This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/upR_lK-5XXoDUtPSSxCn92_SAOI.roa File: upR_lK-5XXoDUtPSSxCn92_SAOI.roa (raw, json) Hash identifier: t2z7Rhn7V36DttkdEurpdQgeLWm8rmO0F3dEVSCXcg4= Subject key identifier: BA:94:7F:94:AF:B9:5D:7A:03:52:D3:D2:4B:10:A7:F7:6F:D2:00:E2 Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Certificate serial: 019B7D5D09266A1115EABBB2CFD8A92BB745 Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/upR_lK-5XXoDUtPSSxCn92_SAOI.roa Signing time: Fri 02 Jan 2026 06:20:07 +0000 ROA not before: Fri 02 Jan 2026 06:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201488 IP address blocks: 94.42.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:09:26:6a:11:15:ea:bb:b2:cf:d8:a9:2b:b7:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Validity Not Before: Jan 2 06:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba947f94afb95d7a0352d3d24b10a7f76fd200e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:97:29:cd:c7:fa:05:49:f3:b6:ec:1e:c0:3d: 6b:10:2c:ab:62:bf:73:60:af:63:78:06:f6:f9:e2: df:70:6f:ff:e6:d3:38:fe:17:b7:53:53:04:69:0a: f6:3d:d7:0c:a6:e4:7f:13:77:c9:ef:3d:c0:b9:5b: 04:27:dd:83:ba:90:cd:3b:4e:c1:31:56:8b:f5:41: f2:e9:cf:1a:57:f4:28:e9:8e:89:b7:d8:68:6e:42: 2f:d2:a7:7a:99:13:d4:65:43:52:de:92:4f:53:86: 73:18:96:65:95:b7:3d:73:d0:ba:24:0d:92:7d:50: d5:c4:92:6b:40:76:a6:7e:e1:61:6d:da:4f:8e:21: 88:72:dd:fd:be:c7:6d:4e:54:2b:5e:b9:b8:e7:e7: 7d:54:71:a7:78:2d:86:44:bd:3f:57:50:a5:df:8c: 00:bc:f3:41:94:7a:00:cb:f7:6e:e2:1c:f6:6e:c7: b7:4b:98:18:ba:d7:21:c3:2f:98:95:42:c9:29:2d: ad:73:20:7e:80:c4:1b:a3:69:2f:b4:23:c6:7e:69: 11:1f:05:39:f8:58:f7:6c:b1:6b:27:24:86:c1:da: b4:8c:9d:5e:54:6d:7f:17:31:d0:77:69:08:7f:3d: 73:dd:38:6a:03:98:20:40:a7:d7:47:6b:b4:ac:00: d2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:94:7F:94:AF:B9:5D:7A:03:52:D3:D2:4B:10:A7:F7:6F:D2:00:E2 X509v3 Authority Key Identifier: keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/upR_lK-5XXoDUtPSSxCn92_SAOI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.42.89.0/24 Signature Algorithm: sha256WithRSAEncryption 35:d7:fd:1d:47:84:db:9a:8d:8a:38:fd:7d:63:10:57:05:aa: 6f:25:df:ff:a8:b5:5e:61:25:d0:38:4f:1f:d6:61:84:34:1f: cd:56:8d:38:ba:5d:65:52:84:f2:21:6e:57:22:d5:39:97:be: 0a:13:1e:f9:ba:c5:f7:41:9f:18:6f:b9:74:50:14:8c:c6:00: 67:fa:c8:76:92:ea:eb:5b:57:21:f7:0e:e6:92:c0:81:71:8f: f9:06:32:69:b0:a1:08:d6:f4:c8:dc:5d:b3:05:82:95:ea:f3: 3e:32:bf:fe:d2:36:97:3e:69:20:4c:c5:6f:7b:63:c4:f8:52: 5c:5b:58:c3:33:03:9b:2f:bc:7a:55:c0:0c:61:a9:f5:06:b1: 15:21:66:e3:0a:44:7e:54:df:20:b0:88:2c:49:83:c1:97:54: ef:a6:77:2e:26:f2:a1:05:36:1f:80:00:c2:3f:ac:b7:02:25: ee:29:d7:a1:bc:50:aa:0d:a0:64:6c:0b:61:8e:f2:6c:33:9f: b3:57:1a:0a:23:d0:68:6c:e1:0e:11:52:cc:24:b5:09:52:a9: 45:79:d0:73:6b:9f:f4:c1:cb:ef:3b:08:d3:71:29:bc:34:dc: 84:0f:70:61:20:17:71:b4:a5:81:4a:f9:5d:4e:9c:75:16:76: 31:be:23:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XQkmahEV6ruyz9ipK7dFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj ZWY5MzMwHhcNMjYwMTAyMDYyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTk0N2Y5NGFmYjk1ZDdhMDM1MmQzZDI0YjEwYTdmNzZmZDIwMGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8pcpzcf6BUnztuwewD1rECyrYr9z YK9jeAb2+eLfcG//5tM4/he3U1MEaQr2PdcMpuR/E3fJ7z3AuVsEJ92DupDNO07B MVaL9UHy6c8aV/Qo6Y6Jt9hobkIv0qd6mRPUZUNS3pJPU4ZzGJZllbc9c9C6JA2S fVDVxJJrQHamfuFhbdpPjiGIct39vsdtTlQrXrm45+d9VHGneC2GRL0/V1Cl34wA vPNBlHoAy/du4hz2bse3S5gYutchwy+YlULJKS2tcyB+gMQbo2kvtCPGfmkRHwU5 +Fj3bLFrJySGwdq0jJ1eVG1/FzHQd2kIfz1z3ThqA5ggQKfXR2u0rADSywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLqUf5SvuV16A1LT0ksQp/dv0gDiMB8GA1UdIwQY MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt OTFlMzE4NGJiMGFiLzEvdXBSX2xLLTVYWG9EVXRQU1N4Q245Ml9TQU9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXipZMA0G CSqGSIb3DQEBCwUAA4IBAQA11/0dR4Tbmo2KOP19YxBXBapvJd//qLVeYSXQOE8f 1mGENB/NVo04ul1lUoTyIW5XItU5l74KEx75usX3QZ8Yb7l0UBSMxgBn+sh2kurr W1ch9w7mksCBcY/5BjJpsKEI1vTI3F2zBYKV6vM+Mr/+0jaXPmkgTMVve2PE+FJc W1jDMwObL7x6VcAMYan1BrEVIWbjCkR+VN8gsIgsSYPBl1TvpncuJvKhBTYfgADC P6y3AiXuKdehvFCqDaBkbAthjvJsM5+zVxoKI9BobOEOEVLMJLUJUqlFedBza5/0 wcvvOwjTcSm8NNyED3BhIBdxtKWBSvldTpx1FnYxviMp -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:11 2026 by rpki-client