This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/U8NQ-X6oXdPJtDvZC2bEGyclVuc.roa File: U8NQ-X6oXdPJtDvZC2bEGyclVuc.roa (raw, json) Hash identifier: EnK49cFtZphk+Uu4vq0sYXSzWqCtB8Omy8Rc0kmt4Ts= Subject key identifier: 53:C3:50:F9:7E:A8:5D:D3:C9:B4:3B:D9:0B:66:C4:1B:27:25:56:E7 Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Certificate serial: 019B76EB2EAF15A1C8DBD93367A1FBDEBE6D Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/U8NQ-X6oXdPJtDvZC2bEGyclVuc.roa Signing time: Thu 01 Jan 2026 00:18:02 +0000 ROA not before: Thu 01 Jan 2026 00:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39238 IP address blocks: 91.195.125.0/24 maxlen: 24 91.229.112.0/23 maxlen: 23 185.202.0.0/24 maxlen: 24 185.202.1.0/24 maxlen: 24 185.202.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:2e:af:15:a1:c8:db:d9:33:67:a1:fb:de:be:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Validity Not Before: Jan 1 00:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53c350f97ea85dd3c9b43bd90b66c41b272556e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3f:e7:6b:0b:01:7a:66:5c:73:1d:bb:f1:6d: b9:45:e0:7b:32:e5:72:fa:3d:3e:8a:de:41:27:00: 95:a9:6c:4d:7f:08:40:4b:78:bc:82:83:8f:74:e3: 78:6b:3b:50:48:35:1f:ea:02:b5:55:64:c4:01:73: 3b:5a:bc:d1:f2:02:bc:b2:65:10:ba:6d:f3:38:63: c8:39:64:d1:e0:84:2d:38:2b:18:48:70:b2:f8:5d: 63:dd:23:1a:d3:2d:d8:61:39:25:22:58:58:f9:0b: 54:98:0e:4a:25:11:5a:13:d9:d2:79:f0:2c:54:65: ad:05:86:0c:39:e0:9c:72:22:84:0d:b9:d2:cd:16: 02:f0:d6:6a:5d:e5:75:15:50:fc:35:71:1d:39:a1: 57:81:9d:83:74:f5:20:3d:30:38:1e:4a:51:e3:d5: 55:25:db:07:c8:03:4d:8c:f7:c1:00:41:bb:a3:5e: 47:a5:a0:b5:0f:54:87:be:44:1a:01:28:2d:b8:a4: cd:ff:52:ff:67:9d:c0:d0:63:56:35:a7:9c:5d:3f: dd:5d:d7:f6:32:de:a0:a4:54:4d:43:5a:f2:a4:e6: 74:29:ec:40:4e:1a:3a:86:4f:5a:7a:71:49:15:a6: 66:85:e2:d6:96:9e:44:1b:55:1f:c6:b0:9e:4e:c3: 15:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C3:50:F9:7E:A8:5D:D3:C9:B4:3B:D9:0B:66:C4:1B:27:25:56:E7 X509v3 Authority Key Identifier: keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/U8NQ-X6oXdPJtDvZC2bEGyclVuc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.125.0/24 91.229.112.0/23 185.202.0.0-185.202.2.255 Signature Algorithm: sha256WithRSAEncryption 09:9e:20:35:2f:af:b7:17:90:06:7c:d7:8a:9e:07:c7:b1:22: 72:95:79:4d:16:b3:bc:51:f4:31:1b:fc:c1:ee:8c:b1:cd:c8: 3a:7d:98:65:d6:95:0d:e3:ea:81:8c:5c:c1:3c:5b:a2:73:dd: 74:83:2b:86:48:3e:00:59:ea:0e:a7:3e:32:fa:fb:42:99:ff: 17:c2:eb:1c:aa:b3:b4:61:b9:3d:52:10:4a:b0:43:d6:28:b0: 7d:a0:b4:16:ca:e1:f7:90:05:98:36:4b:1b:e5:32:74:cc:b9: 0e:72:c7:05:00:ed:86:9e:df:4d:6f:fa:64:dd:bb:da:8c:c1: fb:76:1d:da:bf:ff:e9:91:e4:f3:62:bb:5a:24:08:49:47:19: 64:21:a5:c3:99:6e:de:c3:49:6c:e3:19:33:2d:7d:10:18:3a: 9f:0c:21:ec:87:57:60:54:e5:f2:2f:2e:64:d1:b9:3d:ec:c5: e9:ce:b7:90:1e:91:0e:71:fc:74:d8:e5:98:40:c7:06:58:50: ff:01:db:06:cd:d4:cf:33:54:5d:2a:fb:74:5b:89:ca:d4:71: 71:fd:d6:10:3b:f0:42:6c:5d:7c:c9:89:a8:ca:bf:ea:74:aa: 3b:62:80:1d:ef:d7:01:30:b0:9b:b4:52:df:96:d3:75:6f:f8: 5a:7d:d2:66 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZt26y6vFaHI29kzZ6H73r5tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2 Njk0NmYwHhcNMjYwMTAxMDAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2MzNTBmOTdlYTg1ZGQzYzliNDNiZDkwYjY2YzQxYjI3MjU1NmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT/nawsBemZccx278W25ReB7MuVy +j0+it5BJwCVqWxNfwhAS3i8goOPdON4aztQSDUf6gK1VWTEAXM7WrzR8gK8smUQ um3zOGPIOWTR4IQtOCsYSHCy+F1j3SMa0y3YYTklIlhY+QtUmA5KJRFaE9nSefAs VGWtBYYMOeCcciKEDbnSzRYC8NZqXeV1FVD8NXEdOaFXgZ2DdPUgPTA4HkpR49VV JdsHyANNjPfBAEG7o15HpaC1D1SHvkQaASgtuKTN/1L/Z53A0GNWNaecXT/dXdf2 Mt6gpFRNQ1rypOZ0KexATho6hk9aenFJFaZmheLWlp5EG1UfxrCeTsMV6QIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFFPDUPl+qF3TybQ72QtmxBsnJVbnMB8GA1UdIwQY MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct MDhhZDk0MTAxZDdlLzEvVThOUS1YNm9YZFBKdER2WkMyYkVHeWNsVnVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAfBAIAATAZAwQAW8N9AwQB W+VwMAsDAwG5ygMEALnKAjANBgkqhkiG9w0BAQsFAAOCAQEACZ4gNS+vtxeQBnzX ip4Hx7EicpV5TRazvFH0MRv8we6Msc3IOn2YZdaVDePqgYxcwTxbonPddIMrhkg+ AFnqDqc+Mvr7Qpn/F8LrHKqztGG5PVIQSrBD1iiwfaC0Fsrh95AFmDZLG+UydMy5 DnLHBQDthp7fTW/6ZN272ozB+3Yd2r//6ZHk82K7WiQISUcZZCGlw5lu3sNJbOMZ My19EBg6nwwh7IdXYFTl8i8uZNG5PezF6c63kB6RDnH8dNjlmEDHBlhQ/wHbBs3U zzNUXSr7dFuJytRxcf3WEDvwQmxdfMmJqMq/6nSqO2KAHe/XATCwm7RS35bTdW/4 Wn3SZg== -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:13 2026 by rpki-client