This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/U13FecX6J3UOL0Ga46JJjAYTBnM.roa File: U13FecX6J3UOL0Ga46JJjAYTBnM.roa (raw, json) Hash identifier: jhsgEsNANGrcwvVO7xJiaTQ5oa51oynlcgVfqCGIYnY= Subject key identifier: 53:5D:C5:79:C5:FA:27:75:0E:2F:41:9A:E3:A2:49:8C:06:13:06:73 Certificate issuer: /CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40 Certificate serial: 019B78A2F3FBAAFA1B48B448E7770D466B20 Authority key identifier: A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/U13FecX6J3UOL0Ga46JJjAYTBnM.roa Signing time: Thu 01 Jan 2026 08:18:23 +0000 ROA not before: Thu 01 Jan 2026 08:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39650 IP address blocks: 185.161.37.0/24 maxlen: 24 185.161.38.0/24 maxlen: 24 185.161.39.0/24 maxlen: 24 185.164.74.0/24 maxlen: 24 185.164.75.0/24 maxlen: 24 185.229.28.0/24 maxlen: 24 185.229.29.0/24 maxlen: 24 185.229.30.0/24 maxlen: 24 185.229.31.0/24 maxlen: 24 2a06:5a40::/29 maxlen: 29 2a0a:d400::/29 maxlen: 29 2a0d:6600::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f3:fb:aa:fa:1b:48:b4:48:e7:77:0d:46:6b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40 Validity Not Before: Jan 1 08:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=535dc579c5fa27750e2f419ae3a2498c06130673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8b:f4:cf:fc:9e:05:e3:e2:df:c7:b4:8c:f9: 1d:38:1b:bc:eb:f8:fe:07:fe:ec:9b:5b:08:e8:c2: a6:71:66:e4:2a:2f:b7:7c:51:0d:ac:ce:80:69:5c: 35:b4:9e:27:40:c2:e4:96:a4:a6:64:af:74:e8:df: c4:d3:fb:82:aa:cd:e7:1c:f5:b0:9f:c1:a3:df:65: a7:54:ca:c2:e7:8d:b6:6e:90:a1:a9:68:78:16:80: 66:1c:ae:8b:a6:08:91:d9:f3:6e:ab:fc:81:5f:0c: dd:c1:48:91:06:01:45:23:16:c1:27:66:c6:be:9f: f2:ff:16:75:91:1d:72:e8:d7:e4:a5:ff:14:9b:ef: ec:5f:b6:a9:c8:f4:7c:92:f0:b4:de:2f:92:e6:54: f2:86:37:5f:2e:fa:34:ac:52:76:e4:fc:71:2a:9b: af:5e:73:31:18:0c:dd:6b:eb:98:31:c6:43:a3:fc: a9:1b:54:8c:f7:8d:07:8e:de:ae:1b:45:f9:77:e1: 02:50:bb:4d:84:b6:c8:7f:2c:ae:0b:fd:79:62:4c: 7f:2d:b3:e0:1e:12:55:fb:27:96:bc:28:f1:c1:2e: 7a:de:54:73:bc:c3:a2:37:02:86:02:69:39:8f:26: 3b:3b:c9:83:c6:6d:f2:d0:56:48:78:b8:5f:5e:73: 75:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5D:C5:79:C5:FA:27:75:0E:2F:41:9A:E3:A2:49:8C:06:13:06:73 X509v3 Authority Key Identifier: keyid:A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/U13FecX6J3UOL0Ga46JJjAYTBnM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.37.0-185.161.39.255 185.164.74.0/23 185.229.28.0/22 IPv6: 2a06:5a40::/29 2a0a:d400::/29 2a0d:6600::/29 Signature Algorithm: sha256WithRSAEncryption 