This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/U_LfKCv5kJDOuObeAwMorX4Nmc4.roa File: U_LfKCv5kJDOuObeAwMorX4Nmc4.roa (raw, json) Hash identifier: ecSv+ahB4B19FetdtS+R40A/h+b9mvwFfb6awkKuwag= Subject key identifier: 53:F2:DF:28:2B:F9:90:90:CE:B8:E6:DE:03:03:28:AD:7E:0D:99:CE Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Certificate serial: 019B7DCA424B06AD8906AF43C47606CC3D9B Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/U_LfKCv5kJDOuObeAwMorX4Nmc4.roa Signing time: Fri 02 Jan 2026 08:19:25 +0000 ROA not before: Fri 02 Jan 2026 08:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47602 IP address blocks: 185.131.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:42:4b:06:ad:89:06:af:43:c4:76:06:cc:3d:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Validity Not Before: Jan 2 08:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53f2df282bf99090ceb8e6de030328ad7e0d99ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0e:69:a8:b8:a6:f0:58:1d:17:7b:a9:e0:fa: 5a:a6:d3:c3:79:8d:14:8d:74:d7:4d:2b:4b:a9:e4: bf:4a:b7:9b:02:57:de:ab:af:ce:22:aa:38:ce:15: 46:8d:1b:32:41:3e:75:b8:83:00:ec:ec:06:84:84: da:22:6e:f2:09:80:7a:1f:c6:48:8d:6a:47:1e:f4: 47:9b:60:54:ac:4b:08:2f:dd:13:f0:5d:bf:2e:90: 12:a7:08:75:c0:be:7b:62:94:12:c8:52:2e:7c:34: c0:b6:6b:13:52:78:40:67:73:f9:5f:3b:07:58:ea: 6f:11:9e:e8:f6:55:04:4a:d7:4e:d4:78:cf:6d:95: 35:87:f8:55:e3:69:6d:28:a9:d3:c3:3f:c4:05:46: 93:79:97:e5:61:c9:34:43:b0:85:b1:2e:7a:49:19: 87:ec:ea:ba:83:72:d9:b1:b2:76:54:84:0d:54:42: 30:cb:d9:cd:f4:0a:5b:7a:ac:35:fd:9f:cc:9c:b4: a9:36:79:1d:8f:a5:82:33:dc:b4:c0:df:96:03:26: 28:27:9e:8f:dd:cb:78:9d:63:07:c9:bc:e0:53:c1: 9f:4d:37:c9:4c:7b:5f:77:37:24:3e:15:27:57:a4: de:41:69:70:a7:74:10:5a:a6:b4:d0:c9:cc:d7:81: b7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F2:DF:28:2B:F9:90:90:CE:B8:E6:DE:03:03:28:AD:7E:0D:99:CE X509v3 Authority Key Identifier: keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/U_LfKCv5kJDOuObeAwMorX4Nmc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.131.223.0/24 Signature Algorithm: sha256WithRSAEncryption 65:03:82:9f:98:19:54:5f:87:8f:1a:24:18:15:79:69:da:64: 27:9b:da:33:ca:a3:99:d2:40:4b:30:da:04:e5:02:77:ab:cd: e0:29:6a:c4:16:9e:4f:0e:33:94:2b:d2:9e:dd:b0:9d:c1:e8: a1:55:4c:2d:38:ef:b0:e9:af:68:4d:92:b4:19:58:8d:22:a0: c3:54:7b:49:5e:c7:ca:a9:1b:ab:4b:a3:9c:f9:67:4c:8f:1c: 42:80:c8:5b:7e:9a:8e:aa:fc:2b:b4:a7:9c:6a:f1:1f:79:a7: 2c:bb:81:8d:8c:9d:5f:49:d4:27:f4:f0:f8:c7:d9:c3:9d:19: dc:2b:19:57:85:8f:5f:fa:17:38:d2:b7:4c:9d:62:4f:c9:a3: 74:e6:aa:a0:72:61:51:09:b6:17:a5:a2:36:9b:90:33:67:ac: b6:b2:a2:85:1b:46:30:e5:ea:ad:fc:a9:db:3e:80:8a:d7:c2: 29:35:32:9d:78:0b:79:fd:f0:7a:10:ed:5f:03:9f:8d:15:f6: 6d:5b:15:65:3f:91:62:79:bc:6b:8b:86:71:97:4a:fb:76:fe: 7d:de:b6:69:bb:3e:86:82:41:de:f2:0f:dd:8b:c0:17:7f:3f: cd:de:ab:c2:25:1a:4e:40:f1:44:65:29:2f:7a:58:e0:d3:4d: 9b:c0:e2:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ykJLBq2JBq9DxHYGzD2bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1 NjI4ZjkwHhcNMjYwMTAyMDgxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2YyZGYyODJiZjk5MDkwY2ViOGU2ZGUwMzAzMjhhZDdlMGQ5OWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ5pqLim8FgdF3up4PpaptPDeY0U jXTXTStLqeS/SrebAlfeq6/OIqo4zhVGjRsyQT51uIMA7OwGhITaIm7yCYB6H8ZI jWpHHvRHm2BUrEsIL90T8F2/LpASpwh1wL57YpQSyFIufDTAtmsTUnhAZ3P5XzsH WOpvEZ7o9lUEStdO1HjPbZU1h/hV42ltKKnTwz/EBUaTeZflYck0Q7CFsS56SRmH 7Oq6g3LZsbJ2VIQNVEIwy9nN9Apbeqw1/Z/MnLSpNnkdj6WCM9y0wN+WAyYoJ56P 3ct4nWMHybzgU8GfTTfJTHtfdzckPhUnV6TeQWlwp3QQWqa00MnM14G3awIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFPy3ygr+ZCQzrjm3gMDKK1+DZnOMB8GA1UdIwQY MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt ZTQ0MTliNjQyMTJlLzEvVV9MZktDdjVrSkRPdU9iZUF3TW9yWDRObWM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYPfMA0G CSqGSIb3DQEBCwUAA4IBAQBlA4KfmBlUX4ePGiQYFXlp2mQnm9ozyqOZ0kBLMNoE 5QJ3q83gKWrEFp5PDjOUK9Ke3bCdweihVUwtOO+w6a9oTZK0GViNIqDDVHtJXsfK qRurS6Oc+WdMjxxCgMhbfpqOqvwrtKecavEfeacsu4GNjJ1fSdQn9PD4x9nDnRnc KxlXhY9f+hc40rdMnWJPyaN05qqgcmFRCbYXpaI2m5AzZ6y2sqKFG0Yw5eqt/Knb PoCK18IpNTKdeAt5/fB6EO1fA5+NFfZtWxVlP5Fiebxri4Zxl0r7dv593rZpuz6G gkHe8g/di8AXfz/N3qvCJRpOQPFEZSkveljg002bwOKN -----END CERTIFICATE-----Generated at Mon Jan 26 05:00:47 2026 by rpki-client