This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/U8t2JW_kjuRPOEEcuD5OXG8vU5s.roa File: U8t2JW_kjuRPOEEcuD5OXG8vU5s.roa (raw, json) Hash identifier: AonXRXVRx1Opw2zNQQjpzxeB1MfNANDEV8Jlm8F8xC8= Subject key identifier: 53:CB:76:25:6F:E4:8E:E4:4F:38:41:1C:B8:3E:4E:5C:6F:2F:53:9B Certificate issuer: /CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b Certificate serial: 019B7B36824F8BAACA9D6A4A7058E71CA48E Authority key identifier: FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/U8t2JW_kjuRPOEEcuD5OXG8vU5s.roa Signing time: Thu 01 Jan 2026 20:18:48 +0000 ROA not before: Thu 01 Jan 2026 20:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47576 IP address blocks: 185.126.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:82:4f:8b:aa:ca:9d:6a:4a:70:58:e7:1c:a4:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b Validity Not Before: Jan 1 20:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53cb76256fe48ee44f38411cb83e4e5c6f2f539b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:48:c8:ea:74:21:df:37:08:d1:d6:2e:19:96: 3f:96:a0:64:ab:fa:a7:fe:ce:3e:9b:64:69:25:d2: b5:cb:5b:49:7e:46:65:aa:37:d0:a4:da:03:36:07: 97:b5:4b:fc:3c:6d:b8:6d:cc:6e:a5:35:1e:4b:b9: f9:c4:d3:9a:bf:c3:e5:a7:0b:2a:76:3e:86:c4:e0: 6e:d6:09:59:00:9d:78:1d:f6:03:a6:b3:13:fa:a4: a9:53:c4:ea:38:31:83:76:ae:d4:97:3b:63:5a:b1: 5d:30:f4:d1:b0:79:f3:1e:96:c0:b1:dc:0c:a2:fe: 23:99:21:44:11:29:c8:a9:27:7d:05:10:39:8d:eb: f2:e1:ef:0b:14:76:4c:ab:9f:e0:3a:51:1e:c8:fe: ad:cb:92:6e:a4:1c:b1:64:8b:d4:40:1f:20:03:a7: 4c:a7:f6:2a:8d:9b:83:4b:c4:d3:79:d8:b0:7e:a3: e9:4f:3b:9b:0d:af:c8:0f:9e:a8:88:94:2c:e6:cd: 2c:7f:f8:74:74:f7:7d:eb:67:9c:d9:d2:ea:23:a0: 5e:15:14:6a:94:f9:ce:a9:21:20:a3:72:40:23:70: 4e:9c:81:3d:f6:f3:9c:ce:2b:2b:13:6d:3f:ce:e5: 4e:84:59:0a:e9:dd:65:89:77:8d:47:25:2e:1a:03: c8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:CB:76:25:6F:E4:8E:E4:4F:38:41:1C:B8:3E:4E:5C:6F:2F:53:9B X509v3 Authority Key Identifier: keyid:FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/U8t2JW_kjuRPOEEcuD5OXG8vU5s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.126.20.0/22 Signature Algorithm: sha256WithRSAEncryption b2:09:e9:a6:8b:c4:a3:b6:e3:68:7e:d7:ff:60:05:e4:f8:21: 18:21:8c:73:c7:08:69:3c:12:d3:d5:28:23:b5:76:49:55:8b: 5b:f3:50:f5:65:e5:31:2f:0e:d8:71:e4:97:e4:7a:7a:03:95: 5b:77:66:17:c8:33:ba:42:63:09:79:63:dd:dc:42:55:b7:31: d0:00:b5:91:e6:62:c5:fb:e1:36:00:f3:d1:79:f6:8a:9c:de: e6:46:9b:78:be:7d:cb:bd:c1:e1:4d:1d:d9:78:84:91:40:b7: 95:6a:a5:d5:aa:20:f5:79:ef:9c:2e:c8:9e:71:cb:7c:66:4e: a0:cd:bb:64:de:c9:27:ad:7e:41:ab:ab:96:40:65:e9:72:4c: cf:00:44:45:72:90:b0:5c:05:2e:94:0c:52:c8:97:e9:8a:47: 79:a4:bb:aa:3d:45:54:58:1e:00:c7:f1:06:8e:2b:6c:7a:e7: 3e:0a:c8:bb:1f:25:f3:29:42:64:b4:59:36:89:af:7f:8d:8e: 84:a3:77:f9:05:b0:83:bf:d7:b5:2d:3e:51:1d:9a:e8:32:53: 41:52:77:87:c7:1e:69:a1:84:44:c5:3f:ad:51:18:5a:68:74: 97:e9:30:c9:31:ad:f4:91:86:5d:1c:48:ff:52:5f:01:d3:29: 01:1d:fe:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NoJPi6rKnWpKcFjnHKSOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjOTgzMTM3MDQyZmM4YzQ5MjE3MDdkNGViNmRhNWY2YzRh NzlhNWIwHhcNMjYwMTAxMjAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2NiNzYyNTZmZTQ4ZWU0NGYzODQxMWNiODNlNGU1YzZmMmY1MzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUjI6nQh3zcI0dYuGZY/lqBkq/qn /s4+m2RpJdK1y1tJfkZlqjfQpNoDNgeXtUv8PG24bcxupTUeS7n5xNOav8Plpwsq dj6GxOBu1glZAJ14HfYDprMT+qSpU8TqODGDdq7UlztjWrFdMPTRsHnzHpbAsdwM ov4jmSFEESnIqSd9BRA5jevy4e8LFHZMq5/gOlEeyP6ty5JupByxZIvUQB8gA6dM p/YqjZuDS8TTediwfqPpTzubDa/ID56oiJQs5s0sf/h0dPd962ec2dLqI6BeFRRq lPnOqSEgo3JAI3BOnIE99vOczisrE20/zuVOhFkK6d1liXeNRyUuGgPIPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFPLdiVv5I7kTzhBHLg+TlxvL1ObMB8GA1UdIwQY MBaAFPyYMTcEL8jEkhcH1OttpfbEp5pbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0pneE53UXZ5TVNTRndmVTYyMmw5c1NubWxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MjFjODAtZWQzYS00N2ZkLThkMmMt MjI0ZjEwYTk4MWZlLzEvVTh0MkpXX2tqdVJQT0VFY3VENU9YRzh2VTVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy80MjFjODAtZWQzYS00N2ZkLThkMmMtMjI0ZjEwYTk4MWZl LzEvX0pneE53UXZ5TVNTRndmVTYyMmw5c1NubWxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuX4UMA0G CSqGSIb3DQEBCwUAA4IBAQCyCemmi8SjtuNoftf/YAXk+CEYIYxzxwhpPBLT1Sgj tXZJVYtb81D1ZeUxLw7YceSX5Hp6A5Vbd2YXyDO6QmMJeWPd3EJVtzHQALWR5mLF ++E2APPRefaKnN7mRpt4vn3LvcHhTR3ZeISRQLeVaqXVqiD1ee+cLsiecct8Zk6g zbtk3sknrX5Bq6uWQGXpckzPAERFcpCwXAUulAxSyJfpikd5pLuqPUVUWB4Ax/EG jitseuc+Csi7HyXzKUJktFk2ia9/jY6Eo3f5BbCDv9e1LT5RHZroMlNBUneHxx5p oYRExT+tURhaaHSX6TDJMa30kYZdHEj/Ul8B0ykBHf7+ -----END CERTIFICATE-----Generated at Mon Jan 26 22:36:48 2026 by rpki-client