This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/U0LODaOMrjUHjvfuhAcASZ21WcM.roa File: U0LODaOMrjUHjvfuhAcASZ21WcM.roa (raw, json) Hash identifier: j2xa758ILueslrV9b8XrvATqLNgANaVA6UWyPVMJwuM= Subject key identifier: 53:42:CE:0D:A3:8C:AE:35:07:8E:F7:EE:84:07:00:49:9D:B5:59:C3 Certificate issuer: /CN=12ee6257d0c3a2b930561af2522d9e5af7f9cbc7 Certificate serial: 019B7EA6C060E9AFA143C866EF976E8C9541 Authority key identifier: 12:EE:62:57:D0:C3:A2:B9:30:56:1A:F2:52:2D:9E:5A:F7:F9:CB:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu5iV9DDorkwVhryUi2eWvf5y8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/U0LODaOMrjUHjvfuhAcASZ21WcM.roa Signing time: Fri 02 Jan 2026 12:20:15 +0000 ROA not before: Fri 02 Jan 2026 12:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.235.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/Eu5iV9DDorkwVhryUi2eWvf5y8c.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/Eu5iV9DDorkwVhryUi2eWvf5y8c.mft rsync://rpki.ripe.net/repository/DEFAULT/Eu5iV9DDorkwVhryUi2eWvf5y8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:c0:60:e9:af:a1:43:c8:66:ef:97:6e:8c:95:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12ee6257d0c3a2b930561af2522d9e5af7f9cbc7 Validity Not Before: Jan 2 12:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5342ce0da38cae35078ef7ee840700499db559c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:26:d7:c9:d7:b5:cb:f2:10:3f:4b:bf:cc:46: 6a:57:d5:d1:f5:cd:52:c8:99:12:f1:b9:4a:ae:54: 3e:67:27:f3:c4:6c:e1:90:d3:95:05:7d:e7:9a:7d: 35:82:13:78:38:9f:6b:24:ed:d1:75:cf:63:9a:57: 56:17:80:6b:7a:35:ae:43:3b:f6:0d:50:42:af:5e: 3c:e8:5b:b7:1e:08:5b:81:97:10:08:f9:73:be:ae: 17:31:e0:71:89:07:a8:56:cc:67:36:59:e5:72:3d: 96:d1:db:76:aa:64:4f:09:92:29:2a:7a:6f:7a:0d: 2b:6a:7f:69:33:81:94:f0:06:b3:28:3f:19:cd:9f: 3e:92:38:83:fe:cc:f2:c2:fe:f2:33:93:66:0d:c0: 5b:fb:cf:d0:f1:7f:2a:f8:d6:a1:a0:cc:9a:a1:d5: 06:2c:e8:b5:72:81:58:ed:26:fe:71:9f:22:9c:f0: c2:ea:91:98:4b:c0:50:1f:1e:0b:30:5b:bf:b9:35: 28:9a:0f:7d:76:92:b5:79:45:a5:b0:8a:9c:47:ee: ee:4f:7d:cb:d5:00:f7:9a:eb:90:cd:66:09:d3:14: 56:55:d2:1d:b2:76:ea:91:39:92:2f:c9:dd:f7:fe: 22:57:8b:67:44:ba:88:ad:08:4c:21:99:84:a6:14: 7a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:42:CE:0D:A3:8C:AE:35:07:8E:F7:EE:84:07:00:49:9D:B5:59:C3 X509v3 Authority Key Identifier: keyid:12:EE:62:57:D0:C3:A2:B9:30:56:1A:F2:52:2D:9E:5A:F7:F9:CB:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu5iV9DDorkwVhryUi2eWvf5y8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/U0LODaOMrjUHjvfuhAcASZ21WcM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/Eu5iV9DDorkwVhryUi2eWvf5y8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.235.38.0/24 