This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/U6lz5micbQvsEzEwVp3dL7mR1Os.roa File: U6lz5micbQvsEzEwVp3dL7mR1Os.roa (raw, json) Hash identifier: NW13lN/avpR4aBD/HcMl0sRLodoqqzCepoA5qJR1XKA= Subject key identifier: 53:A9:73:E6:68:9C:6D:0B:EC:13:31:30:56:9D:DD:2F:B9:91:D4:EB Certificate issuer: /CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb Certificate serial: 019B79ECAD7C9782319707C6A181E4A175CE Authority key identifier: EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/U6lz5micbQvsEzEwVp3dL7mR1Os.roa Signing time: Thu 01 Jan 2026 14:18:32 +0000 ROA not before: Thu 01 Jan 2026 14:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207199 IP address blocks: 185.232.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ad:7c:97:82:31:97:07:c6:a1:81:e4:a1:75:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb Validity Not Before: Jan 1 14:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53a973e6689c6d0bec133130569ddd2fb991d4eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4c:7e:8b:b6:a8:98:a2:6a:e2:50:bd:3e:fd: 82:26:a9:bd:40:24:c3:a9:1d:5c:83:ee:1d:d9:ac: 5e:a1:ac:64:07:e1:1d:de:7d:25:33:ec:f7:95:66: a8:f9:d3:9d:15:01:bf:bc:7e:43:f9:f8:cb:31:64: 31:f2:bc:19:6a:4e:c4:6c:ce:56:17:ef:9a:d5:00: 48:cb:75:62:4e:4e:8e:bb:4b:5d:86:db:33:61:4d: 3c:91:90:98:67:1e:ae:5f:00:5c:7c:88:a4:ed:6b: 88:95:93:ac:65:da:5b:c3:0a:f8:21:25:f4:56:8c: b2:22:96:87:7f:97:11:e8:24:4a:c3:41:18:3a:4a: cd:ab:b8:8f:b4:32:0b:53:17:f2:d0:61:7a:61:21: fe:c3:85:d9:7f:65:b1:f8:16:b7:62:0a:52:18:34: 95:f6:7d:36:f7:a5:f1:2c:4f:b0:b5:db:d1:4b:43: a9:10:d1:a7:fb:f6:94:41:e2:1e:ba:5e:93:86:50: f9:f7:0f:81:75:5f:25:81:df:f5:58:f6:47:41:e3: f9:03:e8:82:7b:fe:09:f3:2f:84:d3:36:63:09:8e: 41:df:5c:39:47:b0:9e:4d:31:4b:94:f0:f8:90:62: fe:e5:48:78:d0:78:bc:9d:7a:21:61:1d:bd:98:44: 79:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A9:73:E6:68:9C:6D:0B:EC:13:31:30:56:9D:DD:2F:B9:91:D4:EB X509v3 Authority Key Identifier: keyid:EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/U6lz5micbQvsEzEwVp3dL7mR1Os.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.232.148.0/24 Signature Algorithm: sha256WithRSAEncryption 55:96:ae:dc:a1:df:0d:9f:09:c5:84:38:61:ec:e6:94:cb:81: fc:a5:92:07:c7:10:95:8d:d1:66:29:a4:88:39:62:70:3f:ed: bf:63:f1:8a:66:47:e0:3a:31:c6:59:77:6a:f0:26:b9:88:4a: 86:3c:6a:70:ac:90:6b:8e:1a:a0:9e:a3:0d:2c:84:c4:59:a9: 04:5f:12:27:10:c3:55:db:1d:32:85:b5:d7:8d:1f:03:ea:57: 4a:f4:71:b2:0a:00:e6:1f:15:3b:1a:ea:50:a3:f3:f9:c4:7e: ca:9b:b7:8f:a0:b7:81:40:06:c0:40:8f:64:4b:77:ae:a5:92: 28:d8:a3:f7:26:93:fe:89:43:7a:f6:97:45:59:2b:cf:d9:f1: cd:3c:25:e6:05:0f:a6:44:60:92:57:f0:ba:52:1c:92:30:3a: c5:f5:f6:be:5f:02:24:ca:e9:42:a9:32:25:15:07:17:00:f9: aa:ad:7e:5e:a3:d9:b6:05:9a:ea:35:d8:ac:2c:43:7d:f2:37: 41:f3:30:77:45:ec:94:e9:a3:ea:c3:b7:aa:df:70:98:41:f1: 4a:fe:38:ed:d0:67:78:f6:d4:e8:77:37:f4:da:5f:6e:3a:dc: 62:16:e8:5a:f6:37:cf:4c:96:60:17:92:e0:90:f8:3f:70:48: fa:b6:e4:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57K18l4IxlwfGoYHkoXXOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYzM2MDVjMzJiYmM4NWQyMzVmMGE5Y2U4ZjQ1ZjA3OTZi NzIzY2IwHhcNMjYwMTAxMTQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2E5NzNlNjY4OWM2ZDBiZWMxMzMxMzA1NjlkZGQyZmI5OTFkNGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0x+i7aomKJq4lC9Pv2CJqm9QCTD qR1cg+4d2axeoaxkB+Ed3n0lM+z3lWao+dOdFQG/vH5D+fjLMWQx8rwZak7EbM5W F++a1QBIy3ViTk6Ou0tdhtszYU08kZCYZx6uXwBcfIik7WuIlZOsZdpbwwr4ISX0 VoyyIpaHf5cR6CRKw0EYOkrNq7iPtDILUxfy0GF6YSH+w4XZf2Wx+Ba3YgpSGDSV 9n0296XxLE+wtdvRS0OpENGn+/aUQeIeul6ThlD59w+BdV8lgd/1WPZHQeP5A+iC e/4J8y+E0zZjCY5B31w5R7CeTTFLlPD4kGL+5Uh40Hi8nXohYR29mER59wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFOpc+ZonG0L7BMxMFad3S+5kdTrMB8GA1UdIwQY MBaAFO/DYFwyu8hdI18KnOj0XweWtyPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzhOZ1hESzd5RjBqWHdxYzZQUmZCNWEzSThzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9lNjIxNjktNDg2ZC00MDU0LWIxMjEt ZjJjOGJhMDIxY2E4LzEvVTZsejVtaWNiUXZzRXpFd1ZwM2RMN21SMU9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9lNjIxNjktNDg2ZC00MDU0LWIxMjEtZjJjOGJhMDIxY2E4 LzEvNzhOZ1hESzd5RjBqWHdxYzZQUmZCNWEzSThzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueiUMA0G CSqGSIb3DQEBCwUAA4IBAQBVlq7cod8NnwnFhDhh7OaUy4H8pZIHxxCVjdFmKaSI OWJwP+2/Y/GKZkfgOjHGWXdq8Ca5iEqGPGpwrJBrjhqgnqMNLITEWakEXxInEMNV 2x0yhbXXjR8D6ldK9HGyCgDmHxU7GupQo/P5xH7Km7ePoLeBQAbAQI9kS3eupZIo 2KP3JpP+iUN69pdFWSvP2fHNPCXmBQ+mRGCSV/C6UhySMDrF9fa+XwIkyulCqTIl FQcXAPmqrX5eo9m2BZrqNdisLEN98jdB8zB3ReyU6aPqw7eq33CYQfFK/jjt0Gd4 9tTodzf02l9uOtxiFuha9jfPTJZgF5LgkPg/cEj6tuSo -----END CERTIFICATE-----Generated at Mon Jan 26 04:51:35 2026 by rpki-client