This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/uD5eUDrQgXD4j74OWplFHBQd_hs.roa File: uD5eUDrQgXD4j74OWplFHBQd_hs.roa (raw, json) Hash identifier: 1h/Ex6tXdCvENtcBMUtZd+XOEB+wQCjfinmzLg0hRdY= Subject key identifier: B8:3E:5E:50:3A:D0:81:70:F8:8F:BE:0E:5A:99:45:1C:14:1D:FE:1B Certificate issuer: /CN=65295913c07c226100bd39f1ee2c52ea98aaee14 Certificate serial: 019B7A5B573B96D9BB53097EAE31297257D0 Authority key identifier: 65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/uD5eUDrQgXD4j74OWplFHBQd_hs.roa Signing time: Thu 01 Jan 2026 16:19:24 +0000 ROA not before: Thu 01 Jan 2026 16:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50012 IP address blocks: 185.157.121.0/24 maxlen: 24 193.104.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:57:3b:96:d9:bb:53:09:7e:ae:31:29:72:57:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65295913c07c226100bd39f1ee2c52ea98aaee14 Validity Not Before: Jan 1 16:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b83e5e503ad08170f88fbe0e5a99451c141dfe1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ed:c5:01:7d:79:21:29:f4:f3:62:2c:41:23: 66:e5:26:12:75:15:db:0b:81:43:5c:e5:55:ca:c5: d6:0c:60:af:a3:2e:01:ed:64:08:d2:01:b8:8f:80: 94:59:5e:6a:95:ca:62:e8:ad:a2:12:14:04:f1:71: d4:19:80:2b:d2:4f:67:79:9d:ea:2b:e5:0f:97:6f: 40:32:4b:6f:3b:12:d9:13:a6:93:3b:26:2d:19:5a: 60:ba:11:d6:65:78:79:db:e9:18:2a:a4:ed:04:a9: d8:21:68:6f:e9:34:03:62:b5:36:4a:fc:7f:bc:3f: d5:57:f8:39:7c:4c:a1:75:13:be:42:e1:27:c2:36: 30:b4:2b:4a:da:af:ca:fb:dd:2e:17:82:89:f0:ed: c9:71:c0:ac:e5:fa:90:72:a6:d8:bb:77:1e:99:51: 37:b0:fe:dd:ba:66:81:6d:8e:7e:1c:12:84:43:0c: 1b:23:b7:eb:02:a0:3f:d7:93:22:4c:51:a1:28:89: 0b:2c:ec:aa:ef:c8:2b:ff:01:fc:a9:b6:36:db:4e: 24:9a:aa:88:36:44:3c:c3:23:e1:69:7c:cf:cc:13: 6a:ef:9f:cf:44:b7:57:7a:d1:7c:21:50:18:9b:ee: 91:f1:e4:37:93:69:a9:a2:4a:f3:1f:5f:82:cc:c6: e0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3E:5E:50:3A:D0:81:70:F8:8F:BE:0E:5A:99:45:1C:14:1D:FE:1B X509v3 Authority Key Identifier: keyid:65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/uD5eUDrQgXD4j74OWplFHBQd_hs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.157.121.0/24 193.104.85.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:37:dc:7c:05:db:a6:4d:29:94:a8:21:ae:fc:97:91:32:89: 13:f5:6a:9f:fc:7f:73:9a:bd:f8:00:b5:f0:02:af:fb:10:67: b3:66:6a:c1:80:47:12:20:e9:e4:6c:3b:b5:65:2a:76:4b:c2: 91:be:77:aa:70:a6:0b:e1:12:5a:8a:c6:bd:12:ed:33:a1:03: d6:c2:82:cc:9f:95:16:c1:35:69:23:62:3f:2f:13:2a:c4:16: 10:37:1f:f2:ee:29:84:c4:46:a2:c9:f3:49:38:ec:84:7e:28: 6a:9d:4d:74:67:cb:65:76:35:04:b9:68:31:6e:57:55:ef:28: 8f:3b:7b:cb:77:b1:4e:74:71:d5:df:f9:a7:a6:55:49:61:98: 84:8c:cb:a7:13:21:99:28:f4:04:05:62:0f:3c:e6:04:66:f5: c4:20:c9:54:d6:3b:53:a2:46:9f:e6:69:16:5c:5b:7b:2c:b2: e4:cd:29:36:74:fc:a8:55:c3:3a:91:d2:5b:14:99:e3:b8:55: 7a:bb:49:8d:27:92:ee:f2:9f:87:f7:c1:64:48:f9:c8:ea:e0: 63:23:c9:0c:a0:1b:85:db:3a:07:aa:a9:df:59:53:6f:32:b1: 00:d8:3d:f1:07:25:d3:a3:ce:31:1e:28:eb:1b:e4:b5:a4:67: a0:a0:c9:6a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6W1c7ltm7Uwl+rjEpclfQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1Mjk1OTEzYzA3YzIyNjEwMGJkMzlmMWVlMmM1MmVhOThh YWVlMTQwHhcNMjYwMTAxMTYxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODNlNWU1MDNhZDA4MTcwZjg4ZmJlMGU1YTk5NDUxYzE0MWRmZTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+3FAX15ISn082IsQSNm5SYSdRXb C4FDXOVVysXWDGCvoy4B7WQI0gG4j4CUWV5qlcpi6K2iEhQE8XHUGYAr0k9neZ3q K+UPl29AMktvOxLZE6aTOyYtGVpguhHWZXh52+kYKqTtBKnYIWhv6TQDYrU2Svx/ vD/VV/g5fEyhdRO+QuEnwjYwtCtK2q/K+90uF4KJ8O3JccCs5fqQcqbYu3cemVE3 sP7dumaBbY5+HBKEQwwbI7frAqA/15MiTFGhKIkLLOyq78gr/wH8qbY2204kmqqI NkQ8wyPhaXzPzBNq75/PRLdXetF8IVAYm+6R8eQ3k2mpokrzH1+CzMbgfQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLg+XlA60IFw+I++DlqZRRwUHf4bMB8GA1UdIwQY MBaAFGUpWRPAfCJhAL058e4sUuqYqu4UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlNsWkU4QjhJbUVBdlRueDdpeFM2cGlxN2hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81MGQ0NzYtZDcyMi00MGYyLTk4MGYt NjQyMzZmYzM2ZDFkLzEvdUQ1ZVVEclFnWEQ0ajc0T1dwbEZIQlFkX2hzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi81MGQ0NzYtZDcyMi00MGYyLTk4MGYtNjQyMzZmYzM2ZDFk LzEvWlNsWkU4QjhJbUVBdlRueDdpeFM2cGlxN2hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuZ15AwQA wWhVMA0GCSqGSIb3DQEBCwUAA4IBAQAvN9x8BdumTSmUqCGu/JeRMokT9Wqf/H9z mr34ALXwAq/7EGezZmrBgEcSIOnkbDu1ZSp2S8KRvneqcKYL4RJaisa9Eu0zoQPW woLMn5UWwTVpI2I/LxMqxBYQNx/y7imExEaiyfNJOOyEfihqnU10Z8tldjUEuWgx bldV7yiPO3vLd7FOdHHV3/mnplVJYZiEjMunEyGZKPQEBWIPPOYEZvXEIMlU1jtT okaf5mkWXFt7LLLkzSk2dPyoVcM6kdJbFJnjuFV6u0mNJ5Lu8p+H98FkSPnI6uBj I8kMoBuF2zoHqqnfWVNvMrEA2D3xByXTo84xHijrG+S1pGegoMlq -----END CERTIFICATE-----Generated at Mon Jan 26 01:41:28 2026 by rpki-client