This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/U8WZUnMa-TahLUNYH6oN_0xrRfY.roa File: U8WZUnMa-TahLUNYH6oN_0xrRfY.roa (raw, json) Hash identifier: mHXLAX0IgZLJ42nbFOtKk2Ws8p5epFKPUUJ9r8cz5Y0= Subject key identifier: 53:C5:99:52:73:1A:F9:36:A1:2D:43:58:1F:AA:0D:FF:4C:6B:45:F6 Certificate issuer: /CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea Certificate serial: 019B7AC7DDCF50F158850B8FC5BFB8B8713B Authority key identifier: 65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/U8WZUnMa-TahLUNYH6oN_0xrRfY.roa Signing time: Thu 01 Jan 2026 18:17:57 +0000 ROA not before: Thu 01 Jan 2026 18:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198981 IP address blocks: 213.165.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:dd:cf:50:f1:58:85:0b:8f:c5:bf:b8:b8:71:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea Validity Not Before: Jan 1 18:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53c59952731af936a12d43581faa0dff4c6b45f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:54:e5:d1:99:08:a6:7d:cc:d4:b2:96:d3:24: 59:d5:98:2d:6c:e0:42:04:a1:ae:44:b6:fc:97:1c: 64:46:68:72:47:1b:a9:5d:9b:5d:5a:fc:da:36:93: b5:a4:46:a9:52:8b:2f:3e:dd:7f:21:c6:53:4e:65: 7d:36:ac:84:c4:9e:13:b3:9a:c5:2e:d0:65:c3:ce: 9c:4c:7b:28:2b:23:45:c8:f6:85:c3:69:be:dc:ed: 45:33:0a:d8:0d:5a:ca:3d:a3:92:93:a7:c8:d4:ca: 4b:24:3b:e8:93:16:5e:cf:c3:ff:96:69:cb:b1:84: a7:a0:99:77:ef:16:a8:09:ce:fc:12:7e:91:71:ce: d4:01:fe:d5:46:0a:5b:a1:96:be:05:85:b5:f8:d7: 4f:e9:5e:b5:37:c8:e6:a0:a6:ef:a0:60:45:6d:5e: 0e:8c:39:99:fc:7f:7d:1d:42:c1:2d:85:4c:0e:ea: 6a:82:0b:00:80:40:a8:df:9a:a3:34:6f:4d:07:e2: 88:96:0e:c3:f0:0a:21:0f:c8:9f:93:7c:9e:e9:f0: 3e:7c:f8:3a:22:8b:38:d2:b0:3c:27:6d:f0:93:ee: 64:c2:a9:b8:34:23:23:da:2c:4b:e6:ef:db:8a:c2: 4a:36:d2:1b:ff:d8:38:ae:b4:82:15:b0:5f:a6:e6: 14:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C5:99:52:73:1A:F9:36:A1:2D:43:58:1F:AA:0D:FF:4C:6B:45:F6 X509v3 Authority Key Identifier: keyid:65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/U8WZUnMa-TahLUNYH6oN_0xrRfY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.165.53.0/24 Signature Algorithm: sha256WithRSAEncryption a3:e6:7f:8c:fb:2f:ea:3c:f9:1c:f5:e4:89:8f:bd:01:f3:01: 51:a6:cf:65:79:16:e5:81:91:21:28:94:da:4b:9b:31:4f:c5: 50:da:ce:b5:df:fa:9d:0b:fa:19:85:c1:fd:4c:ee:93:f3:6b: b2:57:de:2c:f8:a1:e6:28:21:45:1c:22:a5:3b:85:a9:b9:09: ee:72:5e:d4:f5:25:47:ba:ee:73:7d:81:7b:51:4c:4f:eb:d2: 9d:8d:aa:95:25:bb:5f:43:3e:b3:ae:49:f7:45:25:0d:95:37: 51:bb:fc:9c:cc:ca:bd:12:c4:34:8c:3c:98:44:90:45:1a:03: d5:af:24:f8:0e:a6:db:e1:fc:8f:40:97:58:ef:4d:c2:49:7c: cc:ae:53:df:f7:23:2a:35:e6:01:59:47:9b:ef:d2:9b:fa:f7: e3:9a:e6:fc:de:84:eb:7b:80:f6:fe:5d:f6:b6:14:d1:32:c9: 46:a5:bc:a4:07:e1:48:f7:d0:40:80:94:9b:cc:87:ae:d9:d2: e7:80:fe:03:79:a3:28:25:c0:0a:58:cc:d5:fa:d7:e4:c3:0e: ab:e8:a3:b3:8a:e3:1d:6e:14:32:63:6f:df:a1:f8:8f:ba:1b: 73:77:55:ee:e0:45:48:54:67:09:d2:9c:76:40:5c:c4:b7:b8: 47:80:0c:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x93PUPFYhQuPxb+4uHE7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZWE5M2Q4OGEyMDJkNTFkMzRkMmE5MDM1OTdlNzZiOGYx N2YwZWEwHhcNMjYwMTAxMTgxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2M1OTk1MjczMWFmOTM2YTEyZDQzNTgxZmFhMGRmZjRjNmI0NWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lTl0ZkIpn3M1LKW0yRZ1ZgtbOBC BKGuRLb8lxxkRmhyRxupXZtdWvzaNpO1pEapUosvPt1/IcZTTmV9NqyExJ4Ts5rF LtBlw86cTHsoKyNFyPaFw2m+3O1FMwrYDVrKPaOSk6fI1MpLJDvokxZez8P/lmnL sYSnoJl37xaoCc78En6Rcc7UAf7VRgpboZa+BYW1+NdP6V61N8jmoKbvoGBFbV4O jDmZ/H99HULBLYVMDupqggsAgECo35qjNG9NB+KIlg7D8AohD8ifk3ye6fA+fPg6 Ios40rA8J23wk+5kwqm4NCMj2ixL5u/bisJKNtIb/9g4rrSCFbBfpuYU6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFPFmVJzGvk2oS1DWB+qDf9Ma0X2MB8GA1UdIwQY MBaAFGXqk9iKIC1R000qkDWX52uPF/DqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81NGVhYzAtNzFmZC00NmU5LTllMWIt Y2UxYmJhNjkxYjM3LzEvVThXWlVuTWEtVGFoTFVOWUg2b05fMHhyUmZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC81NGVhYzAtNzFmZC00NmU5LTllMWItY2UxYmJhNjkxYjM3 LzEvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1aU1MA0G CSqGSIb3DQEBCwUAA4IBAQCj5n+M+y/qPPkc9eSJj70B8wFRps9leRblgZEhKJTa S5sxT8VQ2s613/qdC/oZhcH9TO6T82uyV94s+KHmKCFFHCKlO4WpuQnucl7U9SVH uu5zfYF7UUxP69KdjaqVJbtfQz6zrkn3RSUNlTdRu/yczMq9EsQ0jDyYRJBFGgPV ryT4Dqbb4fyPQJdY703CSXzMrlPf9yMqNeYBWUeb79Kb+vfjmub83oTre4D2/l32 thTRMslGpbykB+FI99BAgJSbzIeu2dLngP4DeaMoJcAKWMzV+tfkww6r6KOziuMd bhQyY2/fofiPuhtzd1Xu4EVIVGcJ0px2QFzEt7hHgAw1 -----END CERTIFICATE-----Generated at Sun Jan 25 19:38:05 2026 by rpki-client