This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/ue1ofATco1WyASgglUMXvaTcbAA.roa File: ue1ofATco1WyASgglUMXvaTcbAA.roa (raw, json) Hash identifier: 7NG4eNgD3uRpxbInL8ONmLKALYMO6RfhX+P8iMxG0cg= Subject key identifier: B9:ED:68:7C:04:DC:A3:55:B2:01:28:20:95:43:17:BD:A4:DC:6C:00 Certificate issuer: /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046 Certificate serial: 019B7C120D964239ED77E17A512C3C45FC6A Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/ue1ofATco1WyASgglUMXvaTcbAA.roa Signing time: Fri 02 Jan 2026 00:18:36 +0000 ROA not before: Fri 02 Jan 2026 00:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12670 IP address blocks: 92.102.0.0/16 maxlen: 16 92.103.0.0/18 maxlen: 18 92.103.64.0/18 maxlen: 18 185.204.172.0/22 maxlen: 22 212.99.0.0/17 maxlen: 17 212.103.0.0/19 maxlen: 19 213.30.128.0/18 maxlen: 18 213.244.0.0/19 maxlen: 19 217.66.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:0d:96:42:39:ed:77:e1:7a:51:2c:3c:45:fc:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046 Validity Not Before: Jan 2 00:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9ed687c04dca355b2012820954317bda4dc6c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f6:2f:fd:0e:c8:81:de:69:75:ff:4b:d0:c9: a1:5f:4c:66:25:54:82:f3:41:4c:d2:0e:d7:9b:5e: 28:9b:54:5c:7c:f2:8d:2f:34:84:68:23:de:30:21: 53:58:5b:59:9f:ee:6c:7e:21:ec:f1:d0:f2:49:d6: 44:62:21:9b:16:b5:3c:4f:66:98:1a:37:04:e4:2c: 9f:9b:9f:d5:75:5a:1a:6a:da:24:be:b3:1b:12:22: 77:3d:ad:05:48:58:81:cf:a3:32:9d:0f:55:1d:cd: 62:8e:20:d2:e2:7a:bd:29:e0:f3:5b:1c:f0:2a:4f: 30:d7:96:d9:34:26:49:42:1f:57:00:b5:ce:72:0d: 89:f8:57:ef:47:73:13:56:a7:ee:6e:bf:e3:26:c1: 39:0b:ba:47:e9:e7:d9:43:1c:1f:9d:7e:76:04:16: a2:7f:ce:68:41:c0:df:94:07:5d:cb:4f:bc:c0:4d: 06:f3:1b:29:57:64:16:fd:27:09:07:61:4e:f3:36: 14:39:1d:f8:f9:28:8c:e5:b9:72:6b:f2:f2:79:66: 01:b4:24:37:9c:0f:5e:70:7a:1a:75:09:03:c0:4d: f0:b7:49:b2:42:a1:03:53:16:46:35:a3:4c:78:5f: de:d6:8d:b2:89:08:c5:d6:e7:67:af:2b:b8:f3:34: 8d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:ED:68:7C:04:DC:A3:55:B2:01:28:20:95:43:17:BD:A4:DC:6C:00 X509v3 Authority Key Identifier: keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/ue1ofATco1WyASgglUMXvaTcbAA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.102.0.0-92.103.127.255 185.204.172.0/22 212.99.0.0/17 212.103.0.0/19 213.30.128.0/18 213.244.0.0/19 217.66.112.0/20 Signature