Signature Algorithm: sha256WithRSAEncryption 34:c7:a6:eb:ab:c2:3e:56:f0:1f:15:50:fb:e1:8d:4b:b0:35: b9:a9:0a:93:73:ef:58:8f:75:78:60:d1:bf:65:2f:31:d1:ee: cc:af:98:be:0f:d2:6a:df:1f:c6:e0:6a:8d:82:86:73:42:50: be:77:fe:bf:89:24:09:b8:b2:2d:2c:ca:07:94:0b:3b:9c:ce: 4a:e2:85:74:87:d6:91:a6:d3:94:ad:8a:e7:44:63:b1:72:5b: 74:97:4a:54:4e:8a:1e:bb:81:3d:18:05:34:cb:b8:21:4f:da: b0:81:6f:d0:85:5b:7d:fc:bc:07:1a:93:e2:11:41:6d:9d:4e: ef:e4:ab:1d:58:b6:98:b4:4f:87:23:bd:27:04:f2:49:7d:36: f4:33:5d:8f:ff:90:8d:c9:fe:e9:5c:a5:5d:6a:a0:02:91:e3: 7b:f3:75:f2:fe:20:8c:1f:3b:aa:21:6c:d9:17:c0:fe:9a:dd: 35:a8:6d:50:79:2b:78:c2:35:30:e9:c6:44:a9:61:71:7f:70: e4:8a:92:d7:26:29:37:65:66:10:99:29:ee:0f:66:ea:0d:bd: f2:1a:ce:60:b3:67:24:b8:04:7d:9d:ef:76:c8:c7:33:a0:a4: 26:cb:4f:cc:53:74:03:04:d7:0e:84:14:d2:8f:9f:15:47:26: cb:41:9d:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+psBg6a+hQ8hm75dujJVBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZWU2MjU3ZDBjM2EyYjkzMDU2MWFmMjUyMmQ5ZTVhZjdm OWNiYzcwHhcNMjYwMTAyMTIyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzQyY2UwZGEzOGNhZTM1MDc4ZWY3ZWU4NDA3MDA0OTlkYjU1OWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCbXyde1y/IQP0u/zEZqV9XR9c1S yJkS8blKrlQ+ZyfzxGzhkNOVBX3nmn01ghN4OJ9rJO3Rdc9jmldWF4BrejWuQzv2 DVBCr1486Fu3HghbgZcQCPlzvq4XMeBxiQeoVsxnNlnlcj2W0dt2qmRPCZIpKnpv eg0ran9pM4GU8AazKD8ZzZ8+kjiD/szywv7yM5NmDcBb+8/Q8X8q+NahoMyaodUG LOi1coFY7Sb+cZ8inPDC6pGYS8BQHx4LMFu/uTUomg99dpK1eUWlsIqcR+7uT33L 1QD3muuQzWYJ0xRWVdIdsnbqkTmSL8nd9/4iV4tnRLqIrQhMIZmEphR6eQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFNCzg2jjK41B4737oQHAEmdtVnDMB8GA1UdIwQY MBaAFBLuYlfQw6K5MFYa8lItnlr3+cvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXU1aVY5RERvcmt3VmhyeVVpMmVXdmY1eThjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83MWRlZTItZTFjMS00MGNlLWIzMTEt M2YzMzg2NjE5MmQwLzEvVTBMT0RhT01yalVIanZmdWhBY0FTWjIxV2NNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83MWRlZTItZTFjMS00MGNlLWIzMTEtM2YzMzg2NjE5MmQw LzEvRXU1aVY5RERvcmt3VmhyeVVpMmVXdmY1eThjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuesmMA0G CSqGSIb3DQEBCwUAA4IBAQA0x6brq8I+VvAfFVD74Y1LsDW5qQqTc+9Yj3V4YNG/ ZS8x0e7Mr5i+D9Jq3x/G4GqNgoZzQlC+d/6/iSQJuLItLMoHlAs7nM5K4oV0h9aR ptOUrYrnRGOxclt0l0pUTooeu4E9GAU0y7ghT9qwgW/QhVt9/LwHGpPiEUFtnU7v 5KsdWLaYtE+HI70nBPJJfTb0M12P/5CNyf7pXKVdaqACkeN783Xy/iCMHzuqIWzZ F8D+mt01qG1QeSt4wjUw6cZEqWFxf3DkipLXJik3ZWYQmSnuD2bqDb3yGs5gs2ck uAR9ne92yMczoKQmy0/MU3QDBNcOhBTSj58VRybLQZ1j -----END CERTIFICATE-----Generated at Sat Jan 17 06:45:35 2026 by rpki-client