This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/rUpXn5OLFWI8Nb4opFx-ZMazNF4.roa File: rUpXn5OLFWI8Nb4opFx-ZMazNF4.roa (raw, json) Hash identifier: CyKHZsof9BroFMJ4kJHFaNGpd7KJ3UUKrH85vt5M3yM= Subject key identifier: AD:4A:57:9F:93:8B:15:62:3C:35:BE:28:A4:5C:7E:64:C6:B3:34:5E Certificate issuer: /CN=5f2c7126bc8f39056744de213b2ce26b76bc9923 Certificate serial: 019B78A2DD8989A792A91456880EC019FF02 Authority key identifier: 5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/rUpXn5OLFWI8Nb4opFx-ZMazNF4.roa Signing time: Thu 01 Jan 2026 08:18:18 +0000 ROA not before: Thu 01 Jan 2026 08:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206589 IP address blocks: 185.182.96.0/22 maxlen: 22 2a0a:ea80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:dd:89:89:a7:92:a9:14:56:88:0e:c0:19:ff:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f2c7126bc8f39056744de213b2ce26b76bc9923 Validity Not Before: Jan 1 08:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad4a579f938b15623c35be28a45c7e64c6b3345e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fe:55:2d:c1:da:d6:dd:36:20:ea:91:7b:22: be:b6:a0:65:42:f8:7b:85:d1:5b:9d:a7:75:19:9e: 6b:c0:61:38:ac:8f:8b:fd:78:cb:18:04:1c:67:cd: eb:2f:d2:0a:2f:1f:a2:b1:28:8a:86:e5:42:93:da: f5:89:e5:ef:d7:42:4e:34:72:28:7d:56:a7:9b:18: c7:ba:07:57:bb:9d:7f:11:96:dc:03:55:5b:51:9d: d0:84:42:5b:07:19:9a:0a:54:52:5f:ef:a8:bf:11: 46:34:3f:b0:65:f0:6c:33:53:6b:12:d2:af:5d:de: e5:fa:35:00:71:9e:ed:2f:f5:cb:b8:b4:3b:99:d2: 9f:22:98:36:38:da:4d:40:2f:64:0c:12:d0:bf:b0: ca:1a:0c:88:39:0f:dc:09:b7:f0:ca:d0:b6:65:a1: 03:91:20:e5:14:44:c1:1c:1d:27:70:29:b5:db:39: e8:ff:a5:c1:2a:b0:f8:c7:c0:63:0c:8e:82:92:2b: f1:65:0a:1f:10:6a:0a:6d:1e:b4:86:72:2c:98:07: a8:5f:71:4a:0f:52:3d:a9:45:c1:7d:b5:41:54:d6: b1:d8:49:f8:a6:5c:5e:7f:55:33:8a:de:16:75:28: 7e:4a:58:81:32:7a:12:d6:e1:0b:d6:f9:d2:0b:a4: 20:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:4A:57:9F:93:8B:15:62:3C:35:BE:28:A4:5C:7E:64:C6:B3:34:5E X509v3 Authority Key Identifier: keyid:5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/rUpXn5OLFWI8Nb4opFx-ZMazNF4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.182.96.0/22 IPv6: 2a0a:ea80::/29 Signature Algorithm: sha256WithRSAEncryption 5b:d9:45:71:fb:7b:5f:40:c1:d3:2d:88:8d:9a:f9:21:b4:5e: f0:55:af:04:8b:e4:57:ef:82:21:84:e4:9f:cc:08:1a:ef:f8: 72:2f:75:54:ee:f0:c9:35:c0:a8:7d:fd:d6:fc:f1:a2:07:a8: 