This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/lU3BCZBDNlCDk-8OFyyOit3pGFs.roa File: lU3BCZBDNlCDk-8OFyyOit3pGFs.roa (raw, json) Hash identifier: AWI11iVTlePwywxMYMGqGux5nESZadW+LVNcBQPGHWE= Subject key identifier: 95:4D:C1:09:90:43:36:50:83:93:EF:0E:17:2C:8E:8A:DD:E9:18:5B Certificate issuer: /CN=01bacccb74c77bd5fd2abea3e612d881eab73356 Certificate serial: 019B77C6BB521F1D75C2B9CE6BB1478E6100 Authority key identifier: 01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/lU3BCZBDNlCDk-8OFyyOit3pGFs.roa Signing time: Thu 01 Jan 2026 04:17:51 +0000 ROA not before: Thu 01 Jan 2026 04:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198612 IP address blocks: 194.116.156.0/23 maxlen: 23 195.49.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:bb:52:1f:1d:75:c2:b9:ce:6b:b1:47:8e:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01bacccb74c77bd5fd2abea3e612d881eab73356 Validity Not Before: Jan 1 04:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=954dc109904336508393ef0e172c8e8adde9185b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:67:a8:1d:47:46:eb:4a:0c:ae:ee:f5:c6:85: 75:cf:cf:5b:5a:9b:45:87:8b:1e:a8:8e:a5:93:85: 7a:c6:66:0f:a2:cd:90:26:8d:96:54:e2:12:bd:fc: d7:7f:eb:50:44:f8:9c:86:cb:f7:69:27:38:63:7e: d0:2b:4f:d0:4c:15:f3:7a:d6:3b:91:e1:2c:0e:ba: 44:83:1a:cf:60:c8:65:21:87:52:cd:14:ff:ad:7c: 98:1e:78:e6:0d:ca:73:d4:12:0f:3c:cf:13:79:a2: 40:5d:f7:22:8e:67:bd:9a:8b:b2:66:d7:3f:9f:c3: 93:42:59:7b:e4:7d:35:1d:70:49:88:ae:80:d0:9a: 0f:7f:38:43:02:5b:54:f6:dd:00:ed:44:a9:5d:3e: 2d:91:b6:0e:34:5b:c9:04:48:e1:fb:a6:1d:84:6c: bb:c1:a8:6e:52:e3:d1:c2:75:f5:38:6b:86:ab:09: 49:43:d1:0c:a4:28:41:87:02:29:c5:4d:9a:11:72: 47:66:87:db:b4:95:ee:74:fb:74:b4:b0:84:01:c2: 8c:63:fb:cf:a6:91:fc:89:bc:13:16:71:50:89:bf: 30:f1:e1:38:af:72:87:6f:17:41:54:23:bf:cf:d5: 47:25:a2:5b:8a:69:8e:a2:b9:54:d8:bc:e5:46:b0: 04:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4D:C1:09:90:43:36:50:83:93:EF:0E:17:2C:8E:8A:DD:E9:18:5B X509v3 Authority Key Identifier: keyid:01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/lU3BCZBDNlCDk-8OFyyOit3pGFs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.116.156.0/23 195.49.160.0/22 Signature Algorithm: sha256WithRSAEncryption 77:29:ad:0a:3c:e8:07:04:32:ac:41:f1:7f:8f:bc:6e:07:c4: 4f:15:3b:01:10:f4:16:6b:e5:c7:e2:0a:50:87:7a:97:cc:82: