This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/uibhPc4NbRy01honmhOVxxl-SbI.roa File: uibhPc4NbRy01honmhOVxxl-SbI.roa (raw, json) Hash identifier: aerci+cgin2TuEzTcnRWk0Cjk81xvvnVy7gKs1IvnLQ= Subject key identifier: BA:26:E1:3D:CE:0D:6D:1C:B4:D6:1A:27:9A:13:95:C7:19:7E:49:B2 Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Certificate serial: 019B79ED444807C6BCA1258C5AA2196EF868 Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/uibhPc4NbRy01honmhOVxxl-SbI.roa Signing time: Thu 01 Jan 2026 14:19:11 +0000 ROA not before: Thu 01 Jan 2026 14:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3285 IP address blocks: 80.90.176.0/23 maxlen: 24 95.140.144.0/23 maxlen: 24 95.140.150.0/24 maxlen: 24 2a00:1818::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:44:48:07:c6:bc:a1:25:8c:5a:a2:19:6e:f8:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Validity Not Before: Jan 1 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba26e13dce0d6d1cb4d61a279a1395c7197e49b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c8:a5:48:99:23:08:29:89:41:e9:42:1f:88: 69:64:13:a3:d3:91:7c:33:48:35:b6:40:c1:f4:ae: ea:d4:06:8d:a4:08:49:49:13:ce:0d:f2:16:f7:52: 43:85:e8:4d:76:95:20:73:13:db:5e:4e:0e:54:c6: 5b:09:c0:ba:b1:1f:9e:34:03:df:91:42:28:03:82: 2f:91:c5:ba:0a:5c:05:ed:de:26:b5:a1:a1:a7:d5: 57:04:53:ca:ff:f8:1d:82:ce:c4:27:f4:58:49:84: 77:d2:b9:d3:05:ae:c8:b6:ee:51:14:ea:71:cf:5c: a3:73:37:9b:53:33:8d:90:22:d7:1e:c8:95:2c:87: a0:30:d9:12:c0:7d:e6:29:9b:c8:1c:d2:d1:09:ed: 28:b8:e0:a9:97:df:90:8c:dc:a2:23:38:46:9e:7b: 85:18:b3:f8:2c:15:eb:35:84:e1:c6:0a:0d:fa:5e: 35:6f:4d:1b:63:1b:0c:0c:90:7b:10:3a:19:8b:ae: 71:3b:f5:1d:f9:7d:20:c1:ae:97:78:2d:11:05:cb: 99:90:01:2f:60:9a:b9:46:85:6e:fb:03:78:3a:ec: 45:f5:fa:9c:ba:5e:45:1f:26:9a:cc:09:2e:3b:f0: d9:63:b5:e4:d3:99:eb:32:30:e6:c0:66:f6:03:2d: c7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:26:E1:3D:CE:0D:6D:1C:B4:D6:1A:27:9A:13:95:C7:19:7E:49:B2 X509v3 Authority Key Identifier: keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/uibhPc4NbRy01honmhOVxxl-SbI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.90.176.0/23 95.140.144.0/23 95.140.150.0/24 IPv6: 2a00:1818::/32 Signature Algorithm: sha256WithRSAEncryption a5:fb:22:0b:2f:6a:60:8d:20:ee:c2:a9:7b:db:d5:0f:b6:d4: 6e:54:90:c7:f6:1d:52:dc:de:bc:7f:d4:2c:93:82:36:93:0a: d4:31:5a:9b:49:6a:f1:82:20:16:ab:ba:2c:49:06:84:a9:2c: 30:53:2d:55:f3:7a:27:70:f1:63:1b:60:35:bd:34:f8:cc:a0: 3d:85:76:47:05:f6:d9:e7:94:7f:a8:61:5c:b2:39:84:36:13: f0:92:df:ee:c4:0d:52:e8:aa:ac:be:96:08:fe:c2:58:25:c2: d4:6a:70:e2:b9:51:b2:5c:31:44:90:c8:5e:c0:6f:49:a8:a4: d6:33:2b:ae:bd:65:36:51:4a:04:b9:55:a0:84:79:2f:1d:85: dc:59:e0:e0:cd:d5:b7:34:09:ac:c4:97:c9:cd:70:59:3e:07: 13:0c:51:96:a8:06:73:1d:0f:68:d8:7f:b5:31:18:65:e1:f5: 75:fc:2b:a0:b4:6c:a5:f4:d7:ec:29:11:02:a8:58:0d:9f:35: 7a:65:09:f2:ee:fb:64:29:fc:58:04:50:ab:4e:a6:e1:c0:54: b4:4d:70:f9:bb:8a:97:ed:11:c1:8c:2c:60:f3:d5:b9:60:3b: a3:69:0e:35:d5:f8:6d:0d:c0:74:ce:6d:60:ff:f3:a3:fa:04: 3d:6d:7a:1b -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt57URIB8a8oSWMWqIZbvhoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZWE4OTM2ZjhlNTMwNjNiNGIzYmRmMGYzYjE1YjJhZTY2 N2VmMTMwHhcNMjYwMTAxMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTI2ZTEzZGNlMGQ2ZDFjYjRkNjFhMjc5YTEzOTVjNzE5N2U0OWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8ilSJkjCCmJQelCH4hpZBOj05F8 M0g1tkDB9K7q1AaNpAhJSRPODfIW91JDhehNdpUgcxPbXk4OVMZbCcC6sR+eNAPf kUIoA4IvkcW6ClwF7d4mtaGhp9VXBFPK//gdgs7EJ/RYSYR30rnTBa7Itu5RFOpx z1yjczebUzONkCLXHsiVLIegMNkSwH3mKZvIHNLRCe0ouOCpl9+QjNyiIzhGnnuF GLP4LBXrNYThxgoN+l41b00bYxsMDJB7EDoZi65xO/Ud+X0gwa6XeC0RBcuZkAEv YJq5RoVu+wN4OuxF9fqcul5FHyaazAkuO/DZY7Xk05nrMjDmwGb2Ay3HIwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFLom4T3ODW0ctNYaJ5oTlccZfkmyMB8GA1UdIwQY MBaAFLnqiTb45TBjtLO98POxWyrmZ+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEt YjI1MDk5N2ZjNzVkLzEvdWliaFBjNE5iUnkwMWhvbm1oT1Z4eGwtU2JJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEtYjI1MDk5N2ZjNzVk LzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBUFqwAwQB X4yQAwQAX4yWMA0EAgACMAcDBQAqABgYMA0GCSqGSIb3DQEBCwUAA4IBAQCl+yIL L2pgjSDuwql729UPttRuVJDH9h1S3N68f9Qsk4I2kwrUMVqbSWrxgiAWq7osSQaE qSwwUy1V83oncPFjG2A1vTT4zKA9hXZHBfbZ55R/qGFcsjmENhPwkt/uxA1S6Kqs vpYI/sJYJcLUanDiuVGyXDFEkMhewG9JqKTWMyuuvWU2UUoEuVWghHkvHYXcWeDg zdW3NAmsxJfJzXBZPgcTDFGWqAZzHQ9o2H+1MRhl4fV1/CugtGyl9NfsKRECqFgN nzV6ZQny7vtkKfxYBFCrTqbhwFS0TXD5u4qX7RHBjCxg89W5YDujaQ411fhtDcB0 zm1g//Oj+gQ9bXob -----END CERTIFICATE-----Generated at Mon Jan 26 01:41:22 2026 by rpki-client