This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/UU7xm8N0gLKzystvr7K0vFPPnwM.roa File: UU7xm8N0gLKzystvr7K0vFPPnwM.roa (raw, json) Hash identifier: AIlX5yaREYq7YP0aVDh7YsVcoDln+tEm7zV1uCXEZfo= Subject key identifier: 51:4E:F1:9B:C3:74:80:B2:B3:CA:CB:6F:AF:B2:B4:BC:53:CF:9F:03 Certificate issuer: /CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51 Certificate serial: 019B7C135BF571AFC32181DCC899CD7F5D95 Authority key identifier: B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/UU7xm8N0gLKzystvr7K0vFPPnwM.roa Signing time: Fri 02 Jan 2026 00:20:02 +0000 ROA not before: Fri 02 Jan 2026 00:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35205 IP address blocks: 80.84.192.0/19 maxlen: 19 80.84.192.0/20 maxlen: 20 80.84.192.0/22 maxlen: 22 80.84.208.0/20 maxlen: 20 80.84.208.0/21 maxlen: 21 185.48.208.0/22 maxlen: 22 2a04:a080::/29 maxlen: 29 2a04:a080::/30 maxlen: 30 2a04:a084::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:5b:f5:71:af:c3:21:81:dc:c8:99:cd:7f:5d:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51 Validity Not Before: Jan 2 00:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=514ef19bc37480b2b3cacb6fafb2b4bc53cf9f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f8:cc:69:98:09:fd:b9:90:a1:bd:e8:02:95: ab:3e:d7:47:cb:82:69:29:cf:64:11:1d:70:ca:93: 5c:04:2e:9d:60:fd:a7:9a:1e:f0:90:e1:91:59:f8: 75:54:73:ef:b6:1f:b0:df:cf:e3:b0:a2:3d:13:a5: e6:fe:be:c2:90:6e:9a:a9:f5:5a:cd:2e:6e:50:ca: 7f:8c:da:ac:f1:b2:bc:8c:eb:f2:15:56:42:ca:20: 9c:80:ab:53:8a:6c:34:b0:b1:44:7f:b4:0e:68:cf: 3c:32:34:45:fa:3a:5b:40:19:ef:8e:9c:5c:f1:20: 53:52:27:ff:bf:12:2f:c8:64:ab:04:97:86:94:9a: ac:1f:2d:e1:41:64:42:51:64:78:a8:d4:9a:ef:a2: 93:55:59:fc:a1:ff:ad:18:0f:3a:4d:46:f7:4d:78: 32:fb:d9:72:40:39:a8:a7:35:9e:d8:b6:0c:b7:b1: 4f:41:9c:8c:f8:86:e1:98:1d:03:43:32:0e:13:b1: d8:86:b4:6c:c4:a8:ac:b5:76:4b:13:3f:16:a1:cd: 03:8a:0d:0f:eb:4c:ca:af:53:d2:7a:09:1a:a1:24: 1c:0f:5f:6b:d3:b2:11:ca:25:94:19:1c:c0:92:fe: b5:92:84:f4:62:af:48:e0:02:cc:8f:a0:f2:ce:45: e6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4E:F1:9B:C3:74:80:B2:B3:CA:CB:6F:AF:B2:B4:BC:53:CF:9F:03 X509v3 Authority Key Identifier: keyid:B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/UU7xm8N0gLKzystvr7K0vFPPnwM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.84.192.0/19 185.48.208.0/22 IPv6: 2a04:a080::/29 Signature Algorithm: sha256WithRSAEncryption 3f:4a:60:51:7c:af:9c:3b:51:81:b4:7a:a5:92:d1:25:b8:ed: 