This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/JUpyI7xxzukRVQvxBJ5AnLMnp2Q.roa File: JUpyI7xxzukRVQvxBJ5AnLMnp2Q.roa (raw, json) Hash identifier: VfIPApxtxEUphMHmhUBJLte8wFfUS25OGKXWPVng31I= Subject key identifier: 25:4A:72:23:BC:71:CE:E9:11:55:0B:F1:04:9E:40:9C:B3:27:A7:64 Certificate issuer: /CN=cf89cb889f99212e8bf53d06e45d87abb9169506 Certificate serial: 019B7CECCC775D392C48FA9AD66B89113D9C Authority key identifier: CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/JUpyI7xxzukRVQvxBJ5AnLMnp2Q.roa Signing time: Fri 02 Jan 2026 04:17:32 +0000 ROA not before: Fri 02 Jan 2026 04:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56423 IP address blocks: 185.15.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:cc:77:5d:39:2c:48:fa:9a:d6:6b:89:11:3d:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf89cb889f99212e8bf53d06e45d87abb9169506 Validity Not Before: Jan 2 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=254a7223bc71cee911550bf1049e409cb327a764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:05:26:f4:d2:70:75:12:ac:17:21:12:4c:99: cf:1a:de:d8:a2:9f:80:28:2d:a6:eb:b9:19:bb:a2: c0:fa:6f:be:d5:f0:10:c4:60:2e:e1:4f:6c:2f:f6: 6d:15:b2:bb:84:3b:2f:2f:31:81:7b:57:1f:98:53: 7d:fe:5c:40:51:2d:4d:ac:7f:07:17:7b:e7:17:c7: f4:88:e6:59:42:17:ec:36:ea:d9:d3:c2:83:3f:90: dd:2d:98:65:7e:a4:7e:ec:ce:6a:ea:d0:a8:4b:d1: c7:e9:af:55:d6:93:3e:b6:de:4f:a7:7d:91:d9:fc: af:70:15:7e:65:c8:36:7a:76:c4:38:2f:d9:31:ff: 1c:ee:e9:19:e0:31:72:67:f7:1c:72:9a:d8:e8:bf: 5c:fd:d8:6e:0a:5f:4c:a7:cc:63:44:96:58:1c:9a: 7a:df:0a:77:ce:99:9a:5f:d5:8c:63:de:f4:10:74: 76:dd:41:9f:7a:59:ec:1c:c3:50:9f:27:d9:0b:90: bd:bf:8f:8d:79:84:df:46:ae:e8:8e:34:8f:39:8e: 29:6a:6f:aa:b2:f4:d6:ae:c0:c1:9e:f1:16:ee:59: 6b:cb:41:17:67:42:b9:62:b0:47:ad:cd:a4:8a:91: 79:84:87:37:1f:fb:3d:c6:63:3d:fe:52:75:8d:b8: 06:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:4A:72:23:BC:71:CE:E9:11:55:0B:F1:04:9E:40:9C:B3:27:A7:64 X509v3 Authority Key Identifier: keyid:CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/JUpyI7xxzukRVQvxBJ5AnLMnp2Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.15.6.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:f8:e5:6a:9b:d8:50:b7:c9:56:82:94:67:23:c2:6d:84:a7: e1:ea:b8:3e:ac:88:58:b8:43:c0:ad:dc:7a:77:52:33:9b:45: b9:b4:27:8c:c3:4b:c0:58:29:a0:f9:35:a9:ad:ab:c1:f9:e4: 6d:93:5a:43:8d:f7:f4:1c:45:25:f3:b0:f0:17:d2:3b:3e:56: 85:a1:d4:44:2f:e9:e6:dd:2f:a8:68:4e:02:bd:12:a1:d4:62: a8:2c:0f:ea:31:6a:3b:4f:34:7f:c4:38:ea:56:b2:7f:ce:43: 44:aa:fb:91:08:f3:08:4b:0c:8b:7f:a4:fd:fa:55:8b:e7:47: 3d:cc:9c:65:5c:91:69:9a:8b:75:ca:28:fc:c1:09:ea:f1:df: 60:bf:c6:ea:32:34:94:2e:2f:92:6e:b1:c9:ee:ab:fa:21:31: ca:0c:12:d2:60:3d:8f:71:16:f6:b5:f0:5d:4a:e8:70:cc:f3: 95:e6:8e:2f:a1:d5:44:c1:30:b7:dd:3d:6a:a4:84:9d:d2:dd: 55:a9:6d:5e:c5:d3:44:64:52:8c:48:8e:6b:eb:b1:b0:28:01: 8c:3a:c7:01:6f:92:86:3c:4b:a2:cc:5e:52:7e:78:7e:82:0f: 95:c7:60:cf:ae:1a:06:34:30:2c:cd:8d:0c:c7:02:67:ff:2b: 41:fa:b5:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Mx3XTksSPqa1muJET2cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmODljYjg4OWY5OTIxMmU4YmY1M2QwNmU0NWQ4N2FiYjkx Njk1MDYwHhcNMjYwMTAyMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTRhNzIyM2JjNzFjZWU5MTE1NTBiZjEwNDllNDA5Y2IzMjdhNzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wUm9NJwdRKsFyESTJnPGt7Yop+A KC2m67kZu6LA+m++1fAQxGAu4U9sL/ZtFbK7hDsvLzGBe1cfmFN9/lxAUS1NrH8H F3vnF8f0iOZZQhfsNurZ08KDP5DdLZhlfqR+7M5q6tCoS9HH6a9V1pM+tt5Pp32R 2fyvcBV+Zcg2enbEOC/ZMf8c7ukZ4DFyZ/cccprY6L9c/dhuCl9Mp8xjRJZYHJp6 3wp3zpmaX9WMY970EHR23UGfelnsHMNQnyfZC5C9v4+NeYTfRq7ojjSPOY4pam+q svTWrsDBnvEW7llry0EXZ0K5YrBHrc2kipF5hIc3H/s9xmM9/lJ1jbgGOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCVKciO8cc7pEVUL8QSeQJyzJ6dkMB8GA1UdIwQY MBaAFM+Jy4ifmSEui/U9BuRdh6u5FpUGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejRuTGlKLVpJUzZMOVQwRzVGMkhxN2tXbFFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8wYjg5NTEtMjY5OS00NGIzLTkwNjct ZDlhNDBjNGQzMjkxLzEvSlVweUk3eHh6dWtSVlF2eEJKNUFuTE1ucDJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8wYjg5NTEtMjY5OS00NGIzLTkwNjctZDlhNDBjNGQzMjkx LzEvejRuTGlKLVpJUzZMOVQwRzVGMkhxN2tXbFFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuQ8GMA0G CSqGSIb3DQEBCwUAA4IBAQBs+OVqm9hQt8lWgpRnI8JthKfh6rg+rIhYuEPArdx6 d1Izm0W5tCeMw0vAWCmg+TWpravB+eRtk1pDjff0HEUl87DwF9I7PlaFodREL+nm 3S+oaE4CvRKh1GKoLA/qMWo7TzR/xDjqVrJ/zkNEqvuRCPMISwyLf6T9+lWL50c9 zJxlXJFpmot1yij8wQnq8d9gv8bqMjSULi+SbrHJ7qv6ITHKDBLSYD2PcRb2tfBd SuhwzPOV5o4vodVEwTC33T1qpISd0t1VqW1exdNEZFKMSI5r67GwKAGMOscBb5KG PEuizF5Sfnh+gg+Vx2DPrhoGNDAszY0MxwJn/ytB+rUi -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:15 2026 by rpki-client