This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/IULcSReBl6BR3I_U3liy7HZAnac.roa File: IULcSReBl6BR3I_U3liy7HZAnac.roa (raw, json) Hash identifier: 8rcQZaYhRzic9A6LKK6K6/YTQNKz/3wSmuzt2vfN2vM= Subject key identifier: 21:42:DC:49:17:81:97:A0:51:DC:8F:D4:DE:58:B2:EC:76:40:9D:A7 Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Certificate serial: 019B7DCA9E3F431B541C9C4AD7DFE9DAF1C5 Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/IULcSReBl6BR3I_U3liy7HZAnac.roa Signing time: Fri 02 Jan 2026 08:19:49 +0000 ROA not before: Fri 02 Jan 2026 08:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215224 IP address blocks: 185.177.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:9e:3f:43:1b:54:1c:9c:4a:d7:df:e9:da:f1:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Validity Not Before: Jan 2 08:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2142dc49178197a051dc8fd4de58b2ec76409da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ff:61:fc:e0:f2:2c:15:27:7d:aa:d2:86:6f: ae:4a:9a:a9:a8:ed:90:e9:ce:6a:68:18:94:0f:01: bf:bd:13:b3:e3:17:6e:15:9b:c6:2d:ee:5f:69:65: cf:2b:13:4c:60:5f:d5:81:14:d4:04:84:9d:d5:58: 57:9b:4d:5f:ea:66:7d:dc:e3:45:e4:6d:8f:26:a2: 67:89:36:66:01:4c:05:08:88:fe:1b:df:dc:b8:68: 41:5f:ad:18:1a:89:71:55:32:3d:66:70:07:11:83: 0a:a3:79:58:ca:67:8c:2b:5a:a3:4e:fd:af:36:3c: 67:35:23:97:6b:a7:90:37:2d:2c:72:ea:39:9b:f8: 08:69:2c:e1:18:b4:5b:a3:d9:33:8d:2f:80:5c:0c: f4:07:d5:3a:95:17:d5:9a:42:d0:0c:22:5a:81:cf: 82:6e:75:e1:ab:c2:59:63:7b:af:6b:2a:14:2c:f2: 6e:e4:9d:76:84:0e:4b:1c:6d:7b:da:02:e9:64:56: 4a:b3:99:01:16:0e:00:2c:d5:ea:43:78:88:17:bc: 51:a6:67:68:4d:21:eb:95:b7:77:15:e1:32:08:f8: ef:e4:83:28:6f:14:4b:08:2e:29:c0:2d:da:93:92: 39:c4:14:e3:9b:85:60:16:18:2b:90:04:3a:40:61: 0e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:42:DC:49:17:81:97:A0:51:DC:8F:D4:DE:58:B2:EC:76:40:9D:A7 X509v3 Authority Key Identifier: keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/IULcSReBl6BR3I_U3liy7HZAnac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.177.228.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:09:a0:1f:41:af:dd:b5:b5:e3:77:d7:7f:d8:e1:05:61:fd: 6c:04:cc:5f:b1:87:ac:a4:02:86:e8:56:25:a2:2e:15:93:1b: a9:46:63:54:ba:9a:46:af:c1:00:f4:78:af:5b:3d:5e:f1:64: ff:e0:15:b9:de:02:8f:ae:6e:82:7f:ab:25:5d:33:b6:b8:a5: 9b:4e:24:d0:7c:1b:e2:bf:0d:c4:00:12:08:43:54:1d:df:d1: c6:05:a3:54:a0:17:1d:de:16:45:ad:45:42:a3:d0:08:7e:64: 16:fe:e0:d2:af:76:02:70:47:35:fa:f3:05:fb:7d:69:7f:12: 1d:71:d9:d2:8e:0f:e5:2b:5d:97:9a:8f:f2:24:24:0f:95:23: d6:64:a6:4b:2e:a0:cb:51:c7:8d:82:f1:80:30:1e:94:3f:e3: 17:ea:84:09:8b:58:01:04:20:33:cb:dd:05:b4:62:51:11:17: 51:d1:cd:4d:3b:74:77:39:7a:ef:7f:0c:ae:79:3a:97:38:70: b8:88:c7:16:a1:27:21:77:7b:a6:b3:93:90:5f:8d:92:94:f3: b4:be:49:c7:c9:b1:ae:7a:3b:9b:13:7e:5b:e8:0d:a4:07:70: 49:9c:3c:42:f6:c8:26:25:4b:d5:d5:79:44:b4:67:c1:b8:13: 4b:bf:cc:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yp4/QxtUHJxK19/p2vHFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NTRhYzRjN2Y0NTFjNWJiOTM4MmZiY2Q0NmQ3MGM0YzBm OWRlNTYwHhcNMjYwMTAyMDgxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTQyZGM0OTE3ODE5N2EwNTFkYzhmZDRkZTU4YjJlYzc2NDA5ZGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf9h/ODyLBUnfarShm+uSpqpqO2Q 6c5qaBiUDwG/vROz4xduFZvGLe5faWXPKxNMYF/VgRTUBISd1VhXm01f6mZ93ONF 5G2PJqJniTZmAUwFCIj+G9/cuGhBX60YGolxVTI9ZnAHEYMKo3lYymeMK1qjTv2v NjxnNSOXa6eQNy0scuo5m/gIaSzhGLRbo9kzjS+AXAz0B9U6lRfVmkLQDCJagc+C bnXhq8JZY3uvayoULPJu5J12hA5LHG172gLpZFZKs5kBFg4ALNXqQ3iIF7xRpmdo TSHrlbd3FeEyCPjv5IMobxRLCC4pwC3ak5I5xBTjm4VgFhgrkAQ6QGEOywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCFC3EkXgZegUdyP1N5Ysux2QJ2nMB8GA1UdIwQY MBaAFHVUrEx/RRxbuTgvvNRtcMTA+d5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4Mjgt ZDkzMzdkYjM5ZDFmLzEvSVVMY1NSZUJsNkJSM0lfVTNsaXk3SFpBbmFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4MjgtZDkzMzdkYjM5ZDFm LzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubHkMA0G CSqGSIb3DQEBCwUAA4IBAQALCaAfQa/dtbXjd9d/2OEFYf1sBMxfsYespAKG6FYl oi4VkxupRmNUuppGr8EA9HivWz1e8WT/4BW53gKPrm6Cf6slXTO2uKWbTiTQfBvi vw3EABIIQ1Qd39HGBaNUoBcd3hZFrUVCo9AIfmQW/uDSr3YCcEc1+vMF+31pfxId cdnSjg/lK12Xmo/yJCQPlSPWZKZLLqDLUceNgvGAMB6UP+MX6oQJi1gBBCAzy90F tGJRERdR0c1NO3R3OXrvfwyueTqXOHC4iMcWoSchd3ums5OQX42SlPO0vknHybGu ejubE35b6A2kB3BJnDxC9sgmJUvV1XlEtGfBuBNLv8zd -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:49 2026 by rpki-client