This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/U7giNgrUcP-qBlYkj8UBbFk4DY0.roa File: U7giNgrUcP-qBlYkj8UBbFk4DY0.roa (raw, json) Hash identifier: +Ov0Rs8SVXiwE871NeCLU7Jscp3nrL2mjX5Pd7s9BDI= Subject key identifier: 53:B8:22:36:0A:D4:70:FF:AA:06:56:24:8F:C5:01:6C:59:38:0D:8D Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff Certificate serial: 019B7F833565DDC2815B0BE740DE5AFE65C3 Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/U7giNgrUcP-qBlYkj8UBbFk4DY0.roa Signing time: Fri 02 Jan 2026 16:21:03 +0000 ROA not before: Fri 02 Jan 2026 16:21:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60528 IP address blocks: 78.131.156.0/23 maxlen: 23 88.199.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:35:65:dd:c2:81:5b:0b:e7:40:de:5a:fe:65:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff Validity Not Before: Jan 2 16:21:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53b822360ad470ffaa0656248fc5016c59380d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8f:cc:c2:e0:9f:1d:78:8a:02:82:37:5e:be: ca:b1:ec:14:aa:82:98:74:d9:e9:02:ff:90:0f:f2: 97:36:7e:9e:c8:7b:6d:0f:aa:04:97:14:f3:62:7c: 5e:90:62:b7:0e:c6:5a:89:60:18:e0:66:18:b3:0f: db:85:29:79:20:20:e9:cf:24:5b:29:fd:d8:c6:19: d5:fa:ce:1d:ac:7a:3b:36:52:40:8c:11:3b:09:02: 19:09:dc:44:84:d5:ab:46:24:9a:25:c8:2d:8d:5a: cb:8d:ac:6c:31:cf:5f:76:e2:1f:a3:8a:7b:58:43: e8:c4:c8:b3:ff:e2:0c:73:49:73:76:a4:88:a4:b1: e1:28:4c:bb:c1:59:0b:0a:53:99:e2:b8:83:88:a2: 8b:0c:c4:b7:e1:47:51:bb:9a:f1:f5:8b:3d:f7:2b: f1:b9:63:23:ad:5f:b9:13:55:c4:4b:70:9f:b8:af: de:2a:27:f1:16:8f:2b:42:9e:29:a2:cb:03:f9:5f: 60:b0:ba:82:c0:81:72:fd:f5:95:29:b8:3f:eb:85: 79:2d:c2:04:9d:12:cd:b4:1f:f3:64:bf:90:9d:96: 42:a0:ba:3a:de:0e:14:87:84:33:45:f5:76:c3:29: c4:52:31:ba:cd:d2:24:bf:5b:3d:66:2c:19:ea:09: 3b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B8:22:36:0A:D4:70:FF:AA:06:56:24:8F:C5:01:6C:59:38:0D:8D X509v3 Authority Key Identifier: keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/U7giNgrUcP-qBlYkj8UBbFk4DY0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.131.156.0/23 88.199.83.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:bd:c6:a1:9e:40:cf:a0:72:bf:07:41:5b:c4:5d:a3:38:ea: 19:3c:f1:47:f8:9d:93:79:d2:28:be:b4:78:87:b3:d0:71:37: 86:c7:de:61:b9:bb:0c:56:d4:86:2f:19:cc:c4:81:d7:8b:30: fc:92:39:cd:85:d1:09:43:14:2e:75:c2:38:74:74:4a:83:55: 4b:d2:67:c0:89:cf:97:d7:fe:51:cc:6d:09:f5:66:01:61:b7: 0b:44:8a:6a:f7:b4:85:85:41:30:ea:6e:ed:6e:6b:8b:26:8e: e3:7e:48:e9:eb:45:58:f9:0d:5c:33:c1:c7:b3:26:0e:0c:d0: c4:14:d1:a1:87:6d:32:07:ad:a8:6a:b9:3b:27:4b:19:dd:cc: ee:2b:fc:de:a1:e9:42:1a:73:3e:74:e3:34:68:24:6d:a2:1b: e5:bb:e5:ff:cd:32:1d:7f:08:1b:36:14:72:1d:bb:57:56:fc: f7:e8:54:de:d3:15:e3:e2:89:00:04:a8:fd:e7:47:91:ff:68: 94:13:24:cd:47:53:a4:27:48:a5:ba:4b:1e:b5:eb:60:7a:c3: 4d:b0:95:82:ba:11:07:b3:98:fd:82:51:1b:10:c7:75:e5:a6: e9:8b:bf:d1:7e:a2:50:e4:46:59:82:9c:3d:da:b8:26:29:79: 53:dd:8d:c6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/gzVl3cKBWwvnQN5a/mXDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OTMwMWRjYzdmYWU0ZjdjZTAxZTQ5ODdhNzdjYjgyYTMz NmFiZmYwHhcNMjYwMTAyMTYyMTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2I4MjIzNjBhZDQ3MGZmYWEwNjU2MjQ4ZmM1MDE2YzU5MzgwZDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4/MwuCfHXiKAoI3Xr7KsewUqoKY dNnpAv+QD/KXNn6eyHttD6oElxTzYnxekGK3DsZaiWAY4GYYsw/bhSl5ICDpzyRb Kf3YxhnV+s4drHo7NlJAjBE7CQIZCdxEhNWrRiSaJcgtjVrLjaxsMc9fduIfo4p7 WEPoxMiz/+IMc0lzdqSIpLHhKEy7wVkLClOZ4riDiKKLDMS34UdRu5rx9Ys99yvx uWMjrV+5E1XES3CfuK/eKifxFo8rQp4possD+V9gsLqCwIFy/fWVKbg/64V5LcIE nRLNtB/zZL+QnZZCoLo63g4Uh4QzRfV2wynEUjG6zdIkv1s9ZiwZ6gk7bwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFO4IjYK1HD/qgZWJI/FAWxZOA2NMB8GA1UdIwQY MBaAFBeTAdzH+uT3zgHkmHp3y4KjNqv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjVNQjNNZjY1UGZPQWVTWWVuZkxncU0ycV84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9lZDc5NjMtNzJlYS00YzFkLWFkZGQt YWZmOTJjMTZkOGUzLzEvVTdnaU5nclVjUC1xQmxZa2o4VUJiRms0RFkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9lZDc5NjMtNzJlYS00YzFkLWFkZGQtYWZmOTJjMTZkOGUz LzEvRjVNQjNNZjY1UGZPQWVTWWVuZkxncU0ycV84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBToOcAwQA WMdTMA0GCSqGSIb3DQEBCwUAA4IBAQA+vcahnkDPoHK/B0FbxF2jOOoZPPFH+J2T edIovrR4h7PQcTeGx95hubsMVtSGLxnMxIHXizD8kjnNhdEJQxQudcI4dHRKg1VL 0mfAic+X1/5RzG0J9WYBYbcLRIpq97SFhUEw6m7tbmuLJo7jfkjp60VY+Q1cM8HH syYODNDEFNGhh20yB62oark7J0sZ3czuK/zeoelCGnM+dOM0aCRtohvlu+X/zTId fwgbNhRyHbtXVvz36FTe0xXj4okABKj950eR/2iUEyTNR1OkJ0iluksetetgesNN sJWCuhEHs5j9glEbEMd15abpi7/RfqJQ5EZZgpw92rgmKXlT3Y3G -----END CERTIFICATE-----Generated at Sun Jan 25 21:57:55 2026 by rpki-client