This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/uZxQxlesZp1GTSpT-FmL6reK9pc.roa File: uZxQxlesZp1GTSpT-FmL6reK9pc.roa (raw, json) Hash identifier: yHIIDSGJ2RBJAQAcU5Lp0TMWHjXkIZJ2V4k36+SBfbI= Subject key identifier: B9:9C:50:C6:57:AC:66:9D:46:4D:2A:53:F8:59:8B:EA:B7:8A:F6:97 Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86 Certificate serial: 019B7910E5B9F67FC4D3D222DEAF6E34A792 Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/uZxQxlesZp1GTSpT-FmL6reK9pc.roa Signing time: Thu 01 Jan 2026 10:18:29 +0000 ROA not before: Thu 01 Jan 2026 10:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197612 IP address blocks: 91.225.248.0/24 maxlen: 24 91.225.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.mft rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e5:b9:f6:7f:c4:d3:d2:22:de:af:6e:34:a7:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86 Validity Not Before: Jan 1 10:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b99c50c657ac669d464d2a53f8598beab78af697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f5:15:5e:f1:62:1b:a8:b9:06:45:b9:c6:9f: 17:64:bc:c2:6d:38:ce:98:ec:88:84:31:8c:89:ea: 73:2a:e6:7b:bc:9b:c6:12:bc:82:37:8c:60:9c:e6: 1c:e0:d7:9e:77:a7:ee:43:02:a8:46:1d:ec:2d:4d: e9:a0:ed:2d:2b:71:fb:28:35:45:90:79:95:b8:de: c7:0b:03:ca:df:96:06:33:83:33:8c:c0:03:ed:a9: 77:5c:de:46:e5:08:c8:04:6f:00:f3:0a:43:6f:26: 1f:77:c0:8f:c5:c1:6f:29:f6:5a:78:93:c5:f9:91: 0a:e6:0f:fe:22:2a:8d:fc:38:47:17:fa:c4:db:62: 37:98:0b:d5:bd:bc:a7:09:4a:69:91:41:97:47:c2: 2b:ee:16:aa:49:d5:ad:2b:fa:d7:96:05:37:79:3d: 71:5e:90:97:8f:e6:8a:3b:59:40:ea:ef:3d:e9:42: 59:12:ef:6f:34:f0:7e:a3:3c:22:c6:41:42:b1:cf: 91:e2:48:9c:a2:82:1b:a4:43:e4:f4:0f:fe:1b:f8: 38:a9:f0:8e:16:6e:04:7f:af:e5:09:e9:d9:63:b6: ef:09:66:8a:b9:1a:8b:91:01:49:cc:8b:e0:5f:75: 21:2f:ea:b0:da:fa:c0:b8:4b:fe:f0:ff:3b:c2:3a: ea:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:9C:50:C6:57:AC:66:9D:46:4D:2A:53:F8:59:8B:EA:B7:8A:F6:97 X509v3 Authority Key Identifier: keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/uZxQxlesZp1GTSpT-FmL6reK9pc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.225.248.0/23 Signature Algorithm: sha256WithRSAEncryption 01:38:67:ab:46:93:03:30:64:71:a4:66:a5:79:bf:38:dd:d3: 2c:77:29:87:43:91:b1:52:7c:7e:77:a4:70:8b:8a:f8:12:10: 3d:24:8b:e1:6b:5f:bc:8d:02:02:64:2a:25:60:29:44:dd:18: e1:81:13:b9:41:d4:f8:d7:bc:2b:2d:b8:66:c7:da:b2:1d:32: f0:72:a2:bf:1f:5c:35:e4:f6:7e:70:67:7d:50:59:a7:38:ec: ff:04:08:ce:be:2b:2e:ea:88:c4:2a:2f:9e:01:6d:56:09:62: c2:34:0a:b9:be:cb:cc:d0:60:00:20:d1:c5:5a:58:8a:78:56: da:d3:01:85:a8:e5:11:f4:d9:bb:af:a5:5b:67:ea:5c:d7:7f: 1c:fd:15:b9:57:e8:cf:00:fd:2b:b7:60:14:6c:68:80:a7:c5: 8c:74:f9:e3:35:c0:c7:dd:3f:b1:16:c5:60:ba:01:3c:df:6d: 41:97:67:1a:fb:eb:5b:8b:90:a2:02:2b:01:9d:c1:65:49:37: 44:85:07:e3:f3:a0:14:22:d6:7f:e8:f4:2e:6e:99:bd:cc:c6: 06:c7:61:93:a7:9d:55:f8:58:b7:88:97:b4:f5:10:39:32:9f: 86:ae:dc:06:9e:4e:10:89:f7:52:44:df:b1:3c:8d:49:20:c2: 84:d7:a9:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EOW59n/E09Ii3q9uNKeSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxZTg2ZmY5OTczYzkzYWJlNjM5OGYwMzE5NjZjMjlkNzVh M2JhODYwHhcNMjYwMTAxMTAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTljNTBjNjU3YWM2NjlkNDY0ZDJhNTNmODU5OGJlYWI3OGFmNjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PUVXvFiG6i5BkW5xp8XZLzCbTjO mOyIhDGMiepzKuZ7vJvGEryCN4xgnOYc4Need6fuQwKoRh3sLU3poO0tK3H7KDVF kHmVuN7HCwPK35YGM4MzjMAD7al3XN5G5QjIBG8A8wpDbyYfd8CPxcFvKfZaeJPF +ZEK5g/+IiqN/DhHF/rE22I3mAvVvbynCUppkUGXR8Ir7haqSdWtK/rXlgU3eT1x XpCXj+aKO1lA6u896UJZEu9vNPB+ozwixkFCsc+R4kicooIbpEPk9A/+G/g4qfCO Fm4Ef6/lCenZY7bvCWaKuRqLkQFJzIvgX3UhL+qw2vrAuEv+8P87wjrqcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLmcUMZXrGadRk0qU/hZi+q3ivaXMB8GA1UdIwQY MBaAFCHob/mXPJOr5jmPAxlmwp11o7qGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWVodi1aYzhrNnZtT1k4REdXYkNuWFdqdW9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yZjZkZDAtYjc2Zi00N2Q1LWE0YWIt MzJmZWViNTY2ZWU2LzEvdVp4UXhsZXNacDFHVFNwVC1GbUw2cmVLOXBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8yZjZkZDAtYjc2Zi00N2Q1LWE0YWItMzJmZWViNTY2ZWU2 LzEvSWVodi1aYzhrNnZtT1k4REdXYkNuWFdqdW9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+H4MA0G CSqGSIb3DQEBCwUAA4IBAQABOGerRpMDMGRxpGaleb843dMsdymHQ5GxUnx+d6Rw i4r4EhA9JIvha1+8jQICZColYClE3RjhgRO5QdT417wrLbhmx9qyHTLwcqK/H1w1 5PZ+cGd9UFmnOOz/BAjOvisu6ojEKi+eAW1WCWLCNAq5vsvM0GAAINHFWliKeFba 0wGFqOUR9Nm7r6VbZ+pc138c/RW5V+jPAP0rt2AUbGiAp8WMdPnjNcDH3T+xFsVg ugE8321Bl2ca++tbi5CiAisBncFlSTdEhQfj86AUItZ/6PQubpm9zMYGx2GTp51V +Fi3iJe09RA5Mp+GrtwGnk4QifdSRN+xPI1JIMKE16mN -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:30 2026 by rpki-client