This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/ui51XHUFpfxoecFvT4ZbcqKc5iY.roa File: ui51XHUFpfxoecFvT4ZbcqKc5iY.roa (raw, json) Hash identifier: da6ufJ9bXMD7myfVTTwqLlgukGg80tnNiHNQQSUgwz4= Subject key identifier: BA:2E:75:5C:75:05:A5:FC:68:79:C1:6F:4F:86:5B:72:A2:9C:E6:26 Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0 Certificate serial: 019B76EAC9DE8FED3F25F306862C0BF14CFA Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/ui51XHUFpfxoecFvT4ZbcqKc5iY.roa Signing time: Thu 01 Jan 2026 00:17:36 +0000 ROA not before: Thu 01 Jan 2026 00:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 132892 IP address blocks: 141.101.88.0/24 maxlen: 24 141.101.89.0/24 maxlen: 24 2a06:98c0:3600::/48 maxlen: 48 2a06:98c0:3601::/48 maxlen: 48 2a06:98c0:3602::/48 maxlen: 48 2a06:98c0:3603::/48 maxlen: 48 2a06:98c0:3604::/48 maxlen: 48 2a06:98c0:3605::/48 maxlen: 48 2a06:98c0:3606::/48 maxlen: 48 2a06:98c0:3607::/48 maxlen: 48 2a06:98c0:3608::/48 maxlen: 48 2a06:98c0:3609::/48 maxlen: 48 2a06:98c0:360a::/48 maxlen: 48 2a06:98c0:360b::/48 maxlen: 48 2a06:98c0:360c::/48 maxlen: 48 2a06:98c0:360d::/48 maxlen: 48 2a06:98c0:360f::/48 maxlen: 48 2a06:98c0:3610::/48 maxlen: 48 2a06:98c0:3611::/48 maxlen: 48 2a06:98c0:3613::/48 maxlen: 48 2a06:98c0:3614::/48 maxlen: 48 2a06:98c0:3615::/48 maxlen: 48 2a06:98c0:3617::/48 maxlen: 48 2a06:98c0:361c::/48 maxlen: 48 2a06:98c0:361d::/48 maxlen: 48 2a06:98c0:361f::/48 maxlen: 48 2a06:98c0:3620::/48 maxlen: 48 2a06:98c0:3621::/48 maxlen: 48 2a06:98c0:3622::/48 maxlen: 48 2a06:98c0:3623::/48 maxlen: 48 2a06:98c0:3624::/48 maxlen: 48 2a06:98c0:3625::/48 maxlen: 48 2a06:98c0:3628::/48 maxlen: 48 2a06:98c0:3629::/48 maxlen: 48 2a06:98c0:362a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c9:de:8f:ed:3f:25:f3:06:86:2c:0b:f1:4c:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0 Validity Not Before: Jan 1 00:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba2e755c7505a5fc6879c16f4f865b72a29ce626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:66:7f:e0:1f:d3:4d:0e:70:da:91:29:5a:15: 6a:5d:bc:61:94:66:2a:f7:c7:20:6a:a2:4d:3d:bb: 16:43:3d:c3:ef:d6:c4:5f:b5:fa:0b:02:a7:8b:ea: 0c:67:59:46:60:e3:c4:bb:41:09:f1:0a:a0:77:56: 97:ff:62:f4:36:a6:9e:de:46:6e:4f:e6:92:2a:63: 7d:0a:e2:da:e5:6f:f7:cb:45:37:8f:28:ed:7c:7f: ad:7d:88:63:89:62:c2:a0:8f:18:90:68:32:87:a1: ed:33:0b:fd:dc:9e:d8:bf:64:61:e6:65:a1:94:5e: bc:fa:25:98:e6:87:e8:b0:e4:45:eb:6a:26:d9:c7: a6:f5:81:75:37:1f:d2:a4:17:2a:c6:13:cf:f3:5b: 0e:d0:c2:99:e8:13:b2:e7:a2:a8:30:12:99:bd:a1: 6d:44:df:24:f6:11:5a:6c:cd:ad:bb:ab:e5:5a:1e: 9f:17:3e:c4:8f:e3:a7:9f:83:8a:c8:20:07:d2:ba: 1c:62:2c:0c:c2:7b:0c:08:85:6e:0a:4d:89:f4:b3: c8:be:f7:bf:75:27:58:77:17:07:f2:97:f2:71:cf: 47:2d:e5:3b:6d:af:a6:4f:02:2a:2a:34:1d:bf:e9: ef:f3:d9:55:9c:78:34:56:76:63:44:b3:9d:da:79: b2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:2E:75:5C:75:05:A5:FC:68:79:C1:6F:4F:86:5B:72:A2:9C:E6:26 X509v3 Authority Key Identifier: keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/ui51XHUFpfxoecFvT4ZbcqKc5iY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.101.88.0/23 IPv6: 2a06:98c0:3600::-2a06:98c0:360d:ffff:ffff:ffff:ffff:ffff 2a06:98c0:360f::-2a06:98c0:3611:ffff:ffff:ffff:ffff:ffff 2a06:98c0:3613::-2a06:98c0:3615:ffff:ffff:ffff:ffff:ffff 2a06:98c0:3617::/48 2a06:98c0:361c::/47 2a06:98c0:361f::-2a06:98c0:3625:ffff:ffff:ffff:ffff:ffff 2a06:98c0:3628::-2a06:98c0:362a:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 1e:62:ee:0e:d6:fa:15:0e:cb:26:06:80:a2:37:fd:bd:14:31: 97:51:df:92:ad:80:d4:6e:70:c9:44:65:b4:fd:50:0c:c6:74: fb:77:44:1f:6c:2b:b6:b0:e3:83:df:3d:35:80:0e:09:76:0e: 6c:e3:02:13:58:db:2c:b2:86:47:2d:7f:ef:40:18:8a:63:9c: c2:67:1e:72:a0:40:f4:79:b9:57:b8:9d:18:c6:ee:39:ae:50: d0:3d:76:50:0e:ea:fa:2a:06:f8:15:23:1b:6b:09:66:2b:28: b4:15:a2:26:d3:55:dd:86:97:04:86:e7:ff:87:b0:cf:58:45: 5b:81:24:d9:12:5f:8b:b8:46:3b:e0:64:21:b0:ea:f9:76:fe: ec:52:3b:df:34:7a:08:1c:8e:05:0e:b1:d4:a8:c0:b5:10:ad: 2a:6b:59:f0:98:92:ee:0f:bf:7c:f1:a7:c3:a7:8c:d6:3e:ce: 90:07:ee:45:97:c2:54:05:1a:48:9e:f0:b2:73:32:0f:05:32: cd:7e:02:b8:b6:0f:7d:90:7a:a8:a6:6a:48:03:c6:62:ff:d0: 8e:77:dd:5d:8e:f1:01:54:e7:92:0c:b3:cd:30:14:56:1b:3b: 2f:10:81:02:31:ee:4b:c2:ab:21:f4:34:4e:c2:48:53:db:fb: ff:7d:e3:a8 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgISAZt26snej+0/JfMGhiwL8Uz6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZDViZmFkNDVkN2M2NWE2ZTM0MzAyODUwOWZkMTg5MmU5 N2I5ZDAwHhcNMjYwMTAxMDAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTJlNzU1Yzc1MDVhNWZjNjg3OWMxNmY0Zjg2NWI3MmEyOWNlNjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2Z/4B/TTQ5w2pEpWhVqXbxhlGYq 98cgaqJNPbsWQz3D79bEX7X6CwKni+oMZ1lGYOPEu0EJ8Qqgd1aX/2L0Nqae3kZu T+aSKmN9CuLa5W/3y0U3jyjtfH+tfYhjiWLCoI8YkGgyh6HtMwv93J7Yv2Rh5mWh lF68+iWY5ofosORF62om2cem9YF1Nx/SpBcqxhPP81sO0MKZ6BOy56KoMBKZvaFt RN8k9hFabM2tu6vlWh6fFz7Ej+Onn4OKyCAH0rocYiwMwnsMCIVuCk2J9LPIvve/ dSdYdxcH8pfycc9HLeU7ba+mTwIqKjQdv+nv89lVnHg0VnZjRLOd2nmyiQIDAQAB o4ICiTCCAoUwHQYDVR0OBBYEFLoudVx1BaX8aHnBb0+GW3KinOYmMB8GA1UdIwQY MBaAFJnVv61F18ZabjQwKFCf0Ykul7nQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQt NzU1MTgwOWNiNzMxLzEvdWk1MVhIVUZwZnhvZWNGdlQ0WmJjcUtjNWlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQtNzU1MTgwOWNiNzMx LzEvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGeBggrBgEFBQcBBwEB/wSBjjCBizAMBAIAATAGAwQBjWVY MHsEAgACMHUwEQMGASoGmMA2AwcBKgaYwDYMMBIDBwAqBpjANg8DBwEqBpjANhAw EgMHACoGmMA2EwMHASoGmMA2FAMHACoGmMA2FwMHASoGmMA2HDASAwcAKgaYwDYf AwcBKgaYwDYkMBIDBwMqBpjANigDBwAqBpjANiowDQYJKoZIhvcNAQELBQADggEB AB5i7g7W+hUOyyYGgKI3/b0UMZdR35KtgNRucMlEZbT9UAzGdPt3RB9sK7aw44Pf PTWADgl2DmzjAhNY2yyyhkctf+9AGIpjnMJnHnKgQPR5uVe4nRjG7jmuUNA9dlAO 6voqBvgVIxtrCWYrKLQVoibTVd2GlwSG5/+HsM9YRVuBJNkSX4u4RjvgZCGw6vl2 /uxSO980eggcjgUOsdSowLUQrSprWfCYku4Pv3zxp8OnjNY+zpAH7kWXwlQFGkie 8LJzMg8FMs1+Ari2D32QeqimakgDxmL/0I533V2O8QFU55IMs80wFFYbOy8QgQIx 7kvCqyH0NE7CSFPb+/9946g= -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:07 2026 by rpki-client