This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/hUiuaSHwvGvkUbVbZoV_jJ_8BRU.roa File: hUiuaSHwvGvkUbVbZoV_jJ_8BRU.roa (raw, json) Hash identifier: XVLkwzCBrdtM+FxDVfDBn6TZaFDwiuTAGFHK/fSzOJ8= Subject key identifier: 85:48:AE:69:21:F0:BC:6B:E4:51:B5:5B:66:85:7F:8C:9F:FC:05:15 Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82 Certificate serial: 019B7AC847D30B662722B30EC7D9CC4DF6A4 Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/hUiuaSHwvGvkUbVbZoV_jJ_8BRU.roa Signing time: Thu 01 Jan 2026 18:18:24 +0000 ROA not before: Thu 01 Jan 2026 18:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 51.198.64.0/23 maxlen: 24 51.198.66.0/23 maxlen: 24 51.198.70.0/23 maxlen: 24 51.199.252.0/23 maxlen: 24 51.199.254.0/23 maxlen: 24 2a06:5901:8000::/40 maxlen: 48 2a06:5901:8100::/40 maxlen: 48 2a06:5901:8200::/40 maxlen: 48 2a06:5901:8300::/40 maxlen: 48 2a06:5901:8500::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:47:d3:0b:66:27:22:b3:0e:c7:d9:cc:4d:f6:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82 Validity Not Before: Jan 1 18:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8548ae6921f0bc6be451b55b66857f8c9ffc0515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c9:0d:cf:0e:4b:59:bd:89:db:1c:f7:3c:37: 1d:05:c4:f5:fc:1e:06:af:b0:0b:e9:84:2a:5f:c4: e6:3c:2e:c1:2d:39:71:8a:6f:a1:b6:8e:f6:91:20: ce:9d:0b:e9:cb:47:cc:3b:28:d1:b8:be:50:cf:b9: 25:9a:1b:f5:46:86:55:ec:ec:5e:7d:82:80:66:e9: 66:dc:57:02:bf:2b:76:5a:2d:66:8d:04:ad:9f:17: 52:b5:bd:4b:89:17:f3:a3:e6:a9:3d:1d:7f:99:a6: 91:86:58:57:ee:64:85:78:a0:37:c5:5a:a5:38:a0: 77:9e:1e:a4:1a:84:b5:b0:4e:5e:ec:bf:22:37:42: d7:07:88:81:f1:58:6a:11:ea:4b:e9:f4:6c:d6:f3: 80:ec:ee:ef:c3:91:0a:d3:19:d4:7b:68:02:5f:08: 3f:41:f6:9b:3a:74:93:05:d3:d7:55:04:0c:66:57: 85:33:51:87:13:0f:fb:3b:fa:76:e6:1f:9c:19:d1: 95:dc:7f:4a:19:a5:b7:44:b1:c7:fa:c6:77:7c:1b: e2:46:2f:72:f1:2f:48:88:98:2d:3a:d7:5a:24:b4: 1c:e1:2c:aa:59:73:88:39:72:cb:a9:65:38:70:b5: 3f:96:13:83:08:02:42:56:48:93:93:ae:f6:ad:67: 20:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:48:AE:69:21:F0:BC:6B:E4:51:B5:5B:66:85:7F:8C:9F:FC:05:15 X509v3 Authority Key Identifier: keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/hUiuaSHwvGvkUbVbZoV_jJ_8BRU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.198.64.0/22 51.198.70.0/23 51.199.252.0/22 IPv6: 2a06:5901:8000::/38 2a06:5901:8500::/40 Signature Algorithm: sha256WithRSAEncryption 61:d1:d0:8d:3c:9d:32:19:68:0f:27:60:e3:c1:7a:90:87:09: 