This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/uPX022VTJ_bMjiHSPx4Do1vlriY.roa File: uPX022VTJ_bMjiHSPx4Do1vlriY.roa (raw, json) Hash identifier: aq4O2cq08j8Fn88DS5wNdITiPLigSYRE0hYFpbgZqVk= Subject key identifier: B8:F5:F4:DB:65:53:27:F6:CC:8E:21:D2:3F:1E:03:A3:5B:E5:AE:26 Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Certificate serial: 019B7C12BE7BAA8D0BF7B5F8C764676B183F Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/uPX022VTJ_bMjiHSPx4Do1vlriY.roa Signing time: Fri 02 Jan 2026 00:19:21 +0000 ROA not before: Fri 02 Jan 2026 00:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41965 IP address blocks: 77.95.188.0/22 maxlen: 22 91.103.56.0/24 maxlen: 24 91.103.57.0/24 maxlen: 24 91.103.62.0/24 maxlen: 24 91.103.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:be:7b:aa:8d:0b:f7:b5:f8:c7:64:67:6b:18:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Validity Not Before: Jan 2 00:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8f5f4db655327f6cc8e21d23f1e03a35be5ae26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8a:21:f8:43:45:6b:34:6c:38:c9:d7:2d:61: 2b:a9:b8:90:99:2d:e1:c3:5a:09:01:ef:4b:68:65: af:79:99:2f:32:a6:44:97:d5:31:56:d1:5e:e0:54: 0f:2d:d3:6d:b5:eb:bb:54:20:ba:03:50:c5:4e:33: fe:61:43:74:ba:cb:5f:bc:35:7a:aa:73:71:f9:5c: c1:62:ec:b6:e8:da:d1:4b:a3:dc:da:59:bf:17:41: 99:b7:4c:35:6d:40:46:7a:88:e6:f4:b0:85:27:2d: df:ba:f8:6b:cd:d6:0e:43:4f:d1:e1:61:2c:fb:81: a3:dd:58:98:75:6e:5b:91:8a:e2:7d:7f:60:8b:d6: 23:fe:7a:0b:e5:d9:10:09:42:63:06:38:bf:92:6e: d1:fc:13:6b:c6:3e:69:be:10:18:06:37:ca:cd:e8: 4f:9d:3f:19:00:52:7a:16:12:c3:59:97:4a:75:52: c5:d8:7c:8e:b5:ae:0e:3f:ee:88:b1:8a:1d:4f:08: eb:56:36:96:bf:6b:60:34:24:ee:a2:e1:83:75:59: 11:0a:d0:5d:50:d4:e8:4b:23:18:69:a2:f8:b2:81: 61:70:81:63:22:b0:08:c6:a6:93:34:fe:42:74:9b: c1:63:49:68:6a:11:d8:49:17:1b:98:21:95:4f:c1: 2d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F5:F4:DB:65:53:27:F6:CC:8E:21:D2:3F:1E:03:A3:5B:E5:AE:26 X509v3 Authority Key Identifier: keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/uPX022VTJ_bMjiHSPx4Do1vlriY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.95.188.0/22 91.103.56.0/23 91.103.62.0/23 Signature Algorithm: sha256WithRSAEncryption 05:b5:c2:6e:48:bb:99:08:1f:7e:05:97:c0:fa:d0:0b:88:7d: 9b:0a:01:ac:ec:97:9f:3f:30:0e:a9:10:b6:a8:c3:c4:47:fa: 82:8b:81:1a:ac:d6:26:54:43:3e:09:ab:76:71:ea:21:34:55: 99:83:13:2d:ff:04:9c:77:b7:43:5b:dc:a0:64:e7:09:6c:fa: c8:32:4d:f4:3e:d3:6e:56:16:4b:ef:c0:03:3c:87:c7:b9:9d: 1b:dd:2c:d0:eb:80:23:0a:48:65:f1:ed:19:33:48:e9:97:2d: 2a:34:55:87:a2:64:43:16:50:23:75:10:42:a3:4d:af:b2:a0: c4:e8:83:1b:a2:6c:4e:ad:d8:14:ca:08:20:73:4b:0e:fd:8b: 5d:70:f2:65:6f:73:b9:57:cc:02:e0:75:81:2d:8e:87:87:13: 7d:05:7f:27:9e:83:81:45:56:4b:a9:ff:25:66:dd:8b:40:9b: 5f:f6:e5:f7:e6:7e:36:76:ad:0a:b0:a7:24:4d:4a:a3:4a:93: 13:50:f4:cf:1a:2c:f8:fe:f1:44:ed:4d:0f:6b:a5:73:80:f6: c8:57:1b:a3:a0:aa:18:bc:fa:d5:62:d6:d5:9d:27:d5:fb:f6: 4c:5c:a2:b4:37:93:f1:27:85:1a:9b:b7:9f:55:27:d5:a0:fe: 58:28:d3:1c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8Er57qo0L97X4x2Rnaxg/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh ZTMyOGUwHhcNMjYwMTAyMDAxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGY1ZjRkYjY1NTMyN2Y2Y2M4ZTIxZDIzZjFlMDNhMzViZTVhZTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4oh+ENFazRsOMnXLWErqbiQmS3h w1oJAe9LaGWveZkvMqZEl9UxVtFe4FQPLdNtteu7VCC6A1DFTjP+YUN0ustfvDV6 qnNx+VzBYuy26NrRS6Pc2lm/F0GZt0w1bUBGeojm9LCFJy3fuvhrzdYOQ0/R4WEs +4Gj3ViYdW5bkYrifX9gi9Yj/noL5dkQCUJjBji/km7R/BNrxj5pvhAYBjfKzehP nT8ZAFJ6FhLDWZdKdVLF2HyOta4OP+6IsYodTwjrVjaWv2tgNCTuouGDdVkRCtBd UNToSyMYaaL4soFhcIFjIrAIxqaTNP5CdJvBY0loahHYSRcbmCGVT8Et5QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLj19NtlUyf2zI4h0j8eA6Nb5a4mMB8GA1UdIwQY MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt MzViYTI2N2RlZDNiLzEvdVBYMDIyVlRKX2JNamlIU1B4NERvMXZscmlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCTV+8AwQB W2c4AwQBW2c+MA0GCSqGSIb3DQEBCwUAA4IBAQAFtcJuSLuZCB9+BZfA+tALiH2b CgGs7JefPzAOqRC2qMPER/qCi4EarNYmVEM+Cat2ceohNFWZgxMt/wScd7dDW9yg ZOcJbPrIMk30PtNuVhZL78ADPIfHuZ0b3SzQ64AjCkhl8e0ZM0jply0qNFWHomRD FlAjdRBCo02vsqDE6IMbomxOrdgUygggc0sO/YtdcPJlb3O5V8wC4HWBLY6HhxN9 BX8nnoOBRVZLqf8lZt2LQJtf9uX35n42dq0KsKckTUqjSpMTUPTPGiz4/vFE7U0P a6VzgPbIVxujoKoYvPrVYtbVnSfV+/ZMXKK0N5PxJ4Uam7efVSfVoP5YKNMc -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:07 2026 by rpki-client