This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/unNG_YoDGbRd0T_CTHVKD6yqRJU.roa File: unNG_YoDGbRd0T_CTHVKD6yqRJU.roa (raw, json) Hash identifier: ragskd0QOxK4kqVbi19DaJNXhncLtJyYx2SrNnDP25U= Subject key identifier: BA:73:46:FD:8A:03:19:B4:5D:D1:3F:C2:4C:75:4A:0F:AC:AA:44:95 Certificate issuer: /CN=9253e214c8e5a6f41345be682f682655b1abea5b Certificate serial: 019B76EAAB87198CFECBA03C30D56D53EF95 Authority key identifier: 92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/unNG_YoDGbRd0T_CTHVKD6yqRJU.roa Signing time: Thu 01 Jan 2026 00:17:29 +0000 ROA not before: Thu 01 Jan 2026 00:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49223 IP address blocks: 185.39.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ab:87:19:8c:fe:cb:a0:3c:30:d5:6d:53:ef:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9253e214c8e5a6f41345be682f682655b1abea5b Validity Not Before: Jan 1 00:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba7346fd8a0319b45dd13fc24c754a0facaa4495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d4:73:fd:5a:5c:d9:4c:eb:ef:7e:d4:0c:11: 1b:87:eb:97:54:b3:8b:45:f8:70:26:2c:88:7b:cd: 5a:43:bf:d3:e6:ba:6d:09:10:7d:a4:e0:e0:42:f7: bc:09:bc:54:f6:f4:db:7e:38:21:25:14:7c:0e:fb: 59:49:f8:60:e8:85:50:81:8f:c1:83:35:09:78:59: 73:85:c7:e6:1c:9f:ef:82:34:20:0d:c3:6c:7c:70: 12:ca:9b:8c:96:8e:71:41:6a:c6:ba:ac:d2:8e:99: b5:a5:93:6d:83:cc:20:dc:ba:9f:80:70:40:0b:41: 00:76:d0:94:dc:5e:43:e8:1e:dd:6c:1e:5b:d8:37: 1b:f4:8c:64:c3:f9:a5:8c:f0:ac:64:a7:14:36:60: 97:49:0a:6e:9c:43:83:3d:ad:87:8b:61:dc:c2:71: c7:8c:15:1b:14:29:8a:8f:df:e7:ef:ea:42:be:0f: d1:a3:90:9c:7d:4c:cc:2c:7c:c9:ce:19:96:57:b4: c2:a4:a4:43:1f:26:02:ec:83:35:c5:14:90:51:e5: 3f:4e:92:bb:cf:55:b1:c5:a3:3e:c5:2f:23:e2:d3: 86:dd:5d:99:da:dc:9f:42:40:05:ab:1b:d9:ee:66: 0d:68:42:19:42:61:4b:fa:08:fb:ce:84:11:75:1f: 33:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:73:46:FD:8A:03:19:B4:5D:D1:3F:C2:4C:75:4A:0F:AC:AA:44:95 X509v3 Authority Key Identifier: keyid:92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/unNG_YoDGbRd0T_CTHVKD6yqRJU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.39.72.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:db:3f:79:d1:ae:e2:44:6e:4f:d8:b2:92:22:c7:ff:31:49: 43:88:6f:15:d0:9c:f6:21:55:3e:e1:e1:04:57:ee:1a:62:9f: d3:83:3d:65:b3:f5:1b:51:62:1f:2d:09:80:50:4e:7f:61:3c: 37:e3:e6:c1:70:97:be:f8:4f:e2:21:d3:b7:00:80:2b:eb:b7: d6:46:bd:a3:56:7b:4b:30:10:c1:d2:ae:91:a1:b1:93:ed:83: 0e:62:a4:aa:77:09:d3:b6:6b:8a:37:1a:54:7b:38:a2:e1:7a: 21:a7:ad:2f:bd:33:8c:7d:25:af:c3:3b:4a:83:72:51:3c:76: c7:18:fc:2e:11:6d:dc:44:9b:b6:ef:73:70:97:62:b7:0f:5d: 06:b2:6b:d3:62:9f:51:ae:21:81:9a:14:f2:30:81:29:1e:8c: 20:84:cd:f7:f4:53:d6:68:07:2f:c7:78:f9:55:17:b0:d0:8c: d3:4a:93:db:bf:96:01:9a:f3:b4:23:33:01:11:ee:36:4a:82: 1d:b9:36:1f:d2:24:47:9d:c4:08:95:ab:c9:1f:4d:09:58:e0: 57:91:aa:c8:33:aa:9d:9e:5e:24:37:4e:e0:ed:d5:06:98:1a: 86:06:a2:d9:78:ce:78:91:97:ff:cd:73:21:2f:c7:01:8a:f7: c4:a8:41:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26quHGYz+y6A8MNVtU++VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNTNlMjE0YzhlNWE2ZjQxMzQ1YmU2ODJmNjgyNjU1YjFh YmVhNWIwHhcNMjYwMTAxMDAxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTczNDZmZDhhMDMxOWI0NWRkMTNmYzI0Yzc1NGEwZmFjYWE0NDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9Rz/Vpc2Uzr737UDBEbh+uXVLOL RfhwJiyIe81aQ7/T5rptCRB9pODgQve8CbxU9vTbfjghJRR8DvtZSfhg6IVQgY/B gzUJeFlzhcfmHJ/vgjQgDcNsfHASypuMlo5xQWrGuqzSjpm1pZNtg8wg3LqfgHBA C0EAdtCU3F5D6B7dbB5b2Dcb9Ixkw/mljPCsZKcUNmCXSQpunEODPa2Hi2HcwnHH jBUbFCmKj9/n7+pCvg/Ro5CcfUzMLHzJzhmWV7TCpKRDHyYC7IM1xRSQUeU/TpK7 z1WxxaM+xS8j4tOG3V2Z2tyfQkAFqxvZ7mYNaEIZQmFL+gj7zoQRdR8zqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLpzRv2KAxm0XdE/wkx1Sg+sqkSVMB8GA1UdIwQY MBaAFJJT4hTI5ab0E0W+aC9oJlWxq+pbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2xQaUZNamxwdlFUUmI1b0wyZ21WYkdyNmxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My81MWE0YTMtNzMwNC00NjEzLThhODAt Y2EzYjFjYWM2OWM3LzEvdW5OR19Zb0RHYlJkMFRfQ1RIVktENnlxUkpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My81MWE0YTMtNzMwNC00NjEzLThhODAtY2EzYjFjYWM2OWM3 LzEva2xQaUZNamxwdlFUUmI1b0wyZ21WYkdyNmxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSdIMA0G CSqGSIb3DQEBCwUAA4IBAQAs2z950a7iRG5P2LKSIsf/MUlDiG8V0Jz2IVU+4eEE V+4aYp/Tgz1ls/UbUWIfLQmAUE5/YTw34+bBcJe++E/iIdO3AIAr67fWRr2jVntL MBDB0q6RobGT7YMOYqSqdwnTtmuKNxpUezii4Xohp60vvTOMfSWvwztKg3JRPHbH GPwuEW3cRJu273Nwl2K3D10GsmvTYp9RriGBmhTyMIEpHowghM339FPWaAcvx3j5 VRew0IzTSpPbv5YBmvO0IzMBEe42SoIduTYf0iRHncQIlavJH00JWOBXkarIM6qd nl4kN07g7dUGmBqGBqLZeM54kZf/zXMhL8cBivfEqEGy -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:50 2026 by rpki-client