This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/u7wi03kSUsP8y2tILiBs4RyN014.roa File: u7wi03kSUsP8y2tILiBs4RyN014.roa (raw, json) Hash identifier: pYeJLWg472+6gUx7OvkaeELMhWeboOiwVGtw7KA43sM= Subject key identifier: BB:BC:22:D3:79:12:52:C3:FC:CB:6B:48:2E:20:6C:E1:1C:8D:D3:5E Certificate issuer: /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576 Certificate serial: 019B791104B4D220D755305AA656AA9A0E3B Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/u7wi03kSUsP8y2tILiBs4RyN014.roa Signing time: Thu 01 Jan 2026 10:18:37 +0000 ROA not before: Thu 01 Jan 2026 10:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 216.245.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 07:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:04:b4:d2:20:d7:55:30:5a:a6:56:aa:9a:0e:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576 Validity Not Before: Jan 1 10:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbbc22d3791252c3fccb6b482e206ce11c8dd35e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:19:e7:b4:3a:9e:d9:4e:f5:03:8c:62:ed:84: 91:64:78:0e:f4:b4:df:81:25:60:49:3c:38:81:bd: 73:b7:b5:b9:7f:d4:4c:95:41:16:25:ad:56:92:4b: f8:95:67:d7:20:4b:27:ef:71:6e:bb:bd:81:1e:4c: 37:af:85:c3:1e:55:68:b1:82:2e:d4:28:11:73:9b: 5f:d2:99:2d:82:3d:8c:4b:09:35:29:34:eb:16:97: b9:f9:2e:60:8f:b3:f9:b8:74:8d:4a:20:42:6d:84: 44:90:16:c6:a7:9a:5e:81:5e:11:b2:8d:46:1c:db: 6a:e1:60:60:f7:8d:e3:c3:77:d0:e1:5c:f2:2e:5c: 60:c7:0d:bb:ac:43:0f:af:6b:6e:c1:de:15:49:0f: df:f7:ea:f8:1b:a7:d1:df:dc:62:77:ef:ac:9b:2d: 25:a7:2b:28:69:5d:f0:03:df:70:cd:0b:0d:cd:af: 29:a5:d9:04:a0:ee:85:0e:4c:01:59:1d:87:3b:75: 84:3b:6c:5f:c0:7e:39:f4:92:f6:a7:00:f6:37:ba: 67:e8:8c:66:7a:eb:77:77:44:63:99:b7:2a:e4:59: c8:25:74:00:b7:46:4d:8d:c7:25:4f:a7:85:cd:2e: 87:b1:55:c1:67:2e:71:32:eb:ee:74:29:63:04:90: e3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:BC:22:D3:79:12:52:C3:FC:CB:6B:48:2E:20:6C:E1:1C:8D:D3:5E X509v3 Authority Key Identifier: keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/u7wi03kSUsP8y2tILiBs4RyN014.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.245.80.0/24 Signature Algorithm: sha256WithRSAEncryption 70:7a:2e:78:b9:79:ea:ef:fe:01:96:ee:7f:e5:c2:21:32:81: 27:af:73:ca:48:db:3a:d6:c7:1e:18:61:6f:d5:63:fb:e8:ee: 2c:db:65:5a:e2:49:d0:1b:2b:b1:bc:30:cc:74:b2:ae:c7:68: 4e:75:f6:31:00:6f:03:28:8f:d1:38:48:14:be:b4:18:18:60: 77:86:fd:f6:38:08:8d:3b:75:17:f4:07:fe:6b:ae:ce:8c:a2: 07:0b:04:c0:07:da:d9:22:02:a3:f3:45:c7:fc:55:75:9f:58: a9:02:51:dc:0e:88:8d:08:cf:f5:39:9d:a4:17:4e:12:a1:30: bd:07:67:c8:89:e3:a9:f3:d3:30:09:f6:90:8f:1e:0e:a6:ac: 84:21:f1:72:1b:4f:3b:53:a7:32:01:8d:fb:37:d0:83:da:ca: 18:75:fa:93:55:8f:5f:59:54:87:24:6b:1a:83:12:3d:73:62: ef:a6:a5:5a:62:34:97:a0:e2:f8:74:34:53:1e:57:26:0a:f5: da:ae:71:1c:6b:03:29:65:59:20:7c:b2:95:55:1e:42:89:fe: 4a:46:55:02:2c:09:8d:34:01:a7:7b:e8:7b:64:e9:5d:a9:5f: b4:d2:68:52:02:b7:cb:b4:1b:d5:89:34:39:5b:53:1b:78:e8: 20:a1:ef:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EQS00iDXVTBaplaqmg47MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZWU3ZWUwZjc1YjcxNjRhYzc1OTYxOTdjN2YxMjFkNmZj YTE1NzYwHhcNMjYwMTAxMTAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmJjMjJkMzc5MTI1MmMzZmNjYjZiNDgyZTIwNmNlMTFjOGRkMzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxnntDqe2U71A4xi7YSRZHgO9LTf gSVgSTw4gb1zt7W5f9RMlUEWJa1Wkkv4lWfXIEsn73Fuu72BHkw3r4XDHlVosYIu 1CgRc5tf0pktgj2MSwk1KTTrFpe5+S5gj7P5uHSNSiBCbYREkBbGp5pegV4Rso1G HNtq4WBg943jw3fQ4VzyLlxgxw27rEMPr2tuwd4VSQ/f9+r4G6fR39xid++smy0l pysoaV3wA99wzQsNza8ppdkEoO6FDkwBWR2HO3WEO2xfwH459JL2pwD2N7pn6Ixm eut3d0Rjmbcq5FnIJXQAt0ZNjcclT6eFzS6HsVXBZy5xMuvudCljBJDj3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLu8ItN5ElLD/MtrSC4gbOEcjdNeMB8GA1UdIwQY MBaAFAnufuD3W3FkrHWWGXx/Eh1vyhV2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2U1LTRQZGJjV1NzZFpZWmZIOFNIV19LRlhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kYmU1MGEtMmNhMS00MzYyLWI1ZTct NjY4M2M4ZmM5ZTViLzEvdTd3aTAza1NVc1A4eTJ0SUxpQnM0UnlOMDE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9kYmU1MGEtMmNhMS00MzYyLWI1ZTctNjY4M2M4ZmM5ZTVi LzEvQ2U1LTRQZGJjV1NzZFpZWmZIOFNIV19LRlhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PVQMA0G CSqGSIb3DQEBCwUAA4IBAQBwei54uXnq7/4Blu5/5cIhMoEnr3PKSNs61sceGGFv 1WP76O4s22Va4knQGyuxvDDMdLKux2hOdfYxAG8DKI/ROEgUvrQYGGB3hv32OAiN O3UX9Af+a67OjKIHCwTAB9rZIgKj80XH/FV1n1ipAlHcDoiNCM/1OZ2kF04SoTC9 B2fIieOp89MwCfaQjx4OpqyEIfFyG087U6cyAY37N9CD2soYdfqTVY9fWVSHJGsa gxI9c2LvpqVaYjSXoOL4dDRTHlcmCvXarnEcawMpZVkgfLKVVR5Cif5KRlUCLAmN NAGne+h7ZOldqV+00mhSArfLtBvViTQ5W1MbeOggoe+Z -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:28 2026 by rpki-client