This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/U_7zBQWTwyWyUplGTwTnhAD7M1w.roa File: U_7zBQWTwyWyUplGTwTnhAD7M1w.roa (raw, json) Hash identifier: qcrvphnrKI926TTY4n+5jtIqzlPgS2kixs/9tqEWP9c= Subject key identifier: 53:FE:F3:05:05:93:C3:25:B2:52:99:46:4F:04:E7:84:00:FB:33:5C Certificate issuer: /CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6 Certificate serial: 019B76EBA0A096D50676F5D3A4141EF64601 Authority key identifier: DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/U_7zBQWTwyWyUplGTwTnhAD7M1w.roa Signing time: Thu 01 Jan 2026 00:18:32 +0000 ROA not before: Thu 01 Jan 2026 00:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199006 IP address blocks: 91.198.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a0:a0:96:d5:06:76:f5:d3:a4:14:1e:f6:46:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6 Validity Not Before: Jan 1 00:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53fef3050593c325b25299464f04e78400fb335c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:27:1f:b0:0c:4b:c0:6c:e4:3a:a0:36:74:89: 54:89:44:b6:76:91:dc:fc:c5:91:4f:d5:a9:d1:b2: 23:c3:26:af:0c:a7:d2:c1:ab:1e:1b:72:f9:b4:2c: 1e:88:70:50:e4:5d:24:b0:d5:a5:b2:71:fb:2c:41: 24:7d:2a:15:0f:7c:79:33:18:3e:44:55:59:3c:eb: 29:26:eb:f6:9d:1a:22:ae:8c:69:48:02:6b:2b:9f: 6c:a3:ca:37:9b:90:92:d9:5a:55:0e:e0:54:7f:23: 74:2d:cf:c2:06:b3:35:91:77:d2:f2:d3:f0:1f:00: 11:72:d9:df:68:6b:35:b8:8e:7b:15:96:73:7b:04: 8a:e6:cf:44:cb:1d:2a:63:1b:d9:50:0b:ef:df:71: 05:da:00:98:7f:4e:8c:82:bf:ff:4d:3b:3e:8d:25: ec:06:6e:e5:5e:d3:bb:ae:0f:f9:f4:8f:33:93:41: 99:ed:1a:1e:6c:fc:96:cd:4c:dd:ed:90:c0:b2:31: c4:e7:d9:c0:83:ce:b4:7b:49:5a:e4:df:6f:2e:2f: 3b:a5:9f:cc:81:29:7d:4b:07:01:84:22:2b:64:28: 49:92:c3:ab:0d:67:30:52:c4:b2:be:14:5d:4a:67: 1f:d9:05:2a:61:b6:25:f1:ec:9d:e6:1b:cf:ce:41: 35:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:FE:F3:05:05:93:C3:25:B2:52:99:46:4F:04:E7:84:00:FB:33:5C X509v3 Authority Key Identifier: keyid:DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/U_7zBQWTwyWyUplGTwTnhAD7M1w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.125.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:91:40:62:35:d9:89:07:25:3b:c2:de:45:dc:02:c0:ad:70: 94:46:ff:f4:e3:74:ea:24:88:69:7f:c6:12:d2:c9:f6:fa:a0: 81:33:2b:9a:9a:4a:9a:96:04:0c:99:98:da:53:58:c5:27:0f: 0a:c2:6a:67:a7:0b:32:17:af:1d:ca:4d:83:a5:54:f9:a1:66: 84:5f:b4:ef:ae:3b:75:59:dd:c4:e0:fc:f3:d6:3e:c5:15:18: 11:8a:46:dc:20:f7:10:9c:51:00:22:68:16:13:6b:62:de:d6: fc:d4:6b:b8:a2:64:b2:fb:32:f1:42:8d:c6:be:10:2d:2b:27: 94:57:42:11:ee:a5:ce:01:df:52:e2:ad:49:a5:0c:77:4f:56: c7:6d:0b:23:95:f1:91:d8:c2:b0:35:0b:4a:b1:1c:96:9c:07: 02:3e:53:b6:02:06:72:70:53:2f:32:f7:ae:b7:bb:ae:49:b6: 7b:49:46:7f:d4:f9:2c:88:ab:a7:f9:06:a1:72:c1:18:c6:6b: 31:26:30:9b:b4:2f:2d:21:25:80:7d:53:45:e0:1b:2b:14:67: a4:67:28:b4:d7:18:83:b1:b1:9b:06:21:00:71:d8:76:d8:6d: 48:bc:f3:09:af:f5:c7:0a:76:e6:8e:6c:ca:7c:d8:5c:6f:67: 14:d8:cc:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt266CgltUGdvXTpBQe9kYBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjODJkMmM3ZWI1ZmE1NDNlMzJmMWVlZTE5Y2QzNWE1Njcz Y2ZhZTYwHhcNMjYwMTAxMDAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2ZlZjMwNTA1OTNjMzI1YjI1Mjk5NDY0ZjA0ZTc4NDAwZmIzMzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCcfsAxLwGzkOqA2dIlUiUS2dpHc /MWRT9Wp0bIjwyavDKfSwaseG3L5tCweiHBQ5F0ksNWlsnH7LEEkfSoVD3x5Mxg+ RFVZPOspJuv2nRoiroxpSAJrK59so8o3m5CS2VpVDuBUfyN0Lc/CBrM1kXfS8tPw HwARctnfaGs1uI57FZZzewSK5s9Eyx0qYxvZUAvv33EF2gCYf06Mgr//TTs+jSXs Bm7lXtO7rg/59I8zk0GZ7RoebPyWzUzd7ZDAsjHE59nAg860e0la5N9vLi87pZ/M gSl9SwcBhCIrZChJksOrDWcwUsSyvhRdSmcf2QUqYbYl8eyd5hvPzkE1FwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFP+8wUFk8MlslKZRk8E54QA+zNcMB8GA1UdIwQY MBaAFNyC0sfrX6VD4y8e7hnNNaVnPPrmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0lMU3gtdGZwVVBqTHg3dUdjMDFwV2M4LXVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84NDJiNWItOTg1Yy00NGQ3LTk1OTgt MDM5ZGVhNTA2OTRlLzEvVV83ekJRV1R3eVd5VXBsR1R3VG5oQUQ3TTF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84NDJiNWItOTg1Yy00NGQ3LTk1OTgtMDM5ZGVhNTA2OTRl LzEvM0lMU3gtdGZwVVBqTHg3dUdjMDFwV2M4LXVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8Z9MA0G CSqGSIb3DQEBCwUAA4IBAQBbkUBiNdmJByU7wt5F3ALArXCURv/043TqJIhpf8YS 0sn2+qCBMyuamkqalgQMmZjaU1jFJw8KwmpnpwsyF68dyk2DpVT5oWaEX7Tvrjt1 Wd3E4Pzz1j7FFRgRikbcIPcQnFEAImgWE2ti3tb81Gu4omSy+zLxQo3GvhAtKyeU V0IR7qXOAd9S4q1JpQx3T1bHbQsjlfGR2MKwNQtKsRyWnAcCPlO2AgZycFMvMveu t7uuSbZ7SUZ/1PksiKun+QahcsEYxmsxJjCbtC8tISWAfVNF4BsrFGekZyi01xiD sbGbBiEAcdh22G1IvPMJr/XHCnbmjmzKfNhcb2cU2Mw9 -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:51 2026 by rpki-client