This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/53uXZdGunbCbkFbF5LCIWF6hUow.roa File: 53uXZdGunbCbkFbF5LCIWF6hUow.roa (raw, json) Hash identifier: YdDbEGhWwhK//MEhtCOroEdkE5sIGg0zyX8WVqthVro= Subject key identifier: E7:7B:97:65:D1:AE:9D:B0:9B:90:56:C5:E4:B0:88:58:5E:A1:52:8C Certificate issuer: /CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e Certificate serial: 019B7BA34C57929D53CD3AC850E48EE71DF0 Authority key identifier: 1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/53uXZdGunbCbkFbF5LCIWF6hUow.roa Signing time: Thu 01 Jan 2026 22:17:38 +0000 ROA not before: Thu 01 Jan 2026 22:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204958 IP address blocks: 185.232.236.0/22 maxlen: 22 185.232.236.0/24 maxlen: 24 185.232.237.0/24 maxlen: 24 185.232.238.0/24 maxlen: 24 185.232.239.0/24 maxlen: 24 2a07:ff00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.mft rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:4c:57:92:9d:53:cd:3a:c8:50:e4:8e:e7:1d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd5cd2a0261e1e6069dd775894d826ee8836c1e Validity Not Before: Jan 1 22:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e77b9765d1ae9db09b9056c5e4b088585ea1528c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b1:51:11:b5:b8:99:d1:4b:a4:61:68:b8:9d: 74:36:7c:51:25:2b:b0:bc:8c:90:27:25:06:50:22: 09:0d:9c:8f:18:2a:2f:48:f7:da:2b:20:44:5c:84: 6b:65:95:f1:59:35:07:e2:5d:50:26:51:12:14:95: 85:3d:17:2c:8d:dd:f4:6f:2d:cf:f1:25:97:18:2a: 86:3f:45:41:8f:df:d2:5e:7e:42:45:23:f4:06:f0: 8c:bf:a7:32:e1:14:a0:35:e8:50:33:ce:a7:7a:8e: ab:a7:38:9b:69:b7:69:34:71:8d:92:aa:db:d4:df: 31:1f:b0:b8:1f:a3:4b:8f:07:b8:ad:4c:16:83:6c: a1:10:ab:e6:b3:ec:42:bc:24:1b:e6:3e:a9:ec:fc: 86:92:79:77:92:9e:0c:94:8e:18:30:54:00:52:84: e1:d4:a8:6c:5d:b6:d9:cc:b0:13:4b:8a:67:93:48: e0:bc:95:9b:0c:ac:eb:5c:79:9e:45:d4:0b:b6:67: 9a:30:a7:7b:b0:be:ca:5e:bf:85:ac:96:78:a2:7b: 61:cf:e4:fb:d0:e0:d5:bf:c6:5f:10:fa:d4:53:24: 21:3b:53:99:40:01:6a:c9:88:e7:d8:48:aa:44:c3: b2:b1:c4:e0:2e:c0:0e:24:02:33:c3:77:d0:6c:1c: b7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:7B:97:65:D1:AE:9D:B0:9B:90:56:C5:E4:B0:88:58:5E:A1:52:8C X509v3 Authority Key Identifier: keyid:1D:D5:CD:2A:02:61:E1:E6:06:9D:D7:75:89:4D:82:6E:E8:83:6C:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdXNKgJh4eYGndd1iU2CbuiDbB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/53uXZdGunbCbkFbF5LCIWF6hUow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4fe983-7152-4933-9f36-d86cadd610b8/1/HdXNKgJh4eYGndd1iU2CbuiDbB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.232.236.0/22 