This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/u1c26qRbtO2NECygZrqXuUXLxWM.roa File: u1c26qRbtO2NECygZrqXuUXLxWM.roa (raw, json) Hash identifier: jtDoS3NERSt3cIb6DiAqE1bWADSmBl7iTJmu0zjaYyI= Subject key identifier: BB:57:36:EA:A4:5B:B4:ED:8D:10:2C:A0:66:BA:97:B9:45:CB:C5:63 Certificate issuer: /CN=262341b433e1f8fcb796322d2fd926409396e7ad Certificate serial: 019AC996179CB2B4D61F67DBDC2CE8C77854 Authority key identifier: 26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/u1c26qRbtO2NECygZrqXuUXLxWM.roa Signing time: Fri 28 Nov 2025 08:30:48 +0000 ROA not before: Fri 28 Nov 2025 08:30:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44398 IP address blocks: 45.12.36.0/22 maxlen: 24 176.62.200.0/21 maxlen: 21 185.66.0.0/22 maxlen: 24 185.177.120.0/22 maxlen: 24 195.42.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:96:17:9c:b2:b4:d6:1f:67:db:dc:2c:e8:c7:78:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=262341b433e1f8fcb796322d2fd926409396e7ad Validity Not Before: Nov 28 08:30:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bb5736eaa45bb4ed8d102ca066ba97b945cbc563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bb:dc:9d:9f:43:38:b7:bd:1d:66:5d:6d:16: 93:02:ba:85:8e:8d:e3:65:c1:c3:b1:f6:4b:2a:5b: 5f:48:d7:5e:73:e3:e5:90:cd:0a:8c:dd:03:cb:1a: 21:db:ad:34:7e:a8:55:62:53:e5:5a:39:a4:b1:34: 9d:a5:a7:ac:8d:42:e4:ed:17:50:61:8b:e8:7e:6e: d7:75:28:5b:99:74:66:4c:61:1e:b8:53:5d:d4:5e: c2:8f:11:9c:96:fb:fa:5d:45:99:73:dd:19:df:98: 29:7c:df:c2:be:c3:d0:6f:38:a8:c8:e8:33:a1:12: 91:d2:bc:00:52:a5:b8:9e:49:11:64:a2:6e:7d:20: fe:e8:5f:28:40:bc:59:64:d7:b4:9d:1c:94:aa:4f: 3b:fa:61:78:d9:70:d1:20:7d:09:e1:c3:65:e9:64: e8:ae:9a:af:9e:7e:4f:f1:14:f8:6a:24:80:76:5b: 31:6f:28:fb:cf:be:9d:16:39:87:48:00:3a:6a:eb: 65:01:e6:cf:3c:55:78:cf:6b:fa:01:17:d5:66:26: 10:e0:41:bb:73:58:57:08:8e:71:75:59:d0:eb:3d: 33:c8:3b:3e:2a:3f:6c:3b:db:a4:4f:36:3f:62:2a: 5b:de:56:ca:62:37:36:e3:7c:d3:a3:20:74:7a:46: f9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:57:36:EA:A4:5B:B4:ED:8D:10:2C:A0:66:BA:97:B9:45:CB:C5:63 X509v3 Authority Key Identifier: keyid:26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/u1c26qRbtO2NECygZrqXuUXLxWM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.36.0/22 176.62.200.0/21 185.66.0.0/22 185.177.120.0/22 195.42.150.0/23 Signature Algorithm: sha256WithRSAEncryption 96:ce:9b:d4:8d:bc:24:ba:c7:c9:aa:8f:f8:27:c5:4a:9b:10: 53:a8:d5:3b:02:9c:20:ab:21:e9:a1:7a:1c:4f:4d:cc:fa:9e: 