This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/UpvjRMslQ7AEpdP-tm7-bfuKfF8.roa File: UpvjRMslQ7AEpdP-tm7-bfuKfF8.roa (raw, json) Hash identifier: JYK5KU5XLD+wKc7a7WWS6ksfiNumZJ8xvZAXRWxdENE= Subject key identifier: 52:9B:E3:44:CB:25:43:B0:04:A5:D3:FE:B6:6E:FE:6D:FB:8A:7C:5F Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7CE188737BD40F1A1CEB3C3BD4BFC Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/UpvjRMslQ7AEpdP-tm7-bfuKfF8.roa Signing time: Thu 01 Jan 2026 18:17:53 +0000 ROA not before: Thu 01 Jan 2026 18:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42979 IP address blocks: 85.254.1.0/24 maxlen: 24 2a02:610:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ce:18:87:37:bd:40:f1:a1:ce:b3:c3:bd:4b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=529be344cb2543b004a5d3feb66efe6dfb8a7c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c2:5c:96:ae:80:e3:82:c1:ea:e9:8a:a8:2b: 04:1b:e1:4b:07:cd:35:42:e3:a2:95:28:83:fd:5d: a0:58:b6:b3:00:1e:5c:62:53:db:19:99:59:8f:9f: 62:0d:4f:5e:24:10:5c:bc:60:76:8d:c0:cf:43:5b: c4:f2:13:8f:ff:d6:6c:12:cc:a2:e8:bb:f7:aa:6c: 69:57:1a:26:b7:88:d3:9f:2b:21:37:3e:49:d6:1e: da:01:77:0b:69:6c:c8:cf:b2:b9:70:be:75:74:46: 65:11:22:fb:ea:37:2f:dd:65:67:97:ae:16:f0:64: 0e:6c:40:3f:12:48:71:0c:fd:fb:45:80:b7:7d:62: 64:af:39:cf:5c:18:24:65:28:f0:f3:35:45:24:50: 11:c9:fc:7d:48:e2:c4:36:ae:8a:70:90:e3:2d:b2: ef:86:17:02:a2:ff:d7:db:b1:a0:4c:25:b2:5c:77: 8b:16:df:7c:f1:e1:88:02:d9:52:4e:ad:80:a9:74: cf:84:88:70:84:07:84:2d:de:a1:fd:b8:1c:c5:41: 27:5e:aa:df:3e:01:ec:64:76:5b:c9:01:66:70:14: 65:de:db:ea:24:b0:a7:25:b7:5f:5a:5f:a7:25:81: a3:85:8c:12:77:25:7f:d8:96:41:26:8d:80:28:20: 57:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9B:E3:44:CB:25:43:B0:04:A5:D3:FE:B6:6E:FE:6D:FB:8A:7C:5F X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/UpvjRMslQ7AEpdP-tm7-bfuKfF8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.254.1.0/24 IPv6: 2a02:610:ffff::/48 Signature Algorithm: sha256WithRSAEncryption a8:99:12:0e:7f:5b:bc:91:51:13:9b:3d:f8:4b:fa:f2:c6:af: aa:e6:35:5f:02:f5:60:31:ba:a4:e9:70:ed:e1:66:e0:5c:b6: 31:2d:d9:f9:6e:d5:fe:d2:55:c1:28:ca:73:55:54:0d:30:1e: b7:ce:55:7a:c9:d4:27:b4:b5:73:60:5e:80:e4:5a:ac:ba:86: e1:07:1e:9d:30:19:6a:83:d5:c4:6b:80:4d:8c:08:09:58:d9: c5:68:96:df:59:99:9c:ac:86:75:6b:96:e2:61:81:6b:f4:ae: 10:40:17:15:df:7a:3b:a4:52:c1:06:b2:38:56:fe:13:3c:10: 98:b6:bb:6a:ae:c4:34:e1:ec:bc:9b:5d:57:5f:90:4a:34:b5: f1:b6:bd:f7:13:d7:0a:15:8a:e2:2a:bc:05:4e:6d:5d:99:82: e1:90:ab:c6:30:7c:ac:d1:0c:85:bc:fc:c5:1d:fa:8a:9a:f4: 29:52:dd:9a:e0:4b:59:3c:6d:28:4f:68:46:7f:a5:2d:8c:75: 38:d0:9b:20:06:1d:be:60:9d:d3:07:b7:f4:71:4b:24:94:cb: 60:a8:ff:c8:e8:c3:fa:05:f3:91:e1:f8:8c:af:ab:f4:6b:7e: 45:69:2f:0d:bb:20:ea:04:e0:fb:81:84:99:e2:97:c7:37:4b: f6:01:13:b9 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6x84Yhze9QPGhzrPDvUv8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjliZTM0NGNiMjU0M2IwMDRhNWQzZmViNjZlZmU2ZGZiOGE3YzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMJclq6A44LB6umKqCsEG+FLB801 QuOilSiD/V2gWLazAB5cYlPbGZlZj59iDU9eJBBcvGB2jcDPQ1vE8hOP/9ZsEsyi 6Lv3qmxpVxomt4jTnyshNz5J1h7aAXcLaWzIz7K5cL51dEZlESL76jcv3WVnl64W 8GQObEA/EkhxDP37RYC3fWJkrznPXBgkZSjw8zVFJFARyfx9SOLENq6KcJDjLbLv hhcCov/X27GgTCWyXHeLFt988eGIAtlSTq2AqXTPhIhwhAeELd6h/bgcxUEnXqrf PgHsZHZbyQFmcBRl3tvqJLCnJbdfWl+nJYGjhYwSdyV/2JZBJo2AKCBXgQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFKb40TLJUOwBKXT/rZu/m37inxfMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvVXB2alJNc2xRN0FFcGRQLXRtNy1iZnVLZkY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAVf4BMA8E AgACMAkDBwAqAgYQ//8wDQYJKoZIhvcNAQELBQADggEBAKiZEg5/W7yRURObPfhL +vLGr6rmNV8C9WAxuqTpcO3hZuBctjEt2flu1f7SVcEoynNVVA0wHrfOVXrJ1Ce0 tXNgXoDkWqy6huEHHp0wGWqD1cRrgE2MCAlY2cVolt9ZmZyshnVrluJhgWv0rhBA FxXfejukUsEGsjhW/hM8EJi2u2quxDTh7LybXVdfkEo0tfG2vfcT1woViuIqvAVO bV2ZguGQq8YwfKzRDIW8/MUd+oqa9ClS3ZrgS1k8bShPaEZ/pS2MdTjQmyAGHb5g ndMHt/RxSySUy2Co/8jow/oF85Hh+Iyvq/RrfkVpLw27IOoE4PuBhJnil8c3S/YB E7k= -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:55 2026 by rpki-client