This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/UqEE9nQNlvFfptXrzYxVK-rQYe8.roa File: UqEE9nQNlvFfptXrzYxVK-rQYe8.roa (raw, json) Hash identifier: 9TW9lFpSuSY29TxD4LdE99SdVTsbb6EI+XiZWMNqtys= Subject key identifier: 52:A1:04:F6:74:0D:96:F1:5F:A6:D5:EB:CD:8C:55:2B:EA:D0:61:EF Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Certificate serial: 019B7F15B862AEA250F0CA7885AFD358B598 Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/UqEE9nQNlvFfptXrzYxVK-rQYe8.roa Signing time: Fri 02 Jan 2026 14:21:28 +0000 ROA not before: Fri 02 Jan 2026 14:21:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30846 IP address blocks: 195.53.217.0/24 maxlen: 24 195.235.248.0/24 maxlen: 24 212.170.33.0/24 maxlen: 24 212.170.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:b8:62:ae:a2:50:f0:ca:78:85:af:d3:58:b5:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Validity Not Before: Jan 2 14:21:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52a104f6740d96f15fa6d5ebcd8c552bead061ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:94:dd:6e:55:9a:ee:5e:b3:02:cd:61:9a:fb: f8:81:ea:0c:b6:b2:38:2e:a2:d8:5c:d4:29:bd:28: 53:40:ee:a5:11:f9:59:8b:93:ba:40:45:81:db:bf: a0:1b:14:06:bc:f6:b8:75:0d:49:e3:36:af:87:8a: e8:07:92:51:c8:1e:0a:57:0f:e6:ad:7f:e9:71:7f: 9f:db:82:ae:77:7b:75:f0:21:cd:1f:58:b7:e9:ad: 71:0c:4c:a0:09:d3:1b:39:94:94:3e:19:3f:8b:4a: fc:56:f2:67:54:7e:15:de:52:97:d1:16:9d:cb:3f: c6:02:61:87:39:2d:e0:0f:51:12:12:15:61:63:ed: a4:59:82:43:3e:d1:42:df:28:0f:51:fe:0f:25:58: 3d:13:26:96:6b:70:24:18:03:c9:a3:0a:6e:bb:95: 12:99:1a:31:cb:0b:e2:91:91:7b:90:38:5b:9e:16: 58:a4:c9:81:74:15:df:46:0f:71:d5:7a:40:b0:23: f2:06:9d:52:e1:b1:55:1d:27:d0:0d:36:93:7f:b8: 82:fb:7b:76:50:d2:37:bd:ba:e7:ea:18:2f:10:80: 56:5b:26:b4:e4:d3:01:ce:4c:44:aa:ca:5a:aa:19: a0:4a:88:3c:d7:ba:5f:52:a7:1c:da:07:dc:98:43: 2a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A1:04:F6:74:0D:96:F1:5F:A6:D5:EB:CD:8C:55:2B:EA:D0:61:EF X509v3 Authority Key Identifier: keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/UqEE9nQNlvFfptXrzYxVK-rQYe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.53.217.0/24 195.235.248.0/24 212.170.33.0/24 212.170.114.0/24 Signature Algorithm: sha256WithRSAEncryption 55:7e:f6:4d:02:ee:14:65:93:34:17:f9:ff:34:54:9e:bf:1c: c7:11:5c:44:2f:0a:3e:c2:60:04:e5:92:dd:7a:cc:85:45:8a: 76:7f:4b:b7:6c:d2:b6:6a:e1:28:f1:2d:41:9c:d7:aa:87:57: 29:c2:c6:dd:27:4d:e6:0c:f8:09:73:79:5a:b4:01:e1:e3:49: be:e8:b6:c4:b1:b3:bf:8c:e2:a1:1d:e8:3b:5e:83:12:29:0e: 7c:84:fc:b3:8c:94:1c:8d:60:80:86:0d:e7:c5:e9:a0:bc:00: c1:9f:86:94:c3:7a:46:e0:17:d8:b3:d4:d2:58:e4:f3:bf:5f: c5:fd:5f:5f:5f:d0:0d:ac:67:e1:3b:18:d7:9a:e9:b2:ba:00: 88:51:68:26:56:39:cc:ce:81:5f:ee:77:ef:6b:2e:38:92:89: 23:f6:18:96:bc:f3:33:75:14:1a:80:d9:e1:32:04:6b:1b:74: 4d:b5:60:3a:a8:cb:48:b6:bd:99:22:0e:2f:c9:f0:09:b1:da: 68:eb:c0:fa:6e:d2:b9:36:e2:8c:fe:0d:9b:91:dd:de:c0:c0: cf:35:b2:56:eb:32:bd:dc:8d:b9:31:94:fa:6b:51:92:22:2e: 7b:ef:f8:81:f9:e3:41:58:5a:b4:f3:18:0a:b5:5e:3e:d8:8e: 9d:56:3f:91 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/FbhirqJQ8Mp4ha/TWLWYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5 NjdkYTEwHhcNMjYwMTAyMTQyMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmExMDRmNjc0MGQ5NmYxNWZhNmQ1ZWJjZDhjNTUyYmVhZDA2MWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZTdblWa7l6zAs1hmvv4geoMtrI4 LqLYXNQpvShTQO6lEflZi5O6QEWB27+gGxQGvPa4dQ1J4zavh4roB5JRyB4KVw/m rX/pcX+f24Kud3t18CHNH1i36a1xDEygCdMbOZSUPhk/i0r8VvJnVH4V3lKX0Rad yz/GAmGHOS3gD1ESEhVhY+2kWYJDPtFC3ygPUf4PJVg9EyaWa3AkGAPJowpuu5US mRoxywvikZF7kDhbnhZYpMmBdBXfRg9x1XpAsCPyBp1S4bFVHSfQDTaTf7iC+3t2 UNI3vbrn6hgvEIBWWya05NMBzkxEqspaqhmgSog817pfUqcc2gfcmEMqsQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFFKhBPZ0DZbxX6bV682MVSvq0GHvMB8GA1UdIwQY MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt NGJhMmY4ZjFmODNiLzEvVXFFRTluUU5sdkZmcHRYcnpZeFZLLXJRWWU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwzXZAwQA w+v4AwQA1KohAwQA1KpyMA0GCSqGSIb3DQEBCwUAA4IBAQBVfvZNAu4UZZM0F/n/ NFSevxzHEVxELwo+wmAE5ZLdesyFRYp2f0u3bNK2auEo8S1BnNeqh1cpwsbdJ03m DPgJc3latAHh40m+6LbEsbO/jOKhHeg7XoMSKQ58hPyzjJQcjWCAhg3nxemgvADB n4aUw3pG4BfYs9TSWOTzv1/F/V9fX9ANrGfhOxjXmumyugCIUWgmVjnMzoFf7nfv ay44kokj9hiWvPMzdRQagNnhMgRrG3RNtWA6qMtItr2ZIg4vyfAJsdpo68D6btK5 NuKM/g2bkd3ewMDPNbJW6zK93I25MZT6a1GSIi577/iB+eNBWFq08xgKtV4+2I6d Vj+R -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:36 2026 by rpki-client