This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/1-uKBgaeyFbcrkdiezVSsNyYmy6Q.roa File: 1-uKBgaeyFbcrkdiezVSsNyYmy6Q.roa (raw, json) Hash identifier: 3GVWTtNbh1DU3ktInKpc5g0Btp9SW+66lUQjQeB+RGY= Subject key identifier: FA:E2:81:81:A7:B2:15:B7:2B:91:D8:9E:CD:54:AC:37:26:26:CB:A4 Certificate issuer: /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e Certificate serial: 019B7F8407489B4BB0FE9238F4D854E2C5CD Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/1-uKBgaeyFbcrkdiezVSsNyYmy6Q.roa Signing time: Fri 02 Jan 2026 16:21:57 +0000 ROA not before: Fri 02 Jan 2026 16:21:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51375 IP address blocks: 84.235.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:07:48:9b:4b:b0:fe:92:38:f4:d8:54:e2:c5:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e Validity Not Before: Jan 2 16:21:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fae28181a7b215b72b91d89ecd54ac372626cba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bd:9f:6e:8f:07:bb:47:5d:f6:6f:ee:7e:22: db:d6:12:17:28:3e:68:0f:00:19:f2:39:63:ae:17: a5:73:8e:05:8c:e8:62:ac:20:48:a8:55:c1:36:ec: 06:89:bb:52:9c:d3:18:a2:88:a7:97:39:7c:22:7e: d1:aa:13:d3:31:6b:ca:bd:ff:bb:c0:10:3a:1c:6e: ff:c2:63:f9:bb:d5:b7:d7:70:1a:0d:61:c2:09:55: 3f:4d:f3:68:df:b2:ac:ca:25:c9:ed:33:fc:7f:69: ec:c9:8b:e9:e3:54:e5:38:93:27:c2:a6:86:09:09: 59:5d:a5:dd:e8:12:eb:eb:35:3b:93:3c:d5:a5:3c: 62:2c:7c:41:6c:1f:74:4c:2d:2d:10:33:26:17:31: 4b:0f:e3:f0:6b:b7:9c:1b:9a:43:26:25:c2:28:48: e4:87:9f:0e:39:38:57:c4:bd:d5:48:aa:84:27:24: 5b:fd:95:c0:46:98:c3:08:22:0e:46:64:4e:a1:e3: 20:15:16:e9:ec:f4:48:47:fc:1b:5d:2c:c7:1d:44: 52:37:cb:54:d1:db:4c:9c:a4:f4:d5:e3:04:ea:4c: 38:66:39:d9:80:d0:75:e5:71:4f:72:ff:2d:58:f5: c1:63:97:9b:ea:58:80:50:dd:c0:c3:1c:c4:c1:24: 12:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E2:81:81:A7:B2:15:B7:2B:91:D8:9E:CD:54:AC:37:26:26:CB:A4 X509v3 Authority Key Identifier: keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/1-uKBgaeyFbcrkdiezVSsNyYmy6Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.235.102.0/24 Signature Algorithm: sha256WithRSAEncryption 52:19:37:e0:20:bc:38:58:79:50:84:7b:ff:6b:0e:ce:34:06: ef:63:c9:6a:b1:54:0a:9d:76:e6:cb:c0:6a:0e:70:d8:9d:7f: 7f:99:70:fc:20:a7:2c:1d:7e:93:6f:0d:20:12:d0:4e:f4:3c: 30:35:7a:e9:18:0e:b8:5f:c7:43:62:26:28:48:93:77:e1:27: 7e:5a:f0:71:f0:4f:30:72:ec:1c:5b:33:e0:c7:69:5e:b7:ae: 84:dc:a3:95:17:8b:04:73:b1:1b:c9:10:32:d0:41:29:37:69: b6:8d:5d:cb:09:95:da:af:fe:fc:d4:ec:fe:bd:53:53:7b:fe: 56:77:71:29:fc:2e:6a:7c:8f:9a:63:86:e2:9e:2d:f1:a4:29: 0f:34:b2:88:77:0b:c9:8a:3c:ae:86:cc:ac:ef:91:a0:6e:ec: 32:a8:df:14:d1:e3:67:43:ba:20:dc:22:07:78:a0:0d:5b:17: 8c:e5:3c:ee:89:1e:1b:26:a3:d4:0a:27:87:8d:f8:e0:a1:3b: 3a:65:6d:73:28:fa:15:e0:0f:2a:e4:cb:72:d4:4d:b0:a0:81: 0a:e0:07:11:55:0d:9f:27:34:bf:d8:c3:40:d2:30:db:6d:89: 8b:e6:63:50:61:66:61:35:0d:df:0f:fa:1d:ed:29:db:f1:81: 98:cd:db:98 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/hAdIm0uw/pI49NhU4sXNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMWJmNmEzMTlkYTI0ODk4MTZhZWRiYTFiNGZkMGNjN2Rk ZjNlMWUwHhcNMjYwMTAyMTYyMTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWUyODE4MWE3YjIxNWI3MmI5MWQ4OWVjZDU0YWMzNzI2MjZjYmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAob2fbo8Hu0dd9m/ufiLb1hIXKD5o DwAZ8jljrhelc44FjOhirCBIqFXBNuwGibtSnNMYooinlzl8In7RqhPTMWvKvf+7 wBA6HG7/wmP5u9W313AaDWHCCVU/TfNo37KsyiXJ7TP8f2nsyYvp41TlOJMnwqaG CQlZXaXd6BLr6zU7kzzVpTxiLHxBbB90TC0tEDMmFzFLD+Pwa7ecG5pDJiXCKEjk h58OOThXxL3VSKqEJyRb/ZXARpjDCCIORmROoeMgFRbp7PRIR/wbXSzHHURSN8tU 0dtMnKT01eME6kw4ZjnZgNB15XFPcv8tWPXBY5eb6liAUN3AwxzEwSQS7QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPrigYGnshW3K5HYns1UrDcmJsukMB8GA1UdIwQY MBaAFF4b9qMZ2iSJgWrtuhtP0Mx93z4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGh2Mm94bmFKSW1CYXUyNkcwX1F6SDNmUGg0LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84OGZkZDEtOGI3Yi00MTAxLWFjNjYt YjU5MDk1N2Q5NDE1LzEvMS11S0JnYWV5RmJjcmtkaWV6VlNzTnlZbXk2US5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZTIvODhmZGQxLThiN2ItNDEwMS1hYzY2LWI1OTA5NTdkOTQx NS8xL1hodjJveG5hSkltQmF1MjZHMF9RekgzZlBoNC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFTrZjAN BgkqhkiG9w0BAQsFAAOCAQEAUhk34CC8OFh5UIR7/2sOzjQG72PJarFUCp125svA ag5w2J1/f5lw/CCnLB1+k28NIBLQTvQ8MDV66RgOuF/HQ2ImKEiTd+EnflrwcfBP MHLsHFsz4MdpXreuhNyjlReLBHOxG8kQMtBBKTdpto1dywmV2q/+/NTs/r1TU3v+ VndxKfwuanyPmmOG4p4t8aQpDzSyiHcLyYo8robMrO+RoG7sMqjfFNHjZ0O6INwi B3igDVsXjOU87okeGyaj1Aonh4344KE7OmVtcyj6FeAPKuTLctRNsKCBCuAHEVUN nyc0v9jDQNIw222Ji+ZjUGFmYTUN3w/6He0p2/GBmM3bmA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:56 2026 by rpki-client