This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/_ussT5RkZH-7W87cA2uGw42C8U0.roa File: _ussT5RkZH-7W87cA2uGw42C8U0.roa (raw, json) Hash identifier: 3dSzoFgNBeGblUUioE5+ZT8IgwplKW5Jsk723lgi4Ks= Subject key identifier: FE:EB:2C:4F:94:64:64:7F:BB:5B:CE:DC:03:6B:86:C3:8D:82:F1:4D Certificate issuer: /CN=086438e9889389829fa5f51b6a210731082eac22 Certificate serial: 019B7CECB8784925826DD705DF6958CC4DB4 Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/_ussT5RkZH-7W87cA2uGw42C8U0.roa Signing time: Fri 02 Jan 2026 04:17:27 +0000 ROA not before: Fri 02 Jan 2026 04:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400318 IP address blocks: 185.16.0.0/24 maxlen: 24 185.16.1.0/24 maxlen: 24 185.16.2.0/24 maxlen: 24 185.16.3.0/24 maxlen: 24 193.57.228.0/24 maxlen: 24 193.57.229.0/24 maxlen: 24 193.57.230.0/24 maxlen: 24 193.57.230.224/29 maxlen: 29 193.57.231.0/24 maxlen: 24 194.165.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:b8:78:49:25:82:6d:d7:05:df:69:58:cc:4d:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=086438e9889389829fa5f51b6a210731082eac22 Validity Not Before: Jan 2 04:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=feeb2c4f9464647fbb5bcedc036b86c38d82f14d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:09:ad:0b:26:86:1a:cf:38:86:64:13:be:eb: 03:49:73:2b:ca:de:ce:57:5d:5a:2d:0a:43:51:08: 77:e4:05:49:fd:fd:e9:4b:e2:1f:52:d8:bd:65:40: 40:be:7f:05:12:26:24:06:47:c4:73:c9:e1:a3:e9: d8:e6:82:a0:53:0b:59:fc:f8:7e:aa:2c:93:2f:94: e6:88:39:1c:44:d5:3a:ea:5d:1a:e6:d0:a1:11:40: ba:d7:a7:2e:9b:f6:0d:3e:b3:e7:d9:1f:16:14:65: f5:94:b9:2c:a2:d7:65:f8:e3:79:b6:45:6f:17:8a: 94:88:fb:9f:c0:ba:39:2b:95:69:c3:4b:7a:72:db: fd:1c:7d:db:54:72:6c:88:08:11:03:7c:d1:5e:da: 86:03:fc:5d:34:e2:48:a7:c4:db:ed:59:67:f3:02: 59:76:34:fe:f6:f7:ac:75:c9:e3:87:56:fb:be:ff: 01:93:44:1b:8f:88:b6:ab:51:94:de:2f:f4:5e:0d: af:48:3d:3e:ed:56:41:4b:27:11:e4:ba:07:bf:64: b1:e3:dd:c6:1c:ee:fa:db:57:9b:74:66:a1:bd:32: 5b:53:56:a0:eb:a8:dc:4d:dd:dc:75:46:ba:ce:9b: ec:8e:91:57:99:8f:c2:ed:32:db:49:8d:e0:78:65: ac:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:EB:2C:4F:94:64:64:7F:BB:5B:CE:DC:03:6B:86:C3:8D:82:F1:4D X509v3 Authority Key Identifier: keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/_ussT5RkZH-7W87cA2uGw42C8U0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.16.0.0/22 193.57.228.0/22 194.165.37.