This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/uOMfavwENLpPMVU126jBRKAkKw8.roa File: uOMfavwENLpPMVU126jBRKAkKw8.roa (raw, json) Hash identifier: vsD6+XFIYlluDo4Fj+w6NTOqOdxFMiatW0N6TdNehjs= Subject key identifier: B8:E3:1F:6A:FC:04:34:BA:4F:31:55:35:DB:A8:C1:44:A0:24:2B:0F Certificate issuer: /CN=8b01817d42cff8b8814bbd1700ade91674268ed7 Certificate serial: 019B79109D6D9BE89FD244E08FA8357ABA77 Authority key identifier: 8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/uOMfavwENLpPMVU126jBRKAkKw8.roa Signing time: Thu 01 Jan 2026 10:18:10 +0000 ROA not before: Thu 01 Jan 2026 10:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212755 IP address blocks: 91.233.197.0/24 maxlen: 24 2a0a:b440::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.mft rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:9d:6d:9b:e8:9f:d2:44:e0:8f:a8:35:7a:ba:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b01817d42cff8b8814bbd1700ade91674268ed7 Validity Not Before: Jan 1 10:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8e31f6afc0434ba4f315535dba8c144a0242b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cc:14:a2:87:cd:07:f9:cc:87:4a:99:ca:3f: e2:fd:b1:89:0c:b8:4b:71:ad:22:b2:94:f4:55:6f: 7c:eb:88:13:c9:bd:3b:12:5b:20:3b:2a:b7:f9:89: 32:07:af:49:04:56:bc:8b:56:bc:d5:eb:27:ee:fb: 7f:ee:c6:f4:1f:20:65:b8:9a:1b:c1:a9:e4:30:b8: 59:f5:20:ee:1b:41:80:01:df:b9:8d:0f:44:f1:7c: 96:80:1e:be:3b:f5:60:46:ca:4e:e2:c4:80:94:e6: d8:06:5f:a7:d8:74:ba:5d:55:d4:0e:a6:f9:ee:00: 83:7f:71:25:c3:fd:ae:56:af:94:8a:88:6d:a6:03: 81:22:af:8c:d8:e6:b5:41:ef:54:e5:c0:b9:2a:e6: 0d:f2:2d:41:d2:88:4c:69:46:91:e8:1f:0c:38:cc: 4d:58:d2:f5:c3:8c:bf:10:e5:b7:e8:5e:9c:51:ed: 2f:04:1e:58:3c:2e:7c:60:d8:04:b7:a6:b3:5d:48: d7:21:8a:76:81:a0:e6:95:c9:fd:11:17:43:b1:26: d9:68:52:7f:a3:eb:94:10:a5:45:26:9d:b0:64:5a: be:3b:41:cd:28:c4:7c:ee:33:43:7c:0b:6f:79:a0: 7e:55:b9:b6:9a:e0:2b:59:71:bb:c1:ba:51:1f:5f: 8c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E3:1F:6A:FC:04:34:BA:4F:31:55:35:DB:A8:C1:44:A0:24:2B:0F X509v3 Authority Key Identifier: keyid:8B:01:81:7D:42:CF:F8:B8:81:4B:BD:17:00:AD:E9:16:74:26:8E:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwGBfULP-LiBS70XAK3pFnQmjtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/uOMfavwENLpPMVU126jBRKAkKw8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c4cac9-5b63-473c-88d7-d7a660d4caad/1/iwGBfULP-LiBS70XAK3pFnQmjtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.233.197.0/24 IPv6: 