This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/u8LD6GM5KGyVdLMt4xHc2hEvEv4.roa File: u8LD6GM5KGyVdLMt4xHc2hEvEv4.roa (raw, json) Hash identifier: r8B0cJyXj35djBArpMf/tZI9LQkRKm/+ERAhPE5VWvE= Subject key identifier: BB:C2:C3:E8:63:39:28:6C:95:74:B3:2D:E3:11:DC:DA:11:2F:12:FE Certificate issuer: /CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea Certificate serial: 019B7AC7E088E3A05FE88F10F6DC5F49A96C Authority key identifier: 65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/u8LD6GM5KGyVdLMt4xHc2hEvEv4.roa Signing time: Thu 01 Jan 2026 18:17:58 +0000 ROA not before: Thu 01 Jan 2026 18:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213887 IP address blocks: 213.165.54.0/24 maxlen: 24 213.165.55.0/24 maxlen: 24 213.165.56.0/24 maxlen: 24 213.165.57.0/24 maxlen: 24 213.165.58.0/24 maxlen: 24 213.165.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e0:88:e3:a0:5f:e8:8f:10:f6:dc:5f:49:a9:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea Validity Not Before: Jan 1 18:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbc2c3e86339286c9574b32de311dcda112f12fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:40:d1:5f:e0:3e:6c:33:81:8e:76:c1:74:6d: 00:de:1e:28:e7:8e:e2:51:e1:06:e5:8e:01:61:fe: 98:6a:0f:1a:3f:7a:a5:a4:22:42:73:ed:ff:46:7a: af:18:a1:02:77:d2:60:55:94:38:78:55:30:10:f0: 42:d1:93:92:dd:fe:0d:b7:9c:ff:f7:c1:1e:c1:40: 25:d2:04:e6:26:0a:09:05:ec:b8:05:d0:08:2d:9a: 85:d7:fe:20:3e:a8:42:13:4d:e4:cb:b9:0d:58:48: 38:87:23:30:56:fd:2d:66:1a:85:6b:c8:45:02:2c: 78:62:fe:88:6b:bb:a3:9a:20:c6:8c:d4:7c:79:f4: 3d:10:33:c1:ef:80:d2:60:ab:83:20:a1:b3:8c:cd: 98:ef:8a:e4:29:6f:ba:64:e6:a4:85:1e:df:cf:8f: 34:6a:90:df:c8:fe:e8:58:3d:18:9c:1f:2b:e8:6e: 70:b5:4a:88:75:70:4d:dd:74:a5:12:72:ea:f5:b7: 1c:72:bc:31:d8:7d:d5:de:93:c7:06:81:03:25:d9: 78:11:8d:e7:88:dc:88:98:a7:57:58:b6:c4:34:22: e6:25:71:18:da:1d:f4:82:c4:3a:d8:55:e8:71:4a: 3f:2d:9b:0f:f9:2c:45:00:e1:29:1f:be:dd:44:31: 16:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C2:C3:E8:63:39:28:6C:95:74:B3:2D:E3:11:DC:DA:11:2F:12:FE X509v3 Authority Key Identifier: keyid:65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/u8LD6GM5KGyVdLMt4xHc2hEvEv4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.165.54.0-213.165.59.255 Signature Algorithm: sha256WithRSAEncryption 47:b1:05:23:12:a4:d0:1e:3e:ff:cb:74:ae:aa:ef:2b:c1:9d: 1d:e8:89:60:68:b9:e1:36:28:46:47:ac:3e:c5:95:39:23:59: db:90:e3:ea:b8:56:dd:4a:7d:50:1c:87:65:f9:76:9f:ed:01: 54:06:70:86:b5:89:62:6b:57:b0:9a:38:d8:7a:0e:9b:c2:34: a3:94:b9:27:91:b4:8e:99:fb:c8:ea:91:34:5a:3d:23:3b:46: 99:c2:54:1b:1d:9a:a1:46:48:39:b1:11:41:66:be:34:0b:18: af:e4:b5:ee:5e:7a:78:aa:a0:d9:d5:6a:32:58:2d:42:8f:39: 71:b6:8d:63:ad:9f:85:12:d7:53:a1:00:fc:13:c5:ae:05:44: ca:bd:e1:ac:bd:52:21:91:13:57:a4:32:5e:f7:5e:b9:99:a8: 1b:24:f7:5f:1e:5c:58:f7:c8:66:b9:0c:69:59:b9:13:cd:61: 7b:f0:f1:94:9c:7d:5b:37:49:b6:52:34:67:a4:72:55:b5:4a: f1:ab:00:59:46:fb:99:cd:c6:49:f9:ae:51:14:0a:e7:ea:f8: f0:5a:ef:5b:68:8a:21:b0:88:3a:19:92:45:40:07:8b:eb:0d: 79:b7:9c:5a:57:ae:5b:27:b6:57:bc:80:5e:73:3a:7d:9e:41: f4:5a:77:b5 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt6x+CI46Bf6I8Q9txfSalsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZWE5M2Q4OGEyMDJkNTFkMzRkMmE5MDM1OTdlNzZiOGYx N2YwZWEwHhcNMjYwMTAxMTgxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmMyYzNlODYzMzkyODZjOTU3NGIzMmRlMzExZGNkYTExMmYxMmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUDRX+A+bDOBjnbBdG0A3h4o547i UeEG5Y4BYf6Yag8aP3qlpCJCc+3/RnqvGKECd9JgVZQ4eFUwEPBC0ZOS3f4Nt5z/ 98EewUAl0gTmJgoJBey4BdAILZqF1/4gPqhCE03ky7kNWEg4hyMwVv0tZhqFa8hF Aix4Yv6Ia7ujmiDGjNR8efQ9EDPB74DSYKuDIKGzjM2Y74rkKW+6ZOakhR7fz480 apDfyP7oWD0YnB8r6G5wtUqIdXBN3XSlEnLq9bcccrwx2H3V3pPHBoEDJdl4EY3n iNyImKdXWLbENCLmJXEY2h30gsQ62FXocUo/LZsP+SxFAOEpH77dRDEWYQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLvCw+hjOShslXSzLeMR3NoRLxL+MB8GA1UdIwQY MBaAFGXqk9iKIC1R000qkDWX52uPF/DqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81NGVhYzAtNzFmZC00NmU5LTllMWIt Y2UxYmJhNjkxYjM3LzEvdThMRDZHTTVLR3lWZExNdDR4SGMyaEV2RXY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC81NGVhYzAtNzFmZC00NmU5LTllMWItY2UxYmJhNjkxYjM3 LzEvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHVpTYD BALVpTgwDQYJKoZIhvcNAQELBQADggEBAEexBSMSpNAePv/LdK6q7yvBnR3oiWBo ueE2KEZHrD7FlTkjWduQ4+q4Vt1KfVAch2X5dp/tAVQGcIa1iWJrV7CaONh6DpvC NKOUuSeRtI6Z+8jqkTRaPSM7RpnCVBsdmqFGSDmxEUFmvjQLGK/kte5eeniqoNnV ajJYLUKPOXG2jWOtn4US11OhAPwTxa4FRMq94ay9UiGRE1ekMl73XrmZqBsk918e XFj3yGa5DGlZuRPNYXvw8ZScfVs3SbZSNGekclW1SvGrAFlG+5nNxkn5rlEUCufq +PBa71toiiGwiDoZkkVAB4vrDXm3nFpXrlsntle8gF5zOn2eQfRad7U= -----END CERTIFICATE-----Generated at Sun Jan 25 18:07:27 2026 by rpki-client