This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/U8_EsLnGErxSglgJN5gLyzSxN5s.roa File: U8_EsLnGErxSglgJN5gLyzSxN5s.roa (raw, json) Hash identifier: 4aouOfBS+DRof7EvLr9RT9ZxlxZrIs6KqMFoVC5IqpE= Subject key identifier: 53:CF:C4:B0:B9:C6:12:BC:52:82:58:09:37:98:0B:CB:34:B1:37:9B Certificate issuer: /CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5 Certificate serial: 019B797EEC86544A0E6228C669F9E739D76C Authority key identifier: 5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/U8_EsLnGErxSglgJN5gLyzSxN5s.roa Signing time: Thu 01 Jan 2026 12:18:39 +0000 ROA not before: Thu 01 Jan 2026 12:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8218 IP address blocks: 194.127.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ec:86:54:4a:0e:62:28:c6:69:f9:e7:39:d7:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5 Validity Not Before: Jan 1 12:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53cfc4b0b9c612bc5282580937980bcb34b1379b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:91:6e:2d:3c:f0:02:ff:60:91:ed:75:f3:3a: 90:06:13:8b:41:4c:34:24:dd:c4:34:f0:3d:4e:54: 88:c8:b9:5c:56:ba:0d:a1:ee:72:4c:26:c6:e5:41: 48:28:ea:2f:ba:e4:18:5f:6a:d9:84:1d:1f:85:cd: b3:5a:1d:31:9f:44:5e:86:4b:7e:70:7c:a6:78:06: ea:f7:75:e0:0c:dd:c5:4c:49:2a:56:01:85:18:59: 7a:04:cb:c1:f9:de:b1:35:79:ad:a4:1f:74:f0:1a: f0:ce:3a:cd:ab:ab:d7:97:a9:ff:b5:04:a4:67:0f: 81:84:89:57:c4:a4:46:17:a3:31:5f:28:9e:4f:a0: 54:f5:7f:87:4e:52:c9:5e:f7:a1:75:55:ec:43:88: 1e:b2:6a:a7:6c:31:28:b6:40:b6:6e:8d:37:ec:80: 05:3a:e5:db:b9:0e:bc:70:fe:16:76:f3:3d:27:8b: 53:fe:15:e4:f1:14:59:e2:2f:79:ba:1f:f0:12:a9: 40:50:05:ed:b5:75:33:19:38:dd:fe:e3:c2:23:43: d9:46:e6:47:32:5d:48:fb:e3:ef:84:68:1c:3f:b0: 04:72:e6:27:34:be:95:c7:df:26:4c:92:1a:c1:83: 7a:33:5a:d8:70:e5:32:97:92:f1:3e:df:d0:dd:e8: d6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:CF:C4:B0:B9:C6:12:BC:52:82:58:09:37:98:0B:CB:34:B1:37:9B X509v3 Authority Key Identifier: keyid:5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/U8_EsLnGErxSglgJN5gLyzSxN5s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.127.245.0/24 Signature Algorithm: sha256WithRSAEncryption b9:68:5c:8c:a1:a6:1c:44:9b:6c:6f:ea:f2:19:90:0b:e4:d3: ab:8b:b2:fd:83:27:05:e0:32:02:fc:53:96:28:11:3a:03:67: 1a:d7:a7:7d:c9:08:7a:e3:f1:7c:69:17:3b:9d:aa:26:fd:90: 4a:de:69:cc:6d:a3:55:be:75:8f:38:45:98:29:e7:12:26:50: e6:5e:b1:8d:c5:c8:1c:d8:a5:d0:d0:33:c7:45:ad:40:91:17: 89:5f:93:80:de:d8:04:39:fe:89:ff:e5:eb:99:02:b8:f5:9a: 34:11:54:84:bb:d3:a7:db:5f:0b:e1:bd:1d:7b:8e:55:39:e7: 9f:d2:70:a4:ad:4b:f2:63:81:b3:2e:f1:06:41:15:1e:c9:2a: 48:0d:6c:0d:da:7e:9a:df:5a:9e:78:a5:30:b6:e2:36:8e:9f: 06:a8:7a:c3:76:50:39:8d:00:23:15:70:d3:9f:e7:c4:c0:f1: 97:a6:aa:40:5f:fc:59:4b:57:98:00:b1:58:09:b6:61:42:3d: 54:e8:77:16:2e:70:f0:12:b5:f2:45:bd:ca:f0:2e:d1:0e:80: ad:7b:e0:0c:c2:39:51:31:9f:dc:d0:fe:f7:30:5e:c2:db:6d: e1:ca:fc:b3:89:0c:50:f6:30:29:28:cf:f1:95:80:4a:b3:f6: a7:2f:91:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fuyGVEoOYijGafnnOddsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZDk0M2E0MWNlMjdlN2I3YmNmZGZmNjlhODljM2UzMzdl YTYzYjUwHhcNMjYwMTAxMTIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2NmYzRiMGI5YzYxMmJjNTI4MjU4MDkzNzk4MGJjYjM0YjEzNzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZFuLTzwAv9gke118zqQBhOLQUw0 JN3ENPA9TlSIyLlcVroNoe5yTCbG5UFIKOovuuQYX2rZhB0fhc2zWh0xn0Rehkt+ cHymeAbq93XgDN3FTEkqVgGFGFl6BMvB+d6xNXmtpB908BrwzjrNq6vXl6n/tQSk Zw+BhIlXxKRGF6MxXyieT6BU9X+HTlLJXvehdVXsQ4gesmqnbDEotkC2bo037IAF OuXbuQ68cP4WdvM9J4tT/hXk8RRZ4i95uh/wEqlAUAXttXUzGTjd/uPCI0PZRuZH Ml1I++PvhGgcP7AEcuYnNL6Vx98mTJIawYN6M1rYcOUyl5LxPt/Q3ejWCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFPPxLC5xhK8UoJYCTeYC8s0sTebMB8GA1UdIwQY MBaAFFrZQ6Qc4n57e8/f9pqJw+M36mO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3RsRHBCemlmbnQ3ejlfMm1vbkQ0emZxWTdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8yMWI3Y2UtMmVjNi00NzllLThhNGQt ODRmOTA1OTM5MTNjLzEvVThfRXNMbkdFcnhTZ2xnSk41Z0x5elN4TjVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8yMWI3Y2UtMmVjNi00NzllLThhNGQtODRmOTA1OTM5MTNj LzEvV3RsRHBCemlmbnQ3ejlfMm1vbkQ0emZxWTdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwn/1MA0G CSqGSIb3DQEBCwUAA4IBAQC5aFyMoaYcRJtsb+ryGZAL5NOri7L9gycF4DIC/FOW KBE6A2ca16d9yQh64/F8aRc7naom/ZBK3mnMbaNVvnWPOEWYKecSJlDmXrGNxcgc 2KXQ0DPHRa1AkReJX5OA3tgEOf6J/+XrmQK49Zo0EVSEu9On218L4b0de45VOeef 0nCkrUvyY4GzLvEGQRUeySpIDWwN2n6a31qeeKUwtuI2jp8GqHrDdlA5jQAjFXDT n+fEwPGXpqpAX/xZS1eYALFYCbZhQj1U6HcWLnDwErXyRb3K8C7RDoCte+AMwjlR MZ/c0P73MF7C223hyvyziQxQ9jApKM/xlYBKs/anL5HE -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:59 2026 by rpki-client