IPv6: 2a07:ff00::/29 Signature Algorithm: sha256WithRSAEncryption 51:d0:22:18:00:e4:90:68:34:fc:41:f5:74:0d:85:02:44:17: 79:70:1a:a0:11:45:8c:ca:9f:c1:40:35:e4:04:19:a5:82:c2: e1:17:48:1f:88:03:06:e3:5e:8b:fd:f0:a9:b1:ec:f6:40:c9: 8f:31:28:5f:35:13:d1:00:bc:34:a0:25:3f:d2:61:aa:ef:fd: 47:62:c9:05:66:fc:96:ab:0f:61:f5:8c:68:ca:7e:9d:d8:fc: 76:4d:47:14:b0:ed:c1:d0:92:0f:99:6c:16:d6:1b:9e:b1:a5: 83:7e:21:9e:8e:0f:9b:f6:34:87:71:86:6e:33:50:a8:93:a3: b1:23:b7:26:85:1b:46:a4:62:c3:ed:02:63:4c:d6:df:b8:82: ff:5d:8a:25:b1:b1:ce:15:3d:7d:a4:84:6f:f9:a4:4d:89:ee: 08:6a:8d:c2:db:82:6c:50:d6:58:a6:c4:bc:bb:50:f1:a6:17: 5e:b3:61:60:9e:6a:50:b0:6e:f4:ae:0e:51:c5:c1:62:fa:3f: 88:6f:58:8d:c9:4b:51:47:fe:3b:72:ee:54:bb:0f:78:8a:69: d6:54:ac:e5:13:96:64:81:e7:52:b1:8c:9b:4f:10:5c:c6:6c: 16:2e:22:4b:ca:40:6f:1b:15:c8:c1:0c:f0:5a:89:b9:f9:fa: b2:bf:33:8c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7o0xXkp1TzTrIUOSO5x3wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkZDVjZDJhMDI2MWUxZTYwNjlkZDc3NTg5NGQ4MjZlZTg4 MzZjMWUwHhcNMjYwMTAxMjIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzdiOTc2NWQxYWU5ZGIwOWI5MDU2YzVlNGIwODg1ODVlYTE1MjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbFREbW4mdFLpGFouJ10NnxRJSuw vIyQJyUGUCIJDZyPGCovSPfaKyBEXIRrZZXxWTUH4l1QJlESFJWFPRcsjd30by3P 8SWXGCqGP0VBj9/SXn5CRSP0BvCMv6cy4RSgNehQM86neo6rpzibabdpNHGNkqrb 1N8xH7C4H6NLjwe4rUwWg2yhEKvms+xCvCQb5j6p7PyGknl3kp4MlI4YMFQAUoTh 1KhsXbbZzLATS4pnk0jgvJWbDKzrXHmeRdQLtmeaMKd7sL7KXr+FrJZ4onthz+T7 0ODVv8ZfEPrUUyQhO1OZQAFqyYjn2EiqRMOyscTgLsAOJAIzw3fQbBy3BwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOd7l2XRrp2wm5BWxeSwiFheoVKMMB8GA1UdIwQY MBaAFB3VzSoCYeHmBp3XdYlNgm7og2weMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGRYTktnSmg0ZVlHbmRkMWlVMkNidWlEYkI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi80ZmU5ODMtNzE1Mi00OTMzLTlmMzYt ZDg2Y2FkZDYxMGI4LzEvNTN1WFpkR3VuYkNia0ZiRjVMQ0lXRjZoVW93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi80ZmU5ODMtNzE1Mi00OTMzLTlmMzYtZDg2Y2FkZDYxMGI4 LzEvSGRYTktnSmg0ZVlHbmRkMWlVMkNidWlEYkI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuejsMA0E AgACMAcDBQMqB/8AMA0GCSqGSIb3DQEBCwUAA4IBAQBR0CIYAOSQaDT8QfV0DYUC RBd5cBqgEUWMyp/BQDXkBBmlgsLhF0gfiAMG416L/fCpsez2QMmPMShfNRPRALw0 oCU/0mGq7/1HYskFZvyWqw9h9Yxoyn6d2Px2TUcUsO3B0JIPmWwW1huesaWDfiGe jg+b9jSHcYZuM1Cok6OxI7cmhRtGpGLD7QJjTNbfuIL/XYolsbHOFT19pIRv+aRN ie4Iao3C24JsUNZYpsS8u1Dxphdes2FgnmpQsG70rg5RxcFi+j+Ib1iNyUtRR/47 cu5Uuw94imnWVKzlE5ZkgedSsYybTxBcxmwWLiJLykBvGxXIwQzwWom5+fqyvzOM -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:05 2026 by rpki-client