This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/uBIJ49wfycH4q37vY8zA7txSR0M.roa File: uBIJ49wfycH4q37vY8zA7txSR0M.roa (raw, json) Hash identifier: bKKfz+mmfnNwswdiTFa8Rzk3hLQiHLN9N+8WMKxsPYk= Subject key identifier: B8:12:09:E3:DC:1F:C9:C1:F8:AB:7E:EF:63:CC:C0:EE:DC:52:47:43 Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C780B4825476EC67ACC1E095FC0FC1 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/uBIJ49wfycH4q37vY8zA7txSR0M.roa Signing time: Thu 01 Jan 2026 04:18:41 +0000 ROA not before: Thu 01 Jan 2026 04:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196928 IP address blocks: 82.177.138.0/23 maxlen: 23 82.177.163.0/24 maxlen: 24 88.220.98.0/23 maxlen: 23 88.220.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:80:b4:82:54:76:ec:67:ac:c1:e0:95:fc:0f:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b81209e3dc1fc9c1f8ab7eef63ccc0eedc524743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:13:32:71:77:86:d9:81:41:ae:fb:68:12:7f: 27:c4:b1:e1:47:c1:5b:25:4d:88:49:53:a6:a6:67: 60:5b:77:bb:2d:1a:59:63:39:44:a4:ed:e3:c9:bf: 65:bc:fd:26:3a:0d:b1:8e:76:ac:13:86:b8:6a:78: 51:ae:cd:bf:4c:db:6b:12:5b:83:a8:31:19:8c:78: 37:27:80:8f:d3:75:26:24:6d:a3:8b:d5:52:33:12: 7c:7b:1a:d8:62:65:53:20:dd:a9:c4:66:b3:9e:f2: 39:f9:8a:52:9b:d5:37:61:fb:55:20:76:fd:98:ac: 40:55:9c:7c:5a:a2:02:b0:bc:0f:dd:a0:71:96:dd: 07:c7:f4:b6:26:88:af:43:a7:c4:01:fa:22:77:76: 53:80:f5:1e:f2:7c:1e:73:96:79:b4:2c:a1:3a:1a: 39:fd:48:ec:d2:e5:78:cd:6b:8c:3b:09:ba:c1:8f: 95:fc:17:69:60:38:13:1c:88:2e:a3:2b:c0:69:70: ac:e3:db:8f:6b:0f:04:2d:f3:09:be:1c:e5:91:bc: 46:5b:3e:e7:b3:da:80:b3:d1:b5:e7:3c:33:df:3a: 0d:ba:fb:8a:ec:c4:f7:f5:91:a2:93:6e:3a:7c:16: db:98:e0:f1:76:3d:4d:c6:d5:e6:8e:d9:9a:60:6d: 34:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:12:09:E3:DC:1F:C9:C1:F8:AB:7E:EF:63:CC:C0:EE:DC:52:47:43 X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/uBIJ49wfycH4q37vY8zA7txSR0M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.177.138.0/23 82.177.163.0/24 88.220.98.0/23 88.220.182.0/23 Signature Algorithm: sha256WithRSAEncryption c6:2e:d2:fa:71:bd:b0:81:5e:9d:5d:84:fb:ed:5c:6b:d2:e5: c9:d5:a6:d9:c5:13:62:30:2a:db:69:e3:22:d5:83:cd:ab:0c: e0:08:57:ec:5a:4f:9c:5e:71:bf:f5:71:ce:d9:6a:6a:39:4f: aa:ce:4a:4a:7f:3b:45:a5:fd:fe:b3:fb:e7:1f:a1:da:45:50: fc:fd:66:ee:ae:3a:1a:7c:53:4b:73:bb:76:b8:ef:0d:32:7a: 11:fd:33:aa:6d:aa:c5:b1:32:d9:77:f5:41:36:c2:ff:53:62: d4:c5:28:26:8f:30:e9:fe:a2:2e:ed:f1:f3:85:45:d9:2e:24: 0c:d4:4a:56:72:e2:15:5b:f1:49:75:58:96:2f:8b:1d:c3:e2: 5d:a7:0f:0a:57:f2:e7:48:a7:72:ce:36:53:ba:94:6d:0f:19: 53:ea:c5:45:07:79:34:a4:e1:42:53:6f:21:88:c0:3f:15:c9: 4d:1c:6e:d2:ec:90:33:bd:9f:d9:ea:92:8e:3b:37:4e:b1:8a: b6:0d:8e:82:6d:3c:26:bd:f0:df:77:ba:6c:53:b1:e1:2c:9c: 92:fc:0d:08:da:d1:95:7f:d4:d9:f1:2a:d3:ae:2d:c8:c9:53: 0b:7d:b2:42:eb:10:4e:32:01:de:bf:37:4c:0c:1f:7a:39:75: d5:b1:3c:b7 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3x4C0glR27GesweCV/A/BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODEyMDllM2RjMWZjOWMxZjhhYjdlZWY2M2NjYzBlZWRjNTI0NzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRMycXeG2YFBrvtoEn8nxLHhR8Fb JU2ISVOmpmdgW3e7LRpZYzlEpO3jyb9lvP0mOg2xjnasE4a4anhRrs2/TNtrEluD qDEZjHg3J4CP03UmJG2ji9VSMxJ8exrYYmVTIN2pxGaznvI5+YpSm9U3YftVIHb9 mKxAVZx8WqICsLwP3aBxlt0Hx/S2JoivQ6fEAfoid3ZTgPUe8nwec5Z5tCyhOho5 /Ujs0uV4zWuMOwm6wY+V/BdpYDgTHIguoyvAaXCs49uPaw8ELfMJvhzlkbxGWz7n s9qAs9G15zwz3zoNuvuK7MT39ZGik246fBbbmODxdj1NxtXmjtmaYG00kwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLgSCePcH8nB+Kt+72PMwO7cUkdDMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvdUJJSjQ5d2Z5Y0g0cTM3dlk4ekE3dHhTUjBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBUrGKAwQA UrGjAwQBWNxiAwQBWNy2MA0GCSqGSIb3DQEBCwUAA4IBAQDGLtL6cb2wgV6dXYT7 7Vxr0uXJ1abZxRNiMCrbaeMi1YPNqwzgCFfsWk+cXnG/9XHO2WpqOU+qzkpKfztF pf3+s/vnH6HaRVD8/WburjoafFNLc7t2uO8NMnoR/TOqbarFsTLZd/VBNsL/U2LU xSgmjzDp/qIu7fHzhUXZLiQM1EpWcuIVW/FJdViWL4sdw+Jdpw8KV/LnSKdyzjZT upRtDxlT6sVFB3k0pOFCU28hiMA/FclNHG7S7JAzvZ/Z6pKOOzdOsYq2DY6CbTwm vfDfd7psU7HhLJyS/A0I2tGVf9TZ8SrTri3IyVMLfbJC6xBOMgHevzdMDB96OXXV sTy3 -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:26 2026 by rpki-client