This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/uSrOFSvXR20Q351nD4JkzhtP9Jg.roa File: uSrOFSvXR20Q351nD4JkzhtP9Jg.roa (raw, json) Hash identifier: zNRVIwb0Zu2pt4iTFPkNvmx3jb4tIN903+fojvNSsc0= Subject key identifier: B9:2A:CE:15:2B:D7:47:6D:10:DF:9D:67:0F:82:64:CE:1B:4F:F4:98 Certificate issuer: /CN=a64fa64bb3c2de4788306312c652de749ec93517 Certificate serial: 019B77C6B51D3905F825843918AE2252C984 Authority key identifier: A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/uSrOFSvXR20Q351nD4JkzhtP9Jg.roa Signing time: Thu 01 Jan 2026 04:17:49 +0000 ROA not before: Thu 01 Jan 2026 04:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212097 IP address blocks: 185.242.100.0/24 maxlen: 24 185.242.101.0/24 maxlen: 24 185.242.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.mft rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b5:1d:39:05:f8:25:84:39:18:ae:22:52:c9:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a64fa64bb3c2de4788306312c652de749ec93517 Validity Not Before: Jan 1 04:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b92ace152bd7476d10df9d670f8264ce1b4ff498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2a:93:b9:54:23:98:a6:b1:18:d9:9a:97:4d: 5c:e7:14:7d:c2:06:7b:35:13:90:ce:d9:9b:63:c8: ff:3c:8a:d9:9c:a6:f6:5e:61:c8:c7:8b:d3:b3:85: e4:5d:06:a8:69:c4:fa:06:4c:9a:d8:c6:9c:bf:19: 43:1f:64:41:ab:60:31:55:2f:6d:81:7a:5d:66:28: 00:7d:b8:f2:3a:6c:fc:64:8b:8a:5c:83:47:df:de: 3a:54:76:c4:d0:cb:dd:79:7d:d2:b1:3f:96:04:e1: 0a:95:bf:ce:60:bd:b3:62:d6:63:b0:59:2b:9d:48: 6c:73:67:8d:39:37:1a:4c:5a:d8:1b:e3:b8:7d:6b: c0:1c:80:44:50:f4:67:74:b5:b6:ff:27:bc:26:bb: ed:31:13:87:1c:81:9b:fa:c9:dc:45:1f:35:df:05: a0:7d:56:41:b7:ed:e6:f1:47:62:dd:5a:8e:3d:70: 2a:e7:8e:c8:cf:d7:53:c2:45:9f:dc:5a:19:09:81: 4c:ad:62:4e:26:83:f7:a9:17:f9:1f:b7:b0:69:d8: 33:1c:a2:4d:57:6a:56:67:3d:f9:06:24:3d:d1:e3: 98:37:c0:13:df:fb:dc:ed:67:07:11:52:a6:e9:77: 83:10:c6:21:6a:0a:71:12:87:ff:f0:d1:f5:1e:fe: 5e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:2A:CE:15:2B:D7:47:6D:10:DF:9D:67:0F:82:64:CE:1B:4F:F4:98 X509v3 Authority Key Identifier: keyid:A6:4F:A6:4B:B3:C2:DE:47:88:30:63:12:C6:52:DE:74:9E:C9:35:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pk-mS7PC3keIMGMSxlLedJ7JNRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/uSrOFSvXR20Q351nD4JkzhtP9Jg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/427db2-c613-4e84-b38c-90569bc6ca54/1/pk-mS7PC3keIMGMSxlLedJ7JNRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.100.0-185.242.102.255 