This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/ujj1Fs-tVIeU9rJrgU-MmfFu7cI.roa File: ujj1Fs-tVIeU9rJrgU-MmfFu7cI.roa (raw, json) Hash identifier: O7M0cdecg0k5jJU4EYSgvz6r2GhJVnkR6Wsg7m7uOsk= Subject key identifier: BA:38:F5:16:CF:AD:54:87:94:F6:B2:6B:81:4F:8C:99:F1:6E:ED:C2 Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Certificate serial: 019B7C80BE2848E2EC2DE5F0E96C50A98376 Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/ujj1Fs-tVIeU9rJrgU-MmfFu7cI.roa Signing time: Fri 02 Jan 2026 02:19:30 +0000 ROA not before: Fri 02 Jan 2026 02:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39251 IP address blocks: 95.169.199.0/24 maxlen: 24 95.169.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:be:28:48:e2:ec:2d:e5:f0:e9:6c:50:a9:83:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Validity Not Before: Jan 2 02:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba38f516cfad548794f6b26b814f8c99f16eedc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:64:3b:ba:4c:92:3d:3c:a9:59:6e:7e:78:07: 4a:d2:77:41:14:29:99:e6:54:78:ae:3f:1f:47:26: a4:47:5c:26:76:56:0a:f1:38:44:0b:aa:53:75:af: 1b:14:5b:d9:1b:0e:f2:29:82:c6:71:3e:12:2b:74: 63:a5:fa:06:4e:5d:03:dc:cd:e8:91:c4:02:00:86: 92:74:1c:d6:b1:36:1c:7d:fe:2d:16:69:0a:2f:d3: 5c:ea:43:a0:3e:73:3c:76:b2:ec:04:32:c0:d8:a9: 04:2b:5b:73:d0:88:c9:0c:bd:3b:6b:e6:c4:0f:b5: 93:4a:60:02:64:6a:1a:d7:25:5e:0c:ec:02:88:5f: e9:19:4d:16:d1:30:80:e7:30:a3:ea:fb:2d:a9:be: 43:aa:6a:85:c3:7f:01:5a:d1:60:cc:ca:88:ae:22: 58:3c:ab:78:f9:29:a0:af:49:58:3f:d5:88:94:a8: 7a:97:8a:6a:fa:86:97:78:22:25:ec:79:c1:48:d0: a9:ea:de:7b:a4:cc:18:dd:e9:93:0b:fe:b3:90:3b: 16:2f:1e:f4:69:6a:46:30:cf:7d:c1:cb:8a:7f:2b: 7f:1a:8f:78:f8:d4:bb:46:1e:b0:bb:96:0e:ff:2d: 8b:12:e3:10:a5:dd:fc:7d:db:71:f3:fc:50:a9:7c: 50:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:38:F5:16:CF:AD:54:87:94:F6:B2:6B:81:4F:8C:99:F1:6E:ED:C2 X509v3 Authority Key Identifier: keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/ujj1Fs-tVIeU9rJrgU-MmfFu7cI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.169.199.0-95.169.200.255 Signature Algorithm: sha256WithRSAEncryption 26:b2:00:cc:5a:ad:fc:2b:3e:31:2d:ac:94:c9:84:aa:58:49: 31:66:50:40:d0:76:63:7a:97:a1:4d:42:40:e2:4d:7f:0f:0e: e7:0a:be:cc:8b:80:3d:ec:5d:af:dc:cd:a3:40:4e:1a:44:bc: 2c:66:d1:69:4a:e0:eb:4f:b3:b6:68:3b:1b:fa:1e:22:8d:0a: e0:ed:2e:8b:a4:30:6d:14:c1:1a:d7:40:c3:d1:ed:6a:54:be: 00:44:4e:e5:9f:dc:b5:9c:83:6b:fa:8b:48:2b:b5:58:e2:1f: 5c:c9:70:33:2e:37:f8:73:7d:e8:06:d5:97:62:6f:f6:2c:7e: 40:30:31:00:26:4c:46:19:7d:ec:b0:7e:bc:57:40:75:aa:7b: 0f:5d:0a:f1:28:54:90:61:1e:83:40:1b:6e:28:60:40:4a:2b: 35:5f:e6:7b:5b:20:31:bd:23:2e:de:66:b2:8b:4e:9d:76:2d: e1:f7:3c:0e:bb:54:72:d1:d3:e5:b6:d8:3a:56:ef:34:0c:3c: 33:d6:1b:80:9e:d4:5e:91:d6:a2:65:a9:91:87:cc:2e:70:21: cc:68:41:a8:9c:0e:83:37:a9:39:04:fb:0f:72:97:d7:5a:27: 4f:5c:81:33:ca:70:a1:ce:21:6b:0b:d3:dd:4a:e1:08:06:2e: e9:b1:11:4d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8gL4oSOLsLeXw6WxQqYN2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1N2IwYWMxMGI4NjQyYTI3ZGQzZDc0ZWQ2Y2I1ZWUwNDVl NjdiOTcwHhcNMjYwMTAyMDIxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTM4ZjUxNmNmYWQ1NDg3OTRmNmIyNmI4MTRmOGM5OWYxNmVlZGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGQ7ukySPTypWW5+eAdK0ndBFCmZ 5lR4rj8fRyakR1wmdlYK8ThEC6pTda8bFFvZGw7yKYLGcT4SK3RjpfoGTl0D3M3o kcQCAIaSdBzWsTYcff4tFmkKL9Nc6kOgPnM8drLsBDLA2KkEK1tz0IjJDL07a+bE D7WTSmACZGoa1yVeDOwCiF/pGU0W0TCA5zCj6vstqb5DqmqFw38BWtFgzMqIriJY PKt4+Smgr0lYP9WIlKh6l4pq+oaXeCIl7HnBSNCp6t57pMwY3emTC/6zkDsWLx70 aWpGMM99wcuKfyt/Go94+NS7Rh6wu5YO/y2LEuMQpd38fdtx8/xQqXxQgQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLo49RbPrVSHlPaya4FPjJnxbu3CMB8GA1UdIwQY MBaAFFV7CsELhkKifdPXTtbLXuBF5nuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYt ZmJlMWEwZDBhYTk4LzEvdWpqMUZzLXRWSWVVOXJKcmdVLU1tZkZ1N2NJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYtZmJlMWEwZDBhYTk4 LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABfqccD BABfqcgwDQYJKoZIhvcNAQELBQADggEBACayAMxarfwrPjEtrJTJhKpYSTFmUEDQ dmN6l6FNQkDiTX8PDucKvsyLgD3sXa/czaNAThpEvCxm0WlK4OtPs7ZoOxv6HiKN CuDtLoukMG0UwRrXQMPR7WpUvgBETuWf3LWcg2v6i0grtVjiH1zJcDMuN/hzfegG 1Zdib/YsfkAwMQAmTEYZfeywfrxXQHWqew9dCvEoVJBhHoNAG24oYEBKKzVf5ntb IDG9Iy7eZrKLTp12LeH3PA67VHLR0+W22DpW7zQMPDPWG4Ce1F6R1qJlqZGHzC5w IcxoQaicDoM3qTkE+w9yl9daJ09cgTPKcKHOIWsL091K4QgGLumxEU0= -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:38 2026 by rpki-client