This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1uX0D5LWNKsugIOiHmXXeEX9QKk.roa File: 1uX0D5LWNKsugIOiHmXXeEX9QKk.roa (raw, json) Hash identifier: gvHTkDV5ycG/B3qdH64yHwOTQievfqOngQJwMYqbC/g= Subject key identifier: D6:E5:F4:0F:92:D6:34:AB:2E:80:83:A2:1E:65:D7:78:45:FD:40:A9 Certificate issuer: /CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9 Certificate serial: 019B7EA6C547A7002DB7DED4082816211A14 Authority key identifier: F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1uX0D5LWNKsugIOiHmXXeEX9QKk.roa Signing time: Fri 02 Jan 2026 12:20:17 +0000 ROA not before: Fri 02 Jan 2026 12:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50919 IP address blocks: 178.23.72.0/21 maxlen: 21 188.164.200.0/21 maxlen: 21 194.62.224.0/22 maxlen: 22 2a00:1f68::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:c5:47:a7:00:2d:b7:de:d4:08:28:16:21:1a:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9 Validity Not Before: Jan 2 12:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6e5f40f92d634ab2e8083a21e65d77845fd40a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b0:23:ae:93:1f:a3:7b:50:ef:3c:96:40:eb: 86:ad:c5:cd:2b:e2:17:ed:9a:da:2e:32:5e:ff:de: c9:d0:d4:65:07:a5:85:f8:b4:12:e2:f7:a3:bf:a4: 7a:9d:66:8c:3e:e5:b9:d7:5f:80:a6:1c:5c:97:99: 6b:a9:a8:da:39:2f:f1:45:1f:a5:8d:9a:ef:3e:06: e1:56:8c:a2:ac:30:79:38:8e:dd:50:79:af:57:84: 50:29:76:7b:0d:d0:f0:d7:bb:92:b9:93:68:f2:94: 52:fb:ef:5c:0d:23:fa:9d:eb:56:3a:c6:9c:5e:42: 85:ec:6d:81:bb:89:f6:9d:06:7e:5f:b8:6e:cb:08: 52:b3:17:79:e4:04:39:21:17:79:49:c6:a3:74:c1: 3b:8f:b1:e7:fb:99:60:53:f7:7d:09:4d:30:1a:e1: 86:c6:8b:45:28:d2:31:08:87:01:b6:c1:99:b6:4a: a6:5d:a7:de:54:fc:85:5b:ae:53:c0:66:38:c8:9a: 4a:9d:55:dc:93:cd:4e:dd:31:30:6d:77:a5:82:3a: 12:5e:b5:89:7d:25:65:13:0d:b5:52:b0:8a:c0:17: 0d:ba:f8:17:89:9f:b8:c3:b1:de:88:f1:bb:43:9b: 39:6b:5e:6a:a9:e9:7d:18:ac:5a:a4:73:6f:db:51: 63:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E5:F4:0F:92:D6:34:AB:2E:80:83:A2:1E:65:D7:78:45:FD:40:A9 X509v3 Authority Key Identifier: keyid:F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1uX0D5LWNKsugIOiHmXXeEX9QKk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.23.72.0/21 188.164.200.0/21 194.62.224.0/22 IPv6: 2a00:1f68::/32 Signature Algorithm: sha256WithRSAEncryption a8:a6:57:4f:a9:ff:63:3c:0d:49:0b:86:9f:94:b7:1d:bf:29: 4b:aa:2f:8f:3f:46:ad:e8:fb:04:32:15:fa:28:a8:e8:61:55: cd:31:c9:e4:37:46:12:92:d2:48:c1:a5:47:08:ad:43:aa:82: 22:5d:d1:64:3a:a1:49:a2:e9:1e:00:29:3d:7b:73:95:17:a0: 2a:19:18:2b:50:65:b4:e0:f2:30:44:71:64:a2:fb:ac:e6:20: c4:fe:79:65:70:da:49:a4:e2:58:6d:67:57:54:d6:38:a7:0c: 5f:82:1c:82:59:9d:11:31:77:82:14:16:74:aa:c1:d0:39:2a: 02:a5:c4:95:3b:fd:e8:97:37:55:99:78:08:72:d3:ca:b3:82: 33:44:69:bb:82:74:cc:2b:5b:18:a9:36:54:02:f6:c8:2a:1c: 3e:d3:12:51:b6:10:aa:b8:d7:4d:de:b6:74:17:5b:56:c6:9d: 13:24:b7:6e:f4:73:7b:cf:ef:10:f3:8b:a3:f5:20:31:9b:88: a0:2e:bb:34:cf:96:bd:de:59:d6:99:89:2a:42:00:24:36:71: 3c:ae:11:2f:12:77:fd:b7:2d:05:0e:22:50:85:8c:40:2c:01: c0:e2:a4:8a:ca:4c:c7:b7:f9:3c:04:53:a2:e1:50:d0:e3:fb: 09:36:cd:3e -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt+psVHpwAtt97UCCgWIRoUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NzVkZjEzYmY4YzFiYThiMTBlMmRhNDgwYWU2MWE1MzQ4 YWI4ZTkwHhcNMjYwMTAyMTIyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmU1ZjQwZjkyZDYzNGFiMmU4MDgzYTIxZTY1ZDc3ODQ1ZmQ0MGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7rAjrpMfo3tQ7zyWQOuGrcXNK+IX 7ZraLjJe/97J0NRlB6WF+LQS4vejv6R6nWaMPuW511+Aphxcl5lrqajaOS/xRR+l jZrvPgbhVoyirDB5OI7dUHmvV4RQKXZ7DdDw17uSuZNo8pRS++9cDSP6netWOsac XkKF7G2Bu4n2nQZ+X7huywhSsxd55AQ5IRd5ScajdME7j7Hn+5lgU/d9CU0wGuGG xotFKNIxCIcBtsGZtkqmXafeVPyFW65TwGY4yJpKnVXck81O3TEwbXelgjoSXrWJ fSVlEw21UrCKwBcNuvgXiZ+4w7HeiPG7Q5s5a15qqel9GKxapHNv21FjOQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFNbl9A+S1jSrLoCDoh5l13hF/UCpMB8GA1UdIwQY MBaAFPh13xO/jBuosQ4tpICuYaU0irjpMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1IWGZFNy1NRzZpeERpMmtnSzVocFRTS3VPay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvYWJhY2YxLWY0YzYtNDcxMC05M2U5 LWZjODNkYjEzZjNhMS8xLzF1WDBENUxXTktzdWdJT2lIbVhYZUVYOVFLay5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvM2IvYWJhY2YxLWY0YzYtNDcxMC05M2U5LWZjODNkYjEzZjNh MS8xLzEtSFhmRTctTUc2aXhEaTJrZ0s1aHBUU0t1T2suY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAOyF0gD BAO8pMgDBALCPuAwDQQCAAIwBwMFACoAH2gwDQYJKoZIhvcNAQELBQADggEBAKim V0+p/2M8DUkLhp+Utx2/KUuqL48/Rq3o+wQyFfooqOhhVc0xyeQ3RhKS0kjBpUcI rUOqgiJd0WQ6oUmi6R4AKT17c5UXoCoZGCtQZbTg8jBEcWSi+6zmIMT+eWVw2kmk 4lhtZ1dU1jinDF+CHIJZnRExd4IUFnSqwdA5KgKlxJU7/eiXN1WZeAhy08qzgjNE abuCdMwrWxipNlQC9sgqHD7TElG2EKq4103etnQXW1bGnRMkt270c3vP7xDzi6P1 IDGbiKAuuzTPlr3eWdaZiSpCACQ2cTyuES8Sd/23LQUOIlCFjEAsAcDipIrKTMe3 +TwEU6LhUNDj+wk2zT4= -----END CERTIFICATE-----Generated at Sun Jan 25 16:40:24 2026 by rpki-client