This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/U54ysbZkY5VZdk9US_e6p5PbtYo.roa File: U54ysbZkY5VZdk9US_e6p5PbtYo.roa (raw, json) Hash identifier: 6ImtQrN9Qno/6BCfX5vtA/mlfgTEGIkC5LMPJvJrH/w= Subject key identifier: 53:9E:32:B1:B6:64:63:95:59:76:4F:54:4B:F7:BA:A7:93:DB:B5:8A Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Certificate serial: 019BDAE81701CA4EF39EB6A881F010B14E39 Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/U54ysbZkY5VZdk9US_e6p5PbtYo.roa Signing time: Tue 20 Jan 2026 10:16:41 +0000 ROA not before: Tue 20 Jan 2026 10:16:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206092 IP address blocks: 193.39.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:e8:17:01:ca:4e:f3:9e:b6:a8:81:f0:10:b1:4e:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Validity Not Before: Jan 20 10:16:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=539e32b1b664639559764f544bf7baa793dbb58a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1b:d3:15:f3:e3:df:ab:89:e5:3b:90:38:78: a4:e9:91:2e:05:e3:14:74:d7:2b:79:b2:28:4e:40: 68:15:8f:22:6a:c5:d8:df:9d:9a:cc:35:86:6a:01: d5:35:6d:70:eb:19:d3:c7:28:e0:8b:ca:b6:cf:8a: a0:8a:5a:f8:0e:30:97:1c:bf:3e:9b:ce:1c:6a:90: f7:59:61:8f:3d:39:c6:6e:88:38:c4:4f:6a:c3:81: a6:94:22:e2:be:ff:fb:ce:83:1c:d4:83:6c:4a:4e: 6f:6e:60:1b:d5:ad:13:8e:00:6a:a5:4d:ea:6c:7e: 4c:5c:83:f8:2a:85:58:a9:82:3f:86:c7:75:dd:1d: 43:a6:7f:d5:5f:fa:92:40:e2:1c:6b:e1:aa:06:a6: 3d:c8:26:8d:50:7b:7c:85:64:b7:50:ed:25:1a:8c: 23:95:2f:fc:a8:83:8b:27:22:75:0e:62:f9:bf:02: fd:0d:11:a6:1f:02:40:c5:e9:da:e8:2a:ca:f6:59: cc:1a:6f:dd:98:09:b7:e6:1e:f5:a0:d2:6d:fd:7a: 34:45:c2:7e:b1:41:cf:e8:38:83:4a:5c:11:eb:19: 56:e4:cb:f1:22:60:a8:b4:e4:ec:1f:d1:4c:f4:35: 7c:3f:67:f3:02:1f:85:00:2b:eb:74:88:49:93:cd: 7b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9E:32:B1:B6:64:63:95:59:76:4F:54:4B:F7:BA:A7:93:DB:B5:8A X509v3 Authority Key Identifier: keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/U54ysbZkY5VZdk9US_e6p5PbtYo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.39.215.0/24 Signature Algorithm: sha256WithRSAEncryption 56:ef:53:d4:09:4a:a0:74:ee:98:d5:3c:2f:d4:06:69:23:fb: 59:71:b6:57:9e:6f:d7:7e:a1:47:f3:7d:e0:6a:49:eb:0a:e2: 2f:bb:31:17:30:90:be:46:6f:04:1d:48:36:4b:77:60:78:c4: 5e:0d:d8:ec:a2:79:74:83:51:a3:44:c8:15:8c:9a:f3:95:34: f2:e5:e2:68:07:de:82:6f:f2:5e:49:18:ce:d7:8d:e8:3c:34: e2:89:a2:fc:4a:25:4f:1d:37:50:3e:e2:76:62:e1:9d:87:6e: 29:a3:71:42:88:aa:17:c0:e3:dc:87:7c:3f:fe:6d:43:94:ae: c9:fd:ba:d6:ac:bf:01:96:92:cf:6b:f9:30:ca:3b:47:a3:fc: c0:f1:95:f4:fe:96:36:6f:ef:53:88:ad:90:67:aa:af:5b:27: 9d:78:e2:5e:22:b0:84:93:66:27:9b:ce:a5:30:ca:93:ce:5c: d1:c9:de:89:f0:fe:f1:f1:61:6a:3c:5f:45:73:bf:4c:48:6d: ec:08:ee:2d:90:95:93:3d:3f:ae:21:8f:d5:2b:b2:4d:8a:ff: 35:9a:f3:5b:a6:b4:62:e0:8a:64:b8:70:5e:80:7a:84:ca:67: fc:b2:d5:e6:36:28:e1:b3:e8:ff:6f:99:54:23:00:e2:2b:8c: 13:8e:bc:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZva6BcByk7znraogfAQsU45MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMWMxMTY1OGQyMDQxZWFmMjUwMmZlNTQwOGVkNDkzYmJk NGYzMTgwHhcNMjYwMTIwMTAxNjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzllMzJiMWI2NjQ2Mzk1NTk3NjRmNTQ0YmY3YmFhNzkzZGJiNThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxvTFfPj36uJ5TuQOHik6ZEuBeMU dNcrebIoTkBoFY8iasXY352azDWGagHVNW1w6xnTxyjgi8q2z4qgilr4DjCXHL8+ m84capD3WWGPPTnGbog4xE9qw4GmlCLivv/7zoMc1INsSk5vbmAb1a0TjgBqpU3q bH5MXIP4KoVYqYI/hsd13R1Dpn/VX/qSQOIca+GqBqY9yCaNUHt8hWS3UO0lGowj lS/8qIOLJyJ1DmL5vwL9DRGmHwJAxena6CrK9lnMGm/dmAm35h71oNJt/Xo0RcJ+ sUHP6DiDSlwR6xlW5MvxImCotOTsH9FM9DV8P2fzAh+FACvrdIhJk8179QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFOeMrG2ZGOVWXZPVEv3uqeT27WKMB8GA1UdIwQY MBaAFI4cEWWNIEHq8lAv5UCO1JO71PMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjIt NjMzNDhjZGJmMDI0LzEvVTU0eXNiWmtZNVZaZGs5VVNfZTZwNVBidFlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjItNjMzNDhjZGJmMDI0 LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSfXMA0G CSqGSIb3DQEBCwUAA4IBAQBW71PUCUqgdO6Y1Twv1AZpI/tZcbZXnm/XfqFH833g aknrCuIvuzEXMJC+Rm8EHUg2S3dgeMReDdjsonl0g1GjRMgVjJrzlTTy5eJoB96C b/JeSRjO143oPDTiiaL8SiVPHTdQPuJ2YuGdh24po3FCiKoXwOPch3w//m1DlK7J /brWrL8BlpLPa/kwyjtHo/zA8ZX0/pY2b+9TiK2QZ6qvWyedeOJeIrCEk2Ynm86l MMqTzlzRyd6J8P7x8WFqPF9Fc79MSG3sCO4tkJWTPT+uIY/VK7JNiv81mvNbprRi 4IpkuHBegHqEymf8stXmNijhs+j/b5lUIwDiK4wTjrx3 -----END CERTIFICATE-----Generated at Sun Jan 25 16:37:39 2026 by rpki-client