This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/Urq1eK2xjT76TDiGVNPLNYSAots.roa File: Urq1eK2xjT76TDiGVNPLNYSAots.roa (raw, json) Hash identifier: JIPIWUvk2jdNeoap+skOWO5/nkQDUADjKMBqk5o7Ql4= Subject key identifier: 52:BA:B5:78:AD:B1:8D:3E:FA:4C:38:86:54:D3:CB:35:84:80:A2:DB Certificate issuer: /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d Certificate serial: 019B7BA32A4E37919EF29E8613BE96AC457E Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/Urq1eK2xjT76TDiGVNPLNYSAots.roa Signing time: Thu 01 Jan 2026 22:17:29 +0000 ROA not before: Thu 01 Jan 2026 22:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209634 IP address blocks: 147.78.184.0/22 maxlen: 22 185.18.232.0/24 maxlen: 24 185.18.233.0/24 maxlen: 24 185.18.234.0/24 maxlen: 24 2a09:840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:2a:4e:37:91:9e:f2:9e:86:13:be:96:ac:45:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d Validity Not Before: Jan 1 22:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52bab578adb18d3efa4c388654d3cb358480a2db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d0:c6:ae:08:9d:ed:81:4a:c6:70:52:f2:63: 1a:ed:a8:77:89:d5:f6:35:a3:28:4c:3c:a0:cb:0b: 08:a3:5f:98:d3:c0:b9:18:38:d6:d9:76:61:5f:26: 17:77:23:34:ce:0c:f9:18:6d:f4:b2:b1:6b:b2:ba: 68:f6:19:f3:aa:2e:fa:34:6e:39:4a:79:ab:3d:6b: a1:7a:c1:46:d2:22:ed:24:7f:f5:6e:52:02:9a:fa: de:3c:2b:d4:d0:e9:d1:db:6e:28:8a:9d:cd:9e:8b: b6:d2:a5:2f:29:04:e2:d5:f5:86:31:26:71:e3:17: 89:a5:12:04:3a:9d:b2:51:2f:59:81:ea:19:6e:62: 45:4c:31:22:d8:b3:87:7d:b6:24:ca:fc:e9:37:37: 06:8c:10:b7:36:a7:2e:86:7a:cb:f4:62:d9:d6:0b: ca:9f:e9:9d:31:3a:26:89:49:8b:54:09:e5:e8:2a: 33:e5:78:81:dd:b1:4f:06:7d:7b:8d:24:2c:57:45: ec:53:92:56:e4:cb:62:72:96:02:dd:5e:91:65:60: 2b:1d:31:a9:5b:37:fb:e2:e2:3d:d8:8b:04:c4:6c: 5a:83:aa:90:8a:fa:6c:b6:ed:7e:a9:8e:d1:d8:0b: 4f:8e:f0:4e:ad:b5:fa:f7:5e:f4:f5:5d:53:77:3c: 13:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:BA:B5:78:AD:B1:8D:3E:FA:4C:38:86:54:D3:CB:35:84:80:A2:DB X509v3 Authority Key Identifier: keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/Urq1eK2xjT76TDiGVNPLNYSAots.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.184.0/22 185.18.232.0-185.18.234.255 IPv6: 2a09:840::/32 Signature Algorithm: sha256WithRSAEncryption af:06:3f:73:9a:61:b5:5a:9e:19:50:78:d3:a4:e9:96:b5:1f: e2:e8:25:90:23:31:cf:6d:b7:9b:1e:c2:b2:17:76:cc:6c:ee: 90:fe:56:ca:b0:ce:da:a2:92:79:15:73:69:0c:16:d9:56:1c: d0:e6:87:56:3d:57:13:22:f1:f6:93:95:f7:c3:1d:62:ed:fc: 21:e6:a2:86:cc:1d:a8:57:3a:d0:cf:a4:8b:ef:c0:75:b1:45: d6:de:19:07:ab:f1:77:aa:94:76:ef:fd:ba:e2:74:0e:82:ed: 68:c5:9b:10:37:37:64:b7:35:bd:99:f7:76:6f:e7:39:ae:ae: 71:d0:a6:e2:70:b7:41:d5:a4:78:f9:db:ef:91:4c:81:76:d2: bd:1d:a6:78:9d:e5:c2:06:c2:35:f2:7d:9f:41:3f:ea:cc:75: 9e:fa:5b:05:05:c4:88:21:7a:79:c3:bf:de:ec:04:9c:d2:b1: b3:ad:75:b2:f5:ab:66:7c:a6:60:d4:c3:52:6e:b3:e0:a1:c7: 90:e8:fb:6a:93:e1:9e:92:20:d9:20:53:0a:a1:b0:80:4c:0b: fc:79:de:0b:de:04:93:1d:a3:50:ee:cf:0d:6f:d2:8d:be:73: b6:94:9b:08:40:53:93:f9:93:1f:26:f6:e5:51:78:8c:7a:64: 1d:0c:f6:fb -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt7oypON5Ge8p6GE76WrEV+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MmNmM2VhM2Y0NjE5YWRkN2IxZjg1ZTVkYmM3NjhjZDNk MTc0MmQwHhcNMjYwMTAxMjIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmJhYjU3OGFkYjE4ZDNlZmE0YzM4ODY1NGQzY2IzNTg0ODBhMmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotDGrgid7YFKxnBS8mMa7ah3idX2 NaMoTDygywsIo1+Y08C5GDjW2XZhXyYXdyM0zgz5GG30srFrsrpo9hnzqi76NG45 SnmrPWuhesFG0iLtJH/1blICmvrePCvU0OnR224oip3Nnou20qUvKQTi1fWGMSZx 4xeJpRIEOp2yUS9ZgeoZbmJFTDEi2LOHfbYkyvzpNzcGjBC3NqcuhnrL9GLZ1gvK n+mdMTomiUmLVAnl6Coz5XiB3bFPBn17jSQsV0XsU5JW5MticpYC3V6RZWArHTGp Wzf74uI92IsExGxag6qQivpstu1+qY7R2AtPjvBOrbX691709V1TdzwTDQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFFK6tXitsY0++kw4hlTTyzWEgKLbMB8GA1UdIwQY MBaAFKQs8+o/Rhmt17H4Xl28dozT0XQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NzI2OWItMGY3MC00NmNmLWJjZTIt Yzc3NzUxNTlmYzgyLzEvVXJxMWVLMnhqVDc2VERpR1ZOUExOWVNBb3RzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC81NzI2OWItMGY3MC00NmNmLWJjZTItYzc3NzUxNTlmYzgy LzEvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQCk064MAwD BAO5EugDBAC5EuowDQQCAAIwBwMFACoJCEAwDQYJKoZIhvcNAQELBQADggEBAK8G P3OaYbVanhlQeNOk6Za1H+LoJZAjMc9tt5sewrIXdsxs7pD+VsqwztqiknkVc2kM FtlWHNDmh1Y9VxMi8faTlffDHWLt/CHmoobMHahXOtDPpIvvwHWxRdbeGQer8Xeq lHbv/bridA6C7WjFmxA3N2S3Nb2Z93Zv5zmurnHQpuJwt0HVpHj52++RTIF20r0d pnid5cIGwjXyfZ9BP+rMdZ76WwUFxIghennDv97sBJzSsbOtdbL1q2Z8pmDUw1Ju s+Chx5Do+2qT4Z6SINkgUwqhsIBMC/x53gveBJMdo1Duzw1v0o2+c7aUmwhAU5P5 kx8m9uVReIx6ZB0M9vs= -----END CERTIFICATE-----Generated at Mon Jan 26 19:39:06 2026 by rpki-client