This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/pUeHHF4pC4-zIRXO_grSASp1OfM.roa File: pUeHHF4pC4-zIRXO_grSASp1OfM.roa (raw, json) Hash identifier: kn9V/PD8fwcG7V/Q9LK/O7MAEpNrkEsY4bQFNUkSntc= Subject key identifier: A5:47:87:1C:5E:29:0B:8F:B3:21:15:CE:FE:0A:D2:01:2A:75:39:F3 Certificate issuer: /CN=bbd351b274fc23a42728303638a0d62b606401b4 Certificate serial: 019B797F006FD5E2D7A404C72D7A5D6BA44B Authority key identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/pUeHHF4pC4-zIRXO_grSASp1OfM.roa Signing time: Thu 01 Jan 2026 12:18:44 +0000 ROA not before: Thu 01 Jan 2026 12:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29317 IP address blocks: 91.194.118.0/23 maxlen: 23 91.194.124.0/23 maxlen: 23 2001:1578::/32 maxlen: 40 2001:1578:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:00:6f:d5:e2:d7:a4:04:c7:2d:7a:5d:6b:a4:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbd351b274fc23a42728303638a0d62b606401b4 Validity Not Before: Jan 1 12:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a547871c5e290b8fb32115cefe0ad2012a7539f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6f:98:3c:b9:f6:d7:1d:d7:61:c6:ac:08:70: 05:10:7c:7e:c0:fa:7c:3e:02:1a:09:43:46:d8:fc: 3e:fb:7d:e4:fc:da:1b:e6:3b:95:fb:b7:9a:3e:ec: 63:7e:6c:b7:74:23:4f:a9:f6:76:d1:ec:6f:4d:40: 04:4c:b9:20:cc:c0:46:36:94:0e:bb:8e:81:9c:fa: ba:68:02:26:8e:79:b5:fe:c2:1e:ba:f1:47:d0:84: 08:7f:74:f4:fa:19:7c:19:a7:45:d4:07:0f:8b:db: 60:05:5a:29:3c:72:98:a9:38:92:55:d6:a8:ce:64: f1:e6:3b:04:ae:af:93:09:13:bb:01:2a:d8:02:41: 02:e9:c5:7b:eb:cd:7a:d2:86:d3:4b:43:a8:c6:dd: 24:ff:30:c8:38:66:71:82:00:ab:cb:59:0d:01:f9: 41:7d:72:b6:6f:88:47:f6:b6:c6:00:90:16:a4:26: d0:ad:84:e5:4b:f1:90:58:40:c9:7a:60:05:3b:e6: 11:ea:ec:68:40:33:e8:c1:fd:58:9a:94:13:ae:e4: 37:b4:04:f5:72:8d:56:10:dd:7b:4c:20:32:cb:b8: b3:04:b6:a2:a4:c1:35:47:2f:06:b5:82:12:f5:ed: b8:c9:63:67:27:e8:73:c4:e7:0e:24:e1:b8:aa:b0: 72:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:47:87:1C:5E:29:0B:8F:B3:21:15:CE:FE:0A:D2:01:2A:75:39:F3 X509v3 Authority Key Identifier: keyid:BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/pUeHHF4pC4-zIRXO_grSASp1OfM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.118.0/23 91.194.124.0/23 IPv6: 2001:1578::/32 Signature Algorithm: sha256WithRSAEncryption 19:af:38:3b:12:c7:89:0d:00:31:ca:72:3e:86:80:41:8d:4a: 1d:ac:2e:09:43:a6:c8:7f:40:28:00:6b:f0:a3:65:06:79:25: 