This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/U2zR2wxNZR-C_elTQ_PCnfByBwY.roa File: U2zR2wxNZR-C_elTQ_PCnfByBwY.roa (raw, json) Hash identifier: OLi955MoAoQc7KvGiHIZSl5vpca4xWCeVTWNOe8m2YI= Subject key identifier: 53:6C:D1:DB:0C:4D:65:1F:82:FD:E9:53:43:F3:C2:9D:F0:72:07:06 Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47 Certificate serial: 019B7910F50145F31074C0EB448EE548D384 Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/U2zR2wxNZR-C_elTQ_PCnfByBwY.roa Signing time: Thu 01 Jan 2026 10:18:33 +0000 ROA not before: Thu 01 Jan 2026 10:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 262589 IP address blocks: 158.172.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f5:01:45:f3:10:74:c0:eb:44:8e:e5:48:d3:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47 Validity Not Before: Jan 1 10:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=536cd1db0c4d651f82fde95343f3c29df0720706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:0b:7b:96:81:91:b7:4f:35:dd:4a:dc:72:7f: 59:f0:57:33:fa:bf:31:6a:ae:0b:e6:1a:e1:40:9e: bb:d0:cf:9e:82:79:85:42:8e:1e:57:6b:37:78:e4: 0e:00:52:bb:02:57:ae:6e:d4:0a:c2:cf:b2:b0:12: 15:b1:49:72:32:0f:3d:a0:58:4d:e3:11:d3:48:f2: a4:04:3e:9c:49:db:ac:99:bd:39:f1:29:9f:c6:bb: f5:a0:92:7d:ee:52:4e:65:ea:22:a5:6d:05:69:7b: 75:e7:fe:76:50:36:49:19:d5:8b:6e:3e:0e:85:8a: ae:2d:b1:0a:20:f0:1d:43:a3:c0:4c:e3:99:66:e4: de:6e:e2:f6:b1:cc:13:3b:1b:65:3d:ce:8f:40:11: d8:1a:cb:56:36:2c:25:17:60:8c:d6:ff:c7:dd:43: 74:68:50:9c:7b:a7:c7:54:f6:d2:02:13:c9:e3:34: 86:ed:17:68:5a:a3:5b:54:b2:0b:0f:25:fd:c0:99: 19:d7:fe:aa:06:34:b5:c2:66:f3:40:8d:53:cb:9f: 1a:0f:68:2d:f8:22:24:08:ea:dc:e3:c0:37:2f:cd: b5:77:8c:2f:13:9a:d5:35:92:3e:e2:9d:e6:d5:55: bf:92:a1:d6:b6:ae:68:5f:66:0d:7e:0d:f2:53:34: 7d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:6C:D1:DB:0C:4D:65:1F:82:FD:E9:53:43:F3:C2:9D:F0:72:07:06 X509v3 Authority Key Identifier: keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/U2zR2wxNZR-C_elTQ_PCnfByBwY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.172.219.0/24 Signature Algorithm: sha256WithRSAEncryption 89:82:79:bd:58:e0:64:62:18:9d:6f:82:e3:1e:33:ed:df:2e: 06:b4:2f:90:9b:99:19:86:64:7d:3a:60:0c:5e:ad:c7:0a:a4: b7:80:4f:a3:87:97:14:e4:5a:ae:47:bb:24:1e:9f:ff:04:01: 29:fd:40:07:f2:d8:67:a6:b6:cc:78:b1:da:e8:34:1c:ff:63: fc:b0:fd:c2:c1:43:4c:07:5e:3b:c4:a5:ec:84:77:8a:58:b9: c7:34:2a:2b:44:59:d9:e9:4a:1f:d7:04:c8:fe:16:65:5d:5e: d0:fc:28:3b:93:8d:c6:1a:17:fc:a2:9a:87:a5:ae:dc:dc:06: b9:33:b0:ae:37:e4:02:69:05:c3:2d:4c:89:24:f7:00:58:f4: ee:a1:0e:f4:ad:35:1b:db:7d:6f:90:cf:a3:ca:70:bd:31:81: 90:0c:c3:c1:90:e4:67:89:86:88:ac:49:87:a0:7c:74:77:84: 9d:d9:3a:b2:db:1c:03:32:d7:94:df:7e:ce:dc:b8:6e:cc:20: 3b:8b:56:b9:38:4e:30:51:59:96:73:bc:90:99:8a:47:9d:6c: 97:4f:e1:d9:88:c7:0d:04:73:9f:41:d6:4b:99:3a:3c:d1:39: a1:1c:d3:d2:e9:66:11:4f:81:7d:53:6b:5e:f7:37:25:29:f8: 1f:a0:d3:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EPUBRfMQdMDrRI7lSNOEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1 MzhkNDcwHhcNMjYwMTAxMTAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzZjZDFkYjBjNGQ2NTFmODJmZGU5NTM0M2YzYzI5ZGYwNzIwNzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7At7loGRt0813Urccn9Z8Fcz+r8x aq4L5hrhQJ670M+egnmFQo4eV2s3eOQOAFK7AleubtQKws+ysBIVsUlyMg89oFhN 4xHTSPKkBD6cSdusmb058Smfxrv1oJJ97lJOZeoipW0FaXt15/52UDZJGdWLbj4O hYquLbEKIPAdQ6PATOOZZuTebuL2scwTOxtlPc6PQBHYGstWNiwlF2CM1v/H3UN0 aFCce6fHVPbSAhPJ4zSG7RdoWqNbVLILDyX9wJkZ1/6qBjS1wmbzQI1Ty58aD2gt +CIkCOrc48A3L821d4wvE5rVNZI+4p3m1VW/kqHWtq5oX2YNfg3yUzR9jQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFNs0dsMTWUfgv3pU0Pzwp3wcgcGMB8GA1UdIwQY MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It MWVkMTA5NTRiZDk2LzEvVTJ6UjJ3eE5aUi1DX2VsVFFfUENuZkJ5QndZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2 LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnqzbMA0G CSqGSIb3DQEBCwUAA4IBAQCJgnm9WOBkYhidb4LjHjPt3y4GtC+Qm5kZhmR9OmAM Xq3HCqS3gE+jh5cU5FquR7skHp//BAEp/UAH8thnprbMeLHa6DQc/2P8sP3CwUNM B147xKXshHeKWLnHNCorRFnZ6Uof1wTI/hZlXV7Q/Cg7k43GGhf8opqHpa7c3Aa5 M7CuN+QCaQXDLUyJJPcAWPTuoQ70rTUb231vkM+jynC9MYGQDMPBkORniYaIrEmH oHx0d4Sd2Tqy2xwDMteU337O3LhuzCA7i1a5OE4wUVmWc7yQmYpHnWyXT+HZiMcN BHOfQdZLmTo80TmhHNPS6WYRT4F9U2te9zclKfgfoNNP -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:48 2026 by rpki-client