This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/U8_wzZE8n8bfCc5My7nsBIg3MGg.roa File: U8_wzZE8n8bfCc5My7nsBIg3MGg.roa (raw, json) Hash identifier: 0pUs+FOERfMRc5PwTXXbnvoGjgKD10riM+7V7dCl1Cc= Subject key identifier: 53:CF:F0:CD:91:3C:9F:C6:DF:09:CE:4C:CB:B9:EC:04:88:37:30:68 Certificate issuer: /CN=e15136feff3574ef9b2262de59b06a21908fab3e Certificate serial: 019B7CED580FCA175E465E89CE3AC885E9E3 Authority key identifier: E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/U8_wzZE8n8bfCc5My7nsBIg3MGg.roa Signing time: Fri 02 Jan 2026 04:18:07 +0000 ROA not before: Fri 02 Jan 2026 04:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30902 IP address blocks: 78.111.4.0/24 maxlen: 24 87.247.174.0/24 maxlen: 24 87.247.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.mft rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:58:0f:ca:17:5e:46:5e:89:ce:3a:c8:85:e9:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15136feff3574ef9b2262de59b06a21908fab3e Validity Not Before: Jan 2 04:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53cff0cd913c9fc6df09ce4ccbb9ec0488373068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:69:9f:44:c3:44:9a:87:41:01:a5:aa:c4:d1: cc:2d:01:1d:19:41:55:c1:9d:31:41:41:29:f8:d1: 9f:b4:7a:f0:9d:0b:23:21:3e:79:a4:6f:7d:9b:ee: ac:48:34:5c:bb:43:e2:3f:c3:ef:e0:7c:78:f8:5d: 61:e1:b3:eb:c6:66:a8:ae:2f:0a:da:80:a3:df:15: a3:f0:2d:c5:b2:c1:58:ce:e7:bd:6a:5e:18:75:71: 43:9c:d1:e5:ed:98:87:9d:9b:11:50:f3:ca:08:83: ec:c5:9b:31:f3:74:48:c3:63:e7:bd:c6:34:f3:c7: 1d:5f:fc:74:4d:6d:d0:42:e1:f4:a3:91:c4:70:81: 5f:dd:3b:cd:a7:af:a3:9a:ee:54:53:00:8d:08:68: b1:c1:d4:e9:70:7e:5c:95:52:42:17:51:ac:97:01: f4:71:69:6b:1a:85:cb:9b:69:8f:4b:ce:30:e9:a5: 6a:0e:b1:de:30:08:56:69:bb:79:cc:f5:ef:43:e8: ac:0d:c0:01:68:d4:5f:f0:23:ed:69:cd:ed:1f:6b: 3c:38:d6:e9:98:c8:5d:db:6e:2c:b1:cb:13:0b:06: f3:77:c3:b1:00:ad:ea:1c:42:9c:02:05:a6:12:63: fd:4b:a1:f7:c9:50:36:a6:57:cd:ea:18:fe:2e:47: 5d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:CF:F0:CD:91:3C:9F:C6:DF:09:CE:4C:CB:B9:EC:04:88:37:30:68 X509v3 Authority Key Identifier: keyid:E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/U8_wzZE8n8bfCc5My7nsBIg3MGg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.111.4.0/24 87.247.174.0/23 Signature Algorithm: sha256WithRSAEncryption 10:1b:5c:c1:8b:bc:5c:26:24:18:2d:8a:67:72:61:3c:81:0a: 35:40:27:86:5e:24:78:1c:ec:3b:aa:d2:df:e3:cd:c5:06:07: aa:93:0d:aa:6e:fc:21:4e:19:e2:56:9d:46:31:6f:23:5e:80: ab:77:f4:fa:be:19:a1:6a:46:68:43:de:21:0b:2d:5c:8d:3a: e5:19:58:89:d6:b9:c0:a4:3f:de:51:ec:0b:32:74:05:17:5f: 13:84:ad:a5:4c:86:db:9e:9a:f4:6d:dd:03:6d:51:63:f2:72: 88:df:cf:87:5a:25:ad:f4:3c:0a:72:a7:5e:1a:99:a7:8e:a6: d2:2f:60:aa:03:83:15:62:ac:7a:29:4b:22:6d:5e:1e:de:ce: b3:6d:fb:03:1b:23:45:02:98:0c:18:d7:1a:f4:4b:68:17:5e: c1:b8:6a:dc:53:3f:79:2d:be:09:49:c5:6b:6d:8b:ea:a4:ae: c1:ba:b5:48:71:f8:21:99:54:74:39:9d:2e:f8:84:bb:1c:0f: 55:e8:5c:c3:6f:fd:96:9d:e0:22:62:0a:ef:81:0a:00:48:f1: 2d:68:47:11:d7:eb:6d:2f:dc:3a:ee:e8:32:fc:0f:8b:dc:a5: 57:33:60:c9:80:b9:58:f7:6d:34:ba:6b:2d:a5:e5:6e:5a:b5: 3c:7d:91:af -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87VgPyhdeRl6JzjrIhenjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTEzNmZlZmYzNTc0ZWY5YjIyNjJkZTU5YjA2YTIxOTA4 ZmFiM2UwHhcNMjYwMTAyMDQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2NmZjBjZDkxM2M5ZmM2ZGYwOWNlNGNjYmI5ZWMwNDg4MzczMDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GmfRMNEmodBAaWqxNHMLQEdGUFV wZ0xQUEp+NGftHrwnQsjIT55pG99m+6sSDRcu0PiP8Pv4Hx4+F1h4bPrxmaori8K 2oCj3xWj8C3FssFYzue9al4YdXFDnNHl7ZiHnZsRUPPKCIPsxZsx83RIw2PnvcY0 88cdX/x0TW3QQuH0o5HEcIFf3TvNp6+jmu5UUwCNCGixwdTpcH5clVJCF1GslwH0 cWlrGoXLm2mPS84w6aVqDrHeMAhWabt5zPXvQ+isDcABaNRf8CPtac3tH2s8ONbp mMhd224sscsTCwbzd8OxAK3qHEKcAgWmEmP9S6H3yVA2plfN6hj+LkddmQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFPP8M2RPJ/G3wnOTMu57ASINzBoMB8GA1UdIwQY MBaAFOFRNv7/NXTvmyJi3lmwaiGQj6s+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZFMl92ODFkTy1iSW1MZVdiQnFJWkNQcXo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xZTA5YTYtNjk1Yi00MDJlLTliZmMt MDQxMzEyMjQyZmYzLzEvVThfd3paRThuOGJmQ2M1TXk3bnNCSWczTUdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8xZTA5YTYtNjk1Yi00MDJlLTliZmMtMDQxMzEyMjQyZmYz LzEvNFZFMl92ODFkTy1iSW1MZVdiQnFJWkNQcXo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATm8EAwQB V/euMA0GCSqGSIb3DQEBCwUAA4IBAQAQG1zBi7xcJiQYLYpncmE8gQo1QCeGXiR4 HOw7qtLf483FBgeqkw2qbvwhThniVp1GMW8jXoCrd/T6vhmhakZoQ94hCy1cjTrl GViJ1rnApD/eUewLMnQFF18ThK2lTIbbnpr0bd0DbVFj8nKI38+HWiWt9DwKcqde GpmnjqbSL2CqA4MVYqx6KUsibV4e3s6zbfsDGyNFApgMGNca9EtoF17BuGrcUz95 Lb4JScVrbYvqpK7BurVIcfghmVR0OZ0u+IS7HA9V6FzDb/2WneAiYgrvgQoASPEt aEcR1+ttL9w67ugy/A+L3KVXM2DJgLlY9200umstpeVuWrU8fZGv -----END CERTIFICATE-----Generated at Mon Jan 26 11:48:41 2026 by rpki-client