9e:77:65:ac:5d:e5:f2:7b:7a:7b:2f:40:aa:e1:1a:ab:74:8e: de:1f:9e:41:21:9d:20:39:7a:d0:ed:78:1c:02:8f:01:08:6a: ab:57:ac:7a:05:73:9e:f5:92:07:f0:51:69:c0:4c:99:75:c2: 67:64:76:8a:fd:05:e5:de:e6:5b:8c:10:94:d2:4b:e6:d1:46: a3:89:8a:be:db:18:b5:48:61:b3:28:d1:ca:5e:78:07:42:c7: e6:9f:82:18:00:11:8e:a1:4c:8c:9f:63:08:8a:32:2d:ee:73: 87:5b:8a:8d:eb:a7:38:9d:d4:13:d4:dc:a3:82:d1:fb:30:99: 72:f3:bd:76:bb:d7:41:a5:7a:88:40:4a:41:71:90:ed:b7:2f: 1c:c9:8d:e1:f3:0c:67:49:f1:fb:fa:32:bb:97:a1:5f:a9:00: 88:0b:cd:40:2d:27:71:22:29:a5:d8:65:16:db:9e:ec:ef:91: c2:41:17:ba:5b:0d:25:32:4b:98:ed:e8:b6:07:ac:5b:59:d2: f1:6d:a8:d2:29:74:c0:06:a4:9d:9a:a9:c7:05:7f:eb:54:49: 1d:55:c1:79:03:50:22:e2:69:1f:f3:f3:57:93:b1:a9:74:e7: 66:fa:37:19 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8E1v1ca/DIYHcyJnNf12VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZWMxYmE2ODU0YmJmNWJjM2VkNTU0ZmY3ZmVmM2JhNWZl NGNiNTEwHhcNMjYwMTAyMDAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTRlZjE5YmMzNzQ4MGIyYjNjYWNiNmZhZmIyYjRiYzUzY2Y5ZjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/jMaZgJ/bmQob3oApWrPtdHy4Jp Kc9kER1wypNcBC6dYP2nmh7wkOGRWfh1VHPvth+w38/jsKI9E6Xm/r7CkG6aqfVa zS5uUMp/jNqs8bK8jOvyFVZCyiCcgKtTimw0sLFEf7QOaM88MjRF+jpbQBnvjpxc 8SBTUif/vxIvyGSrBJeGlJqsHy3hQWRCUWR4qNSa76KTVVn8of+tGA86TUb3TXgy +9lyQDmopzWe2LYMt7FPQZyM+IbhmB0DQzIOE7HYhrRsxKistXZLEz8Woc0Dig0P 60zKr1PSegkaoSQcD19r07IRyiWUGRzAkv61koT0Yq9I4ALMj6DyzkXmHwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFFO8ZvDdICys8rLb6+ytLxTz58DMB8GA1UdIwQY MBaAFLLsG6aFS79bw+1VT/f+87pf5MtRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3V3YnBvVkx2MXZEN1ZWUDlfN3p1bF9reTFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81Mjc5ZWYtYTFjOS00ZGEyLWExYzUt MWQ4ZDkzM2Q2YzAwLzEvVVU3eG04TjBnTEt6eXN0dnI3SzB2RlBQbndNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi81Mjc5ZWYtYTFjOS00ZGEyLWExYzUtMWQ4ZDkzM2Q2YzAw LzEvc3V3YnBvVkx2MXZEN1ZWUDlfN3p1bF9reTFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFUFTAAwQC uTDQMA0EAgACMAcDBQMqBKCAMA0GCSqGSIb3DQEBCwUAA4IBAQA/SmBRfK+cO1GB tHqlktEluO2ed2WsXeXye3p7L0Cq4RqrdI7eH55BIZ0gOXrQ7XgcAo8BCGqrV6x6 BXOe9ZIH8FFpwEyZdcJnZHaK/QXl3uZbjBCU0kvm0UajiYq+2xi1SGGzKNHKXngH Qsfmn4IYABGOoUyMn2MIijIt7nOHW4qN66c4ndQT1NyjgtH7MJly8712u9dBpXqI QEpBcZDtty8cyY3h8wxnSfH7+jK7l6FfqQCIC81ALSdxIiml2GUW257s75HCQRe6 Ww0lMkuY7ei2B6xbWdLxbajSKXTABqSdmqnHBX/rVEkdVcF5A1Ai4mkf8/NXk7Gp dOdm+jcZ -----END CERTIFICATE-----Generated at Mon Jan 26 22:31:57 2026 by rpki-client