This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/U2Z1XV8o3uSKFqctNf3JUk-H5Ts.roa File: U2Z1XV8o3uSKFqctNf3JUk-H5Ts.roa (raw, json) Hash identifier: FRVvHMEadriOkR83sQ2tDLvX3mVKMsDHHQh/IgHBVFQ= Subject key identifier: 53:66:75:5D:5F:28:DE:E4:8A:16:A7:2D:35:FD:C9:52:4F:87:E5:3B Certificate issuer: /CN=2f1ac9f094d8318f3088dca68301865f4605e9da Certificate serial: 019B7EA6BAB5E95E6B47880D36905D16FDB8 Authority key identifier: 2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/U2Z1XV8o3uSKFqctNf3JUk-H5Ts.roa Signing time: Fri 02 Jan 2026 12:20:14 +0000 ROA not before: Fri 02 Jan 2026 12:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 88.151.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ba:b5:e9:5e:6b:47:88:0d:36:90:5d:16:fd:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f1ac9f094d8318f3088dca68301865f4605e9da Validity Not Before: Jan 2 12:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5366755d5f28dee48a16a72d35fdc9524f87e53b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:08:7a:89:d7:02:66:59:16:8a:b6:b8:8e:19: ce:5b:d5:a1:e9:fe:26:d2:6f:16:9a:96:aa:c9:7e: 55:6a:be:78:a8:fe:8a:d2:c5:1d:ff:ef:20:c9:6e: a6:b0:cc:84:fc:6e:0c:c6:d8:31:7f:ff:0d:88:5d: f4:1e:5d:4b:05:66:a9:c6:85:1b:c7:59:a6:7e:62: de:ea:46:ab:00:cd:3e:14:b2:61:65:11:03:ce:98: 61:70:b1:76:5c:bb:59:f8:fd:9a:98:6f:07:71:9b: 1c:ec:94:6a:bb:2f:f1:69:1e:c4:42:c5:74:98:10: 33:24:7d:72:95:6b:5b:a5:61:4a:dc:ab:1a:c7:24: c2:32:0a:e0:26:87:6d:d9:98:94:93:59:c1:a1:48: b8:30:55:8c:a4:e3:a5:47:73:c3:bf:98:dc:5e:50: d9:53:22:b2:02:94:c8:58:19:b5:ec:2d:69:51:12: e1:57:15:77:3b:13:b0:de:6d:68:ce:db:37:fd:f3: e2:b6:7d:a4:83:8c:08:e1:24:7f:0f:1e:24:79:b6: b7:2e:bb:c0:e3:f8:1a:ba:c1:20:c1:03:4c:e6:5b: 26:ec:b5:ad:7c:12:32:c6:da:d2:91:51:72:53:4a: 3d:82:77:1b:a7:be:bf:7d:04:cb:a3:9b:98:d6:15: 5e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:66:75:5D:5F:28:DE:E4:8A:16:A7:2D:35:FD:C9:52:4F:87:E5:3B X509v3 Authority Key Identifier: keyid:2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/U2Z1XV8o3uSKFqctNf3JUk-H5Ts.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.151.14.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:b5:f8:e0:65:57:94:e4:a7:cc:69:e4:e6:b6:56:01:9d:a2: d0:3e:2d:fa:85:9f:3e:ea:58:99:65:64:2f:84:56:5d:00:2e: cb:c5:89:79:1b:ab:71:c3:fa:49:14:db:0a:c4:b5:05:86:6b: 65:63:26:ef:68:86:46:63:3b:7c:a8:f0:59:73:46:cf:1f:65: fc:c0:c9:4d:ee:ca:34:d1:38:f4:bd:1a:ab:98:c0:ea:34:e1: a2:2a:69:3b:f7:2c:ee:2c:1a:2d:bf:11:a8:33:43:d3:f8:06: 0b:f4:0c:a5:2c:be:91:8a:a5:3b:9b:5e:0d:79:9a:e7:87:41: 2e:7f:1a:24:82:13:06:33:1d:00:cf:c4:79:84:e6:92:64:09: f2:ec:6f:7d:b1:c6:7d:dc:19:63:f4:24:1a:c1:75:21:f0:92: 2f:3a:a5:2d:99:91:4a:5f:b4:44:22:30:2f:5d:34:b3:e8:8e: a0:1b:35:8c:c9:f9:d2:94:73:5e:d0:41:7a:88:77:1c:16:12: 39:f4:81:6a:54:5c:33:3c:60:ac:62:8f:aa:99:69:12:56:33: f6:6b:f2:8c:7a:e5:17:d5:74:50:e0:64:53:e7:5b:68:69:a1: 75:4b:83:fa:31:2b:92:25:d6:65:ff:49:e9:46:56:a0:3c:47: b6:c6:09:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+prq16V5rR4gNNpBdFv24MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMWFjOWYwOTRkODMxOGYzMDg4ZGNhNjgzMDE4NjVmNDYw NWU5ZGEwHhcNMjYwMTAyMTIyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzY2NzU1ZDVmMjhkZWU0OGExNmE3MmQzNWZkYzk1MjRmODdlNTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gh6idcCZlkWira4jhnOW9Wh6f4m 0m8WmpaqyX5Var54qP6K0sUd/+8gyW6msMyE/G4Mxtgxf/8NiF30Hl1LBWapxoUb x1mmfmLe6karAM0+FLJhZREDzphhcLF2XLtZ+P2amG8HcZsc7JRquy/xaR7EQsV0 mBAzJH1ylWtbpWFK3KsaxyTCMgrgJodt2ZiUk1nBoUi4MFWMpOOlR3PDv5jcXlDZ UyKyApTIWBm17C1pURLhVxV3OxOw3m1ozts3/fPitn2kg4wI4SR/Dx4keba3LrvA 4/gausEgwQNM5lsm7LWtfBIyxtrSkVFyU0o9gncbp76/fQTLo5uY1hVelwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFNmdV1fKN7kihanLTX9yVJPh+U7MB8GA1UdIwQY MBaAFC8ayfCU2DGPMIjcpoMBhl9GBenaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHhySjhKVFlNWTh3aU55bWd3R0dYMFlGNmRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wNDE5NjgtMTVlYi00Mzg4LTk4NWEt YzIzYzgyOWRiOTM3LzEvVTJaMVhWOG8zdVNLRnFjdE5mM0pVay1INVRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wNDE5NjgtMTVlYi00Mzg4LTk4NWEtYzIzYzgyOWRiOTM3 LzEvTHhySjhKVFlNWTh3aU55bWd3R0dYMFlGNmRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWJcOMA0G CSqGSIb3DQEBCwUAA4IBAQCNtfjgZVeU5KfMaeTmtlYBnaLQPi36hZ8+6liZZWQv hFZdAC7LxYl5G6txw/pJFNsKxLUFhmtlYybvaIZGYzt8qPBZc0bPH2X8wMlN7so0 0Tj0vRqrmMDqNOGiKmk79yzuLBotvxGoM0PT+AYL9AylLL6RiqU7m14NeZrnh0Eu fxokghMGMx0Az8R5hOaSZAny7G99scZ93Blj9CQawXUh8JIvOqUtmZFKX7REIjAv XTSz6I6gGzWMyfnSlHNe0EF6iHccFhI59IFqVFwzPGCsYo+qmWkSVjP2a/KMeuUX 1XRQ4GRT51toaaF1S4P6MSuSJdZl/0npRlagPEe2xglD -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:09 2026 by rpki-client