This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/uekau7rSPung7Kbe6f858ZuB0t8.roa File: uekau7rSPung7Kbe6f858ZuB0t8.roa (raw, json) Hash identifier: M2Y/E4DYJ0oSGWPcmXmrI0IqZMHXZ+8X2D2MD5VVJU8= Subject key identifier: B9:E9:1A:BB:BA:D2:3E:E9:E0:EC:A6:DE:E9:FF:39:F1:9B:81:D2:DF Certificate issuer: /CN=3e20c700d98d76a9c640173889f9367da9de8997 Certificate serial: 019B7F85215C22AC35F1891AC5F1AF8E8C9C Authority key identifier: 3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/uekau7rSPung7Kbe6f858ZuB0t8.roa Signing time: Fri 02 Jan 2026 16:23:09 +0000 ROA not before: Fri 02 Jan 2026 16:23:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51601 IP address blocks: 87.239.184.0/21 maxlen: 24 91.194.116.0/23 maxlen: 24 176.56.160.0/19 maxlen: 24 185.65.172.0/22 maxlen: 24 193.33.70.0/23 maxlen: 24 195.189.120.0/22 maxlen: 24 2a03:9d40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.mft rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:21:5c:22:ac:35:f1:89:1a:c5:f1:af:8e:8c:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e20c700d98d76a9c640173889f9367da9de8997 Validity Not Before: Jan 2 16:23:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9e91abbbad23ee9e0eca6dee9ff39f19b81d2df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f8:1c:e3:d5:7f:54:89:e3:c2:35:4e:ef:64: 89:f4:29:20:15:7f:4a:70:81:5b:3e:8e:ba:94:44: f0:45:57:c7:77:3f:18:f9:86:a2:57:3e:14:5e:e9: 88:07:f9:08:79:22:45:5e:48:93:4f:5b:97:aa:1a: f9:03:7c:8e:57:a8:44:2b:bf:03:a7:ef:31:82:57: 21:ef:40:4a:67:2e:be:18:7d:c6:08:a6:7d:c7:5a: 70:bf:02:ea:98:0b:d9:e4:7a:bc:25:3a:53:87:1f: 9d:3b:de:3f:cf:ea:bb:c0:5d:f3:8d:e4:ce:04:11: b1:63:ba:48:85:2c:e5:17:87:1e:3d:6b:54:6c:03: 4d:68:65:ee:2b:db:c6:82:0c:45:10:59:6d:f5:c9: 21:19:f6:a4:8d:cd:9f:80:db:fc:66:e8:bb:47:d1: 19:3a:ae:a3:8d:a6:f2:1e:03:1e:e1:87:f9:e8:63: 44:c4:f0:ce:e4:62:1e:2b:f2:36:82:aa:53:65:14: 76:d9:39:35:a5:36:54:59:73:cc:c5:25:bc:1a:14: 1f:bf:a1:b9:e8:93:49:fa:e1:8a:0f:62:e1:92:e4: 6a:e0:15:dc:60:39:4f:9f:8a:dd:4d:74:c8:76:dc: c2:58:d2:09:48:e4:e7:b7:5c:99:d0:34:db:4b:c3: 74:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E9:1A:BB:BA:D2:3E:E9:E0:EC:A6:DE:E9:FF:39:F1:9B:81:D2:DF X509v3 Authority Key Identifier: keyid:3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/uekau7rSPung7Kbe6f858ZuB0t8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.239.184.0/21 91.194.116.0/23 176.56.160.0/19 185.65.172.0/22 193.33.70.0/23 195.189.120.0/22 IPv6: 2a03:9d40::/32 Signature Algorithm: sha256WithRSAEncryption 