This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/Us6LmDa2YeON0ni7ME7KB6TjHTo.roa File: Us6LmDa2YeON0ni7ME7KB6TjHTo.roa (raw, json) Hash identifier: 3dbTQjtAd+rn0Ht0LtA0Xi1wOrgAsw7gilT3TC7acgs= Subject key identifier: 52:CE:8B:98:36:B6:61:E3:8D:D2:78:BB:30:4E:CA:07:A4:E3:1D:3A Certificate issuer: /CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4 Certificate serial: 019B79114127489E30B267E5816E7DA2589C Authority key identifier: 95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/Us6LmDa2YeON0ni7ME7KB6TjHTo.roa Signing time: Thu 01 Jan 2026 10:18:52 +0000 ROA not before: Thu 01 Jan 2026 10:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29690 IP address blocks: 83.101.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:41:27:48:9e:30:b2:67:e5:81:6e:7d:a2:58:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9521a262f5075e24b2b3c9b69c8af40e2988a1e4 Validity Not Before: Jan 1 10:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52ce8b9836b661e38dd278bb304eca07a4e31d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:09:dc:55:25:1d:9f:ad:f1:60:f6:50:b5:a0: de:01:ba:aa:c3:10:57:e4:dc:6d:50:04:58:19:cb: 0a:4a:40:60:07:24:f1:c6:e5:30:05:2d:de:c3:4c: a8:ce:22:9c:9d:c9:89:d9:38:64:22:cc:52:37:db: 4b:b0:64:c0:35:57:5c:d8:e8:60:d3:55:ea:5a:ec: 63:a4:f5:b6:5a:b2:a7:25:8f:a0:25:f2:e8:f7:16: 4b:c9:bc:26:4b:5a:e4:53:97:e3:f5:ee:85:c6:86: 93:c5:04:1f:0c:6b:07:24:65:6a:cf:26:55:b5:ac: 39:5c:b2:81:a5:82:0a:15:70:35:4c:83:a7:a4:e5: 6d:6c:3d:cf:64:5e:41:d9:c0:e7:45:cd:c1:6d:09: c5:03:6a:a3:82:e1:ab:f9:d6:fa:65:b8:f2:f0:b7: ce:e5:21:95:05:ec:13:76:e0:d4:7a:bb:42:50:f5: 6f:50:b8:f0:1a:5c:61:42:bf:24:08:6d:41:f4:5b: 95:83:ca:da:fb:55:82:b6:4d:ef:ae:9d:22:a0:38: 90:29:2c:d3:38:6c:7c:f7:36:c2:73:fe:98:0d:99: a1:e7:f2:da:c6:19:1e:1f:00:99:60:5c:14:9f:e3: 37:6e:e8:3b:1c:94:1a:6e:17:cc:11:43:a3:c4:0f: 48:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CE:8B:98:36:B6:61:E3:8D:D2:78:BB:30:4E:CA:07:A4:E3:1D:3A X509v3 Authority Key Identifier: keyid:95:21:A2:62:F5:07:5E:24:B2:B3:C9:B6:9C:8A:F4:0E:29:88:A1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSGiYvUHXiSys8m2nIr0DimIoeQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/Us6LmDa2YeON0ni7ME7KB6TjHTo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c1f20e-d94f-43c5-bb8d-ad3629b202c0/1/lSGiYvUHXiSys8m2nIr0DimIoeQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.101.166.0/24 Signature Algorithm: sha256WithRSAEncryption 