This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/uGF8_MSgyhQ8dAHm23AhHh6NWz0.roa File: uGF8_MSgyhQ8dAHm23AhHh6NWz0.roa (raw, json) Hash identifier: sxZlIQb25hDFz3ykb8U9qXE3lTMI/4iHplhe6RLTs2s= Subject key identifier: B8:61:7C:FC:C4:A0:CA:14:3C:74:01:E6:DB:70:21:1E:1E:8D:5B:3D Certificate issuer: /CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba Certificate serial: 019B7910B47D38CA65E2D110F142335CE849 Authority key identifier: F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/uGF8_MSgyhQ8dAHm23AhHh6NWz0.roa Signing time: Thu 01 Jan 2026 10:18:16 +0000 ROA not before: Thu 01 Jan 2026 10:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60844 IP address blocks: 95.178.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b4:7d:38:ca:65:e2:d1:10:f1:42:33:5c:e8:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba Validity Not Before: Jan 1 10:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8617cfcc4a0ca143c7401e6db70211e1e8d5b3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e8:73:04:c5:0a:26:2a:31:b4:e6:9f:9a:6c: 1d:56:cd:d4:02:2a:73:e2:12:f1:5f:3e:f4:40:07: 12:35:c8:3e:59:fb:01:e5:da:c0:4f:61:36:2e:0e: d6:91:c2:2f:5f:c8:6f:69:3f:6d:8c:7b:c8:45:fb: 50:74:f0:14:11:88:4f:51:6f:14:c0:56:24:dc:4e: b5:86:c4:f4:46:2a:99:17:3f:a6:c9:c2:25:44:f1: 19:1a:76:53:f9:63:fd:45:ef:6b:8c:17:45:6c:b7: a8:01:f5:5d:c9:1b:c8:4d:cb:44:07:9f:cf:06:20: af:ac:83:70:4a:78:55:b3:ed:62:18:e0:2b:e3:ae: e5:24:ac:44:ac:d9:e8:5e:f6:57:d7:94:0d:60:1b: f6:03:48:ae:d1:93:b9:e3:77:bc:d5:5e:b0:c9:84: ea:96:c3:9f:5c:70:d6:36:2e:f5:f6:66:9d:ba:34: ce:e5:f9:30:07:ad:c0:12:d0:6a:aa:37:bc:57:ea: 31:c1:d2:c1:3c:0d:b3:66:e9:fa:6e:78:46:96:22: 32:ea:6e:46:2f:d1:a2:34:8d:22:74:d0:bd:dd:14: 2c:06:d1:3d:94:97:78:2c:39:36:b7:01:c7:56:42: 18:04:08:16:1a:65:91:20:17:d6:3c:85:93:89:c7: f6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:61:7C:FC:C4:A0:CA:14:3C:74:01:E6:DB:70:21:1E:1E:8D:5B:3D X509v3 Authority Key Identifier: keyid:F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/uGF8_MSgyhQ8dAHm23AhHh6NWz0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.178.121.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:e1:c6:42:c9:55:a7:9a:b2:8c:1a:d0:99:06:87:1a:ac:e1: 15:4d:88:f2:0a:85:ec:6f:b5:99:d7:ac:10:bd:8c:f3:ee:81: 3c:4d:97:fc:da:f5:e9:56:dc:ef:3d:f2:c4:d6:80:17:47:41: 3f:28:17:69:e6:0a:7e:0e:c5:49:92:67:c5:e1:b7:52:d2:71: 1a:d9:1d:c6:b1:9d:f9:c9:b2:45:3f:11:38:50:af:6e:19:bf: ad:e6:ed:c0:80:9a:f3:c5:6a:37:bb:08:81:10:10:e8:5d:86: 05:ea:02:2b:89:ee:6a:07:b8:ea:ab:81:1a:81:93:70:89:da: b7:fb:68:46:7e:71:6d:3e:57:68:8d:97:0f:50:e2:c5:6c:20: 41:d6:60:e3:d8:85:52:e6:b8:37:55:87:23:1e:76:0d:08:91: ea:c6:56:60:b3:58:99:de:9c:03:c6:fe:9e:d1:a5:7f:49:59: 84:e6:7e:e3:26:f2:a3:76:33:57:8e:9c:03:b5:93:ae:97:c0: 1f:1a:0d:8d:cf:84:ad:fb:bd:9b:b5:47:46:19:b8:89:f7:95: fd:79:4e:5f:07:35:51:f8:60:6f:5c:af:38:c7:75:9c:c4:1d: 54:fe:5f:0f:e7:fc:60:3a:26:6e:4b:ad:b0:56:c6:e5:9f:08: a5:a1:aa:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ELR9OMpl4tEQ8UIzXOhJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNjkyMGJiZDdmYjcwZWY1ZGJjZjJkMGZlYTIwMmJkOTU3 NjVlYmEwHhcNMjYwMTAxMTAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODYxN2NmY2M0YTBjYTE0M2M3NDAxZTZkYjcwMjExZTFlOGQ1YjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uhzBMUKJioxtOafmmwdVs3UAipz 4hLxXz70QAcSNcg+WfsB5drAT2E2Lg7WkcIvX8hvaT9tjHvIRftQdPAUEYhPUW8U wFYk3E61hsT0RiqZFz+mycIlRPEZGnZT+WP9Re9rjBdFbLeoAfVdyRvITctEB5/P BiCvrINwSnhVs+1iGOAr467lJKxErNnoXvZX15QNYBv2A0iu0ZO543e81V6wyYTq lsOfXHDWNi719madujTO5fkwB63AEtBqqje8V+oxwdLBPA2zZun6bnhGliIy6m5G L9GiNI0idNC93RQsBtE9lJd4LDk2twHHVkIYBAgWGmWRIBfWPIWTicf2OwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLhhfPzEoMoUPHQB5ttwIR4ejVs9MB8GA1UdIwQY MBaAFPJpILvX+3DvXbzy0P6iAr2Vdl66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOG1rZ3U5ZjdjTzlkdlBMUV9xSUN2WlYyWHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMThhOTctOGZjNy00OTU1LTg3YWYt MGJjZmM1MzI5MzNjLzEvdUdGOF9NU2d5aFE4ZEFIbTIzQWhIaDZOV3owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hMThhOTctOGZjNy00OTU1LTg3YWYtMGJjZmM1MzI5MzNj LzEvOG1rZ3U5ZjdjTzlkdlBMUV9xSUN2WlYyWHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX7J5MA0G CSqGSIb3DQEBCwUAA4IBAQBt4cZCyVWnmrKMGtCZBocarOEVTYjyCoXsb7WZ16wQ vYzz7oE8TZf82vXpVtzvPfLE1oAXR0E/KBdp5gp+DsVJkmfF4bdS0nEa2R3GsZ35 ybJFPxE4UK9uGb+t5u3AgJrzxWo3uwiBEBDoXYYF6gIrie5qB7jqq4EagZNwidq3 +2hGfnFtPldojZcPUOLFbCBB1mDj2IVS5rg3VYcjHnYNCJHqxlZgs1iZ3pwDxv6e 0aV/SVmE5n7jJvKjdjNXjpwDtZOul8AfGg2Nz4St+72btUdGGbiJ95X9eU5fBzVR +GBvXK84x3WcxB1U/l8P5/xgOiZuS62wVsblnwiloaqV -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:30 2026 by rpki-client