This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/uwmHRiIuTJylz9Gdo1W-0ay8bNM.roa File: uwmHRiIuTJylz9Gdo1W-0ay8bNM.roa (raw, json) Hash identifier: TKuZkBqiGMkGtIq0Yy2Mt/oKfXM7W5PYWJgE3e9qIwo= Subject key identifier: BB:09:87:46:22:2E:4C:9C:A5:CF:D1:9D:A3:55:BE:D1:AC:BC:6C:D3 Certificate issuer: /CN=2d28cfa3fd2da9caaa659284758dee67099934f8 Certificate serial: 019B775907D21CA4931EE1EC3071BC86073E Authority key identifier: 2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/uwmHRiIuTJylz9Gdo1W-0ay8bNM.roa Signing time: Thu 01 Jan 2026 02:18:01 +0000 ROA not before: Thu 01 Jan 2026 02:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205800 IP address blocks: 217.145.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.mft rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:07:d2:1c:a4:93:1e:e1:ec:30:71:bc:86:07:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d28cfa3fd2da9caaa659284758dee67099934f8 Validity Not Before: Jan 1 02:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb098746222e4c9ca5cfd19da355bed1acbc6cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ad:81:db:09:2e:bc:a5:09:2b:c8:24:05:9c: b6:0f:fe:c3:99:41:67:da:03:5d:31:18:94:8e:f4: 9c:6d:87:2a:07:30:b8:04:2a:06:fc:7e:8d:81:b2: 10:e5:0f:5e:d7:09:93:2a:be:68:30:b6:71:cb:dc: 5f:bd:29:58:6f:06:6d:1d:51:42:90:d8:a3:3b:a3: 36:28:95:1d:ac:94:0c:0b:90:6d:bd:2a:d2:80:19: ba:46:bc:0a:c4:19:1d:a1:e4:f2:c9:b3:50:c5:42: d1:26:b9:89:17:63:04:1f:b5:9f:b4:aa:a6:a6:e2: 6a:eb:ba:a8:26:e4:97:ff:6c:af:26:f5:da:2f:52: 26:57:80:13:da:00:b1:45:84:73:6f:bc:ab:ac:68: d8:77:0e:53:f0:55:40:aa:59:f8:8c:09:73:4f:38: cb:74:3b:83:ee:42:fc:b8:59:fb:d7:31:a9:df:2f: 62:89:34:88:c2:68:d5:da:a7:76:e1:28:3b:ca:2f: c5:be:cb:91:e2:af:43:8e:8e:15:83:e0:7b:6f:2e: 12:22:c1:b9:23:f3:18:37:2d:ee:30:91:95:cf:fb: 8c:63:4a:81:cb:f9:58:c2:21:c5:68:8d:e4:1c:f6: a7:ef:54:24:c7:f2:17:fe:50:f4:ee:42:35:8d:7d: 9b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:09:87:46:22:2E:4C:9C:A5:CF:D1:9D:A3:55:BE:D1:AC:BC:6C:D3 X509v3 Authority Key Identifier: keyid:2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/uwmHRiIuTJylz9Gdo1W-0ay8bNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.145.231.0/24 Signature Algorithm: sha256WithRSAEncryption 52:e0:1f:49:7f:69:e1:8c:03:e1:1a:15:44:1a:a8:8b:21:28: 78:7d:61:e7:e9:e3:8e:e0:9b:51:7f:fc:65:4d:2b:19:c3:ed: 