2a0a:b440::/29 Signature Algorithm: sha256WithRSAEncryption 11:9c:9f:5c:6a:a4:64:d2:d0:04:00:3b:0c:8a:e5:11:f6:95: aa:b3:7b:04:8a:dc:4e:a3:14:51:bc:b3:44:2a:f1:f4:be:a6: 9d:af:b6:86:97:50:96:25:cb:38:68:2e:ec:eb:93:27:3e:9e: 2b:1d:a0:a9:17:25:86:89:47:8f:59:86:82:05:36:a8:a0:7c: 45:29:6e:56:e6:95:f0:91:89:d2:cd:5b:d2:6a:dc:32:5c:56: 43:f0:2c:fb:7b:7b:39:53:dc:be:ee:9e:82:b9:45:63:35:84: eb:26:27:c1:e6:a1:ce:24:7e:cf:c9:f7:2d:88:79:39:d0:15: d5:16:37:cb:5b:e6:ee:b1:99:16:cf:f7:c8:fd:a0:e1:fd:94: 51:af:89:9b:28:d9:b5:89:2f:9b:f3:31:e8:9a:c1:b3:ca:38: 6f:1c:c1:fe:32:d8:c6:0b:79:52:04:59:81:af:2b:93:c9:af: 1d:74:a2:9d:21:c4:6d:2c:43:ad:44:2e:50:c5:88:0b:eb:52: 2f:da:a3:8a:d5:f9:50:d0:ce:db:32:05:f2:bb:93:47:73:b8: 20:24:b3:cb:b2:c9:a8:92:dd:d7:78:85:0d:db:50:2b:f1:6b: 8f:cb:bf:1a:8a:06:c5:6e:96:61:5f:52:e8:21:30:09:7d:b4: 49:a9:af:c8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EJ1tm+if0kTgj6g1erp3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMDE4MTdkNDJjZmY4Yjg4MTRiYmQxNzAwYWRlOTE2NzQy NjhlZDcwHhcNMjYwMTAxMTAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGUzMWY2YWZjMDQzNGJhNGYzMTU1MzVkYmE4YzE0NGEwMjQyYjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuswUoofNB/nMh0qZyj/i/bGJDLhL ca0ispT0VW9864gTyb07ElsgOyq3+YkyB69JBFa8i1a81esn7vt/7sb0HyBluJob wankMLhZ9SDuG0GAAd+5jQ9E8XyWgB6+O/VgRspO4sSAlObYBl+n2HS6XVXUDqb5 7gCDf3Elw/2uVq+UiohtpgOBIq+M2Oa1Qe9U5cC5KuYN8i1B0ohMaUaR6B8MOMxN WNL1w4y/EOW36F6cUe0vBB5YPC58YNgEt6azXUjXIYp2gaDmlcn9ERdDsSbZaFJ/ o+uUEKVFJp2wZFq+O0HNKMR87jNDfAtveaB+Vbm2muArWXG7wbpRH1+MiwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLjjH2r8BDS6TzFVNduowUSgJCsPMB8GA1UdIwQY MBaAFIsBgX1Cz/i4gUu9FwCt6RZ0Jo7XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jNGNhYzktNWI2My00NzNjLTg4ZDct ZDdhNjYwZDRjYWFkLzEvdU9NZmF2d0VOTHBQTVZVMTI2akJSS0FrS3c4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9jNGNhYzktNWI2My00NzNjLTg4ZDctZDdhNjYwZDRjYWFk LzEvaXdHQmZVTFAtTGlCUzcwWEFLM3BGblFtanRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW+nFMA0E AgACMAcDBQMqCrRAMA0GCSqGSIb3DQEBCwUAA4IBAQARnJ9caqRk0tAEADsMiuUR 9pWqs3sEitxOoxRRvLNEKvH0vqadr7aGl1CWJcs4aC7s65MnPp4rHaCpFyWGiUeP WYaCBTaooHxFKW5W5pXwkYnSzVvSatwyXFZD8Cz7e3s5U9y+7p6CuUVjNYTrJifB 5qHOJH7PyfctiHk50BXVFjfLW+busZkWz/fI/aDh/ZRRr4mbKNm1iS+b8zHomsGz yjhvHMH+MtjGC3lSBFmBryuTya8ddKKdIcRtLEOtRC5QxYgL61Iv2qOK1flQ0M7b MgXyu5NHc7ggJLPLssmokt3XeIUN21Ar8WuPy78aigbFbpZhX1LoITAJfbRJqa/I -----END CERTIFICATE-----Generated at Sun Jan 25 15:14:52 2026 by rpki-client