This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/U8RgryHUq2JAAsgHSpUUEEa9flU.roa File: U8RgryHUq2JAAsgHSpUUEEa9flU.roa (raw, json) Hash identifier: e5+nqmhm/ol/qrImk3F60PKlgocSXFLw4tFumPg6bGE= Subject key identifier: 53:C4:60:AF:21:D4:AB:62:40:02:C8:07:4A:95:14:10:46:BD:7E:55 Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Certificate serial: 019B76EB57AAD2178133B57227ABE8A7D3ED Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/U8RgryHUq2JAAsgHSpUUEEa9flU.roa Signing time: Thu 01 Jan 2026 00:18:13 +0000 ROA not before: Thu 01 Jan 2026 00:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204393 IP address blocks: 2.188.234.0/24 maxlen: 24 2.188.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:57:aa:d2:17:81:33:b5:72:27:ab:e8:a7:d3:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Validity Not Before: Jan 1 00:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53c460af21d4ab624002c8074a95141046bd7e55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:60:f4:68:e7:81:3d:7b:51:60:1b:ce:d2:f8: 7e:89:6b:e6:3e:7c:f9:40:af:67:64:d0:52:e8:3b: f1:00:a4:76:b7:cb:e9:3c:7c:44:9a:49:2f:e2:05: d3:07:27:fd:a6:b1:04:ac:d6:f6:56:4e:3d:a4:24: 84:fd:df:10:8f:7c:42:5d:da:ea:89:b3:63:2b:54: 86:5f:cb:50:63:43:a0:4b:90:ac:0c:76:5c:c7:52: 78:59:52:6a:54:1a:77:93:8d:b6:3f:fa:9d:ca:45: 9d:0f:ca:6b:a4:ab:17:dc:ba:85:1d:0b:a0:09:0a: a2:ba:07:b5:ab:32:98:31:6f:01:be:ea:da:2c:60: 1a:3d:d1:2c:cb:bb:99:f5:9e:7a:af:fb:f4:6d:76: 2a:ad:90:b2:21:78:47:c3:18:c7:60:07:4d:2c:c2: 27:ff:aa:2e:9c:4a:d6:a1:7a:2d:3d:c4:ff:02:0c: 9b:95:67:4f:c0:c1:ab:94:4d:57:ac:a3:f9:43:d3: e5:c9:df:d5:82:0f:99:81:cd:09:4f:23:1c:0e:2b: 4b:34:12:ca:c1:63:f1:9b:7f:23:61:c2:fa:d2:66: f7:1b:3b:09:49:da:3a:ed:fa:53:37:42:43:f7:31: 7a:65:7a:69:3f:fa:21:a8:0f:9b:d5:05:5b:50:14: 03:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C4:60:AF:21:D4:AB:62:40:02:C8:07:4A:95:14:10:46:BD:7E:55 X509v3 Authority Key Identifier: keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/U8RgryHUq2JAAsgHSpUUEEa9flU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.188.234.0/24 2.188.238.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:f7:99:ae:53:ae:6c:3d:41:da:42:9b:1f:3a:51:35:32:e0: 3c:46:42:2e:b8:17:ac:f1:df:c8:9d:e6:51:24:0b:a4:c8:8d: c0:95:7e:f9:de:ea:10:91:8d:89:72:02:3a:fc:64:e0:b6:30: 51:27:4a:1b:ad:02:52:14:8f:26:3f:3d:64:70:49:b6:07:5b: e6:fa:df:8a:a5:2e:ff:07:4f:59:85:a1:8a:a2:5e:52:5c:70: 74:eb:cf:3d:1c:2d:a0:16:44:9d:6f:42:23:82:13:0c:e0:59: 8c:53:a2:90:7a:f1:7a:cd:fe:dc:38:c0:2d:67:3e:5d:30:2e: d4:13:b9:0c:8f:df:1e:e5:29:38:13:e1:62:3c:97:cc:04:6c: 15:9e:6c:ca:48:9a:e5:cf:55:fc:d1:b7:39:77:51:10:51:dc: 94:78:9f:d6:2f:72:2c:cd:bb:ce:44:88:27:d5:c4:1c:da:a6: e9:1b:4e:e6:a9:fe:ab:65:6d:e4:6a:c2:2a:23:26:13:55:b0: 7e:28:0d:b1:4c:99:5f:57:dd:78:22:d0:29:4e:c0:43:bd:f5: b6:f1:45:e4:5c:49:26:c5:9f:ff:3d:c9:12:16:5c:de:bb:ec: 37:1a:71:42:e2:97:03:68:83:d2:9c:38:f6:ee:56:50:c5:81: 01:d2:3c:24 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt261eq0heBM7VyJ6vop9PtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy NjBhZTUwHhcNMjYwMTAxMDAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2M0NjBhZjIxZDRhYjYyNDAwMmM4MDc0YTk1MTQxMDQ2YmQ3ZTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2D0aOeBPXtRYBvO0vh+iWvmPnz5 QK9nZNBS6DvxAKR2t8vpPHxEmkkv4gXTByf9prEErNb2Vk49pCSE/d8Qj3xCXdrq ibNjK1SGX8tQY0OgS5CsDHZcx1J4WVJqVBp3k422P/qdykWdD8prpKsX3LqFHQug CQqiuge1qzKYMW8BvuraLGAaPdEsy7uZ9Z56r/v0bXYqrZCyIXhHwxjHYAdNLMIn /6ounErWoXotPcT/AgyblWdPwMGrlE1XrKP5Q9Plyd/Vgg+Zgc0JTyMcDitLNBLK wWPxm38jYcL60mb3GzsJSdo67fpTN0JD9zF6ZXppP/ohqA+b1QVbUBQDFwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFPEYK8h1KtiQALIB0qVFBBGvX5VMB8GA1UdIwQY MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt Zjc0ZDk1MTg1NzZjLzEvVThSZ3J5SFVxMkpBQXNnSFNwVVVFRWE5ZmxVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAArzqAwQA ArzuMA0GCSqGSIb3DQEBCwUAA4IBAQAd95muU65sPUHaQpsfOlE1MuA8RkIuuBes 8d/IneZRJAukyI3AlX753uoQkY2JcgI6/GTgtjBRJ0obrQJSFI8mPz1kcEm2B1vm +t+KpS7/B09ZhaGKol5SXHB06889HC2gFkSdb0IjghMM4FmMU6KQevF6zf7cOMAt Zz5dMC7UE7kMj98e5Sk4E+FiPJfMBGwVnmzKSJrlz1X80bc5d1EQUdyUeJ/WL3Is zbvORIgn1cQc2qbpG07mqf6rZW3kasIqIyYTVbB+KA2xTJlfV914ItApTsBDvfW2 8UXkXEkmxZ//PckSFlzeu+w3GnFC4pcDaIPSnDj27lZQxYEB0jwk -----END CERTIFICATE-----Generated at Sun Jan 25 20:31:01 2026 by rpki-client