This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/1-ujynZWH9--RNNC5_Uk-oM46YWY.roa File: 1-ujynZWH9--RNNC5_Uk-oM46YWY.roa (raw, json) Hash identifier: Z97zfAIXnGKGU4beYEDjMrYWLoViOMxIYSMPQ34jGYc= Subject key identifier: FA:E8:F2:9D:95:87:F7:EF:91:34:D0:B9:FD:49:3E:A0:CE:3A:61:66 Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362 Certificate serial: 019B7C7F7E5BC4EF8C8A1FD52C2BDFAF84AF Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/1-ujynZWH9--RNNC5_Uk-oM46YWY.roa Signing time: Fri 02 Jan 2026 02:18:08 +0000 ROA not before: Fri 02 Jan 2026 02:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214208 IP address blocks: 85.8.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:7e:5b:c4:ef:8c:8a:1f:d5:2c:2b:df:af:84:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362 Validity Not Before: Jan 2 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fae8f29d9587f7ef9134d0b9fd493ea0ce3a6166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4f:33:f8:dd:7b:16:07:88:a8:49:cb:0f:e9: 70:4f:b8:0e:41:c9:1a:e3:c3:74:69:de:8e:3c:b1: d3:d4:31:7c:e7:90:70:df:6a:9f:cf:3e:f9:cb:17: 33:7f:22:84:20:37:ea:bc:da:42:93:d5:bd:39:4f: 16:f9:61:a2:a7:59:90:3b:57:3f:7f:cc:dd:49:cd: 6a:bf:27:ad:a0:82:dd:c8:09:a6:a4:83:e9:49:28: a1:c8:d8:6e:68:5b:ee:0a:a0:a8:b2:e7:8a:55:6a: 3e:a1:fc:13:2a:14:52:06:7f:69:f9:8e:71:ae:ee: 66:c0:1c:10:91:38:59:66:38:3f:86:42:30:9d:94: e6:2c:80:9d:bc:dd:1d:ab:29:a4:4d:2f:38:c9:48: 73:2d:e4:be:98:f2:47:d3:8a:0c:e7:da:08:25:7e: 3b:69:30:70:fd:84:46:df:71:db:44:b6:59:c0:ec: 81:e7:eb:d3:1f:6f:35:1a:88:25:cc:a6:11:b6:e0: 98:d2:50:76:ae:b8:7a:0c:f7:d9:c1:1c:79:1d:cb: de:4b:7d:98:34:31:a0:c6:16:f7:86:be:81:97:66: a2:50:ed:02:d6:7a:c7:78:5f:26:06:e3:99:d2:52: 78:41:ed:7f:cb:21:af:0a:af:76:d8:dc:6f:3d:a3: 9d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E8:F2:9D:95:87:F7:EF:91:34:D0:B9:FD:49:3E:A0:CE:3A:61:66 X509v3 Authority Key Identifier: keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/1-ujynZWH9--RNNC5_Uk-oM46YWY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.8.170.0/24 Signature Algorithm: sha256WithRSAEncryption 42:92:0a:8f:7f:d5:08:b9:e0:02:60:ae:8f:bb:26:0c:55:f4: 00:61:af:61:d3:5d:11:dd:85:03:1e:bb:6e:4e:30:af:a1:1a: 5f:a4:de:31:3e:62:ec:04:13:14:5a:7e:08:71:98:c1:3c:2f: 4a:98:fe:10:d8:08:a4:b5:65:cc:38:f1:cb:08:a8:74:78:37: 9f:34:65:b7:dd:7d:ee:11:c3:0e:3d:10:56:e7:5f:ab:e4:7d: b4:6b:73:68:eb:d0:26:93:b9:10:ea:b3:9f:5d:b4:0b:09:92: 6a:15:0b:73:e5:7e:c4:78:0f:bb:94:ef:5c:cf:f2:22:73:0b: 62:1d:4e:ec:20:a9:12:05:af:5f:97:95:c6:df:c4:1d:81:90: 8f:0a:ab:43:5b:8e:6b:e3:f7:5c:9b:5d:43:ab:e9:50:52:50: 9f:98:f9:8e:97:33:64:d2:cb:7b:99:4b:b3:a7:6b:09:91:93: 53:b3:07:20:81:2d:b1:16:b9:71:f1:19:73:c6:1f:c1:1e:ba: a7:11:ae:2e:a0:e3:89:d7:90:42:fb:fb:cb:09:4c:85:16:e9: d1:4c:b8:75:e3:2a:4c:e2:2c:5a:ca:6f:3b:75:e7:4e:03:91: f7:46:4a:9e:f3:1d:35:12:ee:a3:55:73:0e:e3:f7:db:76:55: 58:f7:f9:97 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8f35bxO+Mih/VLCvfr4SvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5 NjMzNjIwHhcNMjYwMTAyMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWU4ZjI5ZDk1ODdmN2VmOTEzNGQwYjlmZDQ5M2VhMGNlM2E2MTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE8z+N17FgeIqEnLD+lwT7gOQcka 48N0ad6OPLHT1DF855Bw32qfzz75yxczfyKEIDfqvNpCk9W9OU8W+WGip1mQO1c/ f8zdSc1qvyetoILdyAmmpIPpSSihyNhuaFvuCqCosueKVWo+ofwTKhRSBn9p+Y5x ru5mwBwQkThZZjg/hkIwnZTmLICdvN0dqymkTS84yUhzLeS+mPJH04oM59oIJX47 aTBw/YRG33HbRLZZwOyB5+vTH281GoglzKYRtuCY0lB2rrh6DPfZwRx5HcveS32Y NDGgxhb3hr6Bl2aiUO0C1nrHeF8mBuOZ0lJ4Qe1/yyGvCq922NxvPaOdYQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPro8p2Vh/fvkTTQuf1JPqDOOmFmMB8GA1UdIwQY MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt YjE2Y2I0ZGZhZGQzLzEvMS11anluWldIOS0tUk5OQzVfVWstb000NllXWS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOWIvOTFhZjY2LWQzOTQtNDJmYS1hMGM2LWIxNmNiNGRmYWRk My8xL2duWURxVHZLTWJBWTlSSDIxTEMzVkc2V00ySS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFUIqjAN BgkqhkiG9w0BAQsFAAOCAQEAQpIKj3/VCLngAmCuj7smDFX0AGGvYdNdEd2FAx67 bk4wr6EaX6TeMT5i7AQTFFp+CHGYwTwvSpj+ENgIpLVlzDjxywiodHg3nzRlt919 7hHDDj0QVudfq+R9tGtzaOvQJpO5EOqzn120CwmSahULc+V+xHgPu5TvXM/yInML Yh1O7CCpEgWvX5eVxt/EHYGQjwqrQ1uOa+P3XJtdQ6vpUFJQn5j5jpczZNLLe5lL s6drCZGTU7MHIIEtsRa5cfEZc8YfwR66pxGuLqDjideQQvv7ywlMhRbp0Uy4deMq TOIsWspvO3XnTgOR90ZKnvMdNRLuo1VzDuP323ZVWPf5lw== -----END CERTIFICATE-----Generated at Sun Jan 25 10:19:56 2026 by rpki-client