This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/NuEtWDfqstg6Pj9E1KeSos8IDaw.roa File: NuEtWDfqstg6Pj9E1KeSos8IDaw.roa (raw, json) Hash identifier: wtuhCZ4o02QJy1QmedWkrl+M7I3hD/AeGG3bB2Srdj0= Subject key identifier: 36:E1:2D:58:37:EA:B2:D8:3A:3E:3F:44:D4:A7:92:A2:CF:08:0D:AC Certificate issuer: /CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5 Certificate serial: 019B76EB39443C0BFD850B41A41914AB14B0 Authority key identifier: 57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/NuEtWDfqstg6Pj9E1KeSos8IDaw.roa Signing time: Thu 01 Jan 2026 00:18:05 +0000 ROA not before: Thu 01 Jan 2026 00:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47753 IP address blocks: 185.249.254.0/24 maxlen: 24 2a10:a641::/40 maxlen: 40 2a10:a647::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:39:44:3c:0b:fd:85:0b:41:a4:19:14:ab:14:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5 Validity Not Before: Jan 1 00:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36e12d5837eab2d83a3e3f44d4a792a2cf080dac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:21:24:83:f6:c5:f9:5b:d4:c5:e3:f6:cb:a4: 47:bc:7b:b4:78:92:2e:93:da:85:b6:0b:6f:d7:82: 94:00:d2:13:d8:de:1a:71:be:81:61:54:b8:ac:26: e3:18:cf:c1:d4:a5:df:93:09:53:1f:e7:79:06:c9: 97:bb:51:3e:5f:50:9a:4a:df:31:7f:b9:22:a9:c9: 0e:52:81:3e:7e:d6:ce:6b:55:7e:a7:77:65:9d:c8: 3c:ef:4e:ca:43:01:47:80:77:48:16:50:6c:2a:1a: 72:d3:63:fd:32:b3:05:18:47:3e:3d:2b:9f:b2:b3: 74:10:1b:1f:cb:0b:95:40:fc:c3:ae:32:08:32:90: fb:26:c4:f2:ea:85:5d:72:6c:e2:2a:ef:07:3a:6a: 2f:15:db:79:cf:ac:1c:c7:18:f0:20:17:c9:db:b7: f6:b0:e4:29:55:63:5d:1d:9d:bb:5a:57:10:a5:f6: 82:6c:32:bc:f3:43:a6:40:4f:ce:16:26:61:b5:4d: 5c:45:92:25:3e:69:69:70:14:98:c8:dd:a8:bc:1b: e3:3c:db:7b:a8:37:b2:79:85:d7:c4:56:33:4b:a9: 88:e6:ba:47:1a:65:57:8e:1e:78:85:36:d1:a8:d0: 36:45:21:11:ef:be:2b:37:e3:54:a2:9e:e9:a6:aa: db:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E1:2D:58:37:EA:B2:D8:3A:3E:3F:44:D4:A7:92:A2:CF:08:0D:AC X509v3 Authority Key Identifier: keyid:57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/NuEtWDfqstg6Pj9E1KeSos8IDaw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.249.254.0/24 IPv6: 2a10:a641::/40 2a10:a647::/32 Signature Algorithm: sha256WithRSAEncryption 98:e1:22:d2:9f:45:70:e9:f7:42:db:97:c8:89:0b:3c:07:d4: f7:e2:33:ab:1a:dc:54:d5:01:9d:4b:4d:2c:c1:19:0d:ea:eb: 14:49:9b:8f:aa:7a:ac:bb:ba:76:59:95:ff:b1:38:27:fc:b9: 