This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/lU2W_hLzu6vcwdz6WKfVv3aZoVM.roa File: lU2W_hLzu6vcwdz6WKfVv3aZoVM.roa (raw, json) Hash identifier: Dg4GJqlJxEyMu+sRyXwo6uu0nTdiNWkD77joS0KB4X8= Subject key identifier: 95:4D:96:FE:12:F3:BB:AB:DC:C1:DC:FA:58:A7:D5:BF:76:99:A1:53 Certificate issuer: /CN=b793a547bf0be2deed7c84fe902e3366577a2314 Certificate serial: 019B797E820CA76814486399C191F55294B3 Authority key identifier: B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/lU2W_hLzu6vcwdz6WKfVv3aZoVM.roa Signing time: Thu 01 Jan 2026 12:18:12 +0000 ROA not before: Thu 01 Jan 2026 12:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200888 IP address blocks: 2.56.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:82:0c:a7:68:14:48:63:99:c1:91:f5:52:94:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b793a547bf0be2deed7c84fe902e3366577a2314 Validity Not Before: Jan 1 12:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=954d96fe12f3bbabdcc1dcfa58a7d5bf7699a153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:78:60:86:70:23:a0:9a:23:68:18:bb:3c:6c: d6:aa:27:2e:12:0a:7e:e2:2a:3b:34:2e:b7:87:25: c5:d3:17:36:6a:c1:af:fd:bb:18:85:f0:69:d0:23: 1f:83:9e:43:bf:dc:f0:01:7c:35:9e:a3:90:14:96: ad:40:cc:bb:df:01:bf:33:2e:20:48:3c:54:5f:30: cf:b5:ff:29:59:9f:ac:aa:fc:3c:2d:53:c9:eb:a9: 00:e7:fc:a6:e5:e2:ef:ff:05:99:52:32:18:a5:2e: b0:45:84:f2:e2:50:56:8d:27:5d:76:4f:f2:c3:29: e5:f8:ab:9c:54:23:0e:19:be:00:44:61:c5:89:60: 75:2f:03:7c:73:7f:04:89:43:cd:bc:9d:f3:34:78: 4f:15:82:53:b9:d9:c2:9e:88:2e:87:f3:18:6a:77: 97:f0:ec:62:f9:18:c1:68:f5:68:58:70:30:19:4d: b0:8f:e9:02:51:0c:cc:aa:61:bc:3d:f4:ba:15:55: 21:a7:d3:8b:e0:dc:d1:97:c0:7c:d0:19:93:2b:dd: 1e:e7:ed:ab:3b:d1:f3:0c:56:15:67:92:1a:8c:04: 38:95:78:9f:34:53:91:b9:a1:9b:5f:11:d3:b6:f2: 03:b0:ef:6b:47:b4:67:5d:a0:01:1a:ad:88:8b:53: 3b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4D:96:FE:12:F3:BB:AB:DC:C1:DC:FA:58:A7:D5:BF:76:99:A1:53 X509v3 Authority Key Identifier: keyid:B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/lU2W_hLzu6vcwdz6WKfVv3aZoVM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.169.0/24 Signature Algorithm: sha256WithRSAEncryption 66:95:22:b8:67:11:9f:d1:b0:c3:ae:b5:72:fa:d6:7c:df:46: 3e:37:ce:aa:a5:4a:dc:8c:75:f1:b4:14:60:74:67:83:7e:47: 99:6e:87:ec:53:21:ed:47:94:32:a6:87:1e:52:5c:53:74:c7: 8b:c3:b2:80:85:46:42:87:a1:47:b0:db:fb:1e:fd:95:46:c8: 1a:8e:b6:db:23:e3:a6:90:60:71:5c:f9:50:04:35:73:f3:e7: 2a:fe:0d:bf:94:e9:85:ba:1b:56:32:8d:10:a5:cd:a5:1c:af: 3e:2c:f8:f9:3a:72:87:24:b4:bc:be:cd:5d:dd:26:50:6a:f0: 83:3d:6f:7e:e5:73:1f:f6:92:ec:aa:87:ee:77:e5:c2:d0:8b: 2a:a7:3e:19:2b:32:88:cf:a8:43:4d:bd:c0:78:9b:5c:d9:d6: 72:79:15:84:63:c6:aa:62:3c:72:9e:8a:57:9f:f5:98:72:79: 62:3e:e1:49:1a:80:8e:9d:23:37:e2:71:d9:ca:80:d2:80:9b: 74:1e:78:4d:6b:b6:1b:22:aa:08:c9:38:89:88:a1:20:c8:70: 48:d2:51:3a:6f:5a:f9:69:de:c8:cd:94:eb:17:55:08:68:d7: 19:48:32:b0:7a:20:09:f7:16:22:ed:a1:49:b0:dd:a2:be:59: ed:50:2b:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5foIMp2gUSGOZwZH1UpSzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3OTNhNTQ3YmYwYmUyZGVlZDdjODRmZTkwMmUzMzY2NTc3 YTIzMTQwHhcNMjYwMTAxMTIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTRkOTZmZTEyZjNiYmFiZGNjMWRjZmE1OGE3ZDViZjc2OTlhMTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3hghnAjoJojaBi7PGzWqicuEgp+ 4io7NC63hyXF0xc2asGv/bsYhfBp0CMfg55Dv9zwAXw1nqOQFJatQMy73wG/My4g SDxUXzDPtf8pWZ+sqvw8LVPJ66kA5/ym5eLv/wWZUjIYpS6wRYTy4lBWjSdddk/y wynl+KucVCMOGb4ARGHFiWB1LwN8c38EiUPNvJ3zNHhPFYJTudnCnoguh/MYaneX 8Oxi+RjBaPVoWHAwGU2wj+kCUQzMqmG8PfS6FVUhp9OL4NzRl8B80BmTK90e5+2r O9HzDFYVZ5IajAQ4lXifNFORuaGbXxHTtvIDsO9rR7RnXaABGq2Ii1M7GwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJVNlv4S87ur3MHc+lin1b92maFTMB8GA1UdIwQY MBaAFLeTpUe/C+Le7XyE/pAuM2ZXeiMUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDVPbFI3OEw0dDd0ZklULWtDNHpabGQ2SXhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8xNGY0MjktMDNiNC00NDIzLWJiNGMt ZjBjMzMyNTZmYjIyLzEvbFUyV19oTHp1NnZjd2R6NldLZlZ2M2Fab1ZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8xNGY0MjktMDNiNC00NDIzLWJiNGMtZjBjMzMyNTZmYjIy LzEvdDVPbFI3OEw0dDd0ZklULWtDNHpabGQ2SXhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjipMA0G CSqGSIb3DQEBCwUAA4IBAQBmlSK4ZxGf0bDDrrVy+tZ830Y+N86qpUrcjHXxtBRg dGeDfkeZbofsUyHtR5QypoceUlxTdMeLw7KAhUZCh6FHsNv7Hv2VRsgajrbbI+Om kGBxXPlQBDVz8+cq/g2/lOmFuhtWMo0Qpc2lHK8+LPj5OnKHJLS8vs1d3SZQavCD PW9+5XMf9pLsqofud+XC0Isqpz4ZKzKIz6hDTb3AeJtc2dZyeRWEY8aqYjxynopX n/WYcnliPuFJGoCOnSM34nHZyoDSgJt0HnhNa7YbIqoIyTiJiKEgyHBI0lE6b1r5 ad7IzZTrF1UIaNcZSDKweiAJ9xYi7aFJsN2ivlntUCvG -----END CERTIFICATE-----Generated at Mon Jan 26 12:38:10 2026 by rpki-client