This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/uUk1h5SII_Safw_pSYFNTK7-iXA.roa File: uUk1h5SII_Safw_pSYFNTK7-iXA.roa (raw, json) Hash identifier: VTAbHmUg7zNhrsk+AD118pUR1Ps6/DM4GFSl39OP9BI= Subject key identifier: B9:49:35:87:94:88:23:F4:9A:7F:0F:E9:49:81:4D:4C:AE:FE:89:70 Certificate issuer: /CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8 Certificate serial: 019B791054242F758D51679A7B271D131AA6 Authority key identifier: D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/uUk1h5SII_Safw_pSYFNTK7-iXA.roa Signing time: Thu 01 Jan 2026 10:17:51 +0000 ROA not before: Thu 01 Jan 2026 10:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1653 IP address blocks: 109.105.126.0/25 maxlen: 25 109.105.126.128/25 maxlen: 25 2001:948:58::/48 maxlen: 48 2001:948:59::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:54:24:2f:75:8d:51:67:9a:7b:27:1d:13:1a:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8 Validity Not Before: Jan 1 10:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9493587948823f49a7f0fe949814d4caefe8970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:24:02:23:06:ad:bf:48:d4:07:d0:92:ff:65: 6d:21:3b:2b:ef:84:c1:7d:3b:03:19:65:40:72:30: 85:06:d7:55:ff:f1:4b:15:c4:50:46:8b:fb:68:a2: 83:69:98:54:43:15:8f:57:e1:c5:79:04:39:08:0e: 7a:61:fb:44:c0:61:85:47:7a:0e:1f:6e:5a:1c:f2: b7:d1:de:bb:69:cb:23:43:ea:ff:75:46:12:53:b8: 9c:b8:6a:99:4d:27:e4:79:6a:d9:63:84:f7:1c:cb: 52:64:05:47:4f:76:c2:2c:32:3b:9e:0d:ab:72:4a: 18:f3:ec:7a:01:29:cf:18:59:d8:2c:08:04:a2:7f: 66:ad:8a:6f:53:d4:b7:8c:18:5d:83:2a:03:e1:f2: 72:a6:1d:5a:a8:f3:60:a7:ea:a4:6e:e0:de:bb:d5: d1:2a:78:0e:10:a7:97:0f:55:90:48:4d:b7:37:36: 89:20:3f:d0:35:ee:a5:74:96:0c:4a:bb:de:1e:4e: 4b:16:7c:13:11:a1:32:2f:8a:3b:3c:26:25:fd:80: 43:ae:ab:b4:94:94:c9:a9:84:87:8c:ec:f8:50:2c: d0:87:75:aa:61:4c:9b:9d:e4:8a:2c:4c:d5:51:01: 94:8d:e9:9b:5c:93:6e:a8:ba:0d:29:00:bb:02:36: be:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:49:35:87:94:88:23:F4:9A:7F:0F:E9:49:81:4D:4C:AE:FE:89:70 X509v3 Authority Key Identifier: keyid:D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/uUk1h5SII_Safw_pSYFNTK7-iXA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.105.126.0/24 IPv6: 2001:948:58::/47 Signature Algorithm: sha256WithRSAEncryption a2:71:bb:db:b6:41:ef:96:8e:6a:fb:52:43:e8:74:74:01:37: 23:10:1f:bf:e5:c8:2b:45:80:65:45:58:70:49:83:92:e1:bf: ef:72:70:c8:4c:a9:fa:19:6e:8a:92:d3:1f:cf:bb:1e:6a:c3: b7:9f:9f:fe:f7:7d:6d:73:c0:6c:39:24:6a:f5:b3:a5:9d:1b: 35:ae:8a:d3:00:04:4d:91:d6:d8:8b:ea:c7:2d:8e:79:d0:98: ae:ff:3f:99:c8:42:84:98:f8:0c:08:08:4c:32:9d:b8:e8:ac: 68:1a:40:2d:32:02:80:88:c8:dd:29:d0:39:d7:1c:cb:5b:88: 1b:0b:21:2b:cf:b2:72:bd:a4:54:60:e1:7e:e5:3b:ce:d4:54: 5a:dc:66:9c:45:9c:f8:6b:88:8a:d3:ff:31:4e:1e:42:f9:26: 99:0c:c3:4b:2a:01:bd:da:74:c6:3a:0e:66:fa:f0:51:0f:2c: 76:10:a9:b3:c2:7e:0e:1c:19:fb:75:dc:b3:2e:75:16:0a:db: 2b:0d:75:a5:de:4f:f3:3a:9a:7b:4e:c2:b5:8d:43:00:40:58: 78:87:2d:a9:fa:25:a5:f4:a1:89:02:65:5d:a6:ed:56:ee:a4: 6b:68:89:ff:16:24:28:2a:60:37:c9:9d:15:66:bd:c7:90:3b: 47:05:78:33 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5EFQkL3WNUWeaeycdExqmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNTZhZTYyNWQ5NTA2ZGY0YTNlNTc3YjI0YTg2ZmNlM2M3 M2E4ZjgwHhcNMjYwMTAxMTAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTQ5MzU4Nzk0ODgyM2Y0OWE3ZjBmZTk0OTgxNGQ0Y2FlZmU4OTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSQCIwatv0jUB9CS/2VtITsr74TB fTsDGWVAcjCFBtdV//FLFcRQRov7aKKDaZhUQxWPV+HFeQQ5CA56YftEwGGFR3oO H25aHPK30d67acsjQ+r/dUYSU7icuGqZTSfkeWrZY4T3HMtSZAVHT3bCLDI7ng2r ckoY8+x6ASnPGFnYLAgEon9mrYpvU9S3jBhdgyoD4fJyph1aqPNgp+qkbuDeu9XR KngOEKeXD1WQSE23NzaJID/QNe6ldJYMSrveHk5LFnwTEaEyL4o7PCYl/YBDrqu0 lJTJqYSHjOz4UCzQh3WqYUybneSKLEzVUQGUjembXJNuqLoNKQC7Aja+SQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLlJNYeUiCP0mn8P6UmBTUyu/olwMB8GA1UdIwQY MBaAFNNWrmJdlQbfSj5XeySob848c6j4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDFhdVlsMlZCdDlLUGxkN0pLaHZ6anh6cVBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83YTY1NDUtNTI3Ny00MGYzLWIzNjYt MmVhODdlNmVhMmEwLzEvdVVrMWg1U0lJX1NhZndfcFNZRk5USzctaVhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS83YTY1NDUtNTI3Ny00MGYzLWIzNjYtMmVhODdlNmVhMmEw LzEvMDFhdVlsMlZCdDlLUGxkN0pLaHZ6anh6cVBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAbWl+MA8E AgACMAkDBwEgAQlIAFgwDQYJKoZIhvcNAQELBQADggEBAKJxu9u2Qe+Wjmr7UkPo dHQBNyMQH7/lyCtFgGVFWHBJg5Lhv+9ycMhMqfoZboqS0x/Pux5qw7efn/73fW1z wGw5JGr1s6WdGzWuitMABE2R1tiL6sctjnnQmK7/P5nIQoSY+AwICEwynbjorGga QC0yAoCIyN0p0DnXHMtbiBsLISvPsnK9pFRg4X7lO87UVFrcZpxFnPhriIrT/zFO HkL5JpkMw0sqAb3adMY6Dmb68FEPLHYQqbPCfg4cGft13LMudRYK2ysNdaXeT/M6 mntOwrWNQwBAWHiHLan6JaX0oYkCZV2m7VbupGtoif8WJCgqYDfJnRVmvceQO0cF eDM= -----END CERTIFICATE-----Generated at Thu Jan 1 15:53:52 2026 by rpki-client