0c:1e:c2:6e:1d:9a:5a:93:4c:e0:12:4f:7c:45:c3:5b:22:fd: d1:e0:d0:2e:9b:d2:ee:44:54:4d:67:ef:59:b6:fb:9b:3e:ef: a3:48:19:87:ca:e8:76:93:bb:98:a9:45:49:a7:42:24:83:e0: 5b:e6:a6:51:34:59:85:de:05:16:b4:0d:fc:9f:5b:8a:c2:78: 0b:66:3f:5e:bb:39:04:30:f4:ae:4d:cf:37:97:44:b7:80:f5: 7d:98:97:d2:15:f2:46:57:1f:99:70:16:fa:b0:30:2b:dc:10: 3a:5d:a0:b3:6a:a1:2b:76:ce:e4:77:34:37:93:ab:90:8f:b1: 15:92:0c:74:5e:de:df:cb:d6:45:75:44:f1:42:2c:ee:de:d5: ff:4b:48:fd:c0:53:29:79:f0:83:cd:81:a5:bd:5c:b1:bb:51: 84:b1:4b:a5:39:73:69:12:1e:de:ee:c0:b8:a9:b6:0a:de:e5: aa:16:7b:09:ef:22:7f:47:46:6f:81:53:77:1d:a8:05:d7:c2: 5d:d8:0d:18 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt26zlEPAv9hQtBpBkUqxSwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NzZkOWEwYjU1YmQ0OTVhMWJlM2M1YzAzZmEyNTFkM2Rl OGI4YzUwHhcNMjYwMTAxMDAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmUxMmQ1ODM3ZWFiMmQ4M2EzZTNmNDRkNGE3OTJhMmNmMDgwZGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCEkg/bF+VvUxeP2y6RHvHu0eJIu k9qFtgtv14KUANIT2N4acb6BYVS4rCbjGM/B1KXfkwlTH+d5BsmXu1E+X1CaSt8x f7kiqckOUoE+ftbOa1V+p3dlncg8707KQwFHgHdIFlBsKhpy02P9MrMFGEc+PSuf srN0EBsfywuVQPzDrjIIMpD7JsTy6oVdcmziKu8HOmovFdt5z6wcxxjwIBfJ27f2 sOQpVWNdHZ27WlcQpfaCbDK880OmQE/OFiZhtU1cRZIlPmlpcBSYyN2ovBvjPNt7 qDeyeYXXxFYzS6mI5rpHGmVXjh54hTbRqNA2RSER774rN+NUop7ppqrbHQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFDbhLVg36rLYOj4/RNSnkqLPCA2sMB8GA1UdIwQY MBaAFFd22aC1W9SVob48XAP6JR096LjFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjNiWm9MVmIxSldodmp4Y0Ffb2xIVDNvdU1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81YjIxZTMtMzk0NC00Y2U2LWFhZjUt YzBiYTJmM2ZjNzJhLzEvTnVFdFdEZnFzdGc2UGo5RTFLZVNvczhJRGF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS81YjIxZTMtMzk0NC00Y2U2LWFhZjUtYzBiYTJmM2ZjNzJh LzEvVjNiWm9MVmIxSldodmp4Y0Ffb2xIVDNvdU1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAMBAIAATAGAwQAufn+MBUE AgACMA8DBgAqEKZBAAMFACoQpkcwDQYJKoZIhvcNAQELBQADggEBAJjhItKfRXDp 90Lbl8iJCzwH1PfiM6sa3FTVAZ1LTSzBGQ3q6xRJm4+qeqy7unZZlf+xOCf8uQwe wm4dmlqTTOAST3xFw1si/dHg0C6b0u5EVE1n71m2+5s+76NIGYfK6HaTu5ipRUmn QiSD4FvmplE0WYXeBRa0DfyfW4rCeAtmP167OQQw9K5NzzeXRLeA9X2Yl9IV8kZX H5lwFvqwMCvcEDpdoLNqoSt2zuR3NDeTq5CPsRWSDHRe3t/L1kV1RPFCLO7e1f9L SP3AUyl58IPNgaW9XLG7UYSxS6U5c2kSHt7uwLiptgre5aoWewnvIn9HRm+BU3cd qAXXwl3YDRg= -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:55 2026 by rpki-client