This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/UIv6jVS0p5268_XYhub9OHb_bA0.roa File: UIv6jVS0p5268_XYhub9OHb_bA0.roa (raw, json) Hash identifier: KT5y+HpZ43GmqDM+m5jLP788GzijAuuEants3+erKgY= Subject key identifier: 50:8B:FA:8D:54:B4:A7:9D:BA:F3:F5:D8:86:E6:FD:38:76:FF:6C:0D Certificate issuer: /CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375 Certificate serial: 019BC8405B2EA60BFAEBCD26D6C7BCA8E1E7 Authority key identifier: 8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/UIv6jVS0p5268_XYhub9OHb_bA0.roa Signing time: Fri 16 Jan 2026 19:20:19 +0000 ROA not before: Fri 16 Jan 2026 19:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 188.64.16.0/24 maxlen: 24 188.64.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c8:40:5b:2e:a6:0b:fa:eb:cd:26:d6:c7:bc:a8:e1:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375 Validity Not Before: Jan 16 19:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=508bfa8d54b4a79dbaf3f5d886e6fd3876ff6c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ea:19:d9:1b:6e:61:18:22:67:41:e9:2d:48: 11:22:61:8b:87:44:cb:96:16:25:41:4e:76:42:e2: 3f:9d:0e:2e:f0:62:5e:91:f9:a2:1d:74:c4:f2:77: 4e:1e:28:80:70:c4:c2:8c:fe:75:54:09:58:e4:e8: ba:09:f3:87:d5:c1:4c:0c:7e:a0:d9:2e:92:51:a2: 05:fb:68:69:b6:cb:6a:76:2e:81:89:5d:74:69:9e: 5f:49:aa:d7:8b:c7:70:2b:3c:69:76:b7:a3:a3:95: 62:a6:0b:17:4e:3d:fe:b0:b2:54:12:f9:56:72:3f: 1e:ab:80:a1:19:ff:15:89:9f:72:78:c1:7d:52:b0: c1:4f:d2:21:7d:ed:40:dd:db:d7:9d:d1:f8:de:b9: ef:5c:c7:94:8a:ca:a3:23:b3:46:0e:b6:c2:c0:e7: e6:ad:4d:cc:f8:63:cc:12:1d:3c:b9:e7:83:2a:8f: 5b:df:9f:2d:f8:93:7b:69:ff:95:42:fd:55:c2:26: 06:3e:77:fa:32:66:0e:bb:c6:57:95:a9:5e:99:32: 50:f9:79:c5:64:ee:e4:16:23:0c:a8:6a:a3:18:c8: 9e:18:0e:f1:97:2c:23:ab:26:ea:54:c0:96:ad:04: 46:fb:56:be:cd:59:5e:66:a4:0d:f0:bc:e4:c4:28: 22:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:8B:FA:8D:54:B4:A7:9D:BA:F3:F5:D8:86:E6:FD:38:76:FF:6C:0D X509v3 Authority Key Identifier: keyid:8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/UIv6jVS0p5268_XYhub9OHb_bA0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.64.16.0/24 188.64.22.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:c6:45:03:a8:10:1f:c8:d6:96:4b:d1:01:23:2f:92:aa:7a: d7:9d:a6:c3:03:9f:d4:be:1e:56:44:9f:93:1b:95:29:e6:d7: 81:db:5a:b0:ba:8c:df:ac:e0:fd:82:44:3b:c6:fe:23:14:d3: b5:fe:35:27:13:01:44:b8:20:b2:00:54:c2:32:3c:51:98:21: 10:a7:78:9d:64:61:36:72:aa:f4:6c:d2:77:14:0e:60:d8:20: 80:02:ff:77:0d:86:c0:1f:be:d2:c6:91:bd:81:fd:3f:45:2e: 09:3e:67:b7:02:ca:6e:cc:dd:4a:d8:69:3e:a4:bc:c1:a2:2a: 00:f8:54:07:d2:de:3a:7b:9e:4f:a7:9b:00:89:2e:96:9f:32: ad:5c:3b:88:0f:2d:10:e2:f3:7d:2f:dd:18:9a:9d:25:00:ed: d8:26:26:62:e7:61:0d:3f:62:53:17:36:ed:cc:70:17:c5:9e: e5:a5:c0:36:a4:82:17:c3:73:92:94:36:3b:07:53:2d:74:ac: d4:86:9a:a6:50:47:7c:af:e1:6c:11:a6:40:a9:9e:2c:d7:de: 74:a9:9b:ae:24:2f:d8:68:0e:be:5f:81:1f:b9:50:d1:a6:f7: 04:14:58:de:c6:25:d9:3b:a8:24:d2:57:9b:7b:99:ad:b1:28: d1:d4:ab:ac -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvIQFsupgv6680m1se8qOHnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjOWRjY2Y5ZTJmMzdlYjEwNzQ5NmE3YWFmMTM4OTRlYzQ3 NmUzNzUwHhcNMjYwMTE2MTkyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDhiZmE4ZDU0YjRhNzlkYmFmM2Y1ZDg4NmU2ZmQzODc2ZmY2YzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+oZ2RtuYRgiZ0HpLUgRImGLh0TL lhYlQU52QuI/nQ4u8GJekfmiHXTE8ndOHiiAcMTCjP51VAlY5Oi6CfOH1cFMDH6g 2S6SUaIF+2hptstqdi6BiV10aZ5fSarXi8dwKzxpdrejo5VipgsXTj3+sLJUEvlW cj8eq4ChGf8ViZ9yeMF9UrDBT9Ihfe1A3dvXndH43rnvXMeUisqjI7NGDrbCwOfm rU3M+GPMEh08ueeDKo9b358t+JN7af+VQv1VwiYGPnf6MmYOu8ZXlalemTJQ+XnF ZO7kFiMMqGqjGMieGA7xlywjqybqVMCWrQRG+1a+zVleZqQN8LzkxCgi2QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFCL+o1UtKeduvP12Ibm/Th2/2wNMB8GA1UdIwQY MBaAFIydzPni836xB0lqeq8TiU7EduN1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakozTS1lTHpmckVIU1dwNnJ4T0pUc1IyNDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iZDU1ZWUtYzdhNi00MWI4LWJiMzEt NmE4YzNiNjc2YjU3LzEvVUl2NmpWUzBwNTI2OF9YWWh1YjlPSGJfYkEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9iZDU1ZWUtYzdhNi00MWI4LWJiMzEtNmE4YzNiNjc2YjU3 LzEvakozTS1lTHpmckVIU1dwNnJ4T0pUc1IyNDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvEAQAwQA vEAWMA0GCSqGSIb3DQEBCwUAA4IBAQBaxkUDqBAfyNaWS9EBIy+SqnrXnabDA5/U vh5WRJ+TG5Up5teB21qwuozfrOD9gkQ7xv4jFNO1/jUnEwFEuCCyAFTCMjxRmCEQ p3idZGE2cqr0bNJ3FA5g2CCAAv93DYbAH77SxpG9gf0/RS4JPme3AspuzN1K2Gk+ pLzBoioA+FQH0t46e55Pp5sAiS6WnzKtXDuIDy0Q4vN9L90Ymp0lAO3YJiZi52EN P2JTFzbtzHAXxZ7lpcA2pIIXw3OSlDY7B1MtdKzUhpqmUEd8r+FsEaZAqZ4s1950 qZuuJC/YaA6+X4EfuVDRpvcEFFjexiXZO6gk0lebe5mtsSjR1Kus -----END CERTIFICATE-----Generated at Sat Jan 17 08:23:56 2026 by rpki-client