This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/U1N8-iNwkeJymD2O-1obezvdIiM.roa File: U1N8-iNwkeJymD2O-1obezvdIiM.roa (raw, json) Hash identifier: JSBadpvOxMyOs/dR0CYYtI0LVBoM6UjPBTEu8Sb4Vo0= Subject key identifier: 53:53:7C:FA:23:70:91:E2:72:98:3D:8E:FB:5A:1B:7B:3B:DD:22:23 Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 019B7E38B58E41F67838C888892788411F8F Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/U1N8-iNwkeJymD2O-1obezvdIiM.roa Signing time: Fri 02 Jan 2026 10:20:04 +0000 ROA not before: Fri 02 Jan 2026 10:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 5.253.186.0/24 maxlen: 24 45.130.32.0/24 maxlen: 24 185.219.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b5:8e:41:f6:78:38:c8:88:89:27:88:41:1f:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: Jan 2 10:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53537cfa237091e272983d8efb5a1b7b3bdd2223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:73:67:fe:4f:22:9f:96:d3:c9:a8:64:f5:55: 43:d5:33:08:28:ed:46:a6:45:4a:42:18:9e:d1:90: 14:84:0e:34:9d:d6:a4:45:aa:df:83:f6:3d:ac:86: a3:62:3a:8d:8f:97:2c:b5:76:fa:0e:b0:a5:7f:c9: 85:92:e6:d0:6e:78:e9:a1:dc:cd:fc:a6:3a:83:76: 9f:69:b0:8f:c5:d4:af:e5:02:87:7c:64:b8:eb:f9: f1:af:09:51:8a:16:de:fa:cb:84:09:86:8e:83:dc: 09:73:8b:6e:64:e0:22:fe:c6:b8:9d:19:b8:69:22: 27:dd:6c:a9:b2:5b:68:50:b7:fb:ad:a0:59:8e:22: 7a:ea:e1:92:db:0c:96:ff:70:ec:bd:84:be:44:7c: 33:8d:26:11:f4:f5:0e:44:f3:83:3a:1f:43:2f:3d: e2:71:ab:8c:e4:34:3a:b4:95:41:e7:54:23:cb:86: 32:04:ee:b6:4c:dd:57:b9:50:76:97:54:07:2e:9a: 77:ae:c4:ca:30:b5:56:b1:9c:41:1c:fd:13:16:79: 35:08:ac:b3:b1:b4:b2:13:df:90:a5:8f:91:02:71: 8e:77:50:ff:6e:f3:c5:eb:a0:3c:84:30:7c:d1:39: d6:d7:54:e2:57:21:20:12:0a:81:df:fd:a8:5b:2c: 4c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:53:7C:FA:23:70:91:E2:72:98:3D:8E:FB:5A:1B:7B:3B:DD:22:23 X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/U1N8-iNwkeJymD2O-1obezvdIiM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.186.0/24 45.130.32.0/24 185.219.162.0/24 Signature Algorithm: sha256WithRSAEncryption 44:9d:12:6d:46:73:58:17:02:b4:7b:ca:f1:95:9a:89:0c:14: 9c:24:b6:39:0e:29:68:8f:a2:ab:c3:c3:16:08:22:cd:1c:c6: b6:ca:cf:2b:3f:c2:50:97:7b:f0:86:01:a2:5f:35:ee:dc:54: 24:d0:00:5a:c4:cd:97:6a:da:08:69:dc:58:30:d7:bc:33:6e: 12:c7:86:58:01:b4:a2:2e:0f:45:a1:d3:3a:bf:ef:e9:79:3f: fa:c5:1d:98:d9:0a:49:13:66:ae:73:a5:11:c8:64:09:30:8b: 10:3f:bb:b2:0a:d0:19:cf:48:69:25:a8:b4:91:1b:4c:03:f7: 64:ee:04:8a:e7:db:fc:90:13:8d:69:99:b9:fe:46:e8:d0:a9: d3:6e:4f:96:42:37:64:e6:50:e0:97:ce:c2:08:93:ff:2f:7c: 83:48:22:64:13:39:ad:f6:0f:7c:72:80:8a:f2:8a:2c:e2:4d: 1a:eb:27:8b:fa:9b:ee:95:d1:1b:50:9d:21:06:a9:3b:0a:4a: 02:0d:e4:05:6f:f6:df:66:2e:54:7d:b2:e5:eb:a7:3b:d5:ce: 42:99:f9:e5:88:2d:25:35:49:01:90:cf:d4:6c:7e:03:f2:52: 03:a9:81:00:f5:cc:53:dd:94:91:a2:18:a7:6b:88:d3:99:37: 7b:6a:9e:25 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OLWOQfZ4OMiIiSeIQR+PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjYwMTAyMTAyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzUzN2NmYTIzNzA5MWUyNzI5ODNkOGVmYjVhMWI3YjNiZGQyMjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XNn/k8in5bTyahk9VVD1TMIKO1G pkVKQhie0ZAUhA40ndakRarfg/Y9rIajYjqNj5cstXb6DrClf8mFkubQbnjpodzN /KY6g3afabCPxdSv5QKHfGS46/nxrwlRihbe+suECYaOg9wJc4tuZOAi/sa4nRm4 aSIn3WypsltoULf7raBZjiJ66uGS2wyW/3DsvYS+RHwzjSYR9PUORPODOh9DLz3i cauM5DQ6tJVB51Qjy4YyBO62TN1XuVB2l1QHLpp3rsTKMLVWsZxBHP0TFnk1CKyz sbSyE9+QpY+RAnGOd1D/bvPF66A8hDB80TnW11TiVyEgEgqB3/2oWyxM+QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFNTfPojcJHicpg9jvtaG3s73SIjMB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvVTFOOC1pTndrZUp5bUQyTy0xb2JlenZkSWlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABf26AwQA LYIgAwQAuduiMA0GCSqGSIb3DQEBCwUAA4IBAQBEnRJtRnNYFwK0e8rxlZqJDBSc JLY5Diloj6Krw8MWCCLNHMa2ys8rP8JQl3vwhgGiXzXu3FQk0ABaxM2XatoIadxY MNe8M24Sx4ZYAbSiLg9FodM6v+/peT/6xR2Y2QpJE2auc6URyGQJMIsQP7uyCtAZ z0hpJai0kRtMA/dk7gSK59v8kBONaZm5/kbo0KnTbk+WQjdk5lDgl87CCJP/L3yD SCJkEzmt9g98coCK8oos4k0a6yeL+pvuldEbUJ0hBqk7CkoCDeQFb/bfZi5UfbLl 66c71c5CmfnliC0lNUkBkM/UbH4D8lIDqYEA9cxT3ZSRohina4jTmTd7ap4l -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:55 2026 by rpki-client