This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/U1wExHgLqik9ennJ-zCwA8QG0Es.roa File: U1wExHgLqik9ennJ-zCwA8QG0Es.roa (raw, json) Hash identifier: +krTPLmLg567MpkwQKDO1W1rHWzpDCH1WMo44ZmuLW8= Subject key identifier: 53:5C:04:C4:78:0B:AA:29:3D:7A:79:C9:FB:30:B0:03:C4:06:D0:4B Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Certificate serial: 019BE04B9DB2FB31CDF42C6E0E8DAE7C14B2 Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/U1wExHgLqik9ennJ-zCwA8QG0Es.roa Signing time: Wed 21 Jan 2026 11:23:30 +0000 ROA not before: Wed 21 Jan 2026 11:23:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213954 IP address blocks: 77.95.172.0/24 maxlen: 24 185.168.28.0/22 maxlen: 24 185.201.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:4b:9d:b2:fb:31:cd:f4:2c:6e:0e:8d:ae:7c:14:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Validity Not Before: Jan 21 11:23:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=535c04c4780baa293d7a79c9fb30b003c406d04b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fb:d7:e4:de:02:1f:14:97:92:20:2e:6b:6b: 75:56:f8:32:3f:d8:a9:4c:d5:7a:98:f4:bb:83:e3: 61:9e:ed:d1:ac:e4:92:80:83:fc:df:d5:23:58:f6: 79:04:21:39:a2:ec:1d:1f:26:ad:09:c8:96:c9:76: ea:de:fe:b3:84:6e:28:31:24:88:a4:73:52:eb:e1: cd:4d:73:ce:27:8b:2d:0f:15:bc:1e:d2:7f:76:ab: 58:49:ac:3d:34:96:19:ab:16:68:55:87:f7:d9:2b: ba:9f:47:fb:6e:e3:50:18:ee:d2:c1:22:8f:74:89: b3:fa:91:4c:50:15:c1:ac:48:1d:35:5b:bf:df:a6: ca:57:6d:83:bb:e4:31:96:0a:e8:f2:3f:32:9d:3c: 46:47:a4:89:14:fa:3b:73:24:bf:7a:96:8a:56:b0: f5:df:44:cb:a0:b8:9d:9a:b3:a4:2d:da:72:5d:a7: 86:2a:60:21:02:3a:de:3a:00:7d:a3:37:35:2b:89: 30:0f:8c:7d:d9:53:8c:88:4b:4e:03:46:29:a9:fb: 92:fd:40:5e:b5:18:ee:51:67:a3:5f:ec:6d:09:58: a6:7b:6e:af:8d:84:ee:ce:4d:b5:f4:bb:03:f3:f3: 10:7e:00:d7:a3:5f:a5:79:87:e2:00:5b:60:a5:58: bb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5C:04:C4:78:0B:AA:29:3D:7A:79:C9:FB:30:B0:03:C4:06:D0:4B X509v3 Authority Key Identifier: keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/U1wExHgLqik9ennJ-zCwA8QG0Es.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.95.172.0/24 185.168.28.0/22 185.201.136.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:30:71:ab:45:1e:0d:32:c7:8d:d4:18:b6:d3:c4:78:78:36: 65:ce:65:56:8f:1b:ec:18:0d:95:6c:15:7c:14:4a:66:16:f9: 96:d8:f8:a9:d0:35:a8:b2:3d:0d:19:1c:3e:95:8c:f8:db:41: 09:7f:56:70:3c:38:56:3c:ce:34:cc:1c:c0:65:49:d5:eb:e5: 1a:24:54:5d:09:38:58:d2:87:3d:c2:fc:55:0b:2c:be:2c:c6: bb:e7:64:d7:e9:07:f5:bc:38:2d:51:2b:d9:7d:bb:4d:42:b9: 59:5d:dc:21:7f:9e:6c:60:76:74:fd:ea:2c:fc:99:eb:1f:2a: 31:19:b4:db:de:1c:a3:86:a8:ee:b8:90:e3:29:15:43:e9:4e: a6:07:4f:d6:3d:b3:d9:f5:98:3b:ce:04:3c:21:da:9c:aa:33: 97:c9:c4:af:6d:ae:30:b9:3e:90:4d:67:fd:d2:fc:85:db:ec: cb:76:9d:6f:81:fd:21:49:e0:80:61:60:ed:05:cf:fe:18:7c: 35:e9:79:c5:30:28:35:c7:e8:93:ff:ff:04:51:de:62:2d:ff: 70:04:7b:cd:60:c5:98:80:0a:18:5b:d2:d7:bc:5c:8f:76:c6: d5:43:a4:0d:dc:fc:cc:4b:60:25:ab:0d:d9:45:9a:af:2c:ed: 12:24:38:40 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZvgS52y+zHN9CxuDo2ufBSyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz Mjc2ZTMwHhcNMjYwMTIxMTEyMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzVjMDRjNDc4MGJhYTI5M2Q3YTc5YzlmYjMwYjAwM2M0MDZkMDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofvX5N4CHxSXkiAua2t1VvgyP9ip TNV6mPS7g+Nhnu3RrOSSgIP839UjWPZ5BCE5ouwdHyatCciWyXbq3v6zhG4oMSSI pHNS6+HNTXPOJ4stDxW8HtJ/dqtYSaw9NJYZqxZoVYf32Su6n0f7buNQGO7SwSKP dImz+pFMUBXBrEgdNVu/36bKV22Du+Qxlgro8j8ynTxGR6SJFPo7cyS/epaKVrD1 30TLoLidmrOkLdpyXaeGKmAhAjreOgB9ozc1K4kwD4x92VOMiEtOA0YpqfuS/UBe tRjuUWejX+xtCVime26vjYTuzk219LsD8/MQfgDXo1+leYfiAFtgpVi7ewIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFNcBMR4C6opPXp5yfswsAPEBtBLMB8GA1UdIwQY MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt YTJhNGM2YTYyMWNkLzEvVTF3RXhIZ0xxaWs5ZW5uSi16Q3dBOFFHMEVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATV+sAwQC uagcAwQCucmIMA0GCSqGSIb3DQEBCwUAA4IBAQA7MHGrRR4NMseN1Bi208R4eDZl zmVWjxvsGA2VbBV8FEpmFvmW2Pip0DWosj0NGRw+lYz420EJf1ZwPDhWPM40zBzA ZUnV6+UaJFRdCThY0oc9wvxVCyy+LMa752TX6Qf1vDgtUSvZfbtNQrlZXdwhf55s YHZ0/eos/JnrHyoxGbTb3hyjhqjuuJDjKRVD6U6mB0/WPbPZ9Zg7zgQ8IdqcqjOX ycSvba4wuT6QTWf90vyF2+zLdp1vgf0hSeCAYWDtBc/+GHw16XnFMCg1x+iT//8E Ud5iLf9wBHvNYMWYgAoYW9LXvFyPdsbVQ6QN3PzMS2Alqw3ZRZqvLO0SJDhA -----END CERTIFICATE-----Generated at Sun Jan 25 13:07:26 2026 by rpki-client