This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/U3t3MK0HjcZ1cGL_kSzWaaGXgEI.roa File: U3t3MK0HjcZ1cGL_kSzWaaGXgEI.roa (raw, json) Hash identifier: Cue+Bw74SMBQ0i+mRX9yWLoQjyF0aRvqr9N0r2n49g0= Subject key identifier: 53:7B:77:30:AD:07:8D:C6:75:70:62:FF:91:2C:D6:69:A1:97:80:42 Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e Certificate serial: 019B78A2EF319A0E857B1473DFEB024D8E10 Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/U3t3MK0HjcZ1cGL_kSzWaaGXgEI.roa Signing time: Thu 01 Jan 2026 08:18:22 +0000 ROA not before: Thu 01 Jan 2026 08:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 92.39.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ef:31:9a:0e:85:7b:14:73:df:eb:02:4d:8e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e Validity Not Before: Jan 1 08:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=537b7730ad078dc6757062ff912cd669a1978042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:dd:26:c7:bc:b2:81:01:96:16:a1:30:b6:af: 5f:bd:63:8f:6b:72:bc:54:40:0a:40:c6:43:a2:a2: be:f7:7d:50:26:92:2f:e9:42:c2:f5:eb:29:f8:52: 96:d2:92:67:24:7f:52:de:16:f8:66:c3:61:ef:57: 7e:13:72:5e:96:5d:e5:e0:f7:16:52:f8:9d:82:d0: a4:82:c1:54:ca:e5:61:22:50:f3:c2:fc:30:6f:23: 7c:1c:cd:98:f6:59:59:22:16:55:73:a6:17:37:23: 03:a8:ee:92:3f:21:b6:ef:02:a1:05:1b:9b:ed:45: 7a:e8:76:35:46:12:a1:36:f7:c6:9a:71:5a:ea:1b: 07:48:b6:90:02:c9:29:6e:80:76:7b:48:9d:ec:59: d4:68:87:61:8d:21:c4:a9:82:6f:67:3e:40:1d:d5: d9:f2:b0:3d:98:e3:c2:da:9e:65:a3:77:b8:3f:f0: f0:f4:93:56:78:79:7f:87:6d:fa:df:de:71:29:22: 89:f5:2f:b3:75:6d:d9:09:06:1a:32:97:f3:3f:1c: 94:59:21:f1:b9:cc:50:4b:4e:eb:f4:66:48:e3:94: 99:42:e9:60:89:31:8c:13:78:57:08:05:d1:0c:81: f8:ef:00:46:52:7a:62:27:e2:15:a6:82:59:06:af: 76:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:7B:77:30:AD:07:8D:C6:75:70:62:FF:91:2C:D6:69:A1:97:80:42 X509v3 Authority Key Identifier: keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/U3t3MK0HjcZ1cGL_kSzWaaGXgEI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.39.48.0/21 Signature Algorithm: sha256WithRSAEncryption 7d:d9:7e:37:fe:18:d3:7d:e9:06:34:17:bc:f9:dc:64:d9:3c: 56:73:95:73:06:a6:09:62:6f:5c:03:58:d2:fa:41:9a:40:f0: 8b:9f:79:c1:7b:76:14:5e:5d:fc:85:f7:1a:28:47:35:37:33: b3:bb:26:4f:03:1e:68:dd:1b:31:b9:c1:6a:2b:55:33:47:09: d5:a0:3b:bf:81:a3:f7:5a:0f:ca:8d:d2:1d:20:d5:e7:ca:94: e1:e7:ea:a2:3b:c5:ca:9f:fe:0c:9e:dc:28:43:42:f4:cd:58: f7:69:92:0f:36:c2:da:c5:e5:35:48:b1:a2:18:a3:d0:f2:bc: 6e:37:43:4b:5e:12:74:35:77:56:9e:38:e4:26:39:29:99:33: 9e:db:2b:25:4f:41:74:b7:1c:7b:5c:11:5c:cb:f8:40:7f:64: 2e:b0:9d:b3:eb:25:e6:37:54:be:06:e4:94:e6:0f:2c:2d:8f: 43:84:33:53:19:be:f8:6e:fc:34:76:c2:51:08:70:23:88:92: 2e:b8:8b:18:3c:5e:5a:cf:1a:f6:0f:13:c7:00:08:98:4b:6d: 2b:5b:7a:a0:f5:b5:58:af:46:b6:1d:03:a9:d5:1c:e1:cd:7a: e6:19:70:ca:03:18:c6:12:f1:83:af:68:06:95:4c:be:83:48: 19:01:16:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ou8xmg6FexRz3+sCTY4QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNzUxMTRhZGMyY2Y4ZWRlYTUwNTk1N2U3OWU4OTA0NDI2 NmMyNGUwHhcNMjYwMTAxMDgxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzdiNzczMGFkMDc4ZGM2NzU3MDYyZmY5MTJjZDY2OWExOTc4MDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7N0mx7yygQGWFqEwtq9fvWOPa3K8 VEAKQMZDoqK+931QJpIv6ULC9esp+FKW0pJnJH9S3hb4ZsNh71d+E3Jell3l4PcW UvidgtCkgsFUyuVhIlDzwvwwbyN8HM2Y9llZIhZVc6YXNyMDqO6SPyG27wKhBRub 7UV66HY1RhKhNvfGmnFa6hsHSLaQAskpboB2e0id7FnUaIdhjSHEqYJvZz5AHdXZ 8rA9mOPC2p5lo3e4P/Dw9JNWeHl/h236395xKSKJ9S+zdW3ZCQYaMpfzPxyUWSHx ucxQS07r9GZI45SZQulgiTGME3hXCAXRDIH47wBGUnpiJ+IVpoJZBq92GQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFN7dzCtB43GdXBi/5Es1mmhl4BCMB8GA1UdIwQY MBaAFFx1EUrcLPjt6lBZV+eeiQRCZsJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEhVUlN0d3MtTzNxVUZsWDU1NkpCRUptd2s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jNjk3MDQtZGI3MS00YjFkLWI4YWMt YzVkYzA5NGRmOWM0LzEvVTN0M01LMEhqY1oxY0dMX2tTeldhYUdYZ0VJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9jNjk3MDQtZGI3MS00YjFkLWI4YWMtYzVkYzA5NGRmOWM0 LzEvWEhVUlN0d3MtTzNxVUZsWDU1NkpCRUptd2s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXCcwMA0G CSqGSIb3DQEBCwUAA4IBAQB92X43/hjTfekGNBe8+dxk2TxWc5VzBqYJYm9cA1jS +kGaQPCLn3nBe3YUXl38hfcaKEc1NzOzuyZPAx5o3RsxucFqK1UzRwnVoDu/gaP3 Wg/KjdIdINXnypTh5+qiO8XKn/4MntwoQ0L0zVj3aZIPNsLaxeU1SLGiGKPQ8rxu N0NLXhJ0NXdWnjjkJjkpmTOe2yslT0F0txx7XBFcy/hAf2QusJ2z6yXmN1S+BuSU 5g8sLY9DhDNTGb74bvw0dsJRCHAjiJIuuIsYPF5azxr2DxPHAAiYS20rW3qg9bVY r0a2HQOp1RzhzXrmGXDKAxjGEvGDr2gGlUy+g0gZARaZ -----END CERTIFICATE-----Generated at Sun Jan 25 18:07:07 2026 by rpki-client