This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/0UScFCbDgUcG5qntzzMxxA-H0u8.roa File: 0UScFCbDgUcG5qntzzMxxA-H0u8.roa (raw, json) Hash identifier: /E1pcadNPTE8QC0W/br+DptKLP/xZLnJ+znfRQnii9E= Subject key identifier: D1:44:9C:14:26:C3:81:47:06:E6:A9:ED:CF:33:31:C4:0F:87:D2:EF Certificate issuer: /CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd Certificate serial: 019B7D5BCE60965635E7A55662F7F1B5A289 Authority key identifier: ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/0UScFCbDgUcG5qntzzMxxA-H0u8.roa Signing time: Fri 02 Jan 2026 06:18:47 +0000 ROA not before: Fri 02 Jan 2026 06:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41033 IP address blocks: 185.235.184.0/24 maxlen: 24 185.235.185.0/24 maxlen: 24 185.235.187.0/24 maxlen: 24 2a0d:7100::/48 maxlen: 48 2a0d:7100:1::/48 maxlen: 48 2a0d:7100:2::/48 maxlen: 48 2a0d:7100:3::/48 maxlen: 48 2a0d:7100:4::/48 maxlen: 48 2a0d:7100:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:ce:60:96:56:35:e7:a5:56:62:f7:f1:b5:a2:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd Validity Not Before: Jan 2 06:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1449c1426c3814706e6a9edcf3331c40f87d2ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8e:9c:93:ba:eb:d3:7e:55:73:f0:36:53:0b: d3:6e:d3:41:fe:03:2a:02:0e:df:ac:25:a2:3e:1a: 12:b4:7b:e0:21:b9:ab:64:8c:3a:51:8b:08:2a:21: 50:ea:7d:6c:f5:2b:29:67:e1:4d:ea:59:4d:eb:32: 64:06:56:b3:a6:ca:dd:72:c5:60:15:8a:9a:7f:9c: 1e:46:d3:ac:f3:13:03:24:ca:60:26:b3:e1:67:d6: aa:11:90:4c:74:57:6f:55:37:57:c9:c4:7e:f2:7e: 42:bf:8d:0c:44:9a:14:c5:7c:6e:c8:50:42:42:44: de:4a:8d:71:88:36:2c:d6:56:d7:5a:d1:38:76:c1: 83:c5:d6:49:35:e8:c1:ad:1c:18:4d:04:e5:09:fc: b8:cf:cd:64:07:eb:3d:63:3c:41:24:05:ad:cc:0e: f9:97:6c:9b:96:14:92:99:9a:dc:14:23:e8:1d:f6: 93:a9:56:c9:95:23:a3:03:ab:48:98:8d:31:a3:34: 74:95:dd:59:92:2d:25:11:53:9f:86:1d:fc:8f:f8: 77:33:b1:81:31:bf:26:e5:41:44:74:74:70:a6:8b: 18:88:0e:58:27:2b:ba:f0:76:59:79:41:e7:c6:50: 02:f6:12:af:a2:42:59:5b:f8:2b:14:dd:82:26:70: c1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:44:9C:14:26:C3:81:47:06:E6:A9:ED:CF:33:31:C4:0F:87:D2:EF X509v3 Authority Key Identifier: keyid:ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/0UScFCbDgUcG5qntzzMxxA-H0u8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.235.184.0/23 185.235.187.0/24 IPv6: 2a0d:7100::-2a0d:7100:5:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 94:e9:26:ad:b4:75:f1:7b:41:f3:66:77:53:56:7d:43:67:4e: 