This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/uT4y_V8winuaaXijcNOme3PTmDU.roa File: uT4y_V8winuaaXijcNOme3PTmDU.roa (raw, json) Hash identifier: 7SHOwPXr5hyjGghaBLoLGSxSBuNfqpBCsKfMH3TroC8= Subject key identifier: B9:3E:32:FD:5F:30:8A:7B:9A:69:78:A3:70:D3:A6:7B:73:D3:98:35 Certificate issuer: /CN=ebef95f8c4c554826de8f38ad6bba9fb74802824 Certificate serial: 019B79108CE4A960B4A2998186B436A956CF Authority key identifier: EB:EF:95:F8:C4:C5:54:82:6D:E8:F3:8A:D6:BB:A9:FB:74:80:28:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6--V-MTFVIJt6POK1rup-3SAKCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/uT4y_V8winuaaXijcNOme3PTmDU.roa Signing time: Thu 01 Jan 2026 10:18:06 +0000 ROA not before: Thu 01 Jan 2026 10:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34309 IP address blocks: 85.22.173.0/24 maxlen: 24 212.29.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/6--V-MTFVIJt6POK1rup-3SAKCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/6--V-MTFVIJt6POK1rup-3SAKCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/6--V-MTFVIJt6POK1rup-3SAKCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:8c:e4:a9:60:b4:a2:99:81:86:b4:36:a9:56:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebef95f8c4c554826de8f38ad6bba9fb74802824 Validity Not Before: Jan 1 10:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b93e32fd5f308a7b9a6978a370d3a67b73d39835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ca:67:9f:7f:e0:71:63:20:c2:ff:08:08:89: 95:39:98:1a:88:5a:15:c3:72:48:0f:85:94:b5:0a: da:7b:31:1c:ec:5b:f8:9d:ff:13:79:09:e5:a1:44: bc:8c:97:05:e6:f9:ce:66:9f:89:e3:bf:a6:06:1e: 09:79:6e:7b:05:76:50:1d:e5:f2:a3:38:d1:dd:35: 16:30:06:2a:45:67:14:e5:a6:eb:1f:2c:51:bf:17: c6:03:82:bf:58:d7:01:6c:0c:48:7c:a6:f7:0f:84: b1:c5:2d:80:89:b4:50:b4:67:78:52:53:91:7a:ca: 2c:04:65:89:f9:cf:6e:3e:9d:e2:15:40:1a:d3:8e: 99:54:c7:11:41:be:04:ea:ed:14:90:26:dd:26:d6: 22:d6:ce:07:63:73:24:bb:fc:a2:91:2f:2a:ca:ec: 4b:9b:61:84:62:03:0e:83:b4:73:2d:28:c9:61:1f: ff:ce:dc:82:b8:5f:3a:4c:05:45:8e:10:cd:00:d6: e7:e1:48:90:38:13:e1:74:69:a2:fb:a8:1c:b2:70: 19:7a:c7:58:b8:73:fe:bc:3d:73:32:68:83:92:1d: 2c:26:67:5d:c9:09:fd:d9:cd:5d:f6:21:62:4e:18: f8:69:fe:f9:95:41:f1:87:f5:72:e7:87:d3:84:a4: a0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3E:32:FD:5F:30:8A:7B:9A:69:78:A3:70:D3:A6:7B:73:D3:98:35 X509v3 Authority Key Identifier: keyid:EB:EF:95:F8:C4:C5:54:82:6D:E8:F3:8A:D6:BB:A9:FB:74:80:28:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6--V-MTFVIJt6POK1rup-3SAKCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/uT4y_V8winuaaXijcNOme3PTmDU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/6--V-MTFVIJt6POK1rup-3SAKCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.22.173.0/24 