This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/Up6FPG2EmlxGGm-IJpPlY2eyxIw.roa File: Up6FPG2EmlxGGm-IJpPlY2eyxIw.roa (raw, json) Hash identifier: vllY3zX6/fq+SiGXdC5fpCJcuaKw1ngd9//Sa26iQZc= Subject key identifier: 52:9E:85:3C:6D:84:9A:5C:46:1A:6F:88:26:93:E5:63:67:B2:C4:8C Certificate issuer: /CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1 Certificate serial: 019B78352D7C01E82BBA657ABCAB0BDAEF96 Authority key identifier: 7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/Up6FPG2EmlxGGm-IJpPlY2eyxIw.roa Signing time: Thu 01 Jan 2026 06:18:29 +0000 ROA not before: Thu 01 Jan 2026 06:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35369 IP address blocks: 83.164.128.0/17 maxlen: 32 185.121.40.0/22 maxlen: 24 2a00:1860::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:2d:7c:01:e8:2b:ba:65:7a:bc:ab:0b:da:ef:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1 Validity Not Before: Jan 1 06:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=529e853c6d849a5c461a6f882693e56367b2c48c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:42:7a:a1:8f:da:c1:4a:03:e9:02:4d:da:28: 6f:98:a3:0f:81:d0:ae:03:b5:13:bf:1a:7e:ee:3b: 16:f0:a5:05:40:b5:e5:ae:3e:61:34:67:b2:ce:5c: d1:95:3a:4d:e1:19:09:7b:f4:3d:74:46:9f:d5:b9: 51:df:5c:c8:d7:e2:88:39:cd:21:eb:ad:6d:4d:9f: e0:4c:13:8a:62:bf:f9:56:97:30:c6:f0:41:24:e2: 91:02:55:7d:c5:13:e2:e9:0c:d5:ac:a7:d4:7e:3c: bb:d1:0a:e1:f6:54:bb:92:09:b6:4f:b9:86:8f:a3: 5a:ad:6d:1d:95:85:1a:31:bc:01:27:bd:41:12:1f: 0f:84:17:05:90:b1:88:6e:77:3a:ee:4c:7a:b4:6f: 9c:fa:ff:af:31:86:dc:43:28:c2:94:93:e9:ee:9a: 17:67:d6:7c:75:6a:82:b0:d9:24:ba:f1:79:9d:9e: 64:ea:e3:57:ba:96:12:d7:a5:db:4a:da:21:70:05: f8:00:1b:b1:fc:7b:0d:98:00:e7:b6:7b:c0:52:de: 90:35:31:2e:2f:22:b4:ff:1e:4e:a4:6c:b5:1c:10: 37:29:56:f6:36:07:b6:ab:5b:5d:20:cd:89:8c:b3: 61:6d:be:7c:94:51:3d:50:d4:18:c2:01:10:20:3b: 0e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9E:85:3C:6D:84:9A:5C:46:1A:6F:88:26:93:E5:63:67:B2:C4:8C X509v3 Authority Key Identifier: keyid:7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/Up6FPG2EmlxGGm-IJpPlY2eyxIw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.164.128.0/17 185.121.40.0/22 IPv6: 2a00:1860::/32 Signature Algorithm: sha256WithRSAEncryption 4b:a9:e6:c7:e2:f5:30:42:73:1b:1a:55:da:dd:0e:c6:06:13: e3:06:1e:65:e2:20:1d:d1:05:fe:6f:38:0f:68:f7:37:67:e1: 