This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/uJnEIKPWJw-326x5IBBMzolFrLM.roa
File: uJnEIKPWJw-326x5IBBMzolFrLM.roa (raw, json)
Hash identifier: moDOTpNm3tFCIAX5WqMAOpWVKX58N/OLMiWutEeF9mo=
Subject key identifier: B8:99:C4:20:A3:D6:27:0F:B7:DB:AC:79:20:10:4C:CE:89:45:AC:B3
Certificate issuer: /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial: 019B7F15244F9BE626596DC7D9DC582BCBB7
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/uJnEIKPWJw-326x5IBBMzolFrLM.roa
Signing time: Fri 02 Jan 2026 14:20:50 +0000
ROA not before: Fri 02 Jan 2026 14:20:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60339
IP address blocks: 92.41.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:24:4f:9b:e6:26:59:6d:c7:d9:dc:58:2b:cb:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
Validity
Not Before: Jan 2 14:20:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b899c420a3d6270fb7dbac7920104cce8945acb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:73:a6:dc:51:24:cc:7b:ea:a3:f6:64:e6:d3:
66:2f:9a:34:60:93:47:dc:32:98:de:46:bd:5e:6b:
30:7c:74:a5:0f:34:d9:c6:04:4e:5a:82:d6:45:b8:
12:b8:61:10:38:10:8e:b9:43:f8:8d:d1:0e:a0:bc:
cc:fa:d0:7e:92:6d:c7:d9:4b:e0:21:42:d1:6f:5b:
07:a2:5c:a9:da:0c:d3:eb:8d:3b:5f:e2:d3:6e:d2:
f4:fd:05:8f:c1:b1:e7:b0:57:7f:83:af:1f:fc:68:
c1:bb:f2:70:3e:38:68:48:68:2d:6d:1a:8e:63:7b:
56:80:c0:0b:74:26:cf:69:e1:f3:71:98:5d:d8:79:
e5:9d:17:e7:3e:3d:e0:b7:f1:b6:c9:90:c1:a6:61:
7c:7a:90:87:1d:ec:36:d2:b0:ee:a8:c1:00:a9:76:
71:82:bd:d7:21:72:83:e7:00:82:12:ce:6c:0c:69:
52:60:40:8a:fb:38:e7:38:f8:14:12:82:4e:44:5c:
14:34:74:da:c6:ee:03:b2:f1:e2:c5:b5:61:15:ed:
ca:d2:88:db:e8:75:fa:94:1c:f2:ba:a1:05:12:1e:
18:b8:a1:8e:98:dc:95:35:57:2f:7a:06:28:8e:50:
85:d6:e2:a5:2f:6c:41:ad:91:91:68:c0:49:ef:5b:
51:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:99:C4:20:A3:D6:27:0F:B7:DB:AC:79:20:10:4C:CE:89:45:AC:B3
X509v3 Authority Key Identifier:
keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/uJnEIKPWJw-326x5IBBMzolFrLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.41.255.0/24
Signature Algorithm: sha256WithRSAEncryption
59:b8:d2:9c:f9:8d:1b:e3:1b:79:ca:34:9c:83:06:9b:13:25:
ca:18:76:7b:6a:df:16:60:3a:5d:7b:b2:be:55:3c:b4:09:c5:
02:7b:a5:08:a3:e2:02:86:4b:f9:bd:8f:4c:7f:b8:3f:bd:29:
0a:a2:bb:17:90:3a:23:1b:89:d3:2c:05:32:00:bf:3f:16:a7:
96:c6:ae:6c:cf:f2:20:e3:bc:2e:2f:30:40:e8:55:7b:60:e2:
12:49:fa:84:eb:c5:89:83:f6:58:68:d0:23:11:7f:90:59:6b:
df:3a:4c:5a:5d:aa:cc:26:2d:a6:d8:e0:6c:d0:79:34:ea:da:
15:97:ba:62:46:56:00:fb:b5:66:74:56:5a:f1:dd:10:43:ce:
f6:96:24:d2:62:8a:23:18:25:34:97:a7:7e:e3:d5:fa:73:4f:
55:4c:8a:7c:7f:a5:ec:14:0d:d9:1f:37:04:e1:47:d7:7a:fc:
23:85:e0:f9:4a:57:17:b5:76:bc:03:12:07:ed:c2:14:fd:1f:
dd:ec:63:f6:52:c7:6b:f0:06:f4:16:da:67:fd:b1:35:10:7b:
20:6c:0b:53:eb:1d:48:1c:72:e7:64:4b:d0:cf:5b:df:54:9c:
ee:50:61:65:46:4b:39:59:8d:ca:cd:d8:2d:e0:72:56:63:60:
68:72:b8:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/FSRPm+YmWW3H2dxYK8u3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNTEzNTljOTk4OWI5NjNlOTU5NGMxOTI5YzgyMDM2N2Rl
MzIyZGQwHhcNMjYwMTAyMTQyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODk5YzQyMGEzZDYyNzBmYjdkYmFjNzkyMDEwNGNjZTg5NDVhY2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHOm3FEkzHvqo/Zk5tNmL5o0YJNH
3DKY3ka9XmswfHSlDzTZxgROWoLWRbgSuGEQOBCOuUP4jdEOoLzM+tB+km3H2Uvg
IULRb1sHolyp2gzT6407X+LTbtL0/QWPwbHnsFd/g68f/GjBu/JwPjhoSGgtbRqO
Y3tWgMALdCbPaeHzcZhd2HnlnRfnPj3gt/G2yZDBpmF8epCHHew20rDuqMEAqXZx
gr3XIXKD5wCCEs5sDGlSYECK+zjnOPgUEoJORFwUNHTaxu4DsvHixbVhFe3K0ojb
6HX6lBzyuqEFEh4YuKGOmNyVNVcvegYojlCF1uKlL2xBrZGRaMBJ71tRdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLiZxCCj1icPt9useSAQTM6JRayzMB8GA1UdIwQY
MBaAFOtRNZyZiblj6VlMGSnIIDZ94yLdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjFFMW5KbUp1V1BwV1V3WktjZ2dObjNqSXQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kOTdkMjgtYTJlMi00MDFkLThmZjAt
NTlmYzczZDYwMzIyLzEvdUpuRUlLUFdKdy0zMjZ4NUlCQk16b2xGckxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9kOTdkMjgtYTJlMi00MDFkLThmZjAtNTlmYzczZDYwMzIy
LzEvNjFFMW5KbUp1V1BwV1V3WktjZ2dObjNqSXQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXCn/MA0G
CSqGSIb3DQEBCwUAA4IBAQBZuNKc+Y0b4xt5yjScgwabEyXKGHZ7at8WYDpde7K+
VTy0CcUCe6UIo+IChkv5vY9Mf7g/vSkKorsXkDojG4nTLAUyAL8/FqeWxq5sz/Ig
47wuLzBA6FV7YOISSfqE68WJg/ZYaNAjEX+QWWvfOkxaXarMJi2m2OBs0Hk06toV
l7piRlYA+7VmdFZa8d0QQ872liTSYoojGCU0l6d+49X6c09VTIp8f6XsFA3ZHzcE
4UfXevwjheD5SlcXtXa8AxIH7cIU/R/d7GP2Usdr8Ab0Ftpn/bE1EHsgbAtT6x1I
HHLnZEvQz1vfVJzuUGFlRks5WY3Kzdgt4HJWY2BocriX
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:41:59 2026 by rpki-client