This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/UVNBiEAmnW3F6btiOdW3s2l78Lo.roa File: UVNBiEAmnW3F6btiOdW3s2l78Lo.roa (raw, json) Hash identifier: YAaENLDRW0CPWiY+okWhsPcKqVEHkjtjcM7qZSLLT7Q= Subject key identifier: 51:53:41:88:40:26:9D:6D:C5:E9:BB:62:39:D5:B7:B3:69:7B:F0:BA Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA537C600CE4F4A6FB88F45896D66C2 Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/UVNBiEAmnW3F6btiOdW3s2l78Lo.roa Signing time: Thu 01 Jan 2026 22:19:43 +0000 ROA not before: Thu 01 Jan 2026 22:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44309 IP address blocks: 94.236.164.0/24 maxlen: 24 94.236.165.0/24 maxlen: 24 94.236.166.0/24 maxlen: 24 94.236.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:37:c6:00:ce:4f:4a:6f:b8:8f:45:89:6d:66:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5153418840269d6dc5e9bb6239d5b7b3697bf0ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:46:ce:3a:ef:b8:70:4c:9e:22:ff:dc:db:01: ce:ec:16:8c:2d:b5:5b:38:9c:68:cb:cc:7f:38:8f: d0:87:27:b5:a0:9b:b8:0b:cb:52:0c:5f:da:ab:3e: dc:2d:65:82:d9:ec:38:3c:2d:af:e4:29:03:90:c3: 6f:6c:00:a8:f0:e4:c9:db:51:0f:76:ef:b8:00:32: 70:aa:46:37:dd:8d:ff:4f:51:ea:8b:ed:85:33:62: c2:b1:d0:0b:76:e5:17:ce:1f:d9:ef:cf:ea:07:52: 1e:95:9f:d0:bb:5e:25:43:c2:d2:f9:be:11:2e:cd: b9:ad:a3:d5:aa:10:43:d8:68:48:75:58:c9:8d:bc: 6c:98:6b:73:2f:da:ae:61:15:2f:de:2a:e2:26:51: 7f:2b:59:8b:fe:5f:08:f5:8c:9d:12:be:fd:a5:58: 14:4f:06:29:3e:23:d9:bd:46:fd:49:70:97:ad:fb: 54:0e:57:41:5a:1e:dd:20:af:cc:03:2f:5f:bd:d4: af:9c:93:69:fa:61:fb:b0:27:bd:2d:74:41:27:39: 25:36:25:bc:db:89:35:7b:3a:ba:f5:b5:72:43:87: 1b:b4:cb:5e:ce:eb:6f:2e:67:5a:00:77:1f:a1:8f: 61:26:93:d2:4b:86:25:cd:78:8f:68:08:9a:61:d2: 0a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:53:41:88:40:26:9D:6D:C5:E9:BB:62:39:D5:B7:B3:69:7B:F0:BA X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/UVNBiEAmnW3F6btiOdW3s2l78Lo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.236.164.0/22 Signature Algorithm: sha256WithRSAEncryption a4:80:d6:f6:15:46:10:4a:28:d6:49:25:0c:5f:40:c4:f6:54: 4b:98:da:e4:da:2c:e3:c1:db:54:ca:1e:0b:70:3d:5a:f4:b7: 2c:04:f8:36:da:e6:d1:a7:e9:62:b8:95:58:9a:6b:3c:ef:72: 5c:e4:79:46:84:f1:38:f0:73:61:5e:08:54:01:a1:de:47:70: 4f:94:0a:4a:bf:6f:ba:b0:9f:5d:37:bd:7d:70:b2:bc:b9:ae: 18:b7:ad:f1:f1:80:5e:52:45:33:2e:5c:25:fe:e9:eb:91:87: 71:16:28:78:4a:22:e0:1d:2d:33:93:7b:bf:66:90:82:42:e3: ff:75:c5:7d:51:be:49:3e:73:f8:38:ed:37:67:90:4c:c1:5c: 2d:86:df:b4:09:d7:3c:24:cb:fd:0f:27:17:e9:4b:68:74:46: ac:bd:4a:ec:cd:ed:c3:d3:a7:56:56:1e:c6:51:18:b8:ff:90: 99:a8:0e:e1:a4:68:4b:51:d4:bf:9b:28:8e:e2:ad:f9:22:3f: 00:79:8f:f7:a2:8c:8e:89:75:7c:ed:b1:87:96:26:e4:eb:46: c8:b1:3b:e7:8f:1b:8c:ec:d3:77:66:9c:ca:7b:17:6d:3d:d4: 2a:e0:0a:d4:18:34:c0:f6:fb:59:b2:f0:c7:d1:e4:51:a3:f8: 60:24:14:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pTfGAM5PSm+4j0WJbWbCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTUzNDE4ODQwMjY5ZDZkYzVlOWJiNjIzOWQ1YjdiMzY5N2JmMGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUbOOu+4cEyeIv/c2wHO7BaMLbVb OJxoy8x/OI/Qhye1oJu4C8tSDF/aqz7cLWWC2ew4PC2v5CkDkMNvbACo8OTJ21EP du+4ADJwqkY33Y3/T1Hqi+2FM2LCsdALduUXzh/Z78/qB1IelZ/Qu14lQ8LS+b4R Ls25raPVqhBD2GhIdVjJjbxsmGtzL9quYRUv3iriJlF/K1mL/l8I9YydEr79pVgU TwYpPiPZvUb9SXCXrftUDldBWh7dIK/MAy9fvdSvnJNp+mH7sCe9LXRBJzklNiW8 24k1ezq69bVyQ4cbtMtezutvLmdaAHcfoY9hJpPSS4YlzXiPaAiaYdIK5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFFTQYhAJp1txem7YjnVt7Npe/C6MB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvVVZOQmlFQW1uVzNGNmJ0aU9kVzNzMmw3OExvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXuykMA0G CSqGSIb3DQEBCwUAA4IBAQCkgNb2FUYQSijWSSUMX0DE9lRLmNrk2izjwdtUyh4L cD1a9LcsBPg22ubRp+liuJVYmms873Jc5HlGhPE48HNhXghUAaHeR3BPlApKv2+6 sJ9dN719cLK8ua4Yt63x8YBeUkUzLlwl/unrkYdxFih4SiLgHS0zk3u/ZpCCQuP/ dcV9Ub5JPnP4OO03Z5BMwVwtht+0Cdc8JMv9DycX6UtodEasvUrsze3D06dWVh7G URi4/5CZqA7hpGhLUdS/myiO4q35Ij8AeY/3ooyOiXV87bGHlibk60bIsTvnjxuM 7NN3ZpzKexdtPdQq4ArUGDTA9vtZsvDH0eRRo/hgJBTO -----END CERTIFICATE-----Generated at Mon Jan 26 02:24:30 2026 by rpki-client