212.29.39.0/24 Signature Algorithm: sha256WithRSAEncryption b0:05:61:bf:6e:ea:01:95:02:5a:41:ae:49:d4:76:99:6f:02: 53:fb:da:7d:d3:63:2e:5b:ea:c0:0d:35:ac:4a:97:49:e2:08: 76:0e:06:77:37:8f:a8:c9:ac:ca:cb:f2:d9:b8:3e:cd:ee:e7: f4:d1:dd:a4:2e:c7:7a:ab:b7:17:7e:f7:8e:09:b9:aa:c3:25: a0:33:6b:04:62:38:f3:f9:34:9f:ca:80:1e:c1:ee:4e:07:c9: 2b:19:9c:b7:c9:68:03:09:db:1a:bd:0f:7d:4a:6a:13:3c:db: a2:ea:14:53:c7:b4:1a:e2:d2:2e:f6:62:c7:b7:b2:81:12:7d: e5:3f:ea:cf:4e:0a:91:33:e3:dc:7b:62:4e:06:48:90:50:9e: ab:4b:5d:21:da:66:fc:49:19:1f:b1:5e:de:dd:03:ae:e4:51: a6:50:27:ac:1d:bb:0d:e8:a9:fe:91:99:52:fe:85:cd:02:31: 00:53:dc:34:af:25:e2:1a:e9:a0:0d:d6:a5:13:12:e7:7d:1a: ca:d6:62:fd:06:c8:e3:75:10:e6:20:24:47:c3:21:8a:d4:d4: c3:9e:9f:1d:c1:69:75:b7:74:24:d8:12:d6:c8:1a:0d:b7:69: 04:63:dd:6a:a0:41:dd:2d:59:af:20:e1:44:22:83:a5:1c:10: 44:30:66:f1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EIzkqWC0opmBhrQ2qVbPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZWY5NWY4YzRjNTU0ODI2ZGU4ZjM4YWQ2YmJhOWZiNzQ4 MDI4MjQwHhcNMjYwMTAxMTAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTNlMzJmZDVmMzA4YTdiOWE2OTc4YTM3MGQzYTY3YjczZDM5ODM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsspnn3/gcWMgwv8ICImVOZgaiFoV w3JID4WUtQraezEc7Fv4nf8TeQnloUS8jJcF5vnOZp+J47+mBh4JeW57BXZQHeXy ozjR3TUWMAYqRWcU5abrHyxRvxfGA4K/WNcBbAxIfKb3D4SxxS2AibRQtGd4UlOR esosBGWJ+c9uPp3iFUAa046ZVMcRQb4E6u0UkCbdJtYi1s4HY3Mku/yikS8qyuxL m2GEYgMOg7RzLSjJYR//ztyCuF86TAVFjhDNANbn4UiQOBPhdGmi+6gcsnAZesdY uHP+vD1zMmiDkh0sJmddyQn92c1d9iFiThj4af75lUHxh/Vy54fThKSg7QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLk+Mv1fMIp7mml4o3DTpntz05g1MB8GA1UdIwQY MBaAFOvvlfjExVSCbejzita7qft0gCgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNi0tVi1NVEZWSUp0NlBPSzFydXAtM1NBS0NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9mMTQ1N2YtNjIxZi00Nzk2LTg2MGUt OWEzNTBmZDFhNGFkLzEvdVQ0eV9WOHdpbnVhYVhpamNOT21lM1BUbURVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9mMTQ1N2YtNjIxZi00Nzk2LTg2MGUtOWEzNTBmZDFhNGFk LzEvNi0tVi1NVEZWSUp0NlBPSzFydXAtM1NBS0NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVRatAwQA 1B0nMA0GCSqGSIb3DQEBCwUAA4IBAQCwBWG/buoBlQJaQa5J1HaZbwJT+9p902Mu W+rADTWsSpdJ4gh2DgZ3N4+oyazKy/LZuD7N7uf00d2kLsd6q7cXfveOCbmqwyWg M2sEYjjz+TSfyoAewe5OB8krGZy3yWgDCdsavQ99SmoTPNui6hRTx7Qa4tIu9mLH t7KBEn3lP+rPTgqRM+Pce2JOBkiQUJ6rS10h2mb8SRkfsV7e3QOu5FGmUCesHbsN 6Kn+kZlS/oXNAjEAU9w0ryXiGumgDdalExLnfRrK1mL9BsjjdRDmICRHwyGK1NTD np8dwWl1t3Qk2BLWyBoNt2kEY91qoEHdLVmvIOFEIoOlHBBEMGbx -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:40 2026 by rpki-client