24:91:38:a8:5a:0e:90:98:03:52:c5:45:2a:0d:a9:f1:81:1d: 7c:b9:98:3f:32:76:f9:83:6f:85:8f:e9:6e:ac:5c:f6:ed:a2: df:a0:fb:47:16:65:f3:71:e0:05:78:ff:eb:64:1e:58:68:4b: dc:52:d1:a0:c1:5b:5f:90:af:36:51:3d:da:41:8c:96:64:f1: 4e:01:28:4d:e3:e4:52:e6:70:cb:50:c3:93:c4:6d:e5:e0:32: c6:9e:4a:8c:e8:40:d5:9f:8c:70:53:95:b3:b7:9e:91:d2:36: ab:fb:13:84:d4:8c:19:be:ca:0b:93:a1:6e:db:8b:fd:e2:9b: 58:76:7d:15:48:00:fe:69:84:53:e8:c0:3a:e7:54:68:6f:0c: 14:08:21:6a:76:88:ce:a5:44:55:cf:dc:2d:9c:5f:57:03:a7: 49:76:bd:cd:b1:81:88:e3:d2:8d:c8:46:da:8d:5c:f3:10:c8: 6d:5b:10:29:af:3b:e3:2d:c3:f8:b2:ed:2c:8a:ea:b4:df:aa: c8:cb:e3:62:a4:48:d4:fe:05:ed:92:36:93:a8:05:10:0e:e5: 53:3a:7b:00:4d:3a:f6:86:98:00:a9:c7:f6:91:3f:18:6d:ea: 3b:bc:4a:c4:61:fc:77:2a:97:d1:2d:de:1f:7e:95:e2:37:61: ca:4d:5b:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EUEnSJ4wsmflgW59olicMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjFhMjYyZjUwNzVlMjRiMmIzYzliNjljOGFmNDBlMjk4 OGExZTQwHhcNMjYwMTAxMTAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmNlOGI5ODM2YjY2MWUzOGRkMjc4YmIzMDRlY2EwN2E0ZTMxZDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gncVSUdn63xYPZQtaDeAbqqwxBX 5NxtUARYGcsKSkBgByTxxuUwBS3ew0yoziKcncmJ2ThkIsxSN9tLsGTANVdc2Ohg 01XqWuxjpPW2WrKnJY+gJfLo9xZLybwmS1rkU5fj9e6FxoaTxQQfDGsHJGVqzyZV taw5XLKBpYIKFXA1TIOnpOVtbD3PZF5B2cDnRc3BbQnFA2qjguGr+db6Zbjy8LfO 5SGVBewTduDUertCUPVvULjwGlxhQr8kCG1B9FuVg8ra+1WCtk3vrp0ioDiQKSzT OGx89zbCc/6YDZmh5/LaxhkeHwCZYFwUn+M3bug7HJQabhfMEUOjxA9IPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFLOi5g2tmHjjdJ4uzBOygek4x06MB8GA1UdIwQY MBaAFJUhomL1B14ksrPJtpyK9A4piKHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNHaVl2VUhYaVN5czhtMm5JcjBEaW1Jb2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9jMWYyMGUtZDk0Zi00M2M1LWJiOGQt YWQzNjI5YjIwMmMwLzEvVXM2TG1EYTJZZU9OMG5pN01FN0tCNlRqSFRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9jMWYyMGUtZDk0Zi00M2M1LWJiOGQtYWQzNjI5YjIwMmMw LzEvbFNHaVl2VUhYaVN5czhtMm5JcjBEaW1Jb2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU2WmMA0G CSqGSIb3DQEBCwUAA4IBAQAkkTioWg6QmANSxUUqDanxgR18uZg/Mnb5g2+Fj+lu rFz27aLfoPtHFmXzceAFeP/rZB5YaEvcUtGgwVtfkK82UT3aQYyWZPFOAShN4+RS 5nDLUMOTxG3l4DLGnkqM6EDVn4xwU5Wzt56R0jar+xOE1IwZvsoLk6Fu24v94ptY dn0VSAD+aYRT6MA651RobwwUCCFqdojOpURVz9wtnF9XA6dJdr3NsYGI49KNyEba jVzzEMhtWxAprzvjLcP4su0siuq036rIy+NipEjU/gXtkjaTqAUQDuVTOnsATTr2 hpgAqcf2kT8Ybeo7vErEYfx3KpfRLd4ffpXiN2HKTVvh -----END CERTIFICATE-----Generated at Mon Jan 26 09:40:47 2026 by rpki-client