This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/0UV3LgVgE_7Hs848qqKKCsV5C5w.roa File: 0UV3LgVgE_7Hs848qqKKCsV5C5w.roa (raw, json) Hash identifier: Sudvbf36SiT26k5mPP7nIBAokEbyeg97K1OkvhG5NqU= Subject key identifier: D1:45:77:2E:05:60:13:FE:C7:B3:CE:3C:AA:A2:8A:0A:C5:79:0B:9C Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019B7C80679CED3712F019B963CCC0547D49 Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/0UV3LgVgE_7Hs848qqKKCsV5C5w.roa Signing time: Fri 02 Jan 2026 02:19:08 +0000 ROA not before: Fri 02 Jan 2026 02:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196695 IP address blocks: 91.229.116.0/24 maxlen: 24 91.229.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:67:9c:ed:37:12:f0:19:b9:63:cc:c0:54:7d:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Jan 2 02:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d145772e056013fec7b3ce3caaa28a0ac5790b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:51:16:69:83:46:db:e4:bc:65:58:8c:4a:86: 63:df:70:7f:aa:66:26:62:38:be:af:25:74:22:1b: 00:95:cb:20:9d:f9:a3:e5:9d:8c:46:63:ca:72:ba: 77:a3:fb:21:9f:ce:97:87:3c:3f:10:85:97:1b:6f: 60:3d:a4:a1:5f:c4:b7:2e:94:f0:19:5e:6c:ee:e9: ff:88:b6:0f:74:ab:2d:d8:15:67:60:e9:6e:01:7c: 58:c0:dc:9d:ae:83:10:8c:fd:e6:64:df:44:b6:43: f8:7b:ca:ae:59:49:e0:f9:48:0d:9b:df:2d:d3:38: 6f:5a:97:39:07:a4:38:28:4a:c4:c0:67:92:c5:91: c4:f6:f5:a7:b7:0f:5a:48:25:e0:4b:f2:07:97:8c: 2a:60:c3:88:56:a0:d0:0d:b4:6c:f8:df:71:5f:15: 9b:9e:05:ad:78:6e:84:2a:9b:02:a0:9f:64:cc:4d: 85:53:f2:f7:be:39:b7:c1:cd:ee:d2:40:b3:ae:84: d9:54:16:60:90:7e:6c:8c:17:6d:e3:28:63:6d:f2: 19:b3:95:aa:44:7c:3c:8c:17:d7:c0:ec:14:17:29: 33:01:d5:4e:68:da:5e:80:fb:24:61:31:55:c5:d9: eb:1e:92:99:94:43:2c:e2:75:68:ce:ff:26:66:6a: e1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:45:77:2E:05:60:13:FE:C7:B3:CE:3C:AA:A2:8A:0A:C5:79:0B:9C X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/0UV3LgVgE_7Hs848qqKKCsV5C5w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.116.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:a0:96:62:8d:8b:f9:d2:f3:ad:0e:34:c8:55:09:1b:3b:de: 9a:6d:f8:81:a2:40:cf:c5:6c:3e:bf:77:5b:f9:1d:99:4a:9d: e2:dc:c1:f3:89:d6:84:24:40:0b:bf:57:87:1c:ba:b0:13:bf: 21:29:6e:a1:82:42:29:03:ac:31:cf:11:53:ab:f9:6f:a0:8e: fe:14:1d:f0:73:de:c4:3b:20:81:8b:50:b9:67:ca:c6:91:7e: 74:6e:d1:b1:45:27:20:54:4e:1d:f6:a8:b7:2a:a1:44:24:6d: 26:c8:e8:a2:d6:a7:f4:74:ca:93:84:ca:2c:41:85:c1:40:c1: 5b:4e:33:5e:d6:f1:58:cc:8b:57:dc:0b:9b:69:89:b2:90:e5: 3e:62:90:2c:3e:aa:51:e0:ee:79:93:4e:93:86:4f:36:ff:b0: b6:60:df:99:e5:e8:9d:30:28:29:68:4d:10:69:e3:57:cf:27: 20:c5:2f:cc:65:88:0c:61:07:52:ca:93:2c:92:a1:9b:aa:d7: bb:a1:84:20:23:ea:89:49:89:a8:ce:ae:1d:4e:c4:87:5d:de: 6e:5e:22:cd:68:1a:74:ef:91:b4:1f:1a:df:cc:8c:1c:86:6b: 9b:3d:7d:c2:91:71:86:6e:b0:77:51:2c:3b:2c:c0:3a:0b:bb: 0d:eb:a5:68 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gGec7TcS8Bm5Y8zAVH1JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjYwMTAyMDIxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTQ1NzcyZTA1NjAxM2ZlYzdiM2NlM2NhYWEyOGEwYWM1NzkwYjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFEWaYNG2+S8ZViMSoZj33B/qmYm Yji+ryV0IhsAlcsgnfmj5Z2MRmPKcrp3o/shn86Xhzw/EIWXG29gPaShX8S3LpTw GV5s7un/iLYPdKst2BVnYOluAXxYwNydroMQjP3mZN9EtkP4e8quWUng+UgNm98t 0zhvWpc5B6Q4KErEwGeSxZHE9vWntw9aSCXgS/IHl4wqYMOIVqDQDbRs+N9xXxWb ngWteG6EKpsCoJ9kzE2FU/L3vjm3wc3u0kCzroTZVBZgkH5sjBdt4yhjbfIZs5Wq RHw8jBfXwOwUFykzAdVOaNpegPskYTFVxdnrHpKZlEMs4nVozv8mZmrhkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNFFdy4FYBP+x7POPKqiigrFeQucMB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvMFVWM0xnVmdFXzdIczg0OHFxS0tDc1Y1QzV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+V0MA0G CSqGSIb3DQEBCwUAA4IBAQB/oJZijYv50vOtDjTIVQkbO96abfiBokDPxWw+v3db +R2ZSp3i3MHzidaEJEALv1eHHLqwE78hKW6hgkIpA6wxzxFTq/lvoI7+FB3wc97E OyCBi1C5Z8rGkX50btGxRScgVE4d9qi3KqFEJG0myOii1qf0dMqThMosQYXBQMFb TjNe1vFYzItX3AubaYmykOU+YpAsPqpR4O55k06Thk82/7C2YN+Z5eidMCgpaE0Q aeNXzycgxS/MZYgMYQdSypMskqGbqte7oYQgI+qJSYmozq4dTsSHXd5uXiLNaBp0 75G0HxrfzIwchmubPX3CkXGGbrB3USw7LMA6C7sN66Vo -----END CERTIFICATE-----Generated at Sat Jan 10 03:59:13 2026 by rpki-client