This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/u47qzv8mlrLuj_hh_BBh9dpqUO0.roa File: u47qzv8mlrLuj_hh_BBh9dpqUO0.roa (raw, json) Hash identifier: S4OvbLWkb/uVbiHv3q5uNeHb7sprrEwON3XiMGwDYZs= Subject key identifier: BB:8E:EA:CE:FF:26:96:B2:EE:8F:F8:61:FC:10:61:F5:DA:6A:50:ED Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C8016F3B547A295710AB9B7ED225D06 Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/u47qzv8mlrLuj_hh_BBh9dpqUO0.roa Signing time: Fri 02 Jan 2026 02:18:47 +0000 ROA not before: Fri 02 Jan 2026 02:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31204 IP address blocks: 92.181.0.0/17 maxlen: 24 92.181.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:16:f3:b5:47:a2:95:71:0a:b9:b7:ed:22:5d:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb8eeaceff2696b2ee8ff861fc1061f5da6a50ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:60:40:bc:b1:fa:1b:75:65:bd:ba:82:8c:2d: 4d:7f:56:08:bf:2b:87:59:1d:fc:f1:d3:ce:cd:43: 12:ff:c2:e5:ba:b7:c0:1f:cd:f2:0c:cf:c2:25:2d: 37:dc:a3:8b:79:e3:4b:82:6e:74:75:f0:ab:3b:71: 5d:e9:70:9f:38:c4:40:c5:15:59:48:52:02:33:35: e8:d9:8a:d7:8b:8f:c7:66:b5:51:4e:4d:40:51:21: af:7d:af:b2:d2:f9:ce:7d:0d:18:e2:93:a5:9d:8c: 8d:35:71:62:ae:4b:78:63:55:c1:16:df:7b:a4:60: 0f:01:a3:a0:c4:1e:56:51:69:3f:eb:33:05:5c:78: c5:79:51:b5:49:ed:70:1e:ab:0d:91:57:df:cf:c0: b9:49:ab:57:ce:eb:ab:19:04:2d:c7:03:d8:03:1f: 24:bb:ec:87:35:91:ab:9d:c0:2e:39:ef:5d:0f:32: 1a:d9:0c:3f:00:ea:3a:8b:e1:2e:58:57:c9:a3:8a: 7b:ed:2a:03:f3:c9:b4:65:43:68:2c:86:99:8d:9b: 19:a0:ca:e1:fa:54:6b:d9:3c:05:cb:3b:65:be:94: 51:cd:a7:e9:bb:66:d5:60:cb:97:c4:6a:97:2b:2c: 43:8c:50:43:0a:73:d4:a0:cf:90:a8:b2:b0:df:17: e7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8E:EA:CE:FF:26:96:B2:EE:8F:F8:61:FC:10:61:F5:DA:6A:50:ED X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/u47qzv8mlrLuj_hh_BBh9dpqUO0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.181.0.0-92.181.159.255 Signature Algorithm: sha256WithRSAEncryption 4d:71:c3:68:ae:cf:81:3e:45:2f:49:c3:c1:07:f0:32:c5:86: 3d:0e:30:c8:50:11:2c:9a:53:41:df:d2:39:e1:08:8c:39:9e: 6b:aa:94:51:7d:1d:88:ba:2f:30:05:4e:81:ae:e3:d2:0e:8f: a2:fd:08:ef:c8:c5:24:67:b7:26:c9:6f:78:c4:e8:dc:37:d9: d1:fd:65:44:b8:f8:c3:b0:51:0c:ee:d2:5f:5d:03:df:54:c3: bb:f5:56:19:36:b3:7c:71:79:18:e4:d7:35:03:f9:0e:b7:53: b8:c4:f7:a5:ba:26:24:99:87:48:c7:30:b8:61:9c:0e:97:97: ac:e9:7a:5d:21:d9:18:f5:33:5b:87:e8:84:ae:ff:86:b0:75: 7c:b7:52:4d:9f:c0:67:37:a0:33:15:99:07:8b:f1:bf:82:5e: 10:e0:08:5a:32:80:b3:08:ae:62:2c:91:02:eb:19:98:61:ba: c9:81:10:e9:86:a9:42:8f:dc:ce:9b:f4:27:85:27:42:a2:23: c2:5f:3d:12:ce:94:05:65:4e:6a:15:fe:ed:85:b3:e1:f8:58: f7:e7:ec:99:09:9d:95:e0:6d:fc:68:eb:90:12:a6:6d:00:12: 53:97:ac:73:aa:ee:86:f3:1f:35:55:0c:23:74:15:d5:ee:cc: 07:c5:b9:1c -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt8gBbztUeilXEKubftIl0GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjhlZWFjZWZmMjY5NmIyZWU4ZmY4NjFmYzEwNjFmNWRhNmE1MGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWBAvLH6G3VlvbqCjC1Nf1YIvyuH WR388dPOzUMS/8LlurfAH83yDM/CJS033KOLeeNLgm50dfCrO3Fd6XCfOMRAxRVZ SFICMzXo2YrXi4/HZrVRTk1AUSGvfa+y0vnOfQ0Y4pOlnYyNNXFirkt4Y1XBFt97 pGAPAaOgxB5WUWk/6zMFXHjFeVG1Se1wHqsNkVffz8C5SatXzuurGQQtxwPYAx8k u+yHNZGrncAuOe9dDzIa2Qw/AOo6i+EuWFfJo4p77SoD88m0ZUNoLIaZjZsZoMrh +lRr2TwFyztlvpRRzafpu2bVYMuXxGqXKyxDjFBDCnPUoM+QqLKw3xfnZQIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFLuO6s7/Jpay7o/4YfwQYfXaalDtMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvdTQ3cXp2OG1sckx1al9oaF9CQmg5ZHBxVU8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwBctQME BVy1gDANBgkqhkiG9w0BAQsFAAOCAQEATXHDaK7PgT5FL0nDwQfwMsWGPQ4wyFAR LJpTQd/SOeEIjDmea6qUUX0diLovMAVOga7j0g6Pov0I78jFJGe3JslveMTo3DfZ 0f1lRLj4w7BRDO7SX10D31TDu/VWGTazfHF5GOTXNQP5DrdTuMT3pbomJJmHSMcw uGGcDpeXrOl6XSHZGPUzW4fohK7/hrB1fLdSTZ/AZzegMxWZB4vxv4JeEOAIWjKA swiuYiyRAusZmGG6yYEQ6YapQo/czpv0J4UnQqIjwl89Es6UBWVOahX+7YWz4fhY 9+fsmQmdleBt/GjrkBKmbQASU5esc6ruhvMfNVUMI3QV1e7MB8W5HA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:01:36 2026 by rpki-client