58:11:e8:00:22:9f:3f:d8:c9:86:84:1c:e5:d0:a5:6b:53:1b: de:4f:07:40:9d:f3:d6:f5:f4:3c:75:c6:34:67:72:70:1c:50: 3a:96:0a:05:69:52:f1:7a:64:53:42:21:2c:90:6f:24:36:79: ba:2f:d2:39:46:51:d1:30:f8:54:fc:b7:09:38:aa:43:50:cb: 7e:ed:1a:55:ac:31:b5:65:95:d2:e2:e1:93:e8:c8:cd:05:18: 09:54:fa:a9:1d:77:8d:35:fd:5f:1c:0d:10:70:0f:66:eb:c4: ff:c0:0b:9a:15:ae:40:c6:19:6d:6f:44:e0:93:47:13:54:ed: 5b:4f:3e:41:b1:d9:c4:ff:96:00:54:be:28:88:24:34:3b:d9: 85:83:42:e8:aa:ed:67:ff:d2:ce:1b:1d:c6:7a:bb:6c:6f:d6: a1:58:47:06:0f:b2:c8:d0:b2:95:ef:91:16:b9:69:4c:2c:59: b7:54:a2:72:3d:53:9d:0e:53:6e:f2:07:90:62:c6:b8:98:ad: e2:fa:90:3d:6b:f4:30:92:18:3c:07:11:db:ff:00:bc:41:83: 91:00:5f:85:ac:83:fd:5b:a3:6b:0a:7e:99:e5:ca:b1:70:f7: 03:45:55:52:da:f7:c5:92:72:9f:12:dc:d9:b1:dc:12:a2:29: f5:b1:95:7c -----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgISAZt4ovP7qvobSLRI53cNRmsgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZTM4MWI2ZTc2Y2I5NTIwZThkOGY1Njc3NmVjYTBmZTE3 NmNjNDAwHhcNMjYwMTAxMDgxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzVkYzU3OWM1ZmEyNzc1MGUyZjQxOWFlM2EyNDk4YzA2MTMwNjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqov0z/yeBePi38e0jPkdOBu86/j+ B/7sm1sI6MKmcWbkKi+3fFENrM6AaVw1tJ4nQMLklqSmZK906N/E0/uCqs3nHPWw n8Gj32WnVMrC5422bpChqWh4FoBmHK6LpgiR2fNuq/yBXwzdwUiRBgFFIxbBJ2bG vp/y/xZ1kR1y6Nfkpf8Um+/sX7apyPR8kvC03i+S5lTyhjdfLvo0rFJ25PxxKpuv XnMxGAzda+uYMcZDo/ypG1SM940Hjt6uG0X5d+ECULtNhLbIfyyuC/15Ykx/LbPg HhJV+yeWvCjxwS563lRzvMOiNwKGAmk5jyY7O8mDxm3y0FZIeLhfXnN1uQIDAQAB o4ICOjCCAjYwHQYDVR0OBBYEFFNdxXnF+id1Di9BmuOiSYwGEwZzMB8GA1UdIwQY MBaAFKDjgbbnbLlSDo2PVnduyg/hdsxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb09PQnR1ZHN1VklPalk5V2QyN0tELUYyekVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS84ZTZmMDgtMzBmMC00NmRkLWE3YTEt YTljMzg0MTI4ZDQyLzEvVTEzRmVjWDZKM1VPTDBHYTQ2SkpqQVlUQm5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS84ZTZmMDgtMzBmMC00NmRkLWE3YTEtYTljMzg0MTI4ZDQy LzEvb09PQnR1ZHN1VklPalk5V2QyN0tELUYyekVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzAgBAIAATAaMAwDBAC5oSUD BAO5oSADBAG5pEoDBAK55RwwGwQCAAIwFQMFAyoGWkADBQMqCtQAAwUDKg1mADAN BgkqhkiG9w0BAQsFAAOCAQEAWBHoACKfP9jJhoQc5dCla1Mb3k8HQJ3z1vX0PHXG NGdycBxQOpYKBWlS8XpkU0IhLJBvJDZ5ui/SOUZR0TD4VPy3CTiqQ1DLfu0aVawx tWWV0uLhk+jIzQUYCVT6qR13jTX9XxwNEHAPZuvE/8ALmhWuQMYZbW9E4JNHE1Tt W08+QbHZxP+WAFS+KIgkNDvZhYNC6KrtZ//Szhsdxnq7bG/WoVhHBg+yyNCyle+R FrlpTCxZt1Sicj1TnQ5TbvIHkGLGuJit4vqQPWv0MJIYPAcR2/8AvEGDkQBfhayD /Vujawp+meXKsXD3A0VVUtr3xZJynxLc2bHcEqIp9bGVfA== -----END CERTIFICATE-----Generated at Mon Jan 26 08:58:26 2026 by rpki-client