81:cb:23:cc:bf:db:b8:76:fb:1a:41:70:f7:41:69:93:20:e8: 48:cb:e8:fb:c6:69:b4:b6:e4:3e:82:d4:62:34:cb:81:ba:7b: 3b:18:53:66:77:b7:b9:1e:02:74:ec:5b:29:af:24:81:1b:da: 97:d5:72:98:6b:19:98:2f:53:33:19:4a:b4:fb:77:e2:fc:1b: ae:2f:e5:be:38:0d:31:bd:c6:cd:30:38:5a:86:10:d6:9c:e8: 57:47:92:4a:89:29:a7:d5:22:ff:86:4f:2c:b5:4e:d0:a4:74: fc:27:7e:92:d0:c9:9a:45:2b:94:a3:46:0f:40:19:b0:de:da: 31:52:00:db:4f:b7:97:81:cf:d6:0b:83:e2:3e:03:ea:b1:83: 3d:86:12:8a:d6:6f:8c:fb:b2:98:9a:ad:04:3b:f1:2a:d6:4b: 25:74:47:2c:fb:df:e2:f2:f4:36:22:0f:e8:a6:d6:d6:e7:05: 96:9c:5e:55:99:e7:f0:3f:9c:c6:7f:05:05:48:43:ec:bb:7a: 44:25:dd:71:84:18:e4:71:b0:00:13:1b:81:60:bf:ab:cc:f3: c2:03:02:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WQfSHKSTHuHsMHG8hgc+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMjhjZmEzZmQyZGE5Y2FhYTY1OTI4NDc1OGRlZTY3MDk5 OTM0ZjgwHhcNMjYwMTAxMDIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjA5ODc0NjIyMmU0YzljYTVjZmQxOWRhMzU1YmVkMWFjYmM2Y2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq2B2wkuvKUJK8gkBZy2D/7DmUFn 2gNdMRiUjvScbYcqBzC4BCoG/H6NgbIQ5Q9e1wmTKr5oMLZxy9xfvSlYbwZtHVFC kNijO6M2KJUdrJQMC5BtvSrSgBm6RrwKxBkdoeTyybNQxULRJrmJF2MEH7WftKqm puJq67qoJuSX/2yvJvXaL1ImV4AT2gCxRYRzb7yrrGjYdw5T8FVAqln4jAlzTzjL dDuD7kL8uFn71zGp3y9iiTSIwmjV2qd24Sg7yi/FvsuR4q9Djo4Vg+B7by4SIsG5 I/MYNy3uMJGVz/uMY0qBy/lYwiHFaI3kHPan71Qkx/IX/lD07kI1jX2b0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLsJh0YiLkycpc/RnaNVvtGsvGzTMB8GA1UdIwQY MBaAFC0oz6P9LanKqmWShHWN7mcJmTT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFNqUG9fMHRxY3FxWlpLRWRZM3Vad21aTlBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mZWJhYjAtZDkzYS00NzA0LTlhNzEt M2FkNTJlOGI5NjI4LzEvdXdtSFJpSXVUSnlsejlHZG8xVy0wYXk4Yk5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mZWJhYjAtZDkzYS00NzA0LTlhNzEtM2FkNTJlOGI5NjI4 LzEvTFNqUG9fMHRxY3FxWlpLRWRZM3Vad21aTlBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ZHnMA0G CSqGSIb3DQEBCwUAA4IBAQBS4B9Jf2nhjAPhGhVEGqiLISh4fWHn6eOO4JtRf/xl TSsZw+2ByyPMv9u4dvsaQXD3QWmTIOhIy+j7xmm0tuQ+gtRiNMuBuns7GFNmd7e5 HgJ07FsprySBG9qX1XKYaxmYL1MzGUq0+3fi/BuuL+W+OA0xvcbNMDhahhDWnOhX R5JKiSmn1SL/hk8stU7QpHT8J36S0MmaRSuUo0YPQBmw3toxUgDbT7eXgc/WC4Pi PgPqsYM9hhKK1m+M+7KYmq0EO/Eq1ksldEcs+9/i8vQ2Ig/optbW5wWWnF5Vmefw P5zGfwUFSEPsu3pEJd1xhBjkcbAAExuBYL+rzPPCAwIP -----END CERTIFICATE-----Generated at Sun Jan 25 18:09:32 2026 by rpki-client