This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/Uqw9Dlmoq1jySYJ2AjzEpmjf6Dw.roa File: Uqw9Dlmoq1jySYJ2AjzEpmjf6Dw.roa (raw, json) Hash identifier: Yj3I6/Qycmom0mdi7MnamZ5gOAsgybPCnXXKUt6eniM= Subject key identifier: 52:AC:3D:0E:59:A8:AB:58:F2:49:82:76:02:3C:C4:A6:68:DF:E8:3C Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1 Certificate serial: 019B79EBF0F2DBE2AB29E37FAEAF043E983F Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/Uqw9Dlmoq1jySYJ2AjzEpmjf6Dw.roa Signing time: Thu 01 Jan 2026 14:17:44 +0000 ROA not before: Thu 01 Jan 2026 14:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6697 IP address blocks: 91.149.157.0/24 maxlen: 24 91.149.158.0/24 maxlen: 24 91.149.166.0/24 maxlen: 24 93.125.30.0/23 maxlen: 23 93.125.31.0/24 maxlen: 24 93.125.38.0/24 maxlen: 24 93.125.48.0/24 maxlen: 24 93.125.53.0/24 maxlen: 24 93.125.71.0/24 maxlen: 24 93.125.99.0/24 maxlen: 24 178.172.148.0/24 maxlen: 24 178.172.160.0/22 maxlen: 22 178.172.172.0/23 maxlen: 23 178.172.201.0/24 maxlen: 24 178.172.235.0/24 maxlen: 24 178.172.236.0/24 maxlen: 24 178.172.244.0/24 maxlen: 24 178.172.250.0/24 maxlen: 24 178.172.254.0/24 maxlen: 24 2a04:2e80:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:f0:f2:db:e2:ab:29:e3:7f:ae:af:04:3e:98:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1 Validity Not Before: Jan 1 14:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52ac3d0e59a8ab58f2498276023cc4a668dfe83c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d8:87:4b:9e:83:3e:8b:ee:dd:04:f9:25:ae: f8:e7:9b:a5:9f:36:6b:4c:82:a0:a6:e1:9a:c7:41: e0:10:0b:76:dc:2c:e6:9c:92:68:09:0d:b4:83:83: 62:49:a2:e8:4b:f7:31:f5:39:0f:e6:01:0b:09:e8: 3c:1d:32:6b:25:21:df:93:32:f6:e6:77:fd:04:c7: 02:33:d0:39:dd:51:22:ae:c7:39:60:68:81:29:2f: ff:34:4b:32:de:0b:2c:5f:41:ec:48:1a:6d:e5:e1: 43:cd:33:3b:25:de:3d:83:aa:8c:6a:c9:f7:f0:27: e5:8c:ca:0c:7b:32:46:b3:3b:74:3c:2c:89:75:3c: 75:48:19:86:db:ac:67:06:4b:65:56:20:ee:d6:28: be:eb:a4:13:0e:47:a3:a0:19:11:57:8f:10:44:82: c9:fa:72:19:dd:ff:62:97:62:60:22:8a:be:ce:6f: 73:b2:2f:29:2e:b1:ab:5b:02:68:94:a2:bb:9c:71: 75:68:1d:f4:d7:56:02:b4:ce:5d:80:c4:81:c3:1b: a9:ab:f2:20:43:0d:e9:74:2f:58:d9:28:3b:25:06: 70:fd:02:0d:69:c6:f2:06:59:71:bd:bb:28:de:c6: 28:af:b7:6d:23:7e:92:93:c4:7d:95:b3:2e:b5:32: 53:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:AC:3D:0E:59:A8:AB:58:F2:49:82:76:02:3C:C4:A6:68:DF:E8:3C X509v3 Authority Key Identifier: keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/Uqw9Dlmoq1jySYJ2AjzEpmjf6Dw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.149.157.0-91.149.158.255 91.149.166.0/24 93.125.30.0/23 93.125.38.0/24 93.125.48.0/24 93.125.53.0/24 93.125.71.0/24 93.125.99.0/24 178.172.148.0/24 