Signature Algorithm: sha256WithRSAEncryption cc:27:03:b2:35:1c:fa:b9:4b:d1:82:7b:68:16:e6:df:c5:2d: 7a:89:70:06:c4:d3:d0:29:f5:7a:be:25:e2:1c:d5:55:fc:ed: e8:2b:c5:6e:59:ed:3a:d5:03:82:f6:19:61:a7:54:25:25:f6: b0:3f:2d:b7:5f:0a:de:22:b2:7e:54:06:d3:79:c0:a1:dd:20: 05:e9:9f:f8:3f:23:20:a5:4c:f0:b1:f4:fd:60:4d:e1:cc:08: 63:62:e5:d5:df:01:61:d1:7d:62:1f:03:30:e3:31:7c:fc:1d: f0:52:4d:f2:42:d0:93:fa:9d:d5:7b:aa:03:2f:c3:8e:09:05: 95:68:a4:3e:bc:25:ff:1c:bd:2f:69:fe:9a:c6:fc:c2:d3:9e: 4b:56:8a:95:a3:a0:fa:33:20:19:a6:bb:ec:a9:77:f0:ba:00: b7:77:97:66:41:74:d1:8f:f8:75:c8:69:74:55:95:8c:b3:ce: 25:f7:9a:ae:7b:14:6f:48:b8:ea:f3:21:a7:cd:58:24:37:04: 2f:47:f7:fe:7c:57:25:90:80:86:05:69:1d:64:80:fa:e7:ab: f7:85:77:99:c8:98:49:c1:30:8a:c7:b2:dc:ac:1c:a4:f3:a7: 23:20:90:ef:be:b7:8e:16:c7:79:40:61:47:be:5e:6b:80:45: db:96:8f:9e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xrUdOQX4JYQ5GK4iUsmEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NGZhNjRiYjNjMmRlNDc4ODMwNjMxMmM2NTJkZTc0OWVj OTM1MTcwHhcNMjYwMTAxMDQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTJhY2UxNTJiZDc0NzZkMTBkZjlkNjcwZjgyNjRjZTFiNGZmNDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CqTuVQjmKaxGNmal01c5xR9wgZ7 NROQztmbY8j/PIrZnKb2XmHIx4vTs4XkXQaoacT6Bkya2MacvxlDH2RBq2AxVS9t gXpdZigAfbjyOmz8ZIuKXINH3946VHbE0MvdeX3SsT+WBOEKlb/OYL2zYtZjsFkr nUhsc2eNOTcaTFrYG+O4fWvAHIBEUPRndLW2/ye8JrvtMROHHIGb+sncRR813wWg fVZBt+3m8Udi3VqOPXAq547Iz9dTwkWf3FoZCYFMrWJOJoP3qRf5H7ewadgzHKJN V2pWZz35BiQ90eOYN8AT3/vc7WcHEVKm6XeDEMYhagpxEof/8NH1Hv5eKQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLkqzhUr10dtEN+dZw+CZM4bT/SYMB8GA1UdIwQY MBaAFKZPpkuzwt5HiDBjEsZS3nSeyTUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80MjdkYjItYzYxMy00ZTg0LWIzOGMt OTA1NjliYzZjYTU0LzEvdVNyT0ZTdlhSMjBRMzUxbkQ0Smt6aHRQOUpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80MjdkYjItYzYxMy00ZTg0LWIzOGMtOTA1NjliYzZjYTU0 LzEvcGstbVM3UEMza2VJTUdNU3hsTGVkSjdKTlJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAK58mQD BAC58mYwDQYJKoZIhvcNAQELBQADggEBAMwnA7I1HPq5S9GCe2gW5t/FLXqJcAbE 09Ap9Xq+JeIc1VX87egrxW5Z7TrVA4L2GWGnVCUl9rA/LbdfCt4isn5UBtN5wKHd IAXpn/g/IyClTPCx9P1gTeHMCGNi5dXfAWHRfWIfAzDjMXz8HfBSTfJC0JP6ndV7 qgMvw44JBZVopD68Jf8cvS9p/prG/MLTnktWipWjoPozIBmmu+ypd/C6ALd3l2ZB dNGP+HXIaXRVlYyzziX3mq57FG9IuOrzIafNWCQ3BC9H9/58VyWQgIYFaR1kgPrn q/eFd5nImEnBMIrHstysHKTzpyMgkO++t44Wx3lAYUe+XmuARduWj54= -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:54 2026 by rpki-client