This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/ur76ehndzl2-pGTHmrbh1qcAWBI.roa File: ur76ehndzl2-pGTHmrbh1qcAWBI.roa (raw, json) Hash identifier: Sb+oNrAUwZsJERFHDlGdgS7sblzKLRz12cNiy1csEgY= Subject key identifier: BA:BE:FA:7A:19:DD:CE:5D:BE:A4:64:C7:9A:B6:E1:D6:A7:00:58:12 Certificate issuer: /CN=18abae0e1f216a321973ccc9c6537ec6197dab18 Certificate serial: 019B7BA43BD098402017A9925DD69D0450D5 Authority key identifier: 18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/ur76ehndzl2-pGTHmrbh1qcAWBI.roa Signing time: Thu 01 Jan 2026 22:18:39 +0000 ROA not before: Thu 01 Jan 2026 22:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35393 IP address blocks: 91.198.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.mft rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:3b:d0:98:40:20:17:a9:92:5d:d6:9d:04:50:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18abae0e1f216a321973ccc9c6537ec6197dab18 Validity Not Before: Jan 1 22:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=babefa7a19ddce5dbea464c79ab6e1d6a7005812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:88:0e:d0:d6:0f:e3:55:cc:7b:34:62:73:b9: e9:56:55:04:34:14:c0:19:c1:47:c1:03:ab:50:4b: fb:07:7b:1b:42:79:5e:01:52:c6:c5:97:db:2c:e6: 28:a6:4b:c7:6f:46:96:a9:46:b3:d0:f8:ce:c9:29: b3:9a:a1:91:44:97:61:fc:3e:0f:97:9a:99:2f:d1: 4d:12:e3:af:06:e3:0d:1f:73:6f:16:64:c1:b4:f6: be:e0:c0:b7:59:48:f9:f8:e8:83:c1:e1:8b:9b:13: 7c:0d:fb:08:46:ee:3d:6a:d3:12:13:89:00:fb:84: 5f:47:07:56:a4:98:07:46:1c:27:de:b7:7b:be:61: f4:c1:c3:f7:e2:f5:ca:f3:86:1c:95:17:d5:fe:8a: f9:54:22:34:01:ca:a4:c0:58:46:f0:3f:81:80:e3: 1e:00:fe:a7:5f:ef:4d:37:7f:7d:1c:27:fd:6d:a8: b4:fb:02:81:a2:ec:6e:2b:40:60:ef:b3:5d:47:f5: 1c:cb:ae:f3:a9:a5:dc:b9:29:95:a8:39:c0:8a:97: 77:44:ed:91:a3:70:6d:18:f8:a7:ca:2d:e6:4b:f5: c4:eb:a8:05:a3:22:8c:da:5e:5d:58:02:40:3d:84: ab:db:17:3d:35:f1:35:1d:19:1a:6f:cc:a7:5e:4f: d9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:BE:FA:7A:19:DD:CE:5D:BE:A4:64:C7:9A:B6:E1:D6:A7:00:58:12 X509v3 Authority Key Identifier: keyid:18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/ur76ehndzl2-pGTHmrbh1qcAWBI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.105.0/24 Signature Algorithm: sha256WithRSAEncryption 92:48:28:96:7a:54:d8:95:26:04:17:52:93:72:d5:99:db:21: 3f:f8:c6:85:ad:c4:43:d1:38:35:58:05:04:ac:7c:01:ab:05: a2:95:df:ab:64:2d:47:b4:4b:68:d6:c9:b4:3b:84:ef:9c:bf: 9b:ae:16:77:6a:f2:06:15:c8:4b:29:e8:d9:92:56:6f:95:d5: be:2a:49:0d:43:08:ec:5a:06:d7:54:e2:9e:e4:d8:41:45:86: dc:71:87:40:af:e9:0f:30:bf:66:e8:59:37:c8:56:e9:43:d7: 9f:9c:8e:94:c1:b6:f0:ee:58:b1:8b:7e:ff:5b:e0:c3:4f:32: 09:bc:ec:5e:8f:b1:e6:a1:ad:67:d0:40:26:00:7e:ad:db:32: b8:83:76:1a:e3:33:10:f8:56:0c:fc:ad:c2:96:34:10:88:c7: 17:67:a3:d3:1a:21:02:7b:7a:9c:4c:38:80:37:4a:e1:c1:de: c7:c8:3c:4a:e8:3a:26:b5:67:11:43:7a:7e:fd:cc:7c:09:24: 6b:b0:85:30:ae:eb:87:ab:72:55:27:71:d0:2f:39:67:73:c2: dc:17:09:1f:e4:8c:6b:9e:e7:9a:4e:8f:93:bf:44:d5:95:e6: 2b:d8:7c:30:d1:fa:5e:39:32:45:4f:40:c8:a6:be:aa:bb:6e: 0e:a1:b3:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pDvQmEAgF6mSXdadBFDVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4YWJhZTBlMWYyMTZhMzIxOTczY2NjOWM2NTM3ZWM2MTk3 ZGFiMTgwHhcNMjYwMTAxMjIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWJlZmE3YTE5ZGRjZTVkYmVhNDY0Yzc5YWI2ZTFkNmE3MDA1ODEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyogO0NYP41XMezRic7npVlUENBTA GcFHwQOrUEv7B3sbQnleAVLGxZfbLOYopkvHb0aWqUaz0PjOySmzmqGRRJdh/D4P l5qZL9FNEuOvBuMNH3NvFmTBtPa+4MC3WUj5+OiDweGLmxN8DfsIRu49atMSE4kA +4RfRwdWpJgHRhwn3rd7vmH0wcP34vXK84YclRfV/or5VCI0AcqkwFhG8D+BgOMe AP6nX+9NN399HCf9bai0+wKBouxuK0Bg77NdR/Ucy67zqaXcuSmVqDnAipd3RO2R o3BtGPinyi3mS/XE66gFoyKM2l5dWAJAPYSr2xc9NfE1HRkab8ynXk/ZUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLq++noZ3c5dvqRkx5q24danAFgSMB8GA1UdIwQY MBaAFBirrg4fIWoyGXPMycZTfsYZfasYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0t1dURoOGhhaklaYzh6SnhsTi14aGw5cXhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83MjE3NDUtY2ZlNS00MTYxLWI0MDUt MDY5OTk2YzYzMGYwLzEvdXI3NmVobmR6bDItcEdUSG1yYmgxcWNBV0JJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy83MjE3NDUtY2ZlNS00MTYxLWI0MDUtMDY5OTk2YzYzMGYw LzEvR0t1dURoOGhhaklaYzh6SnhsTi14aGw5cXhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8ZpMA0G CSqGSIb3DQEBCwUAA4IBAQCSSCiWelTYlSYEF1KTctWZ2yE/+MaFrcRD0Tg1WAUE rHwBqwWild+rZC1HtEto1sm0O4TvnL+brhZ3avIGFchLKejZklZvldW+KkkNQwjs WgbXVOKe5NhBRYbccYdAr+kPML9m6Fk3yFbpQ9efnI6Uwbbw7lixi37/W+DDTzIJ vOxej7Hmoa1n0EAmAH6t2zK4g3Ya4zMQ+FYM/K3CljQQiMcXZ6PTGiECe3qcTDiA N0rhwd7HyDxK6DomtWcRQ3p+/cx8CSRrsIUwruuHq3JVJ3HQLzlnc8LcFwkf5Ixr nueaTo+Tv0TVleYr2Hww0fpeOTJFT0DIpr6qu24OobMx -----END CERTIFICATE-----Generated at Mon Jan 26 12:26:59 2026 by rpki-client