This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/U_Ik4yWDgKwV_3mRudaDgw_VU74.roa File: U_Ik4yWDgKwV_3mRudaDgw_VU74.roa (raw, json) Hash identifier: zZQYFJPOwrtvq+JoYXvIFt4VHi+LGsjc5OhSx3qdjVk= Subject key identifier: 53:F2:24:E3:25:83:80:AC:15:FF:79:91:B9:D6:83:83:0F:D5:53:BE Certificate issuer: /CN=8cd0b6547548802ea59814672547bcc836d70fcf Certificate serial: 019B7DCB409A23FC55BB10D8EC76CD78A2EC Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/U_Ik4yWDgKwV_3mRudaDgw_VU74.roa Signing time: Fri 02 Jan 2026 08:20:30 +0000 ROA not before: Fri 02 Jan 2026 08:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 194.56.234.0/24 maxlen: 24 2001:67c:ff0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:40:9a:23:fc:55:bb:10:d8:ec:76:cd:78:a2:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf Validity Not Before: Jan 2 08:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53f224e3258380ac15ff7991b9d683830fd553be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:df:9d:fe:4f:41:9d:b1:82:7b:c6:0d:da:59: b1:c8:bc:86:67:15:6e:eb:3e:d5:f9:95:80:59:31: d7:86:8b:9b:99:c7:b5:e6:11:23:96:9b:a8:0f:ec: 36:18:33:2f:ea:6d:cb:77:6d:ad:cb:ad:2a:7b:b9: db:d4:e7:03:96:2b:ca:80:b4:a6:d3:69:fc:10:8d: 79:ea:db:58:da:a3:8e:88:2f:87:ef:df:0a:f0:4b: da:56:6c:6a:cd:57:dd:aa:c3:4b:ad:99:bf:aa:ab: 98:82:f2:c7:8d:8f:2d:69:57:3e:ff:7a:dc:36:78: 56:9d:d0:81:85:c2:1d:27:c3:cf:bb:ec:08:40:88: 8e:af:36:10:00:ae:a8:d2:4d:8e:80:12:9a:c5:23: f5:d1:b1:06:e5:eb:d7:d6:f4:4b:41:81:ef:48:ed: 54:f1:f8:19:77:0a:40:ff:43:59:dd:92:19:f2:49: e8:3a:e2:ff:aa:69:1f:de:9e:4d:65:a4:85:31:eb: 0f:c6:e1:ba:eb:04:71:16:f2:c3:18:dc:31:61:f5: 6f:02:50:45:17:32:d4:f6:c3:09:ec:70:dd:64:96: ab:28:8e:7b:11:de:13:80:fe:fd:a4:dc:9c:ff:82: 0e:cf:3b:99:47:1f:48:8e:32:27:a9:c7:f7:36:07: 08:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F2:24:E3:25:83:80:AC:15:FF:79:91:B9:D6:83:83:0F:D5:53:BE X509v3 Authority Key Identifier: keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/U_Ik4yWDgKwV_3mRudaDgw_VU74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.56.234.0/24 IPv6: 2001:67c:ff0::/48 Signature Algorithm: sha256WithRSAEncryption 58:de:de:ef:63:84:76:1b:8b:15:ba:0b:b9:9c:61:cd:dd:0d: c1:fb:2e:85:1d:dd:cc:f3:7a:56:ca:54:ed:37:10:71:53:97: c2:d6:bc:cf:54:c7:39:fa:fb:6b:a8:cb:65:4a:a0:4e:98:3d: ba:3e:5d:44:4f:b4:35:ac:c2:b4:71:84:00:fb:b0:9b:01:7b: 0c:be:e1:ce:06:62:d8:9e:e9:1c:a9:a6:e3:fe:47:84:a8:88: 99:f2:51:e6:ca:29:96:09:3e:aa:51:1e:22:10:6a:6f:f0:ed: 9d:b3:79:e9:4e:3a:e7:de:6b:7c:b8:e8:78:f7:1f:6a:6d:ce: eb:3a:a6:c4:3a:73:1f:84:c5:b1:00:6c:a0:8a:6f:58:cb:5d: f8:5f:23:2e:d4:40:6f:8b:c4:bf:6b:7c:b9:dc:67:ba:7b:02: 41:93:a2:34:76:42:a3:9d:52:57:51:e7:35:ff:57:59:79:ae: c8:28:a9:8c:cc:c9:30:a7:31:4c:5e:37:0c:d1:e7:80:32:45: 70:67:ee:f2:7c:36:de:1e:e6:ba:59:fb:6e:53:00:3f:2f:6f: d6:2f:13:9f:9b:d4:01:b3:c6:68:b2:84:f0:42:8f:32:9c:38: e4:74:6b:76:f7:2a:2b:07:d3:4b:01:04:19:fc:aa:2f:5d:86: 03:bb:5c:3f -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9y0CaI/xVuxDY7HbNeKLsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZDBiNjU0NzU0ODgwMmVhNTk4MTQ2NzI1NDdiY2M4MzZk NzBmY2YwHhcNMjYwMTAyMDgyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2YyMjRlMzI1ODM4MGFjMTVmZjc5OTFiOWQ2ODM4MzBmZDU1M2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9+d/k9BnbGCe8YN2lmxyLyGZxVu 6z7V+ZWAWTHXhoubmce15hEjlpuoD+w2GDMv6m3Ld22ty60qe7nb1OcDlivKgLSm 02n8EI156ttY2qOOiC+H798K8EvaVmxqzVfdqsNLrZm/qquYgvLHjY8taVc+/3rc NnhWndCBhcIdJ8PPu+wIQIiOrzYQAK6o0k2OgBKaxSP10bEG5evX1vRLQYHvSO1U 8fgZdwpA/0NZ3ZIZ8knoOuL/qmkf3p5NZaSFMesPxuG66wRxFvLDGNwxYfVvAlBF FzLU9sMJ7HDdZJarKI57Ed4TgP79pNyc/4IOzzuZRx9IjjInqcf3NgcIJwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFPyJOMlg4CsFf95kbnWg4MP1VO+MB8GA1UdIwQY MBaAFIzQtlR1SIAupZgUZyVHvMg21w/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak5DMlZIVklnQzZsbUJSbkpVZTh5RGJYRDg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jYTJjYjUtYjI1Yi00MzVjLWJhY2It MGFlNjk2YmQzNjhhLzEvVV9JazR5V0RnS3dWXzNtUnVkYURnd19WVTc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9jYTJjYjUtYjI1Yi00MzVjLWJhY2ItMGFlNjk2YmQzNjhh LzEvak5DMlZIVklnQzZsbUJSbkpVZTh5RGJYRDg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwjjqMA8E AgACMAkDBwAgAQZ8D/AwDQYJKoZIhvcNAQELBQADggEBAFje3u9jhHYbixW6C7mc Yc3dDcH7LoUd3czzelbKVO03EHFTl8LWvM9Uxzn6+2uoy2VKoE6YPbo+XURPtDWs wrRxhAD7sJsBewy+4c4GYtie6RyppuP+R4SoiJnyUebKKZYJPqpRHiIQam/w7Z2z eelOOufea3y46Hj3H2ptzus6psQ6cx+ExbEAbKCKb1jLXfhfIy7UQG+LxL9rfLnc Z7p7AkGTojR2QqOdUldR5zX/V1l5rsgoqYzMyTCnMUxeNwzR54AyRXBn7vJ8Nt4e 5rpZ+25TAD8vb9YvE5+b1AGzxmiyhPBCjzKcOOR0a3b3KisH00sBBBn8qi9dhgO7 XD8= -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:27 2026 by rpki-client