This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/UvnplBlAME8V6RCwXowo0AUAHk4.roa File: UvnplBlAME8V6RCwXowo0AUAHk4.roa (raw, json) Hash identifier: +H2PbSdtNYHgbWD35gGHr3HaGptf/nEkf5PHmssWSEk= Subject key identifier: 52:F9:E9:94:19:40:30:4F:15:E9:10:B0:5E:8C:28:D0:05:00:1E:4E Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718 Certificate serial: 019B7F1504FF17B79C1AFDAE7D47142B0F37 Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/UvnplBlAME8V6RCwXowo0AUAHk4.roa Signing time: Fri 02 Jan 2026 14:20:42 +0000 ROA not before: Fri 02 Jan 2026 14:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59729 IP address blocks: 91.210.166.0/24 maxlen: 24 91.215.152.0/24 maxlen: 24 91.215.153.0/24 maxlen: 24 91.215.154.0/24 maxlen: 24 91.215.155.0/24 maxlen: 24 91.247.36.0/23 maxlen: 23 185.190.250.0/24 maxlen: 24 2001:67c:2f4c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:04:ff:17:b7:9c:1a:fd:ae:7d:47:14:2b:0f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718 Validity Not Before: Jan 2 14:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52f9e9941940304f15e910b05e8c28d005001e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:88:5a:78:fb:23:61:2b:88:9d:17:5b:1d:09: 52:f5:56:96:c2:29:38:f8:c3:d5:b8:df:c3:13:10: 72:ae:5e:42:fb:45:25:65:92:b5:75:c7:89:15:12: f5:5e:5b:2e:c3:c5:8d:cd:6b:47:ce:52:e3:04:5c: 09:d0:1f:35:01:67:e0:5c:d3:1b:4f:03:93:c0:b9: ba:ff:50:ec:33:08:25:36:97:2b:93:65:86:ea:1b: 9c:f6:0b:69:f6:e8:a8:c5:39:88:34:4d:18:7a:60: 3b:e6:f9:b3:72:44:90:b1:1d:cc:a1:e2:2c:b7:4d: eb:8e:b8:e1:70:49:15:87:f4:c8:e2:1c:9a:6b:f6: 91:4e:d3:26:c7:3f:df:68:2d:8b:58:aa:cb:94:7a: 5f:a6:36:ad:94:e7:ea:a9:4b:50:6e:40:0c:5c:f0: fd:b4:9a:6f:c1:8a:86:48:61:89:00:78:36:36:f2: 0c:c2:e8:13:2b:e0:0c:33:83:d6:db:1e:f0:8c:dc: 71:b6:63:77:3a:d6:bd:12:59:2c:9f:0a:64:60:2b: cf:cf:f3:55:c0:88:31:56:08:3f:88:3b:54:13:02: ff:b4:16:7b:8a:06:60:8b:15:9b:5e:a1:42:86:a8: 7b:96:fa:2e:90:d9:ef:94:ba:cc:e1:00:af:e3:50: ba:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F9:E9:94:19:40:30:4F:15:E9:10:B0:5E:8C:28:D0:05:00:1E:4E X509v3 Authority Key Identifier: keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/UvnplBlAME8V6RCwXowo0AUAHk4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.210.166.0/24 91.215.152.0/22 91.247.36.0/23 185.190.250.0/24 IPv6: 2001:67c:2f4c::/48 Signature Algorithm: sha256WithRSAEncryption 8a:c1:4e:1b:03:11:9a:8d:12:96:90:8d:5d:45:bd:5c:e0:4f: 2e:72:9d:6c:7f:43:94:49:8b:4e:50:d7:95:60:1b:54:65:bf: 