b3:87:f9:f8:fc:54:fc:1b:a5:93:a2:16:ec:a4:6e:6b:c1:cb: 4c:3a:0a:60:3c:6b:4f:40:4c:82:a0:7d:37:b3:b8:15:b6:ce: 68:92:35:ec:6f:0c:f9:a6:e7:6f:2c:69:e2:1c:be:8a:ce:f6: 52:25:fd:63:59:9a:fe:4f:d2:88:b3:dd:6b:ad:d3:e8:5c:89: 3e:04:5e:96:5c:ea:e6:86:9a:70:e4:84:24:15:39:f3:7b:8c: d8:58:2a:69:20:fe:31:b8:92:b7:fa:00:74:ed:b7:0c:c4:c0: ea:f4:92:b6:50:e0:1f:94:2f:33:86:6a:b7:80:6a:0e:31:c1: 6c:7f:a8:4f:7a:05:33:02:b5:83:e8:f6:7d:c2:f5:83:d3:f6: 61:ce:12:31:ff:58:64:38:89:f4:bc:59:7d:fc:b2:20:fb:03: f9:ae:38:9f:80:d8:fb:04:8d:95:19:58:26:99:5a:8d:56:1d: 92:f0:cb:6e:7e:76:93:51:da:82:bf:1f:1c:2e:3d:72:cc:3f: 54:d4:97:e2:53:cb:55:3d:c4:4b:9c:b6:28:b8:00:cb:dd:4f: 61:8b:1c:29 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xrtSHx11wrnOa7FHjmEAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYmFjY2NiNzRjNzdiZDVmZDJhYmVhM2U2MTJkODgxZWFi NzMzNTYwHhcNMjYwMTAxMDQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTRkYzEwOTkwNDMzNjUwODM5M2VmMGUxNzJjOGU4YWRkZTkxODViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWeoHUdG60oMru71xoV1z89bWptF h4seqI6lk4V6xmYPos2QJo2WVOISvfzXf+tQRPichsv3aSc4Y37QK0/QTBXzetY7 keEsDrpEgxrPYMhlIYdSzRT/rXyYHnjmDcpz1BIPPM8TeaJAXfcijme9mouyZtc/ n8OTQll75H01HXBJiK6A0JoPfzhDAltU9t0A7USpXT4tkbYONFvJBEjh+6YdhGy7 wahuUuPRwnX1OGuGqwlJQ9EMpChBhwIpxU2aEXJHZofbtJXudPt0tLCEAcKMY/vP ppH8ibwTFnFQib8w8eE4r3KHbxdBVCO/z9VHJaJbimmOorlU2LzlRrAEtQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJVNwQmQQzZQg5PvDhcsjord6RhbMB8GA1UdIwQY MBaAFAG6zMt0x3vV/Sq+o+YS2IHqtzNWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWJyTXkzVEhlOVg5S3I2ajVoTFlnZXEzTTFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9hMTQ0ZTUtZmNlNi00YTUwLWJkMmEt ODM3NDEwNDFiOGM3LzEvbFUzQkNaQkRObENEay04T0Z5eU9pdDNwR0ZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9hMTQ0ZTUtZmNlNi00YTUwLWJkMmEtODM3NDEwNDFiOGM3 LzEvQWJyTXkzVEhlOVg5S3I2ajVoTFlnZXEzTTFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwnScAwQC wzGgMA0GCSqGSIb3DQEBCwUAA4IBAQB3Ka0KPOgHBDKsQfF/j7xuB8RPFTsBEPQW a+XH4gpQh3qXzIKzh/n4/FT8G6WTohbspG5rwctMOgpgPGtPQEyCoH03s7gVts5o kjXsbwz5pudvLGniHL6KzvZSJf1jWZr+T9KIs91rrdPoXIk+BF6WXOrmhppw5IQk FTnze4zYWCppIP4xuJK3+gB07bcMxMDq9JK2UOAflC8zhmq3gGoOMcFsf6hPegUz ArWD6PZ9wvWD0/ZhzhIx/1hkOIn0vFl9/LIg+wP5rjifgNj7BI2VGVgmmVqNVh2S 8MtufnaTUdqCvx8cLj1yzD9U1JfiU8tVPcRLnLYouADL3U9hixwp -----END CERTIFICATE-----Generated at Mon Feb 9 20:46:46 2026 by rpki-client