This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/U-qi4IuWNyY_2ScOGuO5wDkIP5g.roa File: U-qi4IuWNyY_2ScOGuO5wDkIP5g.roa (raw, json) Hash identifier: vLUhnxRWvdCmmMvb1mJXW0MVOezf9HqsIWcCip83cUs= Subject key identifier: 53:EA:A2:E0:8B:96:37:26:3F:D9:27:0E:1A:E3:B9:C0:39:08:3F:98 Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Certificate serial: 019B76EB4F5E10C0C2003E97A18402888E97 Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/U-qi4IuWNyY_2ScOGuO5wDkIP5g.roa Signing time: Thu 01 Jan 2026 00:18:11 +0000 ROA not before: Thu 01 Jan 2026 00:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48147 IP address blocks: 2.189.58.0/24 maxlen: 24 2.189.242.0/23 maxlen: 23 2.189.242.0/24 maxlen: 24 2.189.243.0/24 maxlen: 24 2.189.254.0/23 maxlen: 23 2.189.254.0/24 maxlen: 24 2.189.255.0/24 maxlen: 24 78.39.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:4f:5e:10:c0:c2:00:3e:97:a1:84:02:88:8e:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Validity Not Before: Jan 1 00:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53eaa2e08b9637263fd9270e1ae3b9c039083f98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f6:32:1f:18:af:66:a8:5a:08:35:17:98:b0: 4c:04:03:1c:24:f6:cf:64:e0:ba:6d:a6:a2:bf:a1: 10:ea:7b:1f:46:28:ab:f6:09:c7:f6:50:9b:3d:de: 39:b2:1f:a3:67:d9:ae:40:79:d4:ba:e5:f6:d1:39: ec:4f:00:03:0d:0e:de:b4:68:89:ab:2c:6b:c4:2d: 4f:1e:c7:0b:4d:23:46:c0:c3:4f:1e:1d:04:03:3d: 18:3d:ec:6e:af:c8:df:bd:eb:a1:04:7c:cf:fc:cc: dd:a3:6f:6a:16:18:b3:38:96:4f:49:c5:73:50:84: de:f6:d4:70:93:b3:c9:a1:08:db:9a:99:b7:12:2c: c7:78:6d:ff:86:29:8c:09:50:4f:f3:e6:e5:ae:dd: b6:8a:85:3d:6b:ca:f6:3f:bd:1a:2d:7f:a0:cd:87: 17:51:aa:04:70:f8:57:e4:9a:cd:58:bc:d3:38:5a: e7:0d:cb:4d:6e:33:c9:2d:b8:72:e6:7f:68:69:5f: e8:8c:de:09:a8:d2:b2:0f:35:ea:a8:b1:2c:35:8c: d0:14:5b:f5:ed:12:11:6e:de:67:96:84:38:c6:66: aa:67:c0:71:d0:bb:31:be:aa:15:f5:d4:fb:43:2e: 86:29:f1:9b:2a:46:9a:c4:2a:c2:74:6d:bf:af:50: 34:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:EA:A2:E0:8B:96:37:26:3F:D9:27:0E:1A:E3:B9:C0:39:08:3F:98 X509v3 Authority Key Identifier: keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/U-qi4IuWNyY_2ScOGuO5wDkIP5g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.189.58.0/24 2.189.242.0/23 2.189.254.0/23 78.39.47.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:81:2e:39:17:dd:1c:fd:f2:66:87:b5:0c:07:4c:63:3d:72: d2:3a:47:d4:d4:3e:e7:37:7a:cf:79:7b:13:ae:e7:f4:34:38: 71:7e:9f:7c:e5:6b:e7:1e:21:64:cb:31:be:fe:cc:12:7b:b4: 1f:89:e6:4f:db:82:ae:7c:4f:f4:dc:35:98:b6:90:be:e2:65: e9:80:91:f7:53:46:98:c0:f0:0c:aa:91:fc:d0:ef:83:63:26: e6:94:91:c8:af:8b:8f:54:0a:04:89:e4:4c:7a:7d:a4:49:01: 72:d3:dc:2e:8f:ca:e3:21:03:a1:b7:2b:26:c4:a7:a0:e5:c1: 23:95:31:b3:a3:8e:ac:c8:89:e0:61:00:f3:cd:bf:15:a2:43: 3b:bd:2f:18:9d:c1:3b:bb:7b:9d:2c:fd:a0:6f:95:0e:17:22: d5:fd:5c:ad:b3:e5:72:eb:39:51:96:c6:4f:fe:e8:e9:69:25: c9:5f:82:35:86:e4:8b:2f:72:81:90:70:1e:b0:f6:c8:f4:be: 10:4f:47:83:97:0e:d1:fd:f2:73:4a:b5:f3:a6:e5:ac:08:41: f4:1d:69:f8:a5:2c:7d:a9:94:2a:ff:74:68:12:52:9e:eb:e6: cd:aa:37:4c:98:36:51:72:ac:d9:61:40:c4:ee:e6:ba:89:be: 88:04:91:c3 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt2609eEMDCAD6XoYQCiI6XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy NjBhZTUwHhcNMjYwMTAxMDAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2VhYTJlMDhiOTYzNzI2M2ZkOTI3MGUxYWUzYjljMDM5MDgzZjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPYyHxivZqhaCDUXmLBMBAMcJPbP ZOC6baaiv6EQ6nsfRiir9gnH9lCbPd45sh+jZ9muQHnUuuX20TnsTwADDQ7etGiJ qyxrxC1PHscLTSNGwMNPHh0EAz0YPexur8jfveuhBHzP/Mzdo29qFhizOJZPScVz UITe9tRwk7PJoQjbmpm3EizHeG3/himMCVBP8+blrt22ioU9a8r2P70aLX+gzYcX UaoEcPhX5JrNWLzTOFrnDctNbjPJLbhy5n9oaV/ojN4JqNKyDzXqqLEsNYzQFFv1 7RIRbt5nloQ4xmaqZ8Bx0LsxvqoV9dT7Qy6GKfGbKkaaxCrCdG2/r1A0XwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFFPqouCLljcmP9knDhrjucA5CD+YMB8GA1UdIwQY MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt Zjc0ZDk1MTg1NzZjLzEvVS1xaTRJdVdOeVlfMlNjT0d1TzV3RGtJUDVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAAr06AwQB Ar3yAwQBAr3+AwQATicvMA0GCSqGSIb3DQEBCwUAA4IBAQAtgS45F90c/fJmh7UM B0xjPXLSOkfU1D7nN3rPeXsTruf0NDhxfp985WvnHiFkyzG+/swSe7QfieZP24Ku fE/03DWYtpC+4mXpgJH3U0aYwPAMqpH80O+DYybmlJHIr4uPVAoEieRMen2kSQFy 09wuj8rjIQOhtysmxKeg5cEjlTGzo46syIngYQDzzb8VokM7vS8YncE7u3udLP2g b5UOFyLV/Vyts+Vy6zlRlsZP/ujpaSXJX4I1huSLL3KBkHAesPbI9L4QT0eDlw7R /fJzSrXzpuWsCEH0HWn4pSx9qZQq/3RoElKe6+bNqjdMmDZRcqzZYUDE7ua6ib6I BJHD -----END CERTIFICATE-----Generated at Sun Jan 25 20:31:10 2026 by rpki-client