This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/_UEWpOo-pCf8CHkjr-vl8NQNBGs.roa File: _UEWpOo-pCf8CHkjr-vl8NQNBGs.roa (raw, json) Hash identifier: IR3FkIPCV8kC9J8tgW1IORlWK++PlHql1pIWXK2QksE= Subject key identifier: FD:41:16:A4:EA:3E:A4:27:FC:08:79:23:AF:EB:E5:F0:D4:0D:04:6B Certificate issuer: /CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a Certificate serial: 019B7D5CDF7CC274468C1D63FD47E99C0C0C Authority key identifier: 8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/_UEWpOo-pCf8CHkjr-vl8NQNBGs.roa Signing time: Fri 02 Jan 2026 06:19:56 +0000 ROA not before: Fri 02 Jan 2026 06:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44090 IP address blocks: 2.57.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:df:7c:c2:74:46:8c:1d:63:fd:47:e9:9c:0c:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a Validity Not Before: Jan 2 06:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd4116a4ea3ea427fc087923afebe5f0d40d046b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:4a:04:f4:e8:68:f9:87:d6:94:80:37:2f:a1: 95:f0:a2:16:86:0a:d0:d7:c2:17:0d:1b:36:fd:b8: 2f:5d:f6:eb:fc:f0:97:09:58:38:ac:b0:73:9c:19: 56:a4:7f:15:8e:3a:fe:a4:7b:fb:90:09:a2:d1:20: 4f:b7:be:78:80:95:bb:fc:04:4e:38:25:08:49:94: 09:f4:5e:df:ab:6e:8a:d4:a5:7d:58:73:71:87:de: 86:e1:0b:57:42:db:43:1c:39:c8:d8:5c:8c:34:6e: 27:66:ea:5f:8b:2e:26:f0:7b:d8:27:b6:1c:d9:33: 64:3e:2b:71:da:c3:95:cb:23:39:8c:3c:ce:7b:eb: 1c:7b:43:44:62:9e:6c:b2:65:2d:e6:50:66:07:49: 13:4b:f0:6c:6c:bb:67:97:29:b4:ea:7d:15:9d:48: 91:aa:0a:e1:1b:ef:eb:1c:16:a8:12:97:d1:20:39: df:a9:b5:b5:f7:09:75:95:5c:99:20:20:d6:5d:76: 3f:13:4c:57:8d:ea:a8:32:b0:24:5e:e2:e0:ba:39: 98:84:b4:07:92:f6:66:4d:5c:28:8e:b0:32:27:2c: 67:43:ab:58:fc:9a:fe:81:92:aa:1c:96:d3:4a:1d: fd:f4:4c:e5:f1:3e:13:de:77:8d:0f:34:59:b4:23: 45:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:41:16:A4:EA:3E:A4:27:FC:08:79:23:AF:EB:E5:F0:D4:0D:04:6B X509v3 Authority Key Identifier: keyid:8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/_UEWpOo-pCf8CHkjr-vl8NQNBGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.3.0/24 Signature Algorithm: sha256WithRSAEncryption 65:98:cf:5c:33:6a:b1:64:02:7f:d2:88:3c:6b:af:16:75:15: 51:46:ca:1b:df:ab:c1:59:78:c4:51:16:43:2f:12:0c:f0:ea: 94:c2:f5:3f:82:05:cd:b1:33:8f:dc:22:77:3d:0c:35:64:b7: c2:75:d9:7f:7b:b2:7e:e1:09:d8:6f:fb:a1:59:cb:5f:8c:0f: 52:3a:09:4a:11:b6:da:87:5c:b5:af:78:4e:e3:28:0f:ad:0e: 55:83:a1:9e:d1:ba:4c:23:00:47:ba:5a:d3:c1:c9:0b:81:51: 35:d2:94:e4:2b:2f:bf:7a:34:a0:d4:62:9c:2d:01:8b:5a:c3: bf:d4:87:d1:66:de:27:52:bd:97:2c:2a:43:8c:e2:d6:4c:74: 30:4e:b5:37:59:99:cb:c4:02:96:6a:9b:a3:66:d7:0b:3f:0d: 12:f2:e7:23:58:cf:5f:89:8e:17:5c:bb:e1:f1:1a:49:af:2f: 6b:cf:32:e1:b5:0d:15:3a:93:77:0f:1f:2c:2a:4a:eb:73:77: 42:e2:52:fd:6d:f2:89:f5:2e:b9:36:4b:b5:cb:33:da:f6:32: bd:73:35:c7:52:c2:6b:a8:77:e6:4c:22:c1:70:05:ad:a9:28: df:5e:7d:7e:50:4c:0a:2e:7b:aa:39:aa:eb:84:21:06:17:0c: 40:cc:d1:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XN98wnRGjB1j/UfpnAwMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNTNiNDUwYjdlN2RjMWEyZDUzY2Y2OWE1ZWI4OWE1NjVk MzkxM2EwHhcNMjYwMTAyMDYxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDQxMTZhNGVhM2VhNDI3ZmMwODc5MjNhZmViZTVmMGQ0MGQwNDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8EoE9Oho+YfWlIA3L6GV8KIWhgrQ 18IXDRs2/bgvXfbr/PCXCVg4rLBznBlWpH8Vjjr+pHv7kAmi0SBPt754gJW7/ARO OCUISZQJ9F7fq26K1KV9WHNxh96G4QtXQttDHDnI2FyMNG4nZupfiy4m8HvYJ7Yc 2TNkPitx2sOVyyM5jDzOe+sce0NEYp5ssmUt5lBmB0kTS/BsbLtnlym06n0VnUiR qgrhG+/rHBaoEpfRIDnfqbW19wl1lVyZICDWXXY/E0xXjeqoMrAkXuLgujmYhLQH kvZmTVwojrAyJyxnQ6tY/Jr+gZKqHJbTSh399Ezl8T4T3neNDzRZtCNFtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP1BFqTqPqQn/Ah5I6/r5fDUDQRrMB8GA1UdIwQY MBaAFIpTtFC359waLVPPaaXriaVl05E6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWxPMFVMZm4zQm90VTg5cHBldUpwV1hUa1RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xOWZlM2ItMDk5My00MTc4LThlOTQt OWY2NzM4NjI0OWMyLzEvX1VFV3BPby1wQ2Y4Q0hranItdmw4TlFOQkdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8xOWZlM2ItMDk5My00MTc4LThlOTQtOWY2NzM4NjI0OWMy LzEvaWxPMFVMZm4zQm90VTg5cHBldUpwV1hUa1RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjkDMA0G CSqGSIb3DQEBCwUAA4IBAQBlmM9cM2qxZAJ/0og8a68WdRVRRsob36vBWXjEURZD LxIM8OqUwvU/ggXNsTOP3CJ3PQw1ZLfCddl/e7J+4QnYb/uhWctfjA9SOglKEbba h1y1r3hO4ygPrQ5Vg6Ge0bpMIwBHulrTwckLgVE10pTkKy+/ejSg1GKcLQGLWsO/ 1IfRZt4nUr2XLCpDjOLWTHQwTrU3WZnLxAKWapujZtcLPw0S8ucjWM9fiY4XXLvh 8RpJry9rzzLhtQ0VOpN3Dx8sKkrrc3dC4lL9bfKJ9S65Nku1yzPa9jK9czXHUsJr qHfmTCLBcAWtqSjfXn1+UEwKLnuqOarrhCEGFwxAzNF2 -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:36 2026 by rpki-client