This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/1UXzpmvTwZAsUDWWE8erylOknmA.roa File: 1UXzpmvTwZAsUDWWE8erylOknmA.roa (raw, json) Hash identifier: bPU4V6mvT+M1L74dQ2qnl35ymoh6uHxc1XZ4WDy2uqA= Subject key identifier: D5:45:F3:A6:6B:D3:C1:90:2C:50:35:96:13:C7:AB:CA:53:A4:9E:60 Certificate issuer: /CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97 Certificate serial: 019B79ECC60A7C67DAEEC0C2E7BE3D3F0239 Authority key identifier: BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/1UXzpmvTwZAsUDWWE8erylOknmA.roa Signing time: Thu 01 Jan 2026 14:18:38 +0000 ROA not before: Thu 01 Jan 2026 14:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213319 IP address blocks: 185.168.228.0/22 maxlen: 24 2a0b:f080::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c6:0a:7c:67:da:ee:c0:c2:e7:be:3d:3f:02:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97 Validity Not Before: Jan 1 14:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d545f3a66bd3c1902c50359613c7abca53a49e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:00:f0:f2:5d:17:ff:7f:e7:cb:ad:29:24:dd: 5e:e8:c1:ce:00:48:97:43:91:df:e7:7e:84:c0:95: a4:a9:5e:97:a7:e6:6b:17:3c:c2:32:07:06:39:1a: 8d:3e:51:db:25:1f:7b:9c:14:3c:5f:e4:68:17:33: 0c:e1:f4:b2:1c:94:91:15:67:06:65:ad:bf:99:40: 64:4d:8e:93:6f:b5:b3:75:da:38:b4:e0:3a:d6:f4: 72:77:08:1b:98:d3:2d:87:35:35:aa:10:c0:63:73: ba:c8:80:48:fe:e1:82:89:c6:33:ef:d6:a1:53:6c: b7:f5:25:88:a0:93:4c:fc:64:75:2d:26:d3:c9:e3: 0f:d1:c4:e1:c6:57:26:e1:bb:b9:45:62:b9:0a:54: 66:66:a2:7b:0f:75:9e:d0:3b:a9:1d:19:af:d6:82: 02:05:85:c8:96:3f:52:4c:ff:40:91:c0:ac:03:6f: 57:1d:c2:b5:4a:e3:d3:10:40:62:48:0b:5a:a8:5e: 4d:13:18:16:db:6c:d2:9e:0f:a2:33:4d:9b:43:0a: 66:d9:e3:62:2f:a7:36:cd:88:77:dc:aa:3a:ae:39: 7f:87:42:9f:c3:39:cc:3e:e3:bd:73:c3:2a:77:8b: 22:5d:a9:f8:a5:02:a4:23:8f:73:b0:82:9a:c2:b0: 95:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:45:F3:A6:6B:D3:C1:90:2C:50:35:96:13:C7:AB:CA:53:A4:9E:60 X509v3 Authority Key Identifier: keyid:BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/1UXzpmvTwZAsUDWWE8erylOknmA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.168.228.0/22 IPv6: 2a0b:f080::/32 Signature Algorithm: sha256WithRSAEncryption 95:03:60:30:82:0d:fb:e1:7e:87:a5:db:8e:4f:a2:39:86:6e: b3:b1:67:c1:6c:09:5b:f8:6b:4b:46:44:c3:36:2c:1a:eb:fc: e7:57:c9:48:d6:e0:4f:a6:70:12:69:b2:60:57:88:38:b2:be: de:43:c3:c9:ca:20:1e:88:ea:cf:1b:2a:c7:cb:9a:b8:0c:fa: a6:66:0a:5b:92:b7:60:23:8c:83:9f:7d:34:50:fb:ab:29:f5: d3:aa:cd:10:00:28:dd:ac:22:8d:da:6d:c6:3e:c5:1b:45:bf: 4e:4b:33:8d:2d:09:2d:7d:b1:14:28:f3:89:72:b2:a5:6e:51: 2b:44:69:b2:ae:0c:2b:9d:ba:69:94:1d:9e:ae:73:f8:65:ee: 40:ca:0e:6a:5c:f8:6a:0a:2f:4b:88:58:0c:9a:cd:ee:f5:7a: 94:1e:69:b4:89:8b:52:6d:01:94:d7:8b:a9:57:10:99:a4:5d: be:e7:61:8c:7c:2a:ef:b6:8c:45:c1:91:9b:21:93:eb:0f:d4: 35:bd:96:34:74:85:c5:3a:0b:09:95:14:3b:54:21:58:b9:72: 9a:8d:2a:23:c7:6a:67:71:10:ae:62:c9:fa:43:69:1a:8a:34: 9b:0d:31:15:6f:47:cb:2c:8e:3e:40:62:2e:f0:3a:ee:dc:38: de:51:9d:ad -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57MYKfGfa7sDC5749PwI5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYzU1ZmIyNGFkNTU2ZTA0MjAyNjUxZjZkNWE4YjI3ZDVi ZWRmOTcwHhcNMjYwMTAxMTQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTQ1ZjNhNjZiZDNjMTkwMmM1MDM1OTYxM2M3YWJjYTUzYTQ5ZTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQDw8l0X/3/ny60pJN1e6MHOAEiX Q5Hf536EwJWkqV6Xp+ZrFzzCMgcGORqNPlHbJR97nBQ8X+RoFzMM4fSyHJSRFWcG Za2/mUBkTY6Tb7Wzddo4tOA61vRydwgbmNMthzU1qhDAY3O6yIBI/uGCicYz79ah U2y39SWIoJNM/GR1LSbTyeMP0cThxlcm4bu5RWK5ClRmZqJ7D3We0DupHRmv1oIC BYXIlj9STP9AkcCsA29XHcK1SuPTEEBiSAtaqF5NExgW22zSng+iM02bQwpm2eNi L6c2zYh33Ko6rjl/h0KfwznMPuO9c8Mqd4siXan4pQKkI49zsIKawrCV6wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNVF86Zr08GQLFA1lhPHq8pTpJ5gMB8GA1UdIwQY MBaAFLvFX7JK1VbgQgJlH21aiyfVvt+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdThWZnNrclZWdUJDQW1VZmJWcUxKOVctMzVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80NjkyMmYtNWNiNi00ZDk4LWI0ZmMt OTNiZDVlNDA4ZjkxLzEvMVVYenBtdlR3WkFzVURXV0U4ZXJ5bE9rbm1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi80NjkyMmYtNWNiNi00ZDk4LWI0ZmMtOTNiZDVlNDA4Zjkx LzEvdThWZnNrclZWdUJDQW1VZmJWcUxKOVctMzVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuajkMA0E AgACMAcDBQAqC/CAMA0GCSqGSIb3DQEBCwUAA4IBAQCVA2Awgg374X6HpduOT6I5 hm6zsWfBbAlb+GtLRkTDNiwa6/znV8lI1uBPpnASabJgV4g4sr7eQ8PJyiAeiOrP GyrHy5q4DPqmZgpbkrdgI4yDn300UPurKfXTqs0QACjdrCKN2m3GPsUbRb9OSzON LQktfbEUKPOJcrKlblErRGmyrgwrnbpplB2ernP4Ze5Ayg5qXPhqCi9LiFgMms3u 9XqUHmm0iYtSbQGU14upVxCZpF2+52GMfCrvtoxFwZGbIZPrD9Q1vZY0dIXFOgsJ lRQ7VCFYuXKajSojx2pncRCuYsn6Q2kaijSbDTEVb0fLLI4+QGIu8Dru3DjeUZ2t -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:30 2026 by rpki-client