This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/1u23_XHmiJhjqy9S76sw3BzP9Ww.roa File: 1u23_XHmiJhjqy9S76sw3BzP9Ww.roa (raw, json) Hash identifier: qDjQXmy6brh3hQItl8JxTdLVuqnZ3WF2FKz/Ualn8KI= Subject key identifier: D6:ED:B7:FD:71:E6:88:98:63:AB:2F:52:EF:AB:30:DC:1C:CF:F5:6C Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc Certificate serial: 019B7BA3C7EDE6746B86679D284E4764ACE4 Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/1u23_XHmiJhjqy9S76sw3BzP9Ww.roa Signing time: Thu 01 Jan 2026 22:18:09 +0000 ROA not before: Thu 01 Jan 2026 22:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 185.45.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:c7:ed:e6:74:6b:86:67:9d:28:4e:47:64:ac:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc Validity Not Before: Jan 1 22:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6edb7fd71e6889863ab2f52efab30dc1ccff56c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8d:32:bf:da:fa:d5:23:a7:26:76:c3:21:4e: 8f:47:a4:e7:e6:04:31:d5:00:1c:4f:1b:59:c3:ed: 7e:24:9a:93:b4:9d:47:b5:3a:df:52:09:75:2f:0c: 86:7a:3e:22:11:1f:49:18:73:cd:f3:c4:cf:62:3f: 17:e9:01:2d:24:72:b6:e0:c1:48:18:50:6e:20:b4: ec:5b:27:4b:4e:aa:2f:20:11:06:e4:6e:48:7a:ef: 7f:97:b7:3a:3c:78:61:94:ec:93:51:3b:1c:6e:a2: 73:db:27:63:90:5e:9d:d4:68:ae:72:1f:c0:7f:6a: 36:65:e5:fd:88:a8:26:b7:42:3a:88:77:87:d7:06: 1d:f0:89:18:79:21:72:0b:42:e3:21:77:24:74:58: ec:e3:8f:f9:db:54:5c:d2:20:a5:09:dc:49:bf:ab: 2d:00:85:e7:eb:3b:20:78:3c:2a:e0:88:a1:c5:0f: 03:65:b0:fd:c5:d1:aa:5b:00:3b:99:80:3d:fa:57: 4a:dd:71:e5:64:15:c8:ff:41:b4:d1:ab:ee:e4:7a: 9c:17:0d:1e:17:f1:b6:11:4c:13:57:ba:d8:17:67: 8d:4a:6e:e7:24:ae:b7:1f:b0:e2:12:c5:d9:d1:ba: fc:da:fd:72:58:43:b7:3c:61:37:b9:c1:ac:df:bb: 3b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:ED:B7:FD:71:E6:88:98:63:AB:2F:52:EF:AB:30:DC:1C:CF:F5:6C X509v3 Authority Key Identifier: keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/1u23_XHmiJhjqy9S76sw3BzP9Ww.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.45.95.0/24 Signature Algorithm: sha256WithRSAEncryption 33:61:c0:1b:ba:de:3d:06:d9:52:85:5e:3d:e7:56:24:15:ac: 6e:76:6e:b3:e1:6d:f8:0a:39:f2:b9:20:fe:5a:b7:c8:a3:b9: 7e:e3:a6:44:c6:cb:45:f0:63:a8:3f:73:ba:1d:3e:4a:9c:85: 12:22:fd:2d:8f:59:4f:5a:a8:e8:6e:f8:ef:27:2f:b3:93:22: f2:62:bc:19:35:04:ef:ab:e0:29:8f:f9:ed:0e:b9:c9:2a:76: 77:ea:5d:7a:d5:0f:c6:83:23:58:dc:79:24:06:6d:aa:74:35: ef:a6:27:e4:30:eb:8b:4b:79:d2:ef:ca:3a:e8:a6:2d:80:17: 21:ec:c5:84:38:14:53:09:c2:89:93:e5:54:9e:92:d5:e5:64: 63:b8:8b:99:48:7c:f7:1f:c8:78:9a:19:8a:2c:d0:d9:87:a6: d4:4c:cf:64:82:76:2e:e4:7f:58:0a:06:69:eb:df:8d:8f:b8: 41:61:6e:41:e0:61:d4:d9:b5:bd:cd:c6:3a:e0:8d:26:af:78: 94:55:ce:9d:3e:fa:82:0f:81:c8:81:bd:84:55:26:94:6c:b6: 04:d0:b0:75:29:cf:2a:c0:fa:c6:8e:9c:6c:44:e2:1e:59:7d: c8:43:73:eb:31:25:a4:45:84:9a:cf:f3:af:ee:b8:31:45:2d: 18:b8:8c:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o8ft5nRrhmedKE5HZKzkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzNlZjQ2MTE2ZmQ5ZDIxYmZiNTMzZTQ0YmRlNTE3ODkw YzI0ZGMwHhcNMjYwMTAxMjIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmVkYjdmZDcxZTY4ODk4NjNhYjJmNTJlZmFiMzBkYzFjY2ZmNTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY0yv9r61SOnJnbDIU6PR6Tn5gQx 1QAcTxtZw+1+JJqTtJ1HtTrfUgl1LwyGej4iER9JGHPN88TPYj8X6QEtJHK24MFI GFBuILTsWydLTqovIBEG5G5Ieu9/l7c6PHhhlOyTUTscbqJz2ydjkF6d1Giuch/A f2o2ZeX9iKgmt0I6iHeH1wYd8IkYeSFyC0LjIXckdFjs44/521Rc0iClCdxJv6st AIXn6zsgeDwq4IihxQ8DZbD9xdGqWwA7mYA9+ldK3XHlZBXI/0G00avu5HqcFw0e F/G2EUwTV7rYF2eNSm7nJK63H7DiEsXZ0br82v1yWEO3PGE3ucGs37s7mwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNbtt/1x5oiYY6svUu+rMNwcz/VsMB8GA1UdIwQY MBaAFIUz70YRb9nSG/tTPkS95ReJDCTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAt NzM5MjNkYWVmMTE0LzEvMXUyM19YSG1pSmhqcXk5Uzc2c3czQnpQOVd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAtNzM5MjNkYWVmMTE0 LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuS1fMA0G CSqGSIb3DQEBCwUAA4IBAQAzYcAbut49BtlShV4951YkFaxudm6z4W34CjnyuSD+ WrfIo7l+46ZExstF8GOoP3O6HT5KnIUSIv0tj1lPWqjobvjvJy+zkyLyYrwZNQTv q+Apj/ntDrnJKnZ36l161Q/GgyNY3HkkBm2qdDXvpifkMOuLS3nS78o66KYtgBch 7MWEOBRTCcKJk+VUnpLV5WRjuIuZSHz3H8h4mhmKLNDZh6bUTM9kgnYu5H9YCgZp 69+Nj7hBYW5B4GHU2bW9zcY64I0mr3iUVc6dPvqCD4HIgb2EVSaUbLYE0LB1Kc8q wPrGjpxsROIeWX3IQ3PrMSWkRYSaz/Ov7rgxRS0YuIyu -----END CERTIFICATE-----Generated at Wed Jan 21 04:05:26 2026 by rpki-client