178.172.160.0/22 178.172.172.0/23 178.172.201.0/24 178.172.235.0-178.172.236.255 178.172.244.0/24 178.172.250.0/24 178.172.254.0/24 IPv6: 2a04:2e80:7::/48 Signature Algorithm: sha256WithRSAEncryption 71:6d:2e:c5:34:64:77:6f:19:29:aa:86:5f:47:bd:24:f3:58: a4:8b:9a:b6:f5:5d:7d:6c:aa:9f:16:e3:21:f3:d3:27:c9:c4: 82:70:ad:c5:93:dd:5a:d2:38:26:4d:79:c5:6c:37:b9:74:a8: cf:c4:20:0a:33:c3:79:f2:96:9e:23:f8:35:05:ae:06:3d:44: 47:4e:e2:f3:17:5e:b3:76:55:05:b4:71:a3:66:6c:07:ee:a9: 1d:cd:85:d3:40:91:02:fd:ae:47:ac:a4:38:21:27:b9:41:c5: 7c:3e:e2:a0:91:d9:73:08:2f:9c:19:01:00:19:d1:5d:7c:17: 81:13:66:a4:dd:b8:e3:71:c7:d3:f5:9a:71:3f:7c:02:90:ba: 83:08:94:e0:c4:38:fb:0e:2c:75:82:f0:3e:5a:76:64:53:81: 68:c2:50:93:41:4c:94:41:3a:6e:96:45:47:e5:3f:94:39:13: 75:ba:53:7c:68:c2:05:ec:7a:c8:9e:98:75:8f:70:59:b0:2f: b5:09:9f:f1:9d:56:44:8f:25:19:ed:7b:05:ac:90:0b:ce:ba: 32:9b:c3:75:16:86:80:8e:82:76:a3:98:b3:cf:4d:3c:55:2e: 95:0b:36:c3:aa:dc:ab:2c:3a:af:de:62:65:de:3a:a8:79:0f: e3:ab:c4:17 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt56/Dy2+KrKeN/rq8EPpg/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMTQ5ZjYyNDQ3ODUzNjg5YzEyZmIyODhhZmViNmI2ODFj ZmViYzEwHhcNMjYwMTAxMTQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmFjM2QwZTU5YThhYjU4ZjI0OTgyNzYwMjNjYzRhNjY4ZGZlODNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49iHS56DPovu3QT5Ja7455ulnzZr TIKgpuGax0HgEAt23CzmnJJoCQ20g4NiSaLoS/cx9TkP5gELCeg8HTJrJSHfkzL2 5nf9BMcCM9A53VEirsc5YGiBKS//NEsy3gssX0HsSBpt5eFDzTM7Jd49g6qMasn3 8CfljMoMezJGszt0PCyJdTx1SBmG26xnBktlViDu1ii+66QTDkejoBkRV48QRILJ +nIZ3f9il2JgIoq+zm9zsi8pLrGrWwJolKK7nHF1aB3011YCtM5dgMSBwxupq/Ig Qw3pdC9Y2Sg7JQZw/QINacbyBllxvbso3sYor7dtI36Sk8R9lbMutTJTlwIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFFKsPQ5ZqKtY8kmCdgI8xKZo3+g8MB8GA1UdIwQY MBaAFH0Un2JEeFNonBL7KIr+traBz+vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTct YWFiMGU0MTRjYzYzLzEvVXF3OURsbW9xMWp5U1lKMkFqekVwbWpmNkR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTctYWFiMGU0MTRjYzYz LzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGcBggrBgEFBQcBBwEB/wSBjDCBiTB2BAIAATBwMAwDBABb lZ0DBABblZ4DBABblaYDBAFdfR4DBABdfSYDBABdfTADBABdfTUDBABdfUcDBABd fWMDBACyrJQDBAKyrKADBAGyrKwDBACyrMkwDAMEALKs6wMEALKs7AMEALKs9AME ALKs+gMEALKs/jAPBAIAAjAJAwcAKgQugAAHMA0GCSqGSIb3DQEBCwUAA4IBAQBx bS7FNGR3bxkpqoZfR70k81iki5q29V19bKqfFuMh89MnycSCcK3Fk91a0jgmTXnF bDe5dKjPxCAKM8N58paeI/g1Ba4GPURHTuLzF16zdlUFtHGjZmwH7qkdzYXTQJEC /a5HrKQ4ISe5QcV8PuKgkdlzCC+cGQEAGdFdfBeBE2ak3bjjccfT9ZpxP3wCkLqD CJTgxDj7Dix1gvA+WnZkU4FowlCTQUyUQTpulkVH5T+UORN1ulN8aMIF7HrInph1 j3BZsC+1CZ/xnVZEjyUZ7XsFrJALzroym8N1FoaAjoJ2o5izz008VS6VCzbDqtyr LDqv3mJl3jqoeQ/jq8QX -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:19 2026 by rpki-client