This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/rPUe_mYrLSmTmFv2LQZ8OTHJG9k.roa File: rPUe_mYrLSmTmFv2LQZ8OTHJG9k.roa (raw, json) Hash identifier: 5iRsBFsd3e5QtYFbDWJgyq4JRArcPXehU90Piw8H6Eo= Subject key identifier: AC:F5:1E:FE:66:2B:2D:29:93:98:5B:F6:2D:06:7C:39:31:C9:1B:D9 Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a Certificate serial: 019B7FF275E629DC34CCAE7234A66B05426B Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/rPUe_mYrLSmTmFv2LQZ8OTHJG9k.roa Signing time: Fri 02 Jan 2026 18:22:34 +0000 ROA not before: Fri 02 Jan 2026 18:22:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61082 IP address blocks: 82.119.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:75:e6:29:dc:34:cc:ae:72:34:a6:6b:05:42:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a Validity Not Before: Jan 2 18:22:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=acf51efe662b2d2993985bf62d067c3931c91bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2f:2d:a3:c7:d3:62:05:b2:c4:73:dc:9f:bf: d3:93:ff:1c:1b:f0:48:e2:56:8b:eb:ef:72:27:e1: ae:f0:ca:75:f8:48:42:44:f8:4f:17:62:91:3d:18: f8:c5:cc:68:69:56:3d:b8:fb:c1:f4:4b:86:29:fb: 3c:0d:60:1a:d6:fd:13:d2:d8:fe:29:05:35:63:72: 31:99:35:80:41:62:92:e8:9b:dc:53:8c:f8:d1:4f: 96:f6:95:a5:a1:53:20:99:c8:c6:f5:1c:c8:30:02: 91:93:d7:1a:47:97:ab:53:ca:33:85:fa:a7:86:cd: ac:0d:89:b5:53:07:63:0b:82:d5:3b:94:b1:91:dc: 38:b0:f5:0c:00:4c:f6:ad:f9:87:1f:94:5d:6d:43: 63:ec:52:f3:1b:fe:84:2b:d4:9c:08:a3:f3:64:96: 02:1e:a4:31:b9:3a:ea:28:37:ef:8e:82:3b:80:7a: 72:19:15:c1:12:fd:34:34:26:53:43:e8:55:76:8f: b4:25:e7:01:66:96:1c:c6:7f:d4:88:67:00:c1:2b: 0c:c4:e9:02:c4:9c:a5:cf:03:6e:9f:8b:bb:92:65: 2e:f6:24:78:99:44:69:08:b2:ed:9a:89:09:49:c4: 17:05:bc:f9:1d:34:b0:5f:a0:45:55:9c:bd:24:48: d8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F5:1E:FE:66:2B:2D:29:93:98:5B:F6:2D:06:7C:39:31:C9:1B:D9 X509v3 Authority Key Identifier: keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/rPUe_mYrLSmTmFv2LQZ8OTHJG9k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.119.70.0/24 Signature Algorithm: sha256WithRSAEncryption 69:bc:d5:4e:ee:75:a8:87:21:b7:5b:57:2a:68:a6:fb:78:55: fb:99:ac:30:ab:4c:c5:8f:a3:ba:fc:f2:53:c0:8a:63:3b:30: 91:27:75:12:f8:8b:89:50:03:ba:50:df:34:d6:a0:f0:7e:7a: f1:75:6d:9a:5e:0e:b0:c2:3c:e6:8c:05:ef:8a:78:c9:4f:2e: bd:2b:7b:93:b4:be:e0:e5:ed:5f:ba:c2:01:33:de:07:e8:da: 4f:3c:2b:66:d0:29:06:1f:67:cc:f0:36:b2:ae:4b:17:6d:2a: 6b:61:e1:25:a6:a3:e7:81:3f:5b:a2:f2:0d:84:96:67:05:2d: db:3e:6b:fa:9a:60:4f:c1:e9:07:1f:1b:4b:af:0f:56:45:b6: 10:d8:2f:ec:26:22:0c:53:ec:7b:b4:12:16:93:e5:ee:53:90: 70:ef:d3:17:1c:ca:7a:4d:ee:15:cb:16:0d:b4:79:1a:a3:5c: 35:56:e9:17:58:6d:32:5b:4a:d3:ff:b7:99:28:44:b6:82:32: 3c:89:33:7d:a0:18:96:62:fa:cd:cc:a1:95:bf:8d:61:05:ca: 98:9a:cd:8a:3f:f6:9d:cb:9b:48:08:60:49:93:ff:c7:f7:73: 1d:ba:74:8e:8e:79:01:d1:e7:c7:2a:4d:9a:20:3e:5a:45:bb: 0b:63:02:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8nXmKdw0zK5yNKZrBUJrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj M2YwMGEwHhcNMjYwMTAyMTgyMjM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2Y1MWVmZTY2MmIyZDI5OTM5ODViZjYyZDA2N2MzOTMxYzkxYmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzi8to8fTYgWyxHPcn7/Tk/8cG/BI 4laL6+9yJ+Gu8Mp1+EhCRPhPF2KRPRj4xcxoaVY9uPvB9EuGKfs8DWAa1v0T0tj+ KQU1Y3IxmTWAQWKS6JvcU4z40U+W9pWloVMgmcjG9RzIMAKRk9caR5erU8ozhfqn hs2sDYm1UwdjC4LVO5Sxkdw4sPUMAEz2rfmHH5RdbUNj7FLzG/6EK9ScCKPzZJYC HqQxuTrqKDfvjoI7gHpyGRXBEv00NCZTQ+hVdo+0JecBZpYcxn/UiGcAwSsMxOkC xJylzwNun4u7kmUu9iR4mURpCLLtmokJScQXBbz5HTSwX6BFVZy9JEjYOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKz1Hv5mKy0pk5hb9i0GfDkxyRvZMB8GA1UdIwQY MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt YjI3ZDZlMjc4ZTE4LzEvclBVZV9tWXJMU21UbUZ2MkxRWjhPVEhKRzlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4 LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUndGMA0G CSqGSIb3DQEBCwUAA4IBAQBpvNVO7nWohyG3W1cqaKb7eFX7mawwq0zFj6O6/PJT wIpjOzCRJ3US+IuJUAO6UN801qDwfnrxdW2aXg6wwjzmjAXvinjJTy69K3uTtL7g 5e1fusIBM94H6NpPPCtm0CkGH2fM8DayrksXbSprYeElpqPngT9bovINhJZnBS3b Pmv6mmBPwekHHxtLrw9WRbYQ2C/sJiIMU+x7tBIWk+XuU5Bw79MXHMp6Te4VyxYN tHkao1w1VukXWG0yW0rT/7eZKES2gjI8iTN9oBiWYvrNzKGVv41hBcqYms2KP/ad y5tICGBJk//H93MdunSOjnkB0efHKk2aID5aRbsLYwJe -----END CERTIFICATE-----Generated at Sun Jan 25 23:16:32 2026 by rpki-client