This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/U-pU1RdVQV1m4107C9RXMs_Jfi0.roa
File: U-pU1RdVQV1m4107C9RXMs_Jfi0.roa (raw, json)
Hash identifier: D4vcQmcel7uhtMPTF8Qr8aK84ZwA1dXmds6N2CwrFfc=
Subject key identifier: 53:EA:54:D5:17:55:41:5D:66:E3:5D:3B:0B:D4:57:32:CF:C9:7E:2D
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019B7E37E7691FAD9697410E43F13BBF8D74
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/U-pU1RdVQV1m4107C9RXMs_Jfi0.roa
Signing time: Fri 02 Jan 2026 10:19:11 +0000
ROA not before: Fri 02 Jan 2026 10:19:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49972
IP address blocks: 178.239.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:37:e7:69:1f:ad:96:97:41:0e:43:f1:3b:bf:8d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 2 10:19:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53ea54d51755415d66e35d3b0bd45732cfc97e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8b:23:5c:b5:f3:37:4d:f0:2f:93:9b:e2:c6:
49:2b:c5:45:73:9c:17:0e:52:68:f4:01:d0:01:00:
92:7b:bc:c1:4f:e5:45:2e:c4:7d:ab:7f:19:26:82:
ed:39:af:3e:4b:56:aa:28:49:55:da:11:fd:e0:47:
30:d0:5b:3d:7a:8d:a4:e2:2d:4c:a8:e3:14:98:b3:
e7:30:55:0d:61:50:25:38:30:2b:69:0c:d0:1e:21:
46:86:b7:45:17:41:b6:c3:55:6d:3c:c5:ec:2c:ce:
29:a7:33:1b:51:2d:7b:9d:68:68:72:14:4d:f1:45:
c1:39:e0:84:c8:3e:cd:96:9e:45:12:5c:47:62:a9:
d6:13:3e:7c:82:d2:36:8c:46:b4:6b:8c:02:1c:89:
e8:f6:ff:5a:a3:b9:a6:82:81:40:ac:33:08:91:b4:
a5:33:d3:7f:4c:16:94:63:2f:86:7f:99:b2:fc:ca:
6e:0e:c6:96:e0:f1:02:e1:a2:c9:a9:bb:a8:b1:81:
26:26:d2:f8:ba:73:42:a7:42:06:66:ad:5d:f5:44:
e4:85:1c:d7:3b:27:46:ae:ca:f9:39:41:ce:d5:89:
51:71:9e:7e:b5:34:4d:f2:a6:fe:ad:7c:62:04:93:
cb:09:c1:5e:38:15:9f:f2:97:17:c2:a6:49:e6:1e:
60:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EA:54:D5:17:55:41:5D:66:E3:5D:3B:0B:D4:57:32:CF:C9:7E:2D
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/U-pU1RdVQV1m4107C9RXMs_Jfi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.147.0/24
Signature Algorithm: sha256WithRSAEncryption
01:d6:84:35:47:79:56:ab:f5:87:17:ca:dc:8d:e1:66:c3:35:
60:63:e5:ee:f6:87:25:d5:ae:8d:09:1e:37:3d:20:01:d1:31:
a5:5e:21:4d:bd:4a:6a:e4:97:c8:ab:6d:28:23:b8:54:a6:83:
4f:ba:4a:c0:85:16:da:9a:7b:ea:ca:0f:bc:a1:39:a8:ae:75:
11:ae:5d:c1:a5:0b:c4:a3:89:4f:e5:5c:bf:a0:01:12:9d:bc:
f1:cb:e6:e4:17:16:40:5c:19:41:2d:31:8d:85:f8:7d:e3:c8:
3a:63:0f:29:ef:d9:64:19:79:8f:b7:83:4c:74:fd:cb:40:a9:
ad:d7:d7:be:0d:e5:5f:43:5b:c5:4e:43:53:a8:f4:f1:5f:b3:
f9:3a:98:57:fb:20:b3:ba:2d:46:ec:27:cf:14:fa:4f:4b:cb:
c4:c5:9e:36:1e:e3:be:89:71:1a:4b:5b:fc:c8:05:fd:42:2e:
c6:b1:f6:32:5e:78:85:82:12:68:07:64:2b:36:4b:16:12:30:
a8:44:e8:dd:ec:b7:65:1d:ba:e2:ca:d5:f7:f1:f8:a8:7f:6f:
4e:2b:ed:69:0e:ee:92:74:9e:81:3a:3c:65:bd:38:36:16:ca:
1d:00:70:d0:77:0a:f5:6c:19:0e:82:ae:34:77:e6:e7:28:f7:
8d:71:a9:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+N+dpH62Wl0EOQ/E7v410MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjYwMTAyMTAxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2VhNTRkNTE3NTU0MTVkNjZlMzVkM2IwYmQ0NTczMmNmYzk3ZTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYsjXLXzN03wL5Ob4sZJK8VFc5wX
DlJo9AHQAQCSe7zBT+VFLsR9q38ZJoLtOa8+S1aqKElV2hH94Ecw0Fs9eo2k4i1M
qOMUmLPnMFUNYVAlODAraQzQHiFGhrdFF0G2w1VtPMXsLM4ppzMbUS17nWhochRN
8UXBOeCEyD7Nlp5FElxHYqnWEz58gtI2jEa0a4wCHIno9v9ao7mmgoFArDMIkbSl
M9N/TBaUYy+Gf5my/MpuDsaW4PEC4aLJqbuosYEmJtL4unNCp0IGZq1d9UTkhRzX
OydGrsr5OUHO1YlRcZ5+tTRN8qb+rXxiBJPLCcFeOBWf8pcXwqZJ5h5gJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFPqVNUXVUFdZuNdOwvUVzLPyX4tMB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvVS1wVTFSZFZRVjFtNDEwN0M5UlhNc19KZmkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu+TMA0G
CSqGSIb3DQEBCwUAA4IBAQAB1oQ1R3lWq/WHF8rcjeFmwzVgY+Xu9ocl1a6NCR43
PSAB0TGlXiFNvUpq5JfIq20oI7hUpoNPukrAhRbamnvqyg+8oTmornURrl3BpQvE
o4lP5Vy/oAESnbzxy+bkFxZAXBlBLTGNhfh948g6Yw8p79lkGXmPt4NMdP3LQKmt
19e+DeVfQ1vFTkNTqPTxX7P5OphX+yCzui1G7CfPFPpPS8vExZ42HuO+iXEaS1v8
yAX9Qi7GsfYyXniFghJoB2QrNksWEjCoROjd7LdlHbriytX38fiof29OK+1pDu6S
dJ6BOjxlvTg2FsodAHDQdwr1bBkOgq40d+bnKPeNcanM
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:46:00 2026 by rpki-client