3b:b1:3b:8b:76:3a:ae:64:a9:a0:54:b1:cc:b3:c2:4e:ad:9a: 11:29:68:9d:83:5d:e3:60:62:dc:19:bf:2b:3d:b0:6e:6c:f5: 1a:c0:22:7f:fe:30:2e:4d:f3:79:99:43:59:96:ca:4e:c0:0d: 7b:70:56:fe:22:a7:cc:6a:38:1e:e3:b1:aa:4e:27:19:37:f1: cb:63:09:c6:09:ea:e8:8f:93:4e:75:a5:af:9a:db:fd:6e:0e: a4:8e:b5:02:aa:16:62:13:07:63:9b:9c:36:12:ae:c4:68:ce: 34:32:ea:d5:ea:64:54:33:55:d8:a1:2d:28:cb:c1:0c:fc:a8: f2:81:3f:3b:3e:0f:86:47:2e:a1:59:b8:ab:96:c6:37:9c:a8: bc:16:62:7a:a4:3c:87:29:ae:d5:6e:7a:18:00:11:9c:d1:a7: 4e:8e:fe:c4:6f:64:56:bb:60:fa:7d:6a:3d:a9:a6:bf:16:a2: c3:27:e1:34:9e:e6:1a:42:11:59:cc:0d:01:d2:b9:08:41:51: 51:9a:f5:d5:bd:e4:97:1d:e9:06:05:9e:7c:96:ab:e0:eb:41: 0e:61:c3:09 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt/FQT/F7ecGv2ufUcUKw83MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmY2NkZmZkYTZhNGM0ODkxNGI1ZThjZGU3ZGE1ZDgyMGI5 Yzk3MTgwHhcNMjYwMTAyMTQyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmY5ZTk5NDE5NDAzMDRmMTVlOTEwYjA1ZThjMjhkMDA1MDAxZTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4haePsjYSuInRdbHQlS9VaWwik4 +MPVuN/DExByrl5C+0UlZZK1dceJFRL1Xlsuw8WNzWtHzlLjBFwJ0B81AWfgXNMb TwOTwLm6/1DsMwglNpcrk2WG6huc9gtp9uioxTmINE0YemA75vmzckSQsR3MoeIs t03rjrjhcEkVh/TI4hyaa/aRTtMmxz/faC2LWKrLlHpfpjatlOfqqUtQbkAMXPD9 tJpvwYqGSGGJAHg2NvIMwugTK+AMM4PW2x7wjNxxtmN3Ota9ElksnwpkYCvPz/NV wIgxVgg/iDtUEwL/tBZ7igZgixWbXqFChqh7lvoukNnvlLrM4QCv41C6eQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFFL56ZQZQDBPFekQsF6MKNAFAB5OMB8GA1UdIwQY MBaAFG/M3/2mpMSJFLXozefaXYILnJcYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjh6Zl9hYWt4SWtVdGVqTjU5cGRnZ3VjbHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jYjAxNTMtODAzYS00YmI2LWIxOWQt YTc3NGU0MWQyNjRjLzEvVXZucGxCbEFNRThWNlJDd1hvd28wQVVBSGs0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9jYjAxNTMtODAzYS00YmI2LWIxOWQtYTc3NGU0MWQyNjRj LzEvYjh6Zl9hYWt4SWtVdGVqTjU5cGRnZ3VjbHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQAW9KmAwQC W9eYAwQBW/ckAwQAub76MA8EAgACMAkDBwAgAQZ8L0wwDQYJKoZIhvcNAQELBQAD ggEBAIrBThsDEZqNEpaQjV1FvVzgTy5ynWx/Q5RJi05Q15VgG1RlvzuxO4t2Oq5k qaBUscyzwk6tmhEpaJ2DXeNgYtwZvys9sG5s9RrAIn/+MC5N83mZQ1mWyk7ADXtw Vv4ip8xqOB7jsapOJxk38ctjCcYJ6uiPk051pa+a2/1uDqSOtQKqFmITB2ObnDYS rsRozjQy6tXqZFQzVdihLSjLwQz8qPKBPzs+D4ZHLqFZuKuWxjecqLwWYnqkPIcp rtVuehgAEZzRp06O/sRvZFa7YPp9aj2ppr8WosMn4TSe5hpCEVnMDQHSuQhBUVGa 9dW95Jcd6QYFnnyWq+DrQQ5hwwk= -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:14 2026 by rpki-client