This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/_25UfYuLERvQd7ERXXNW_sly9Oo.roa File: _25UfYuLERvQd7ERXXNW_sly9Oo.roa (raw, json) Hash identifier: mce8PC+zpkQB3aka/bSBor9uJVmt1ZEupgGD8nmRstI= Subject key identifier: FF:6E:54:7D:8B:8B:11:1B:D0:77:B1:11:5D:73:56:FE:C9:72:F4:EA Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678 Certificate serial: 019B7C12DE69FEE3A06F04C7672D7CB32BC3 Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/_25UfYuLERvQd7ERXXNW_sly9Oo.roa Signing time: Fri 02 Jan 2026 00:19:29 +0000 ROA not before: Fri 02 Jan 2026 00:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50316 IP address blocks: 147.123.112.0/22 maxlen: 24 147.123.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:de:69:fe:e3:a0:6f:04:c7:67:2d:7c:b3:2b:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678 Validity Not Before: Jan 2 00:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff6e547d8b8b111bd077b1115d7356fec972f4ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:63:1d:67:72:59:f7:06:3c:8d:a9:5f:8d:b7: a8:e7:b5:f4:74:ed:1c:8e:ce:64:71:a9:51:70:98: d5:f3:4e:24:07:89:07:aa:c6:7b:2b:12:71:f3:1d: f2:d4:1f:64:56:ec:e5:c8:34:30:48:9d:36:63:a1: 34:ec:c5:01:2c:e5:1e:b1:d0:e0:c0:05:31:7c:3a: 6d:54:a6:5a:aa:4a:62:35:d5:83:5f:b6:94:7e:c6: af:65:76:85:e1:49:f9:38:49:51:dc:e4:b8:ea:b3: 72:be:95:8f:5b:f3:f3:6f:75:75:fa:fa:d5:f8:b4: c8:64:9b:35:24:95:74:9d:c9:41:70:fe:21:d4:58: 2a:74:25:9a:ba:3e:2c:72:5e:4d:4c:12:27:57:2a: 46:8c:84:84:96:58:ac:13:69:0d:36:0a:5e:0c:9c: 61:c4:1b:8d:38:5d:62:0f:cf:5a:65:1a:85:73:34: 4e:54:c3:6b:15:bc:25:55:1e:59:85:14:6a:0a:22: 7f:c5:be:a1:15:8a:fa:03:e4:39:30:88:0d:bb:5c: 66:b5:ae:e9:d4:f5:38:6c:8d:9e:1c:43:b1:21:8b: 35:4a:55:4a:62:f4:4b:82:5e:75:e4:93:5c:9d:6a: e5:b6:28:e4:8f:b5:42:8e:d4:33:61:9a:3e:9d:2f: d1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:6E:54:7D:8B:8B:11:1B:D0:77:B1:11:5D:73:56:FE:C9:72:F4:EA X509v3 Authority Key Identifier: keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/_25UfYuLERvQd7ERXXNW_sly9Oo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.123.112.0/21 Signature Algorithm: sha256WithRSAEncryption 72:a5:d7:e6:ec:d4:bf:b4:2f:49:4c:d6:d8:ec:8b:de:af:a3: a7:e8:8d:25:c0:08:8a:5d:5f:7d:13:35:ef:da:16:5c:fd:43: c5:32:f5:4a:54:30:6f:af:7b:fd:9c:bf:cc:47:1e:01:c4:fd: cd:fa:eb:42:04:20:0e:37:fe:f8:f5:36:5b:d0:cf:80:86:3a: bb:5d:e8:9e:17:42:76:31:56:3d:b4:40:59:cb:7a:c1:7c:a7: 7e:3f:81:02:71:16:1b:ee:ec:6f:f7:19:9e:32:66:7b:35:df: 09:63:ef:28:80:16:95:5e:43:03:aa:43:b4:36:17:4e:ec:ca: 40:6a:48:e4:f9:a1:3e:eb:51:7c:b7:e1:b6:25:81:41:9e:8c: 04:98:69:3f:cf:2d:97:d0:2c:22:d6:f9:ce:f0:d6:39:f9:b9: 7c:8f:ae:50:b8:09:13:60:96:b6:fc:c7:0c:e7:0f:c6:d2:73: 36:6a:11:d0:56:50:c8:0d:5c:a8:09:97:2e:e6:95:67:69:75: 43:a4:91:10:7f:28:a8:11:07:2d:2e:11:a3:bf:b5:fd:73:dd: d3:dc:f0:a5:ed:bf:01:58:38:52:a6:a9:25:c4:91:ef:4c:c5: 05:87:5b:0e:fa:e6:ec:db:57:cc:cb:17:f6:62:55:d4:7d:3a: 65:a5:aa:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Et5p/uOgbwTHZy18syvDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTVkODQwNTNlMmIwYzMxM2FmMWUzYmE1MTAyNDY2YTVm Nzk2NzgwHhcNMjYwMTAyMDAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjZlNTQ3ZDhiOGIxMTFiZDA3N2IxMTE1ZDczNTZmZWM5NzJmNGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WMdZ3JZ9wY8jalfjbeo57X0dO0c js5kcalRcJjV804kB4kHqsZ7KxJx8x3y1B9kVuzlyDQwSJ02Y6E07MUBLOUesdDg wAUxfDptVKZaqkpiNdWDX7aUfsavZXaF4Un5OElR3OS46rNyvpWPW/Pzb3V1+vrV +LTIZJs1JJV0nclBcP4h1FgqdCWauj4scl5NTBInVypGjISEllisE2kNNgpeDJxh xBuNOF1iD89aZRqFczROVMNrFbwlVR5ZhRRqCiJ/xb6hFYr6A+Q5MIgNu1xmta7p 1PU4bI2eHEOxIYs1SlVKYvRLgl515JNcnWrltijkj7VCjtQzYZo+nS/RlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP9uVH2LixEb0HexEV1zVv7JcvTqMB8GA1UdIwQY MBaAFCKl2EBT4rDDE68eO6UQJGal95Z4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUt NTkxY2FmNTM2ZWNjLzEvXzI1VWZZdUxFUnZRZDdFUlhYTldfc2x5OU9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUtNTkxY2FmNTM2ZWNj LzEvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDk3twMA0G CSqGSIb3DQEBCwUAA4IBAQBypdfm7NS/tC9JTNbY7Iver6On6I0lwAiKXV99EzXv 2hZc/UPFMvVKVDBvr3v9nL/MRx4BxP3N+utCBCAON/749TZb0M+Ahjq7XeieF0J2 MVY9tEBZy3rBfKd+P4ECcRYb7uxv9xmeMmZ7Nd8JY+8ogBaVXkMDqkO0NhdO7MpA akjk+aE+61F8t+G2JYFBnowEmGk/zy2X0Cwi1vnO8NY5+bl8j65QuAkTYJa2/McM 5w/G0nM2ahHQVlDIDVyoCZcu5pVnaXVDpJEQfyioEQctLhGjv7X9c93T3PCl7b8B WDhSpqklxJHvTMUFh1sO+ubs21fMyxf2YlXUfTplpaoZ -----END CERTIFICATE-----Generated at Mon Jan 26 01:52:44 2026 by rpki-client