This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/uFn-JtrUy_-916rFpJODXLywoCs.roa File: uFn-JtrUy_-916rFpJODXLywoCs.roa (raw, json) Hash identifier: lgxlXCpi2JKwf9CxVmQdcRMsZIfnt5rxVcM6Idk5XVc= Subject key identifier: B8:59:FE:26:DA:D4:CB:FF:BD:D7:AA:C5:A4:93:83:5C:BC:B0:A0:2B Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba Certificate serial: 019B7EA667A864FB74ACBAB8B61D60DF65BD Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/uFn-JtrUy_-916rFpJODXLywoCs.roa Signing time: Fri 02 Jan 2026 12:19:53 +0000 ROA not before: Fri 02 Jan 2026 12:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49659 IP address blocks: 195.168.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:67:a8:64:fb:74:ac:ba:b8:b6:1d:60:df:65:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba Validity Not Before: Jan 2 12:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b859fe26dad4cbffbdd7aac5a493835cbcb0a02b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ca:17:0e:70:dd:0b:1a:fd:dc:3e:ad:c7:64: 18:95:81:7a:5e:1d:78:a4:b8:5b:ac:d9:eb:c9:a5: d3:15:7d:2d:5e:2f:71:f5:ee:b2:22:44:ce:93:f7: 19:86:eb:a3:8b:45:df:3f:71:1b:81:d9:77:81:51: 97:e5:62:50:7d:5d:21:26:f3:47:9d:0f:66:87:c6: b6:14:25:2b:c0:9a:0e:93:a6:99:38:93:94:c5:b5: 18:a5:cc:a2:5d:f7:a5:2d:b6:8e:94:6c:f3:da:a3: f9:d1:e0:b3:b3:ca:58:b2:23:c8:c0:6a:ce:9b:cc: ab:4f:2e:3d:62:06:22:19:70:64:fb:66:da:12:14: a0:6e:85:7f:5f:65:d7:89:fa:95:36:95:e1:51:20: e3:18:0e:0e:e0:6b:50:41:4f:3c:72:6a:d0:7c:5a: 89:5b:18:02:d1:d0:1d:b4:54:be:56:65:ce:4a:b6: c7:5b:d1:17:6a:be:e3:28:1a:71:a6:6f:3f:fc:1d: a1:7e:9f:8f:14:ba:3e:2a:b0:66:4a:39:c0:3a:32: 6b:dd:a9:ec:0f:29:fb:97:7e:c2:76:b2:aa:48:cf: 4a:02:79:fd:a3:3a:76:df:a8:ec:1e:1f:06:f4:44: 8f:f9:57:bf:02:73:bf:cc:04:ec:b3:7c:ec:aa:79: e6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:59:FE:26:DA:D4:CB:FF:BD:D7:AA:C5:A4:93:83:5C:BC:B0:A0:2B X509v3 Authority Key Identifier: keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/uFn-JtrUy_-916rFpJODXLywoCs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.168.110.0/24 Signature Algorithm: sha256WithRSAEncryption be:86:dd:ef:d5:5b:6d:1c:58:e7:bd:eb:b0:34:01:75:8e:55: 72:2e:fc:42:37:d7:ae:d6:c1:46:e5:c2:6a:da:6c:ba:fd:53: 23:4a:69:71:0b:40:8c:b0:8a:1c:15:fd:e5:fa:19:b3:ab:a6: b1:88:4b:ec:40:16:3a:8e:cf:bc:4c:e6:2c:e9:07:e8:a7:aa: 93:9a:23:10:41:b0:01:8a:09:cb:5c:dd:c9:21:ff:4c:56:19: 76:04:fe:43:86:4e:87:cc:6c:b5:93:43:3d:13:83:31:62:37: 48:31:2b:36:7c:a5:99:34:c3:1f:ee:bf:4d:8f:e1:04:61:b1: 52:60:14:60:cb:a2:20:bf:e1:4b:70:21:31:47:c9:78:57:58: 23:c1:af:9b:dc:ca:84:be:3c:e1:0d:f8:5c:fb:c6:8b:16:f6: 22:7f:55:d5:bb:64:28:cc:cd:53:da:65:30:06:a3:91:fa:58: 07:fa:1f:6e:a4:ea:a8:86:c8:8d:1c:07:96:0a:7d:55:00:dc: fa:da:fb:cc:d9:78:17:69:58:65:7c:dd:2d:c7:e5:78:78:5b: 17:42:fb:c5:b4:81:d5:16:13:f1:d3:d8:1e:9d:e1:41:65:17: 53:b4:63:74:7f:e3:b3:90:c4:c7:89:5c:4b:59:af:9f:c8:70: 35:e3:b6:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pmeoZPt0rLq4th1g32W9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Zjg4MTQwMWFiYWNjODhjOTQxZmRmNzQwZjFhYjE1MzZm MDVkYmEwHhcNMjYwMTAyMTIxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODU5ZmUyNmRhZDRjYmZmYmRkN2FhYzVhNDkzODM1Y2JjYjBhMDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsoXDnDdCxr93D6tx2QYlYF6Xh14 pLhbrNnryaXTFX0tXi9x9e6yIkTOk/cZhuuji0XfP3Ebgdl3gVGX5WJQfV0hJvNH nQ9mh8a2FCUrwJoOk6aZOJOUxbUYpcyiXfelLbaOlGzz2qP50eCzs8pYsiPIwGrO m8yrTy49YgYiGXBk+2baEhSgboV/X2XXifqVNpXhUSDjGA4O4GtQQU88cmrQfFqJ WxgC0dAdtFS+VmXOSrbHW9EXar7jKBpxpm8//B2hfp+PFLo+KrBmSjnAOjJr3ans Dyn7l37CdrKqSM9KAnn9ozp236jsHh8G9ESP+Ve/AnO/zATss3zsqnnmXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLhZ/iba1Mv/vdeqxaSTg1y8sKArMB8GA1UdIwQY MBaAFOf4gUAausyIyUH990DxqxU28F26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmIt ZTJmYmMzYTY4ODAwLzEvdUZuLUp0clV5Xy05MTZyRnBKT0RYTHl3b0NzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmItZTJmYmMzYTY4ODAw LzEvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw6huMA0G CSqGSIb3DQEBCwUAA4IBAQC+ht3v1VttHFjnveuwNAF1jlVyLvxCN9eu1sFG5cJq 2my6/VMjSmlxC0CMsIocFf3l+hmzq6axiEvsQBY6js+8TOYs6Qfop6qTmiMQQbAB ignLXN3JIf9MVhl2BP5Dhk6HzGy1k0M9E4MxYjdIMSs2fKWZNMMf7r9Nj+EEYbFS YBRgy6Igv+FLcCExR8l4V1gjwa+b3MqEvjzhDfhc+8aLFvYif1XVu2QozM1T2mUw BqOR+lgH+h9upOqohsiNHAeWCn1VANz62vvM2XgXaVhlfN0tx+V4eFsXQvvFtIHV FhPx09geneFBZRdTtGN0f+OzkMTHiVxLWa+fyHA147as -----END CERTIFICATE-----Generated at Mon Jan 26 12:19:19 2026 by rpki-client