This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/Uiq4tI4aFo8MuCH2Wj2ZUXl_8Mw.roa File: Uiq4tI4aFo8MuCH2Wj2ZUXl_8Mw.roa (raw, json) Hash identifier: AECglWV3pbtawdnaRrEiiI/NUJmfjgabGaryHLABawI= Subject key identifier: 52:2A:B8:B4:8E:1A:16:8F:0C:B8:21:F6:5A:3D:99:51:79:7F:F0:CC Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c Certificate serial: 019B7B3612951E35383CA1806B4005C908A2 Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/Uiq4tI4aFo8MuCH2Wj2ZUXl_8Mw.roa Signing time: Thu 01 Jan 2026 20:18:19 +0000 ROA not before: Thu 01 Jan 2026 20:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207752 IP address blocks: 89.44.140.0/24 maxlen: 24 89.44.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:12:95:1e:35:38:3c:a1:80:6b:40:05:c9:08:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c Validity Not Before: Jan 1 20:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=522ab8b48e1a168f0cb821f65a3d9951797ff0cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:43:c9:14:69:4f:c5:eb:65:6d:4d:1b:a5:72: 4a:87:19:f4:a0:b7:26:5a:ba:88:fd:49:e7:e7:6c: 95:97:0a:c3:5a:1b:49:ec:e5:d2:a5:eb:fc:98:27: f7:9e:58:37:d1:4d:26:8f:ef:c4:e9:c7:88:ee:1e: ba:be:b7:e6:74:f3:72:1c:c1:fb:d2:60:27:8e:91: a0:eb:70:18:54:06:67:58:11:ff:91:e7:c0:aa:03: 52:8c:2c:13:88:5d:bb:15:3f:fe:79:95:e3:e9:ab: 99:04:32:1d:e9:08:0c:65:0a:c7:f2:ac:ee:c3:13: 40:8f:13:e0:00:a9:77:ac:1d:dc:1d:15:36:9c:a9: f6:55:1b:37:04:f3:a3:02:dc:03:42:aa:59:69:6c: 5d:3b:09:f3:2d:cf:3a:48:48:cd:78:27:5c:6c:fc: da:a6:ba:58:3c:8a:f9:af:26:a6:88:17:4c:8c:c6: 55:4e:a7:e2:47:b6:74:09:d5:f1:fb:d1:fc:07:7e: 5d:08:da:44:c3:24:1d:d2:f5:9e:05:55:48:12:a6: ef:d2:0e:3f:38:e4:d6:c6:2a:e0:cf:d8:51:ae:f6: 55:87:89:22:cd:eb:92:a0:76:bd:c5:a2:a3:08:dc: 1d:64:b3:f4:3d:41:20:c0:65:67:31:05:7e:78:96: ab:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2A:B8:B4:8E:1A:16:8F:0C:B8:21:F6:5A:3D:99:51:79:7F:F0:CC X509v3 Authority Key Identifier: keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/Uiq4tI4aFo8MuCH2Wj2ZUXl_8Mw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.44.140.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:b0:d7:29:ce:06:4a:25:3c:8e:90:82:30:02:63:1a:d5:9f: 8d:45:77:06:2a:7f:6c:b9:36:cd:94:ee:2f:78:03:85:50:d6: 7e:f3:f0:89:c2:54:b4:09:38:e3:a4:b0:8d:be:99:04:93:17: 10:83:4f:95:67:6b:05:e3:73:8a:8b:38:8b:a2:f2:d9:e4:a8: 90:d2:ae:e8:d4:23:ed:a7:88:3c:90:78:fd:ce:3e:c8:d9:52: 99:3d:89:e0:58:2c:68:2f:d8:2c:7f:d4:65:46:8c:d4:8d:e5: 92:d3:62:8d:ef:31:37:0c:77:79:86:7a:c5:47:9e:42:64:1a: 5f:3d:5e:4d:c5:45:6d:b9:36:f6:3d:da:28:85:7f:b7:5b:03: b7:ef:23:71:37:bd:a4:50:96:29:20:10:3e:be:d2:bd:bc:0e: 7f:72:b4:e0:43:51:58:cf:a9:e2:3b:c3:47:9c:21:73:1b:cb: 6a:22:0f:b8:c4:2b:24:d1:f2:50:84:08:1e:20:6e:9a:36:b2: 87:33:12:75:ac:56:fa:dc:9f:21:72:89:86:4a:c2:35:de:7b: dd:c9:a4:81:4d:04:7c:88:97:44:f5:be:63:58:c3:9f:fe:21: e7:5a:b0:c5:12:ad:27:75:1a:aa:de:14:a9:29:82:af:52:08: b0:d0:2a:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NhKVHjU4PKGAa0AFyQiiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm NmMxNGMwHhcNMjYwMTAxMjAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjJhYjhiNDhlMWExNjhmMGNiODIxZjY1YTNkOTk1MTc5N2ZmMGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEPJFGlPxetlbU0bpXJKhxn0oLcm WrqI/Unn52yVlwrDWhtJ7OXSpev8mCf3nlg30U0mj+/E6ceI7h66vrfmdPNyHMH7 0mAnjpGg63AYVAZnWBH/kefAqgNSjCwTiF27FT/+eZXj6auZBDId6QgMZQrH8qzu wxNAjxPgAKl3rB3cHRU2nKn2VRs3BPOjAtwDQqpZaWxdOwnzLc86SEjNeCdcbPza prpYPIr5ryamiBdMjMZVTqfiR7Z0CdXx+9H8B35dCNpEwyQd0vWeBVVIEqbv0g4/ OOTWxirgz9hRrvZVh4kizeuSoHa9xaKjCNwdZLP0PUEgwGVnMQV+eJaryQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFIquLSOGhaPDLgh9lo9mVF5f/DMMB8GA1UdIwQY MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt OTc3ODY3NGVkYzk3LzEvVWlxNHRJNGFGbzhNdUNIMldqMlpVWGxfOE13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3 LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWSyMMA0G CSqGSIb3DQEBCwUAA4IBAQAbsNcpzgZKJTyOkIIwAmMa1Z+NRXcGKn9suTbNlO4v eAOFUNZ+8/CJwlS0CTjjpLCNvpkEkxcQg0+VZ2sF43OKiziLovLZ5KiQ0q7o1CPt p4g8kHj9zj7I2VKZPYngWCxoL9gsf9RlRozUjeWS02KN7zE3DHd5hnrFR55CZBpf PV5NxUVtuTb2PdoohX+3WwO37yNxN72kUJYpIBA+vtK9vA5/crTgQ1FYz6niO8NH nCFzG8tqIg+4xCsk0fJQhAgeIG6aNrKHMxJ1rFb63J8hcomGSsI13nvdyaSBTQR8 iJdE9b5jWMOf/iHnWrDFEq0ndRqq3hSpKYKvUgiw0CqT -----END CERTIFICATE-----Generated at Sun Jan 25 21:19:39 2026 by rpki-client