE-----Generated at Sun Jan 25 17:32:35 2026 by rpki-client