This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/RU1OY7v2nhWXT21hWMhOgsqhF9M.roa File: RU1OY7v2nhWXT21hWMhOgsqhF9M.roa (raw, json) Hash identifier: HO8CFdI2T/vSNVqtiw2GDyzzGYeXGauouVL1zqhgbhU= Subject key identifier: 45:4D:4E:63:BB:F6:9E:15:97:4F:6D:61:58:C8:4E:82:CA:A1:17:D3 Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B7F84494F9BAEDD1C4EE79AF0CBACFE7A Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/RU1OY7v2nhWXT21hWMhOgsqhF9M.roa Signing time: Fri 02 Jan 2026 16:22:14 +0000 ROA not before: Fri 02 Jan 2026 16:22:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 152900 IP address blocks: 185.232.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:49:4f:9b:ae:dd:1c:4e:e7:9a:f0:cb:ac:fe:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Jan 2 16:22:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=454d4e63bbf69e15974f6d6158c84e82caa117d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0e:b7:3f:cd:0c:71:85:76:a2:f5:5a:57:9a: c9:75:07:cf:b8:c2:a8:40:29:93:89:e9:27:af:51: 5a:08:e3:00:ae:d3:79:9c:d7:59:33:60:22:87:09: dc:42:77:00:c5:2c:aa:d0:30:b6:17:e0:ff:a0:f8: d8:53:8e:c0:4b:0e:f4:73:66:58:4e:1d:4c:97:e6: 37:88:53:2f:2c:7b:91:5c:e3:d5:db:d6:e0:98:a6: 1e:a8:48:94:ab:ff:13:6a:a3:3e:f4:93:2f:14:50: e3:2e:8a:07:2d:50:24:bd:f2:e6:e2:d0:51:4a:3e: 23:31:c3:f4:f7:af:cf:63:84:ee:5a:f4:c0:ae:87: 5a:7c:bc:f1:13:6f:b1:c5:59:d4:65:fd:cd:98:4a: a8:9d:e6:62:65:e1:88:bf:60:30:78:22:69:ec:8f: 43:ab:f5:7e:0d:3e:68:8c:a0:23:e6:49:cb:c9:59: ca:e4:c1:05:1f:c8:68:17:d2:00:e2:df:88:a8:f8: d7:fd:fb:56:15:f5:4c:1c:b8:f5:f1:16:b2:c6:99: 90:05:ea:98:68:c1:ff:10:c7:e6:bc:48:3d:c8:71: cb:26:5c:a0:90:47:98:3b:5d:b4:23:63:e0:62:21: da:db:1d:d0:64:35:8c:0d:79:51:6f:b2:a6:5d:ed: 87:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:4D:4E:63:BB:F6:9E:15:97:4F:6D:61:58:C8:4E:82:CA:A1:17:D3 X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/RU1OY7v2nhWXT21hWMhOgsqhF9M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.232.84.0/24 Signature Algorithm: sha256WithRSAEncryption b0:08:0a:61:dd:fa:27:55:18:25:0e:5e:f7:2a:35:9b:e7:31: d8:96:5a:04:f4:33:d7:be:16:c2:b0:0d:33:1e:95:72:27:e3: 23:aa:95:19:22:db:2d:89:26:20:67:7d:b9:1b:0f:51:92:7a: 56:28:c0:7f:37:9e:cf:91:03:34:02:bf:45:13:aa:5b:da:fa: b1:36:c9:76:6e:65:2f:73:74:30:17:a5:7f:c9:12:96:7a:5e: fc:ee:7e:64:f1:32:18:25:7f:79:41:21:66:e7:d4:93:a9:d3: f6:e7:17:7c:13:dd:3f:e5:6a:cb:02:8f:63:b1:b4:f0:70:cd: cd:5d:c6:8c:6e:9a:73:13:92:7b:f5:9d:2d:3e:12:a8:02:aa: d9:82:07:54:4c:b8:b3:4a:2b:1f:91:0a:17:d3:fd:a4:3f:f1: ee:67:4e:68:c2:42:6b:10:07:2d:ee:54:d5:ff:6a:f6:96:15: f3:a3:6b:4b:04:d4:65:90:98:4f:d3:5e:a6:7d:a0:b6:22:05: 92:8e:ed:38:3d:6e:bd:2f:7f:a2:3d:58:47:0f:c3:1c:46:ff: 15:4e:00:fd:33:94:91:62:18:e7:44:ab:f4:fa:dc:3a:b5:b1: 78:41:0c:f4:91:54:b1:fa:42:30:a8:d0:28:04:03:07:01:d9: c6:02:c7:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hElPm67dHE7nmvDLrP56MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjYwMTAyMTYyMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTRkNGU2M2JiZjY5ZTE1OTc0ZjZkNjE1OGM4NGU4MmNhYTExN2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw63P80McYV2ovVaV5rJdQfPuMKo QCmTieknr1FaCOMArtN5nNdZM2AihwncQncAxSyq0DC2F+D/oPjYU47ASw70c2ZY Th1Ml+Y3iFMvLHuRXOPV29bgmKYeqEiUq/8TaqM+9JMvFFDjLooHLVAkvfLm4tBR Sj4jMcP096/PY4TuWvTArodafLzxE2+xxVnUZf3NmEqoneZiZeGIv2AweCJp7I9D q/V+DT5ojKAj5knLyVnK5MEFH8hoF9IA4t+IqPjX/ftWFfVMHLj18RayxpmQBeqY aMH/EMfmvEg9yHHLJlygkEeYO120I2PgYiHa2x3QZDWMDXlRb7KmXe2HdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEVNTmO79p4Vl09tYVjIToLKoRfTMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvUlUxT1k3djJuaFdYVDIxaFdNaE9nc3FoRjlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuehUMA0G CSqGSIb3DQEBCwUAA4IBAQCwCAph3fonVRglDl73KjWb5zHYlloE9DPXvhbCsA0z HpVyJ+MjqpUZItstiSYgZ325Gw9RknpWKMB/N57PkQM0Ar9FE6pb2vqxNsl2bmUv c3QwF6V/yRKWel787n5k8TIYJX95QSFm59STqdP25xd8E90/5WrLAo9jsbTwcM3N XcaMbppzE5J79Z0tPhKoAqrZggdUTLizSisfkQoX0/2kP/HuZ05owkJrEAct7lTV /2r2lhXzo2tLBNRlkJhP016mfaC2IgWSju04PW69L3+iPVhHD8McRv8VTgD9M5SR YhjnRKv0+tw6tbF4QQz0kVSx+kIwqNAoBAMHAdnGAsf2 -----END CERTIFICATE-----Generated at Wed Jan 21 16:59:07 2026 by rpki-client