This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/Uy1NAFGmmB9rpNKcZiyKoBpw6G4.roa File: Uy1NAFGmmB9rpNKcZiyKoBpw6G4.roa (raw, json) Hash identifier: QaQ4DcE992inKykf9B6se+i6gLKWUhft1zIUui08Mb8= Subject key identifier: 53:2D:4D:00:51:A6:98:1F:6B:A4:D2:9C:66:2C:8A:A0:1A:70:E8:6E Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84 Certificate serial: 019B7E371FFADF1A5BEE5F605AB0A6B5760E Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/Uy1NAFGmmB9rpNKcZiyKoBpw6G4.roa Signing time: Fri 02 Jan 2026 10:18:20 +0000 ROA not before: Fri 02 Jan 2026 10:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199258 IP address blocks: 91.196.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:1f:fa:df:1a:5b:ee:5f:60:5a:b0:a6:b5:76:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84 Validity Not Before: Jan 2 10:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=532d4d0051a6981f6ba4d29c662c8aa01a70e86e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ec:47:18:f1:21:85:d4:7b:81:74:8d:06:d3: 23:f9:57:c7:75:32:03:b7:e4:54:b2:5c:d3:d9:1d: 8a:16:54:ef:19:fc:2c:9b:6b:cf:da:fa:b0:bf:11: 1a:9a:6b:db:be:42:78:9d:9c:6e:29:fb:a8:48:0a: 27:43:b5:d9:f3:72:44:80:aa:ce:c9:61:b7:0f:be: 03:95:53:41:27:0b:c4:28:6b:3c:b2:0b:b6:16:cd: 3e:ba:2c:81:6f:23:d2:46:cd:90:4f:bc:6f:5c:24: 8b:d1:e0:3c:ed:bc:eb:5d:27:d9:79:24:50:71:b1: 47:1b:09:89:8a:94:65:d2:ce:ae:bd:cb:cf:f3:5a: d7:5e:5b:a1:eb:73:2b:f0:01:bf:7d:fc:43:ae:53: 5d:6d:93:01:f9:0d:5e:ef:f8:c4:e6:bb:ec:59:b4: d2:ca:94:5d:0b:98:6d:7d:4e:e6:58:99:32:c5:e2: 6f:6d:91:b2:0f:2f:84:33:c9:21:f6:12:a6:6a:39: 10:2c:54:67:e3:e3:b7:91:34:44:fd:18:0b:13:d9: 68:d2:10:cd:26:91:41:d9:ed:3a:1e:4a:f5:e1:00: 05:04:1c:71:01:df:7f:d8:07:ca:88:f8:61:54:21: 6c:5f:b3:bc:ef:d2:b8:58:d2:9b:35:68:c8:1b:d3: 6d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2D:4D:00:51:A6:98:1F:6B:A4:D2:9C:66:2C:8A:A0:1A:70:E8:6E X509v3 Authority Key Identifier: keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/Uy1NAFGmmB9rpNKcZiyKoBpw6G4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.196.137.0/24 Signature Algorithm: sha256WithRSAEncryption 91:70:64:7f:a2:09:ec:31:ca:a2:ca:64:36:3f:e0:83:bf:26: a4:0f:11:d5:f9:94:66:cc:61:25:67:c8:b9:1a:c3:e9:52:ae: 7a:61:af:aa:63:79:10:10:99:64:9c:5a:4f:64:30:30:86:86: fc:74:5c:9c:0e:74:13:4a:75:76:55:f6:d4:39:28:2d:13:8b: 3b:69:79:86:81:48:8c:d2:ea:04:92:df:7e:69:a4:f6:7a:4b: f6:41:27:72:00:95:17:29:65:4f:e6:12:bf:f3:8d:9d:73:81: 7e:3b:a8:4c:2a:f3:0e:34:0f:38:b7:c2:3b:1d:83:5e:09:40: d6:02:41:02:a7:a6:c3:eb:40:96:85:1b:7e:0c:aa:b9:2a:74: e8:dd:86:0f:0a:33:73:d9:37:41:4b:b6:22:37:2f:17:62:87: 18:02:13:f6:63:8e:96:0d:3f:ee:d3:22:19:99:24:11:ad:94: 91:37:9b:5d:47:86:4c:09:e6:e5:df:35:b8:1f:67:14:99:de: c8:ce:3e:4a:d3:01:14:0a:fe:08:cb:a7:ef:be:25:79:eb:af: b2:97:d6:79:da:51:23:96:d0:bc:ef:3e:40:0b:e6:08:28:47: df:54:de:7f:bd:c3:53:f2:f3:b8:b2:d6:e5:c7:41:4b:b6:5d: ca:a2:95:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+Nx/63xpb7l9gWrCmtXYOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMzhlZjQxYjJjMDEwNWE5MWNjYmI5Yzg5MzM3ZmFlYjEy OWZmODQwHhcNMjYwMTAyMTAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzJkNGQwMDUxYTY5ODFmNmJhNGQyOWM2NjJjOGFhMDFhNzBlODZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOxHGPEhhdR7gXSNBtMj+VfHdTID t+RUslzT2R2KFlTvGfwsm2vP2vqwvxEammvbvkJ4nZxuKfuoSAonQ7XZ83JEgKrO yWG3D74DlVNBJwvEKGs8sgu2Fs0+uiyBbyPSRs2QT7xvXCSL0eA87bzrXSfZeSRQ cbFHGwmJipRl0s6uvcvP81rXXluh63Mr8AG/ffxDrlNdbZMB+Q1e7/jE5rvsWbTS ypRdC5htfU7mWJkyxeJvbZGyDy+EM8kh9hKmajkQLFRn4+O3kTRE/RgLE9lo0hDN JpFB2e06Hkr14QAFBBxxAd9/2AfKiPhhVCFsX7O879K4WNKbNWjIG9NtywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFMtTQBRppgfa6TSnGYsiqAacOhuMB8GA1UdIwQY MBaAFIM470GywBBakcy7nIkzf66xKf+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3Mzgt MjhmYzc3OTY3NzYzLzEvVXkxTkFGR21tQjlycE5LY1ppeUtvQnB3Nkc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3MzgtMjhmYzc3OTY3NzYz LzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8SJMA0G CSqGSIb3DQEBCwUAA4IBAQCRcGR/ognsMcqiymQ2P+CDvyakDxHV+ZRmzGElZ8i5 GsPpUq56Ya+qY3kQEJlknFpPZDAwhob8dFycDnQTSnV2VfbUOSgtE4s7aXmGgUiM 0uoEkt9+aaT2ekv2QSdyAJUXKWVP5hK/842dc4F+O6hMKvMONA84t8I7HYNeCUDW AkECp6bD60CWhRt+DKq5KnTo3YYPCjNz2TdBS7YiNy8XYocYAhP2Y46WDT/u0yIZ mSQRrZSRN5tdR4ZMCebl3zW4H2cUmd7Izj5K0wEUCv4Iy6fvviV566+yl9Z52lEj ltC87z5AC+YIKEffVN5/vcNT8vO4stblx0FLtl3KopUx -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:37 2026 by rpki-client