4f:0e:09:f5:d5:d4:ff:1c:2d:f1:80:c4:8b:88:85:10:a0:8d: 7e:69:fb:64:e1:75:b0:7a:02:c1:b1:d2:93:39:ad:c7:5f:f8: 7a:6c:d3:75:6f:32:06:0f:0b:59:84:e0:da:a6:44:df:68:bd: 6c:3e:07:d0:73:6e:2d:e4:a8:c3:ff:77:a8:0e:5b:a6:0e:1f: bf:78:ca:82:c4:4e:cc:c1:69:b6:4f:2e:ef:56:45:26:a2:9a: 20:e8:9c:bb:4d:4e:d5:ac:37:02:f6:d8:0f:ee:40:ea:55:ce: 7f:3d:9b:fa:ab:58:c8:44:73:3b:3d:fb:ac:e0:4c:e6:c1:a0: 4f:fa:7a:3d:6c:25:72:af:58:bb:15:9a:7f:f8:74:a0:ff:f6: d0:7e:a5:46:34:dc:1c:cf:98:e9:19:05:ca:7f:94:6a:95:c8: c6:fe:be:07:4c:ce:44:26:29:08:ee:0b:56:08:28:77:b8:09: a4:0c:42:84:f9:08:c7:2f:73:3d:1b:2d:c7:ee:42:69:6e:03: bb:bd:21:4d:93:b2:2f:d8:a8:0a:a2:92:73:b6:54:f3:10:78: 1c:36:8c:86:23:75:1a:bb:da:9e:2f:f2:8a:cf:ec:ce:bb:a8: f2:ea:11:b4 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt6yEfTC2YnIrMOx9nMTfakMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MWQ0YTQzNzRkZjIyMmFjMzIzNWI5NjAyMjA2ZDk2YmYx ZGFjODIwHhcNMjYwMTAxMTgxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTQ4YWU2OTIxZjBiYzZiZTQ1MWI1NWI2Njg1N2Y4YzlmZmMwNTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlckNzw5LWb2J2xz3PDcdBcT1/B4G r7AL6YQqX8TmPC7BLTlxim+hto72kSDOnQvpy0fMOyjRuL5Qz7klmhv1RoZV7Oxe fYKAZulm3FcCvyt2Wi1mjQStnxdStb1LiRfzo+apPR1/maaRhlhX7mSFeKA3xVql OKB3nh6kGoS1sE5e7L8iN0LXB4iB8VhqEepL6fRs1vOA7O7vw5EK0xnUe2gCXwg/ QfabOnSTBdPXVQQMZleFM1GHEw/7O/p25h+cGdGV3H9KGaW3RLHH+sZ3fBviRi9y 8S9IiJgtOtdaJLQc4SyqWXOIOXLLqWU4cLU/lhODCAJCVkiTk672rWcghQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFIVIrmkh8Lxr5FG1W2aFf4yf/AUVMB8GA1UdIwQY MBaAFPcdSkN03yIqwyNblgIgbZa/HayCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXgxS1EzVGZJaXJESTF1V0FpQnRscjhkcklJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NzM5ZGMtMTEzMi00ODM3LTliODUt ZTlhYzJiMDAzMTZhLzEvaFVpdWFTSHd2R3ZrVWJWYlpvVl9qSl84QlJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NzM5ZGMtMTEzMi00ODM3LTliODUtZTlhYzJiMDAzMTZh LzEvOXgxS1EzVGZJaXJESTF1V0FpQnRscjhkcklJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAYBAIAATASAwQCM8ZAAwQB M8ZGAwQCM8f8MBYEAgACMBADBgIqBlkBgAMGACoGWQGFMA0GCSqGSIb3DQEBCwUA A4IBAQBh0dCNPJ0yGWgPJ2DjwXqQhwlPDgn11dT/HC3xgMSLiIUQoI1+aftk4XWw egLBsdKTOa3HX/h6bNN1bzIGDwtZhODapkTfaL1sPgfQc24t5KjD/3eoDlumDh+/ eMqCxE7MwWm2Ty7vVkUmopog6Jy7TU7VrDcC9tgP7kDqVc5/PZv6q1jIRHM7Pfus 4EzmwaBP+no9bCVyr1i7FZp/+HSg//bQfqVGNNwcz5jpGQXKf5RqlcjG/r4HTM5E JikI7gtWCCh3uAmkDEKE+QjHL3M9Gy3H7kJpbgO7vSFNk7Iv2KgKopJztlTzEHgc NoyGI3Uau9qeL/KKz+zOu6jy6hG0 -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:01 2026 by rpki-client