9f:af:b3:1b:77:fa:9a:ea:e5:17:41:a0:a8:fc:bc:e5:06:f4: 17:94:a8:a1:9a:67:90:50:c1:e9:11:0a:7f:57:ca:e6:48:ca: c3:f0:c5:96:b4:70:50:09:d4:29:5f:db:b4:56:71:f7:92:15: 5d:ee:42:ba:08:fc:31:81:0c:20:86:44:2f:d3:dd:f2:42:cd: 13:16:ee:67:2b:cc:8a:27:d7:50:1f:13:ee:9b:3b:96:7a:63: 3a:20:9a:34:2a:2c:33:b8:d7:03:c5:d0:84:e7:40:35:8e:f4: 6f:90:19:3c:4d:17:2c:e4:e5:54:6c:79:0a:7f:11:b7:80:b8: c2:1d:a5:2a:98:d2:a7:f6:27:e4:c9:da:37:3c:0c:90:75:cd: 9e:ec:c3:1c:e0:af:0f:9f:1d:46:42:7c:9d:e7:8d:6c:c7:e1: b2:02:e2:45:ad:91:97:bd:8e:f4:be:8e:ea:47:50:b0:ce:3a: 20:48:6c:6e:a3:4e:bb:82:ae:bd:3f:fe:94:74:94:b6:e5:d4: 0e:b5:c7:46:88:1f:3e:5f:c8:64:da:54:89:64:3f:d6:c1:f5: cc:82:2a:2b:fd:ec:56:7a:e4:b9:66:de:a7:af:9e:c8:4b:86: dc:d6:94:f0 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt9W85gllY156VWYvfxtaKJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkY2MyZDI3OTEzMGQxYTFiYjNlZTVhM2I1ZjMzMjMwNTdi M2M0ZmQwHhcNMjYwMTAyMDYxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTQ0OWMxNDI2YzM4MTQ3MDZlNmE5ZWRjZjMzMzFjNDBmODdkMmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo6ck7rr035Vc/A2UwvTbtNB/gMq Ag7frCWiPhoStHvgIbmrZIw6UYsIKiFQ6n1s9SspZ+FN6llN6zJkBlazpsrdcsVg FYqaf5weRtOs8xMDJMpgJrPhZ9aqEZBMdFdvVTdXycR+8n5Cv40MRJoUxXxuyFBC QkTeSo1xiDYs1lbXWtE4dsGDxdZJNejBrRwYTQTlCfy4z81kB+s9YzxBJAWtzA75 l2yblhSSmZrcFCPoHfaTqVbJlSOjA6tImI0xozR0ld1Zki0lEVOfhh38j/h3M7GB Mb8m5UFEdHRwposYiA5YJyu68HZZeUHnxlAC9hKvokJZW/grFN2CJnDBqwIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFNFEnBQmw4FHBuap7c8zMcQPh9LvMB8GA1UdIwQY MBaAFO3MLSeRMNGhuz7lo7XzMjBXs8T9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2N3dEo1RXcwYUc3UHVXanRmTXlNRmV6eFAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83MjQzYjgtYThmOS00NTIwLTgwYzEt MDU2NWYzMzdkY2JlLzEvMFVTY0ZDYkRnVWNHNXFudHp6TXh4QS1IMHU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83MjQzYjgtYThmOS00NTIwLTgwYzEtMDU2NWYzMzdkY2Jl LzEvN2N3dEo1RXcwYUc3UHVXanRmTXlNRmV6eFAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTASBAIAATAMAwQBueu4AwQA ueu7MBcEAgACMBEwDwMEACoNcQMHASoNcQAABDANBgkqhkiG9w0BAQsFAAOCAQEA lOkmrbR18XtB82Z3U1Z9Q2dOn6+zG3f6murlF0GgqPy85Qb0F5SooZpnkFDB6REK f1fK5kjKw/DFlrRwUAnUKV/btFZx95IVXe5Cugj8MYEMIIZEL9Pd8kLNExbuZyvM iifXUB8T7ps7lnpjOiCaNCosM7jXA8XQhOdANY70b5AZPE0XLOTlVGx5Cn8Rt4C4 wh2lKpjSp/Yn5MnaNzwMkHXNnuzDHOCvD58dRkJ8neeNbMfhsgLiRa2Rl72O9L6O 6kdQsM46IEhsbqNOu4KuvT/+lHSUtuXUDrXHRogfPl/IZNpUiWQ/1sH1zIIqK/3s VnrkuWbep6+eyEuG3NaU8A== -----END CERTIFICATE-----Generated at Mon Jan 26 04:42:08 2026 by rpki-client