This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/_U22vN84xU23wqCg1BXBlTKaXTA.roa File: _U22vN84xU23wqCg1BXBlTKaXTA.roa (raw, json) Hash identifier: c1GMqxqdH9Wh0URr1Zqm3LRB+FQXb9Kf/PLnjRWf17A= Subject key identifier: FD:4D:B6:BC:DF:38:C5:4D:B7:C2:A0:A0:D4:15:C1:95:32:9A:5D:30 Certificate issuer: /CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80 Certificate serial: 019B7834AA1C4C2BC5FCE29DC1A3BCB68F7C Authority key identifier: B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/_U22vN84xU23wqCg1BXBlTKaXTA.roa Signing time: Thu 01 Jan 2026 06:17:55 +0000 ROA not before: Thu 01 Jan 2026 06:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31027 IP address blocks: 185.73.72.0/24 maxlen: 24 185.73.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:aa:1c:4c:2b:c5:fc:e2:9d:c1:a3:bc:b6:8f:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80 Validity Not Before: Jan 1 06:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd4db6bcdf38c54db7c2a0a0d415c195329a5d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:87:b4:91:8c:da:e2:d9:f2:bd:41:68:7b:84: f9:2d:c0:dc:a1:5e:80:6c:de:eb:96:7d:6b:b4:8b: 6f:20:cf:36:a8:ef:f3:7e:cc:10:34:39:1b:5e:8e: 31:4d:c9:ce:55:ea:2e:6b:07:c4:42:5b:9f:46:f4: 1a:78:cd:98:12:f3:98:02:04:34:82:c3:3a:66:d4: b5:ef:00:08:29:49:dc:c1:03:b5:75:58:68:dc:95: c8:b3:dc:8b:3f:cb:ba:20:be:d2:e9:e4:0a:59:e8: 07:a0:f0:fe:d9:ac:fd:39:40:2c:a0:8e:48:5b:c8: db:32:70:1d:b7:ac:4c:15:17:ae:35:86:e0:cf:bf: 1f:cf:cf:8c:c9:2e:7f:4f:24:d2:7d:7c:d9:86:50: 81:b5:53:7f:fb:45:96:48:55:08:42:c3:c8:3d:9f: 9b:18:be:e4:bf:5a:88:71:5e:c4:05:a7:79:d3:e3: a6:f5:4f:03:90:c6:3f:f1:05:69:60:c4:d2:ee:5b: 54:f7:fb:5d:c9:34:45:66:10:d1:50:41:7e:08:b9: e5:46:45:a4:da:71:f6:b7:5a:fd:0a:a6:0a:54:60: ef:5f:4b:43:cf:2f:67:f8:9f:b2:9b:5f:ca:3a:6b: 31:26:35:45:e1:36:52:38:86:24:71:5a:aa:2a:58: a6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4D:B6:BC:DF:38:C5:4D:B7:C2:A0:A0:D4:15:C1:95:32:9A:5D:30 X509v3 Authority Key Identifier: keyid:B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/_U22vN84xU23wqCg1BXBlTKaXTA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.73.72.0/24 185.73.74.0/24 Signature Algorithm: sha256WithRSAEncryption 54:83:83:43:4b:fb:93:94:04:4d:9c:d6:f2:b8:c4:24:eb:dd: ce:26:15:93:72:8c:98:0d:95:4d:e8:2b:a7:4f:8d:0a:2c:a7: 5e:a2:5b:c5:d6:d4:f4:2a:9e:36:0d:a8:07:2c:7e:92:4c:ab: fa:aa:6c:b6:1a:a3:b4:46:0a:0c:4c:3b:03:66:c8:79:5b:17: bf:d2:73:2b:40:0d:8c:6f:07:a6:d3:51:1f:47:e5:c5:f4:e6: 12:57:c7:fe:b3:cf:16:5c:11:69:f8:fd:40:74:9d:42:26:b7: 2d:40:dc:0a:be:49:00:90:94:85:8f:41:9a:a7:e0:bd:0e:f2: af:2d:fb:77:9c:2c:b6:f4:42:c7:f4:d7:4a:2d:95:87:b1:f1: db:6b:1c:a1:6f:f1:34:86:41:d8:7b:fe:c3:df:89:76:fb:ab: 1a:f4:e3:18:52:cc:0e:44:45:3a:7c:7b:64:6a:5b:e7:ef:e6: 4e:a5:1b:e2:20:b1:87:3f:e7:85:74:7f:9c:d3:48:55:df:96: ec:58:c6:c5:e4:b3:4d:7b:7e:f5:23:a8:be:b6:d7:64:65:db: 78:bc:28:6b:fe:23:da:c0:e7:a0:a0:31:71:8e:73:ae:cf:88: 07:44:25:b4:1f:4c:b9:d0:1d:b9:76:e6:fd:33:28:74:e0:cf: 61:d6:70:dd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NKocTCvF/OKdwaO8to98MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZjRiZTQxMDU0ZWFmNzg3ZWFhMzgzM2ZmY2FlOGYxZWQ3 ZmFhODAwHhcNMjYwMTAxMDYxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDRkYjZiY2RmMzhjNTRkYjdjMmEwYTBkNDE1YzE5NTMyOWE1ZDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4e0kYza4tnyvUFoe4T5LcDcoV6A bN7rln1rtItvIM82qO/zfswQNDkbXo4xTcnOVeouawfEQlufRvQaeM2YEvOYAgQ0 gsM6ZtS17wAIKUncwQO1dVho3JXIs9yLP8u6IL7S6eQKWegHoPD+2az9OUAsoI5I W8jbMnAdt6xMFReuNYbgz78fz8+MyS5/TyTSfXzZhlCBtVN/+0WWSFUIQsPIPZ+b GL7kv1qIcV7EBad50+Om9U8DkMY/8QVpYMTS7ltU9/tdyTRFZhDRUEF+CLnlRkWk 2nH2t1r9CqYKVGDvX0tDzy9n+J+ym1/KOmsxJjVF4TZSOIYkcVqqKlimzQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP1NtrzfOMVNt8KgoNQVwZUyml0wMB8GA1UdIwQY MBaAFLj0vkEFTq94fqo4M//K6PHtf6qAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVBTLVFRVk9yM2gtcWpnel84cm84ZTFfcW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8xNmExMmUtOGI1YS00NjQ5LWEwM2Mt NzFjZDZhZjA3MmE1LzEvX1UyMnZOODR4VTIzd3FDZzFCWEJsVEthWFRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni8xNmExMmUtOGI1YS00NjQ5LWEwM2MtNzFjZDZhZjA3MmE1 LzEvdVBTLVFRVk9yM2gtcWpnel84cm84ZTFfcW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuUlIAwQA uUlKMA0GCSqGSIb3DQEBCwUAA4IBAQBUg4NDS/uTlARNnNbyuMQk693OJhWTcoyY DZVN6CunT40KLKdeolvF1tT0Kp42DagHLH6STKv6qmy2GqO0RgoMTDsDZsh5Wxe/ 0nMrQA2Mbwem01EfR+XF9OYSV8f+s88WXBFp+P1AdJ1CJrctQNwKvkkAkJSFj0Ga p+C9DvKvLft3nCy29ELH9NdKLZWHsfHbaxyhb/E0hkHYe/7D34l2+6sa9OMYUswO REU6fHtkalvn7+ZOpRviILGHP+eFdH+c00hV35bsWMbF5LNNe371I6i+ttdkZdt4 vChr/iPawOegoDFxjnOuz4gHRCW0H0y50B25dub9Myh04M9h1nDd -----END CERTIFICATE-----Generated at Mon Jan 26 00:25:22 2026 by rpki-client