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:14:7a:96:b1:5b:33:93:7a:95:6e:7a:46:1b:b6:29:d0:2e: d4:d8:8e:90:2d:2d:2c:3c:90:aa:86:78:19:06:22:06:9e:1b: b6:90:96:8d:ac:e5:ab:8d:a8:6c:7a:bf:fb:24:29:d8:7a:5f: 07:8d:35:4b:4e:89:fb:41:22:1a:d1:92:3a:42:62:d2:d9:94: a6:f2:1a:34:08:19:d9:03:c0:ae:90:67:f4:19:2d:87:c7:ed: 69:c9:79:13:d2:4a:7a:51:ea:fd:55:88:da:cc:0b:77:34:f2: ce:9f:42:8c:78:58:e0:b3:36:8f:da:90:05:c9:16:26:07:61: 2c:a8:95:98:15:3b:17:36:0c:fa:80:a8:2b:0a:3f:6b:2f:8b: c3:8a:30:0f:a0:38:56:39:8f:54:b1:44:68:54:8d:09:f3:e5: 7c:d7:18:40:79:4c:e4:a9:c0:17:bb:bc:8d:5b:59:18:8f:4c: 1b:09:3e:42:95:05:6d:35:0e:00:85:e4:10:bb:93:0f:24:53: 3f:61:ec:3f:65:7d:04:45:3a:51:0f:52:d1:c7:51:88:d8:e4: 40:d0:9f:62:a5:62:d3:42:8a:6d:0e:63:83:8b:33:f3:0d:11: 77:f4:0c:c4:a5:94:66:c0:e9:34:c0:87:7e:8a:0e:32:ae:07: 71:1e:72:d6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87Lh4SSWCbdcF32lYzE20MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NjQzOGU5ODg5Mzg5ODI5ZmE1ZjUxYjZhMjEwNzMxMDgy ZWFjMjIwHhcNMjYwMTAyMDQxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWViMmM0Zjk0NjQ2NDdmYmI1YmNlZGMwMzZiODZjMzhkODJmMTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwmtCyaGGs84hmQTvusDSXMryt7O V11aLQpDUQh35AVJ/f3pS+IfUti9ZUBAvn8FEiYkBkfEc8nho+nY5oKgUwtZ/Ph+ qiyTL5TmiDkcRNU66l0a5tChEUC616cum/YNPrPn2R8WFGX1lLksotdl+ON5tkVv F4qUiPufwLo5K5Vpw0t6ctv9HH3bVHJsiAgRA3zRXtqGA/xdNOJIp8Tb7Vln8wJZ djT+9vesdcnjh1b7vv8Bk0Qbj4i2q1GU3i/0Xg2vSD0+7VZBSycR5LoHv2Sx493G HO7621ebdGahvTJbU1ag66jcTd3cdUa6zpvsjpFXmY/C7TLbSY3geGWs3QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFP7rLE+UZGR/u1vO3ANrhsONgvFNMB8GA1UdIwQY MBaAFAhkOOmIk4mCn6X1G2ohBzEILqwiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0dRNDZZaVRpWUtmcGZVYmFpRUhNUWd1ckNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lNDlhZTctYTUxYS00NzY0LTg1Yzgt YTc4MTBlM2ExYmViLzEvX3Vzc1Q1UmtaSC03Vzg3Y0EydUd3NDJDOFUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lNDlhZTctYTUxYS00NzY0LTg1YzgtYTc4MTBlM2ExYmVi LzEvQ0dRNDZZaVRpWUtmcGZVYmFpRUhNUWd1ckNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuRAAAwQC wTnkAwQAwqUlMA0GCSqGSIb3DQEBCwUAA4IBAQB/FHqWsVszk3qVbnpGG7Yp0C7U 2I6QLS0sPJCqhngZBiIGnhu2kJaNrOWrjahser/7JCnYel8HjTVLTon7QSIa0ZI6 QmLS2ZSm8ho0CBnZA8CukGf0GS2Hx+1pyXkT0kp6Uer9VYjazAt3NPLOn0KMeFjg szaP2pAFyRYmB2EsqJWYFTsXNgz6gKgrCj9rL4vDijAPoDhWOY9UsURoVI0J8+V8 1xhAeUzkqcAXu7yNW1kYj0wbCT5ClQVtNQ4AheQQu5MPJFM/Yew/ZX0ERTpRD1LR x1GI2ORA0J9ipWLTQoptDmODizPzDRF39AzEpZRmwOk0wId+ig4yrgdxHnLW -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:54 2026 by rpki-client