9b:78:8a:58:d9:c8:32:ce:ec:99:7a:24:00:3b:6e:8a:e9:a0: df:6e:01:05:c8:4c:cf:2a:13:a2:5c:b1:a6:c7:1b:1f:2e:ff: 4f:97:89:58:28:23:74:ea:7c:3b:24:ed:16:03:01:00:ae:d9: d5:30:c3:df:fa:3f:05:40:4b:6e:69:c8:15:94:7d:80:46:ac: 63:1d:08:ba:e3:d4:9b:4b:e5:0d:8b:f2:d9:09:ce:5d:e2:30: ca:69:aa:c6:65:5b:a8:2b:35:9b:03:2e:d6:c5:d2:f6:65:3f: 3c:0a:1c:df:56:14:b4:d8:f6:2f:b3:27:3e:98:35:bd:d3:56: 0b:6f:2d:2e:63:7c:68:fb:65:d9:04:75:a3:ca:23:15:7a:2f: 86:7c:28:c7:6a:a0:c1:09:d7:d4:05:01:79:b1:91:23:25:96: 73:3d:0a:2c:4d:dc:f5:ba:20:f6:9a:da:3d:8c:cf:1b:93:e3: d8:f4:a0:6f:c0:c9:f9:10:2f:c6:6d:9b:7a:27:6b:4f:b9:63: b6:67:96:13 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4ot2JiaeSqRRWiA7AGf8CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMmM3MTI2YmM4ZjM5MDU2NzQ0ZGUyMTNiMmNlMjZiNzZi Yzk5MjMwHhcNMjYwMTAxMDgxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDRhNTc5ZjkzOGIxNTYyM2MzNWJlMjhhNDVjN2U2NGM2YjMzNDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP5VLcHa1t02IOqReyK+tqBlQvh7 hdFbnad1GZ5rwGE4rI+L/XjLGAQcZ83rL9IKLx+isSiKhuVCk9r1ieXv10JONHIo fVanmxjHugdXu51/EZbcA1VbUZ3QhEJbBxmaClRSX++ovxFGND+wZfBsM1NrEtKv Xd7l+jUAcZ7tL/XLuLQ7mdKfIpg2ONpNQC9kDBLQv7DKGgyIOQ/cCbfwytC2ZaED kSDlFETBHB0ncCm12zno/6XBKrD4x8BjDI6CkivxZQofEGoKbR60hnIsmAeoX3FK D1I9qUXBfbVBVNax2En4plxef1Uzit4WdSh+SliBMnoS1uEL1vnSC6QgPQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFK1KV5+TixViPDW+KKRcfmTGszReMB8GA1UdIwQY MBaAFF8scSa8jzkFZ0TeITss4mt2vJkjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHl4eEpyeVBPUVZuUk40aE95emlhM2E4bVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9mNzZiMWQtNDhjYi00YWIxLTkwZWMt ZTYxNWY1NmY3OGIxLzEvclVwWG41T0xGV0k4TmI0b3BGeC1aTWF6TkY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9mNzZiMWQtNDhjYi00YWIxLTkwZWMtZTYxNWY1NmY3OGIx LzEvWHl4eEpyeVBPUVZuUk40aE95emlhM2E4bVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubZgMA0E AgACMAcDBQMqCuqAMA0GCSqGSIb3DQEBCwUAA4IBAQBb2UVx+3tfQMHTLYiNmvkh tF7wVa8Ei+RX74IhhOSfzAga7/hyL3VU7vDJNcCoff3W/PGiB6ibeIpY2cgyzuyZ eiQAO26K6aDfbgEFyEzPKhOiXLGmxxsfLv9Pl4lYKCN06nw7JO0WAwEArtnVMMPf +j8FQEtuacgVlH2ARqxjHQi649SbS+UNi/LZCc5d4jDKaarGZVuoKzWbAy7WxdL2 ZT88ChzfVhS02PYvsyc+mDW901YLby0uY3xo+2XZBHWjyiMVei+GfCjHaqDBCdfU BQF5sZEjJZZzPQosTdz1uiD2mto9jM8bk+PY9KBvwMn5EC/GbZt6J2tPuWO2Z5YT -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:57 2026 by rpki-client