96:01:a6:9b:10:df:e6:34:c4:58:ef:1f:ac:81:6b:a3:0c:d1: ba:59:f5:b4:37:fc:26:84:7e:8c:ce:f0:35:bd:88:02:19:f7: 8c:5d:7d:c2:df:e0:6f:18:d0:67:c5:bc:cd:b6:0a:dc:0f:43: fc:df:f4:df:a7:19:41:53:1c:4a:2c:ee:8b:6c:98:c9:67:f3: a1:09:bf:24:1e:48:aa:37:4c:75:0a:dc:ee:eb:aa:84:a7:e4: b1:8f:86:e2:78:5c:ae:9b:6a:45:5d:a8:93:bb:e4:5f:3f:f8: 2d:a5:13:2d:b7:c2:b1:53:a8:b0:0a:db:0b:e6:89:9c:9d:70: 4f:21:d7:4f:76:8a:8d:a2:9b:29:39:75:4d:47:b7:b9:c6:4d: 59:2d:30:ff:55:16:ab:62:fd:bd:b2:41:57:3e:bb:a8:a7:c1: 18:d0:ff:95:40:9e:aa:82:f8:d1:06:c1:5b:db:a9:fe:c7:5a: 20:f6:2c:89:64:0b:1f:2d:47:7e:af:6b:ae:6f:2a:37:00:ee: 2a:b4:63:24:a0:1e:5b:32:6f:b2:63:b8:24:79:38:48:d0:f5: 3d:ff:8d:e4 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5fwBv1eLXpATHLXpda6RLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZDM1MWIyNzRmYzIzYTQyNzI4MzAzNjM4YTBkNjJiNjA2 NDAxYjQwHhcNMjYwMTAxMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTQ3ODcxYzVlMjkwYjhmYjMyMTE1Y2VmZTBhZDIwMTJhNzUzOWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW+YPLn21x3XYcasCHAFEHx+wPp8 PgIaCUNG2Pw++33k/Nob5juV+7eaPuxjfmy3dCNPqfZ20exvTUAETLkgzMBGNpQO u46BnPq6aAImjnm1/sIeuvFH0IQIf3T0+hl8GadF1AcPi9tgBVopPHKYqTiSVdao zmTx5jsErq+TCRO7ASrYAkEC6cV768160obTS0Ooxt0k/zDIOGZxggCry1kNAflB fXK2b4hH9rbGAJAWpCbQrYTlS/GQWEDJemAFO+YR6uxoQDPowf1YmpQTruQ3tAT1 co1WEN17TCAyy7izBLaipME1Ry8GtYIS9e24yWNnJ+hzxOcOJOG4qrBygwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKVHhxxeKQuPsyEVzv4K0gEqdTnzMB8GA1UdIwQY MBaAFLvTUbJ0/COkJygwNjig1itgZAG0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTlOUnNuVDhJNlFuS0RBMk9LRFdLMkJrQWJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jMWY5MGEtMmJhZC00MWI0LWIxYTYt NDZiMzAyOGEwM2IwLzEvcFVlSEhGNHBDNC16SVJYT19nclNBU3AxT2ZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9jMWY5MGEtMmJhZC00MWI0LWIxYTYtNDZiMzAyOGEwM2Iw LzEvdTlOUnNuVDhJNlFuS0RBMk9LRFdLMkJrQWJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBW8J2AwQB W8J8MA0EAgACMAcDBQAgARV4MA0GCSqGSIb3DQEBCwUAA4IBAQAZrzg7EseJDQAx ynI+hoBBjUodrC4JQ6bIf0AoAGvwo2UGeSWWAaabEN/mNMRY7x+sgWujDNG6WfW0 N/wmhH6MzvA1vYgCGfeMXX3C3+BvGNBnxbzNtgrcD0P83/TfpxlBUxxKLO6LbJjJ Z/OhCb8kHkiqN0x1Ctzu66qEp+Sxj4bieFyum2pFXaiTu+RfP/gtpRMtt8KxU6iw CtsL5omcnXBPIddPdoqNopspOXVNR7e5xk1ZLTD/VRarYv29skFXPruop8EY0P+V QJ6qgvjRBsFb26n+x1og9iyJZAsfLUd+r2uubyo3AO4qtGMkoB5bMm+yY7gkeThI 0PU9/43k -----END CERTIFICATE-----Generated at Mon Jan 26 21:17:37 2026 by rpki-client