Algorithm: sha256WithRSAEncryption 55:17:e5:24:81:9a:84:6d:2e:c6:13:39:ae:34:f6:37:b5:0a: 06:9a:8b:f4:ea:64:b5:82:24:a7:8b:74:16:42:2e:e0:c1:23: 96:1c:d2:af:af:a4:d7:9a:0b:00:be:6d:20:9e:11:b5:6e:67: e8:e4:45:1a:06:dc:ed:e4:63:3e:fa:46:48:2f:b5:4b:6a:4a: 3b:bf:ad:2e:6f:ec:2c:a7:bc:ae:0d:fa:f8:10:d7:ff:55:3a: ee:2e:d8:34:9b:e0:ec:fd:00:81:12:81:0f:cc:9b:d9:49:23: 1e:4d:80:06:e8:6c:43:1c:8c:84:13:e2:91:33:8d:54:a1:bb: ea:40:ec:b7:73:22:bc:64:47:19:21:3e:ac:2a:6d:d8:a6:ee: 81:fd:3e:db:b2:dd:95:fe:08:f0:3a:e0:ec:ea:f8:84:75:9b: 3f:f9:cd:6a:6c:36:25:93:03:0b:0a:1e:66:41:dd:e9:65:28: 2a:a0:0a:45:dd:32:2c:8b:6e:15:a6:22:f6:16:96:36:0f:48: 75:1d:07:c4:58:60:4e:97:52:75:80:6d:3f:ef:01:ee:29:03: 64:05:e8:1d:23:b4:bc:3b:72:6f:b4:9a:ab:92:24:83:b9:4f: c7:57:85:f5:cd:0a:30:ca:93:ff:8f:f1:f2:4a:d9:ed:e8:1d: e0:b4:8e:b3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgISAZt8Eg2WQjntd+F6USw8RfxqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZTI4MTBmNDliMzZmZGQ2NDFjMzI2YmQxZGU0ZTQyZDEy OGIwNDYwHhcNMjYwMTAyMDAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWVkNjg3YzA0ZGNhMzU1YjIwMTI4MjA5NTQzMTdiZGE0ZGM2YzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PYv/Q7Igd5pdf9L0MmhX0xmJVSC 80FM0g7Xm14om1RcfPKNLzSEaCPeMCFTWFtZn+5sfiHs8dDySdZEYiGbFrU8T2aY GjcE5Cyfm5/VdVoaatokvrMbEiJ3Pa0FSFiBz6MynQ9VHc1ijiDS4nq9KeDzWxzw Kk8w15bZNCZJQh9XALXOcg2J+FfvR3MTVqfubr/jJsE5C7pH6efZQxwfnX52BBai f85oQcDflAddy0+8wE0G8xspV2QW/ScJB2FO8zYUOR34+SiM5blya/LyeWYBtCQ3 nA9ecHoadQkDwE3wt0myQqEDUxZGNaNMeF/e1o2yiQjF1udnryu48zSNhQIDAQAB o4ICNDCCAjAwHQYDVR0OBBYEFLntaHwE3KNVsgEoIJVDF72k3GwAMB8GA1UdIwQY MBaAFPLigQ9Js2/dZBwya9HeTkLRKLBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAt NTBkMmI3MGJjZjMxLzEvdWUxb2ZBVGNvMVd5QVNnZ2xVTVh2YVRjYkFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAtNTBkMmI3MGJjZjMx LzEvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTA3BAIAATAxMAsDAwFcZgME B1xnAAMEArnMrAMEB9RjAAMEBdRnAAMEBtUegAMEBdX0AAMEBNlCcDANBgkqhkiG 9w0BAQsFAAOCAQEAVRflJIGahG0uxhM5rjT2N7UKBpqL9OpktYIkp4t0FkIu4MEj lhzSr6+k15oLAL5tIJ4RtW5n6ORFGgbc7eRjPvpGSC+1S2pKO7+tLm/sLKe8rg36 +BDX/1U67i7YNJvg7P0AgRKBD8yb2UkjHk2ABuhsQxyMhBPikTONVKG76kDst3Mi vGRHGSE+rCpt2Kbugf0+27Ldlf4I8Drg7Or4hHWbP/nNamw2JZMDCwoeZkHd6WUo KqAKRd0yLItuFaYi9haWNg9IdR0HxFhgTpdSdYBtP+8B7ikDZAXoHSO0vDtyb7Sa q5Ikg7lPx1eF9c0KMMqT/4/x8krZ7egd4LSOsw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:49 2026 by rpki-client