8c:62:a1:3a:da:7c:31:c4:23:e0:6e:1f:dc:5a:86:68:c3:ea: 97:bb:91:2f:e3:ff:6e:ed:85:16:ac:b2:2a:5a:22:8b:92:f3: 8f:12:8b:56:8c:5e:a3:e8:15:0d:ac:c3:43:51:4d:25:21:5a: 62:99:5d:5f:94:bf:2f:7a:a2:cb:8f:33:73:d2:0c:9e:2b:46: 59:5e:cc:c2:75:92:58:07:91:96:cd:d6:7f:3e:5c:6b:d2:ff: 62:fd:c1:e0:41:64:1f:64:40:56:5c:15:5f:60:ed:8e:7f:d1: 7f:b5:a9:1f:2e:4a:51:74:3f:db:a4:ff:41:7f:fa:bb:b6:2f: c3:af:2b:9d:59:13:2d:cf:93:59:fd:10:bd:be:07:37:8d:03: 31:8e:12:cf:13:84:a5:10:b3:f1:25:f6:9d:b0:be:7b:c8:18: 86:b3:a3:eb:4c:2e:fd:c1:3b:0b:e5:a3:12:c7:9e:86:a6:86: 6f:d0:4d:cc:ab:4d:c4:b1:ff:e3:e0:81:d7:cd:5b:28:0f:68: 1f:f7:76:25:f1:c4:1f:bb:09:ed:30:03:06:2b:bd:2d:25:6c: 6f:42:22:f0 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZrJlhecsrTWH2fb3Czox3hUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MjM0MWI0MzNlMWY4ZmNiNzk2MzIyZDJmZDkyNjQwOTM5 NmU3YWQwHhcNMjUxMTI4MDgzMDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjU3MzZlYWE0NWJiNGVkOGQxMDJjYTA2NmJhOTdiOTQ1Y2JjNTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLvcnZ9DOLe9HWZdbRaTArqFjo3j ZcHDsfZLKltfSNdec+PlkM0KjN0Dyxoh2600fqhVYlPlWjmksTSdpaesjULk7RdQ YYvofm7XdShbmXRmTGEeuFNd1F7CjxGclvv6XUWZc90Z35gpfN/CvsPQbzioyOgz oRKR0rwAUqW4nkkRZKJufSD+6F8oQLxZZNe0nRyUqk87+mF42XDRIH0J4cNl6WTo rpqvnn5P8RT4aiSAdlsxbyj7z76dFjmHSAA6autlAebPPFV4z2v6ARfVZiYQ4EG7 c1hXCI5xdVnQ6z0zyDs+Kj9sO9ukTzY/Yipb3lbKYjc243zToyB0ekb5TQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFLtXNuqkW7TtjRAsoGa6l7lFy8VjMB8GA1UdIwQY MBaAFCYjQbQz4fj8t5YyLS/ZJkCTluetMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmlOQnREUGgtUHkzbGpJdEw5a21RSk9XNTYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi81NjhlMjEtNTNhNC00ZTU1LTljNTct OTgyODJjODlmNTE2LzEvdTFjMjZxUmJ0TzJORUN5Z1pycVh1VVhMeFdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi81NjhlMjEtNTNhNC00ZTU1LTljNTctOTgyODJjODlmNTE2 LzEvSmlOQnREUGgtUHkzbGpJdEw5a21RSk9XNTYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCLQwkAwQD sD7IAwQCuUIAAwQCubF4AwQBwyqWMA0GCSqGSIb3DQEBCwUAA4IBAQCWzpvUjbwk usfJqo/4J8VKmxBTqNU7ApwgqyHpoXocT03M+p6MYqE62nwxxCPgbh/cWoZow+qX u5Ev4/9u7YUWrLIqWiKLkvOPEotWjF6j6BUNrMNDUU0lIVpimV1flL8veqLLjzNz 0gyeK0ZZXszCdZJYB5GWzdZ/Plxr0v9i/cHgQWQfZEBWXBVfYO2Of9F/takfLkpR dD/bpP9Bf/q7ti/DryudWRMtz5NZ/RC9vgc3jQMxjhLPE4SlELPxJfadsL57yBiG s6PrTC79wTsL5aMSx56GpoZv0E3Mq03Esf/j4IHXzVsoD2gf93Yl8cQfuwntMAMG K70tJWxvQiLw -----END CERTIFICATE-----Generated at Sun Dec 7 05:56:52 2025 by rpki-client