This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Uu_WAlDmP4_Tlyy3eD8iul81_Jk.roa File: Uu_WAlDmP4_Tlyy3eD8iul81_Jk.roa (raw, json) Hash identifier: WJq0mZN7VFnfpniDYx78MHK3y0YhEthDG0vMO7JfR0g= Subject key identifier: 52:EF:D6:02:50:E6:3F:8F:D3:97:2C:B7:78:3F:22:BA:5F:35:FC:99 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B77594C9DBC3E482DBAD0DE568E8DC3C0 Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Uu_WAlDmP4_Tlyy3eD8iul81_Jk.roa Signing time: Thu 01 Jan 2026 02:18:19 +0000 ROA not before: Thu 01 Jan 2026 02:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41850 IP address blocks: 89.39.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:4c:9d:bc:3e:48:2d:ba:d0:de:56:8e:8d:c3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52efd60250e63f8fd3972cb7783f22ba5f35fc99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b4:25:cd:08:db:80:72:14:4d:73:a6:a9:73: ff:3e:db:d7:62:d9:e5:6c:9e:3c:6a:ad:01:57:41: 55:f0:e2:e4:73:e7:0a:db:bb:a2:3e:3e:0f:f0:e1: 7c:f6:39:b7:30:78:23:72:5b:13:af:cd:53:93:4e: cb:ef:23:6b:93:cc:0a:a1:e0:f0:e6:c4:b7:2d:fe: c4:97:ad:cb:03:20:c2:df:9c:29:5a:72:c8:12:24: 64:55:23:20:c5:af:8c:7b:a2:8b:61:c0:48:4d:41: 0e:14:1c:94:a5:7d:6d:92:1f:af:82:f9:1f:64:5e: b6:36:7b:57:0d:58:a2:31:9e:8d:40:61:e3:ef:98: 5a:f1:5e:2f:15:a0:06:09:7c:5a:47:d3:7e:cd:6a: 90:3d:e9:76:0d:e5:82:c4:7e:c9:05:4a:d8:32:e6: ed:13:c6:c9:0e:ff:5d:1d:13:14:66:22:68:69:97: 45:e7:5e:17:b0:0a:4d:35:af:b7:ef:d9:ea:59:50: 9c:af:0b:04:75:37:53:1c:9f:73:5a:cb:d0:6a:d0: 02:3c:18:63:2b:09:49:39:93:63:ae:f1:01:f1:8e: 0e:63:58:53:05:57:e2:f3:91:83:52:6d:2e:aa:72: 9e:2c:4c:35:c2:fd:e8:31:c0:75:de:64:bc:84:90: 84:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:EF:D6:02:50:E6:3F:8F:D3:97:2C:B7:78:3F:22:BA:5F:35:FC:99 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Uu_WAlDmP4_Tlyy3eD8iul81_Jk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.39.248.0/22 Signature Algorithm: sha256WithRSAEncryption 08:a5:19:f3:af:60:51:1c:af:54:a7:4c:92:c8:ae:5f:7b:7a: 6a:84:fe:99:4b:90:8d:75:65:ee:3e:2b:c1:15:9e:7d:42:43: 22:bf:fe:c4:4b:b7:34:f2:19:23:2a:ad:0a:fb:41:23:f1:ec: b4:e7:3e:7c:ff:d5:bd:cb:e5:01:59:83:dd:22:09:11:d1:89: 44:ad:84:e0:d6:21:1b:59:68:d6:8f:56:82:e6:02:1f:ca:8d: 4d:08:ed:29:e2:0c:9b:fe:40:0e:c8:f4:5f:22:9c:2c:62:73: ce:5a:0e:e9:91:99:a5:33:7e:21:e7:a6:05:62:32:a8:0f:b0: bb:a2:bd:1f:25:cf:8c:6e:1f:97:8f:cc:3a:a7:c3:ed:92:70: a0:e0:b2:a3:45:74:ab:bf:f9:d6:3c:e8:3d:cf:37:89:46:fc: 2e:cf:0e:5d:aa:a7:27:dd:7b:8f:ff:2a:4f:2a:fe:79:1e:36: 18:4a:71:5e:bc:eb:c1:28:90:21:af:b0:9c:be:4f:31:57:bc: 46:f9:9f:c2:73:35:ad:32:e8:22:f9:c9:0f:ac:7a:a0:94:93: 93:e8:35:eb:ac:bb:fb:1f:18:68:80:eb:a9:a5:1a:cc:86:23: 76:12:2a:01:46:08:10:86:cc:9d:e7:9f:55:bf:7e:cd:39:85: 3c:3f:fa:1b -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WUydvD5ILbrQ3laOjcPAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmVmZDYwMjUwZTYzZjhmZDM5NzJjYjc3ODNmMjJiYTVmMzVmYzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybQlzQjbgHIUTXOmqXP/PtvXYtnl bJ48aq0BV0FV8OLkc+cK27uiPj4P8OF89jm3MHgjclsTr81Tk07L7yNrk8wKoeDw 5sS3Lf7El63LAyDC35wpWnLIEiRkVSMgxa+Me6KLYcBITUEOFByUpX1tkh+vgvkf ZF62NntXDViiMZ6NQGHj75ha8V4vFaAGCXxaR9N+zWqQPel2DeWCxH7JBUrYMubt E8bJDv9dHRMUZiJoaZdF514XsApNNa+379nqWVCcrwsEdTdTHJ9zWsvQatACPBhj KwlJOZNjrvEB8Y4OY1hTBVfi85GDUm0uqnKeLEw1wv3oMcB13mS8hJCETQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFFLv1gJQ5j+P05cst3g/IrpfNfyZMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL1V1X1dBbERtUDRfVGx5eTNlRDhpdWw4MV9Kay5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJZJ/gw DQYJKoZIhvcNAQELBQADggEBAAilGfOvYFEcr1SnTJLIrl97emqE/plLkI11Ze4+ K8EVnn1CQyK//sRLtzTyGSMqrQr7QSPx7LTnPnz/1b3L5QFZg90iCRHRiUSthODW IRtZaNaPVoLmAh/KjU0I7SniDJv+QA7I9F8inCxic85aDumRmaUzfiHnpgViMqgP sLuivR8lz4xuH5ePzDqnw+2ScKDgsqNFdKu/+dY86D3PN4lG/C7PDl2qpyfde4// Kk8q/nkeNhhKcV6868EokCGvsJy+TzFXvEb5n8JzNa0y6CL5yQ+seqCUk5PoNeus u/sfGGiA66mlGsyGI3YSKgFGCBCGzJ3nn1W/fs05hTw/+hs= -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:30 2026 by rpki-client