This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ufH8kEZxksdjDf94FWSzQyjJ-N4.roa File: ufH8kEZxksdjDf94FWSzQyjJ-N4.roa (raw, json) Hash identifier: 4Xx+5L2lKKkpLgYIDY2Efw6bO6Zw6YcxC4iionILPKA= Subject key identifier: B9:F1:FC:90:46:71:92:C7:63:0D:FF:78:15:64:B3:43:28:C9:F8:DE Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B7759522473654850905ED2F0FB7718DD Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ufH8kEZxksdjDf94FWSzQyjJ-N4.roa Signing time: Thu 01 Jan 2026 02:18:21 +0000 ROA not before: Thu 01 Jan 2026 02:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49023 IP address blocks: 93.114.80.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:52:24:73:65:48:50:90:5e:d2:f0:fb:77:18:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9f1fc90467192c7630dff781564b34328c9f8de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8e:cc:23:ca:ab:87:35:88:3a:f1:73:e4:aa: 11:a3:13:d3:6f:7a:65:31:0b:88:e1:77:55:da:45: ed:fb:5d:d9:12:5d:56:75:5d:7e:4d:d1:8c:55:ed: b5:be:9b:08:f0:31:e0:66:33:29:ea:1c:de:fc:b7: 6d:34:58:57:01:ab:c1:0f:64:3c:c9:23:91:de:16: 1b:76:1c:b9:b6:c1:71:32:1e:4e:9d:54:c6:7b:3d: ac:de:ec:cd:10:21:10:83:bf:fa:2b:d3:a9:aa:19: c9:75:c9:cf:86:dd:6a:b0:55:d4:4f:47:9c:d4:c0: d1:84:96:13:1a:22:a8:b2:9f:fd:97:e8:93:ce:3b: 99:e0:67:10:20:1c:2a:0f:d6:3b:f2:a5:c3:98:1f: 35:01:98:c3:40:1e:d6:31:36:cb:99:30:08:25:68: 64:cc:06:08:e3:82:96:62:97:7d:64:40:91:46:a0: 31:25:11:0f:60:9b:c6:68:0b:b7:27:71:59:21:56: 6e:29:04:b9:55:5e:5b:0d:00:f9:e9:b1:fd:c3:de: 94:c2:14:20:d5:f8:89:3b:1a:87:d1:b1:cc:05:a0: e8:61:43:74:81:84:74:59:7d:9d:5a:11:bb:90:e0: 55:02:03:a5:14:a4:74:87:11:38:76:55:8a:e7:1d: 8d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F1:FC:90:46:71:92:C7:63:0D:FF:78:15:64:B3:43:28:C9:F8:DE X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ufH8kEZxksdjDf94FWSzQyjJ-N4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.114.80.0/23 Signature Algorithm: sha256WithRSAEncryption 55:56:34:24:3e:b1:dd:34:20:b4:41:64:f0:b5:53:c2:7f:f0: 35:5b:b4:36:3a:5c:12:f9:b6:62:2b:28:97:1c:6b:0d:37:bd: af:3e:b6:c8:ae:06:74:db:05:5d:3f:af:5d:2d:30:50:0d:51: da:0d:95:de:17:33:da:67:09:51:9a:1a:fd:ec:86:82:aa:24: 35:56:a8:e3:22:34:85:96:f6:c6:54:60:52:00:99:03:30:36: 5f:86:c2:05:ad:97:44:c2:5d:85:60:78:38:d7:c4:27:1e:9e: 77:df:51:9f:e5:84:f3:e8:b5:12:ed:72:a1:aa:06:a4:2b:da: 7c:b7:1c:88:cb:49:34:34:dc:3b:86:9b:0b:da:1c:9d:4e:3b: 09:31:30:38:c1:26:31:15:78:4a:45:f9:dc:a4:e2:c2:27:1c: a3:61:4f:0c:7f:d6:b4:28:03:77:59:bf:53:c2:ee:0d:be:39: 1b:10:3f:d9:7f:77:10:b1:40:ee:dc:07:06:8a:7b:a3:ae:37: 77:f9:0a:4f:0e:60:5b:42:db:20:e1:dd:ae:1e:af:60:d8:8a: a8:ca:c5:a6:84:dc:b0:d5:87:2f:af:04:c6:e6:84:24:14:8b: 10:94:72:f8:9b:e9:b6:d1:50:89:53:13:ec:af:7e:5a:bd:8b: d8:4a:28:c7 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WVIkc2VIUJBe0vD7dxjdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWYxZmM5MDQ2NzE5MmM3NjMwZGZmNzgxNTY0YjM0MzI4YzlmOGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy47MI8qrhzWIOvFz5KoRoxPTb3pl MQuI4XdV2kXt+13ZEl1WdV1+TdGMVe21vpsI8DHgZjMp6hze/LdtNFhXAavBD2Q8 ySOR3hYbdhy5tsFxMh5OnVTGez2s3uzNECEQg7/6K9OpqhnJdcnPht1qsFXUT0ec 1MDRhJYTGiKosp/9l+iTzjuZ4GcQIBwqD9Y78qXDmB81AZjDQB7WMTbLmTAIJWhk zAYI44KWYpd9ZECRRqAxJREPYJvGaAu3J3FZIVZuKQS5VV5bDQD56bH9w96UwhQg 1fiJOxqH0bHMBaDoYUN0gYR0WX2dWhG7kOBVAgOlFKR0hxE4dlWK5x2NNwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFLnx/JBGcZLHYw3/eBVks0MoyfjeMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL3VmSDhrRVp4a3NkakRmOTRGV1N6UXlqSi1ONC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFdclAw DQYJKoZIhvcNAQELBQADggEBAFVWNCQ+sd00ILRBZPC1U8J/8DVbtDY6XBL5tmIr KJccaw03va8+tsiuBnTbBV0/r10tMFANUdoNld4XM9pnCVGaGv3shoKqJDVWqOMi NIWW9sZUYFIAmQMwNl+GwgWtl0TCXYVgeDjXxCcennffUZ/lhPPotRLtcqGqBqQr 2ny3HIjLSTQ03DuGmwvaHJ1OOwkxMDjBJjEVeEpF+dyk4sInHKNhTwx/1rQoA3dZ v1PC7g2+ORsQP9l/dxCxQO7cBwaKe6OuN3f5Ck8OYFtC2yDh3a4er2DYiqjKxaaE 3LDVhy+vBMbmhCQUixCUcvib6bbRUIlTE+yvflq9i9hKKMc= -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:58 2026 by rpki-client