88:80:af:a6:ac:de:0a:2e:98:06:fc:c0:94:c8:d4:68:a7:3a: c1:a2:7b:8c:7a:35:bf:d3:aa:4f:6e:d5:0c:15:07:a1:47:be: 9c:90:19:4d:2e:c3:8c:3e:a3:65:55:84:74:cb:73:5f:6e:92: 7a:e9:5f:e8:68:08:0d:1a:d1:7f:47:e1:b9:3d:7a:dc:ed:ba: 75:a0:0d:b1:d3:ce:d7:05:77:77:59:26:55:b4:08:ee:cd:32: 80:e2:cb:04:5f:da:43:f8:e4:53:1f:e5:87:c6:89:17:91:96: 57:f8:f7:2f:0c:e2:32:3b:28:07:f6:de:a7:e2:a3:df:8c:de: c4:5c:54:ca:74:37:3d:1d:bc:03:79:4a:3a:2a:99:df:c3:60: 17:5b:4a:70:41:88:b7:76:da:08:6b:08:bc:8b:6d:8e:a3:c4: 14:de:e5:2c:2a:71:a8:10:db:d5:d4:c1:86:e8:3d:34:e6:aa: db:a6:15:c6:cb:23:ff:3d:86:42:8c:07:eb:5c:2b:7a:f8:35: 99:1f:32:cb:a9:4d:06:4a:9a:81:ac:7e:62:d0:1d:f0:4b:49: 36:db:30:d6 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4NS18AegrumV6vKsL2u+WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNjQ1ZTU4NGYxZWY5YTg4MWYxZmJiYzRkMjdhMzQyM2Rl M2RmZjEwHhcNMjYwMTAxMDYxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjllODUzYzZkODQ5YTVjNDYxYTZmODgyNjkzZTU2MzY3YjJjNDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EJ6oY/awUoD6QJN2ihvmKMPgdCu A7UTvxp+7jsW8KUFQLXlrj5hNGeyzlzRlTpN4RkJe/Q9dEaf1blR31zI1+KIOc0h 661tTZ/gTBOKYr/5VpcwxvBBJOKRAlV9xRPi6QzVrKfUfjy70Qrh9lS7kgm2T7mG j6NarW0dlYUaMbwBJ71BEh8PhBcFkLGIbnc67kx6tG+c+v+vMYbcQyjClJPp7poX Z9Z8dWqCsNkkuvF5nZ5k6uNXupYS16XbStohcAX4ABux/HsNmADntnvAUt6QNTEu LyK0/x5OpGy1HBA3KVb2Nge2q1tdIM2JjLNhbb58lFE9UNQYwgEQIDsOawIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFKehTxthJpcRhpviCaT5WNnssSMMB8GA1UdIwQY MBaAFH1kXlhPHvmogfH7vE0no0I949/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZldSZVdFOGUtYWlCOGZ1OFRTZWpRajNqM19FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wZDFjMzMtOTExNy00YTExLWJiZmUt ZGI4MWExOGUyNDJlLzEvVXA2RlBHMkVtbHhHR20tSUpwUGxZMmV5eEl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8wZDFjMzMtOTExNy00YTExLWJiZmUtZGI4MWExOGUyNDJl LzEvZldSZVdFOGUtYWlCOGZ1OFRTZWpRajNqM19FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQHU6SAAwQC uXkoMA0EAgACMAcDBQAqABhgMA0GCSqGSIb3DQEBCwUAA4IBAQBLqebH4vUwQnMb GlXa3Q7GBhPjBh5l4iAd0QX+bzgPaPc3Z+GIgK+mrN4KLpgG/MCUyNRopzrBonuM ejW/06pPbtUMFQehR76ckBlNLsOMPqNlVYR0y3NfbpJ66V/oaAgNGtF/R+G5PXrc 7bp1oA2x087XBXd3WSZVtAjuzTKA4ssEX9pD+ORTH+WHxokXkZZX+PcvDOIyOygH 9t6n4qPfjN7EXFTKdDc9HbwDeUo6Kpnfw2AXW0pwQYi3dtoIawi8i22Oo8QU3uUs KnGoENvV1MGG6D005qrbphXGyyP/PYZCjAfrXCt6+DWZHzLLqU0GSpqBrH5i0B3w S0k22zDW -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:07 2026 by rpki-client