This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/u0kOnQHraAVT7o1gAfkttQSk4Bk.roa File: u0kOnQHraAVT7o1gAfkttQSk4Bk.roa (raw, json) Hash identifier: dgXDfIBoMWGFiXWqkB6XiT3zkjqB22mMq42VAOQ4S2Y= Subject key identifier: BB:49:0E:9D:01:EB:68:05:53:EE:8D:60:01:F9:2D:B5:04:A4:E0:19 Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Certificate serial: 019B7D5B7FAA606D0D51E4A1B25B0EE33974 Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/u0kOnQHraAVT7o1gAfkttQSk4Bk.roa Signing time: Fri 02 Jan 2026 06:18:27 +0000 ROA not before: Fri 02 Jan 2026 06:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35831 IP address blocks: 83.245.79.0/24 maxlen: 24 89.167.181.0/24 maxlen: 24 89.167.228.0/24 maxlen: 24 89.167.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:7f:aa:60:6d:0d:51:e4:a1:b2:5b:0e:e3:39:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Validity Not Before: Jan 2 06:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb490e9d01eb680553ee8d6001f92db504a4e019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:26:e7:fb:78:6a:50:27:9d:95:a7:d3:3a:44: d0:b9:d8:5a:fa:97:f2:5b:74:d8:9b:a5:b5:b1:2a: b1:0e:e7:73:2c:e9:56:dc:a9:42:e3:a4:e4:0e:0f: 79:0a:19:c7:f3:69:e2:4d:cd:90:7b:58:d1:7c:bd: 9d:69:d0:37:20:e5:fe:6e:b0:e2:04:b9:47:aa:41: 2d:07:87:49:18:8e:00:55:41:69:46:0a:af:da:ac: 96:3f:5e:9f:f0:4f:cd:9c:a5:1d:b7:70:d3:81:95: ac:bd:dc:ed:18:71:f1:70:71:86:0b:3d:de:55:6a: 58:9b:cd:e2:da:95:9f:9e:12:1b:b6:f7:59:2e:20: f2:a3:b8:d2:7f:55:ef:32:e0:f8:c6:5c:3f:5b:00: e8:ec:f4:ed:3f:2a:14:6e:6d:a1:25:3a:4a:a7:fd: a1:9d:f9:84:e5:6e:98:43:aa:df:1a:54:94:23:2e: 33:7f:3a:ed:c5:9a:d4:9f:e0:48:b6:ca:fe:1a:4f: 15:4e:1c:33:b4:39:0f:97:ca:67:69:25:73:68:11: ef:86:69:48:21:1c:ff:2b:a0:1a:89:0d:18:70:ca: 34:63:12:7f:b2:39:f9:6c:e3:0f:39:e0:b5:17:f3: 66:54:a8:1b:f0:5b:a2:44:7f:11:1c:c7:28:12:28: 45:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:49:0E:9D:01:EB:68:05:53:EE:8D:60:01:F9:2D:B5:04:A4:E0:19 X509v3 Authority Key Identifier: keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/u0kOnQHraAVT7o1gAfkttQSk4Bk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.245.79.0/24 89.167.181.0/24 89.167.228.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:d9:ef:e3:a3:57:d7:53:e9:98:ae:32:e3:4a:24:2b:e5:a8: b7:2f:06:12:d6:1a:3c:a7:a5:1e:7b:68:bb:9c:86:e1:ab:56: c5:31:20:20:3a:9c:01:44:36:4c:0b:f3:ee:47:09:60:a1:12: 2f:90:b7:45:f1:f0:e6:df:bb:31:8f:72:c0:62:11:04:48:00: ad:fe:c3:da:d3:24:8b:b6:12:3f:31:2c:9e:36:40:01:62:b6: 11:c0:05:c8:9d:9a:d9:63:70:7b:e3:1c:38:0b:93:4a:8b:47: 88:83:d4:ad:7e:5c:b0:12:72:50:21:7f:a4:2d:52:8a:eb:0b: b2:b4:14:d8:cf:c3:41:f7:c1:a4:f7:7a:e7:07:2b:0e:16:c1: 2a:c8:5c:a7:af:e1:4d:1d:ee:86:2f:f3:a4:69:b8:44:b1:e9: 23:de:3d:fc:42:f7:cb:44:66:73:0d:c4:d1:1c:07:78:d1:8e: 88:fc:6c:55:2a:75:ec:21:8f:94:75:f0:59:0a:a0:ac:0f:37: 3b:d9:c3:40:ff:2c:e5:26:4b:01:8c:7b:0f:c3:b5:8b:98:a5: fe:50:1e:56:d1:6e:15:4d:4c:85:d1:4d:62:8e:f7:50:b4:33: 65:97:17:48:dd:4f:27:f7:39:50:6e:37:e5:ab:21:ad:c8:a1: 5e:32:21:7e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9W3+qYG0NUeShslsO4zl0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0 MDdhODAwHhcNMjYwMTAyMDYxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjQ5MGU5ZDAxZWI2ODA1NTNlZThkNjAwMWY5MmRiNTA0YTRlMDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSbn+3hqUCedlafTOkTQudha+pfy W3TYm6W1sSqxDudzLOlW3KlC46TkDg95ChnH82niTc2Qe1jRfL2dadA3IOX+brDi BLlHqkEtB4dJGI4AVUFpRgqv2qyWP16f8E/NnKUdt3DTgZWsvdztGHHxcHGGCz3e VWpYm83i2pWfnhIbtvdZLiDyo7jSf1XvMuD4xlw/WwDo7PTtPyoUbm2hJTpKp/2h nfmE5W6YQ6rfGlSUIy4zfzrtxZrUn+BItsr+Gk8VThwztDkPl8pnaSVzaBHvhmlI IRz/K6AaiQ0YcMo0YxJ/sjn5bOMPOeC1F/NmVKgb8FuiRH8RHMcoEihFXQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLtJDp0B62gFU+6NYAH5LbUEpOAZMB8GA1UdIwQY MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt NWQ1NjA5ODljZjdiLzEvdTBrT25RSHJhQVZUN28xZ0Fma3R0UVNrNEJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAU/VPAwQA Wae1AwQBWafkMA0GCSqGSIb3DQEBCwUAA4IBAQBd2e/jo1fXU+mYrjLjSiQr5ai3 LwYS1ho8p6Uee2i7nIbhq1bFMSAgOpwBRDZMC/PuRwlgoRIvkLdF8fDm37sxj3LA YhEESACt/sPa0ySLthI/MSyeNkABYrYRwAXInZrZY3B74xw4C5NKi0eIg9Stflyw EnJQIX+kLVKK6wuytBTYz8NB98Gk93rnBysOFsEqyFynr+FNHe6GL/OkabhEsekj 3j38QvfLRGZzDcTRHAd40Y6I/GxVKnXsIY+UdfBZCqCsDzc72cNA/yzlJksBjHsP w7WLmKX+UB5W0W4VTUyF0U1ijvdQtDNllxdI3U8n9zlQbjflqyGtyKFeMiF+ -----END CERTIFICATE-----Generated at Sun Jan 25 15:02:34 2026 by rpki-client