9b:3b:23:05:cc:15:dc:75:70:7e:61:ae:d8:9e:57:cd:90:0e: be:8f:8d:f4:8c:04:b9:54:9d:3f:e9:0e:20:ff:74:8a:ad:3f: 6a:c2:f9:1c:87:d7:63:b7:83:6f:e2:12:dd:93:77:6a:df:17: c3:96:75:e3:3d:f4:20:6a:f6:6b:f3:98:40:c5:9c:70:99:11: db:e1:a0:61:75:0a:a3:56:c1:00:21:5e:c3:ad:10:65:08:63: a6:cb:f2:24:2e:1c:c8:49:8c:ad:0f:b1:d4:58:dc:4e:94:17: f4:94:fe:20:6d:cd:9c:d5:f9:15:17:57:e7:af:b2:34:2f:66: 61:5b:9d:f3:db:c4:6c:85:41:6e:b5:dc:bf:50:99:45:e5:99: c8:42:aa:93:d9:9c:f6:69:ad:06:d9:f5:a9:8d:ef:99:6b:dc: 05:71:64:26:37:cd:bd:fd:bd:1b:36:0b:12:15:da:fa:45:f3: e8:dd:5b:ba:7b:49:ae:73:05:0e:ac:04:71:cf:05:e4:13:db: 48:0c:f6:92:b2:a7:d1:28:5c:d1:7a:c0:56:ac:eb:ff:2c:6e: 59:ce:b4:8a:bc:56:7f:58:b9:5d:a3:92:ff:ba:4f:86:f5:0d: 1a:2e:13:4f:1a:de:86:be:00:60:6d:6b:42:0d:46:1c:87:4b: f9:39:2b:45 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt/hSFcIqw18YkaxfGvjoycMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMjBjNzAwZDk4ZDc2YTljNjQwMTczODg5ZjkzNjdkYTlk ZTg5OTcwHhcNMjYwMTAyMTYyMzA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWU5MWFiYmJhZDIzZWU5ZTBlY2E2ZGVlOWZmMzlmMTliODFkMmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPgc49V/VInjwjVO72SJ9CkgFX9K cIFbPo66lETwRVfHdz8Y+YaiVz4UXumIB/kIeSJFXkiTT1uXqhr5A3yOV6hEK78D p+8xglch70BKZy6+GH3GCKZ9x1pwvwLqmAvZ5Hq8JTpThx+dO94/z+q7wF3zjeTO BBGxY7pIhSzlF4cePWtUbANNaGXuK9vGggxFEFlt9ckhGfakjc2fgNv8Zui7R9EZ Oq6jjabyHgMe4Yf56GNExPDO5GIeK/I2gqpTZRR22Tk1pTZUWXPMxSW8GhQfv6G5 6JNJ+uGKD2LhkuRq4BXcYDlPn4rdTXTIdtzCWNIJSOTnt1yZ0DTbS8N0LQIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFLnpGru60j7p4Oym3un/OfGbgdLfMB8GA1UdIwQY MBaAFD4gxwDZjXapxkAXOIn5Nn2p3omXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGlESEFObU5kcW5HUUJjNGlmazJmYW5laVpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9hYzZjN2ItZDA1OS00MDE0LWE5Njgt ZTQ2ZDhkMTZhMTVmLzEvdWVrYXU3clNQdW5nN0tiZTZmODU4WnVCMHQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9hYzZjN2ItZDA1OS00MDE0LWE5NjgtZTQ2ZDhkMTZhMTVm LzEvUGlESEFObU5kcW5HUUJjNGlmazJmYW5laVpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDV++4AwQB W8J0AwQFsDigAwQCuUGsAwQBwSFGAwQCw714MA0EAgACMAcDBQAqA51AMA0GCSqG SIb3DQEBCwUAA4IBAQCbOyMFzBXcdXB+Ya7YnlfNkA6+j430jAS5VJ0/6Q4g/3SK rT9qwvkch9djt4Nv4hLdk3dq3xfDlnXjPfQgavZr85hAxZxwmRHb4aBhdQqjVsEA IV7DrRBlCGOmy/IkLhzISYytD7HUWNxOlBf0lP4gbc2c1fkVF1fnr7I0L2ZhW53z 28RshUFutdy/UJlF5ZnIQqqT2Zz2aa0G2fWpje+Za9wFcWQmN829/b0bNgsSFdr6 RfPo3Vu6e0mucwUOrARxzwXkE9tIDPaSsqfRKFzResBWrOv/LG5ZzrSKvFZ/WLld o5L/uk+G9Q0aLhNPGt6GvgBgbWtCDUYch0v5OStF -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:14 2026 by rpki-client