This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/Uu5eZINyZZ5cw3XYuxNE-79F3yQ.roa File: Uu5eZINyZZ5cw3XYuxNE-79F3yQ.roa (raw, json) Hash identifier: nAVaVHwJ6YxohUATNt0J/Xnb1/Zu7QH4N9aATQyW7hI= Subject key identifier: 52:EE:5E:64:83:72:65:9E:5C:C3:75:D8:BB:13:44:FB:BF:45:DF:24 Certificate issuer: /CN=7f6bd1a6b04625c571d830f878b1c0238247408c Certificate serial: 019BEE35EE41F499BC50E65C98FD6DAEF074 Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/Uu5eZINyZZ5cw3XYuxNE-79F3yQ.roa Signing time: Sat 24 Jan 2026 04:14:30 +0000 ROA not before: Sat 24 Jan 2026 04:14:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 398465 IP address blocks: 91.246.43.0/24 maxlen: 24 213.177.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ee:35:ee:41:f4:99:bc:50:e6:5c:98:fd:6d:ae:f0:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c Validity Not Before: Jan 24 04:14:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52ee5e648372659e5cc375d8bb1344fbbf45df24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9e:19:24:b7:a0:ff:cd:c9:31:80:4f:6d:72: bb:9c:3d:d7:24:a8:f6:e7:a3:98:0a:59:01:95:6b: 7c:16:10:e5:a6:6f:f2:bb:ec:84:51:b8:df:6d:8c: 24:7e:a8:98:b0:14:bf:3b:99:10:9b:48:7e:02:3f: 6b:f5:c2:45:d1:e0:65:ae:78:c7:92:b2:61:e4:0b: 1a:29:19:d4:f0:ce:24:e9:50:37:b2:c7:6f:a5:b8: 6f:a1:43:7c:41:ce:a4:30:ba:f2:d2:8d:b3:99:1a: 8e:ea:94:f6:37:9f:9f:de:25:ad:b4:d7:90:0f:31: a6:60:76:90:f8:0a:6a:64:3a:3d:f2:e6:b9:a6:79: c7:c7:90:7f:c0:38:f1:0e:0a:fa:66:e8:74:1b:ae: 0d:d0:67:bd:d2:f0:57:75:5b:cc:c7:da:a2:50:92: fd:9b:5a:f2:2f:4b:57:00:3d:6c:87:3f:80:1a:cb: 7f:13:4b:03:b0:52:36:2b:ab:fe:f8:89:7e:7d:2e: 63:32:70:4a:8b:2c:51:32:bd:6b:d7:4a:81:ef:11: b4:36:73:92:ef:ea:48:b5:c5:71:18:9c:25:3a:00: 76:60:23:08:21:e0:61:d9:93:91:50:31:c3:9f:e0: 6f:06:cd:9b:20:45:e3:18:da:90:de:d8:df:ad:3a: b7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:EE:5E:64:83:72:65:9E:5C:C3:75:D8:BB:13:44:FB:BF:45:DF:24 X509v3 Authority Key Identifier: keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/Uu5eZINyZZ5cw3XYuxNE-79F3yQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.246.43.0/24 213.177.174.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:b7:44:f8:af:76:bc:5f:3c:81:52:62:e7:fc:39:21:27:e3: ce:37:da:b9:94:f4:fe:d7:5b:0a:12:4a:6b:50:16:e6:03:d3: ab:80:73:6a:d8:03:13:b1:51:aa:2e:12:66:2d:8e:df:57:cb: c3:53:51:73:e6:2d:2c:7a:6b:60:73:58:61:ec:79:5e:bc:02: ec:f6:d0:65:e4:b1:84:2b:74:5e:64:f4:86:fd:cf:85:49:4f: 6e:fe:1e:23:54:37:15:e3:8d:2c:13:00:a1:c4:9b:c0:83:9e: 85:e6:6e:69:ef:c4:e1:32:04:2c:e2:22:47:6b:0b:13:d4:53: c3:35:89:22:a0:02:64:29:b9:e7:4e:69:29:22:f1:06:e2:35: e3:e8:2e:b0:ec:f3:12:05:68:96:48:f7:da:91:79:36:20:3d: 1c:6c:53:37:d0:43:6a:24:83:02:8d:72:49:9d:c2:8d:81:9c: cc:69:2b:0d:3f:d7:89:79:34:ad:af:4a:dd:eb:b8:ab:9b:7e: f5:4d:bb:39:46:41:3f:86:69:42:29:eb:c5:18:2c:e5:96:ad: bd:0d:9d:91:5f:ec:5d:98:ef:44:f4:8b:12:9c:85:fe:fa:13: 7f:27:67:b2:b6:26:77:9c:ff:a8:91:ef:3e:72:89:a0:c7:c1: 39:7d:5e:bd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvuNe5B9Jm8UOZcmP1trvB0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNmJkMWE2YjA0NjI1YzU3MWQ4MzBmODc4YjFjMDIzODI0 NzQwOGMwHhcNMjYwMTI0MDQxNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmVlNWU2NDgzNzI2NTllNWNjMzc1ZDhiYjEzNDRmYmJmNDVkZjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Z4ZJLeg/83JMYBPbXK7nD3XJKj2 56OYClkBlWt8FhDlpm/yu+yEUbjfbYwkfqiYsBS/O5kQm0h+Aj9r9cJF0eBlrnjH krJh5AsaKRnU8M4k6VA3ssdvpbhvoUN8Qc6kMLry0o2zmRqO6pT2N5+f3iWttNeQ DzGmYHaQ+ApqZDo98ua5pnnHx5B/wDjxDgr6Zuh0G64N0Ge90vBXdVvMx9qiUJL9 m1ryL0tXAD1shz+AGst/E0sDsFI2K6v++Il+fS5jMnBKiyxRMr1r10qB7xG0NnOS 7+pItcVxGJwlOgB2YCMIIeBh2ZORUDHDn+BvBs2bIEXjGNqQ3tjfrTq3dwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFLuXmSDcmWeXMN12LsTRPu/Rd8kMB8GA1UdIwQY MBaAFH9r0aawRiXFcdgw+HixwCOCR0CMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEt ODliNmMzMjMxNWMyLzEvVXU1ZVpJTnlaWjVjdzNYWXV4TkUtNzlGM3lRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEtODliNmMzMjMxNWMy LzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW/YrAwQA 1bGuMA0GCSqGSIb3DQEBCwUAA4IBAQBNt0T4r3a8XzyBUmLn/DkhJ+PON9q5lPT+ 11sKEkprUBbmA9OrgHNq2AMTsVGqLhJmLY7fV8vDU1Fz5i0semtgc1hh7HlevALs 9tBl5LGEK3ReZPSG/c+FSU9u/h4jVDcV440sEwChxJvAg56F5m5p78ThMgQs4iJH awsT1FPDNYkioAJkKbnnTmkpIvEG4jXj6C6w7PMSBWiWSPfakXk2ID0cbFM30ENq JIMCjXJJncKNgZzMaSsNP9eJeTStr0rd67irm371Tbs5RkE/hmlCKevFGCzllq29 DZ2RX+xdmO9E9IsSnIX++hN/J2eytiZ3nP+oke8+comgx8E5fV69 -----END CERTIFICATE-----Generated at Sun Jan 25 09:41:03 2026 by rpki-client