This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/U4yJmT1ScaT40kywasOQ8O608yQ.roa File: U4yJmT1ScaT40kywasOQ8O608yQ.roa (raw, json) Hash identifier: 6wuB5jKMzhDthKEXBc2cgRcakDY0stwctJVIuMEfhMI= Subject key identifier: 53:8C:89:99:3D:52:71:A4:F8:D2:4C:B0:6A:C3:90:F0:EE:B4:F3:24 Certificate issuer: /CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb Certificate serial: 019BC204650D19F66CA28675F6232574129C Authority key identifier: 2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/U4yJmT1ScaT40kywasOQ8O608yQ.roa Signing time: Thu 15 Jan 2026 14:17:06 +0000 ROA not before: Thu 15 Jan 2026 14:17:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196827 IP address blocks: 185.23.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c2:04:65:0d:19:f6:6c:a2:86:75:f6:23:25:74:12:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb Validity Not Before: Jan 15 14:17:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=538c89993d5271a4f8d24cb06ac390f0eeb4f324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:12:56:93:9a:96:73:89:e8:46:7a:82:37:97: 8f:20:e1:3c:e0:68:b8:d6:01:71:d8:6d:27:9e:44: 0a:01:c0:3c:9d:f9:50:a9:d7:dc:e5:08:a4:45:60: 13:7d:3d:10:18:e7:53:34:e9:33:cd:14:e4:c6:be: 23:2a:44:e6:28:0c:3e:05:91:8c:91:9a:65:d2:68: 71:78:d8:fa:e1:3b:0a:55:40:63:36:e0:22:cf:df: 92:5e:1e:0e:14:66:d4:e1:b8:5d:54:eb:f9:9f:fa: f5:47:72:04:66:48:bc:68:5f:72:bf:ec:12:87:2a: 93:59:c1:1e:58:46:e6:e0:89:bf:d6:f2:dd:7c:04: ca:2c:2a:03:23:2a:db:b6:5e:71:a8:87:5e:7f:3f: 8d:36:1d:d1:48:8c:1a:bc:26:35:d4:01:cb:cb:ce: 38:0a:aa:bd:19:ce:1d:e0:78:52:2c:6d:79:ac:f9: 12:e8:f0:4a:70:4b:0f:ca:f8:d1:ae:14:a1:d9:14: 24:78:58:a3:23:4f:cb:b4:b9:4c:68:a1:ec:d9:2f: 5c:22:89:4b:e4:fd:c8:a6:aa:d5:d7:a2:d8:2e:ed: c3:2e:fd:2e:7e:80:b1:28:d7:27:6e:8c:79:e0:a5: f0:d1:94:39:6a:c6:d7:8d:17:dd:35:5f:32:37:f8: b1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:8C:89:99:3D:52:71:A4:F8:D2:4C:B0:6A:C3:90:F0:EE:B4:F3:24 X509v3 Authority Key Identifier: keyid:2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/U4yJmT1ScaT40kywasOQ8O608yQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.23.216.0/23 Signature Algorithm: sha256WithRSAEncryption 98:10:82:34:d9:da:c1:7d:d6:c0:af:b7:c8:58:cf:36:27:9e: b0:af:6a:e3:c7:62:03:08:6e:65:fd:1e:98:d1:04:17:7a:7a: 64:b0:07:45:fc:a1:52:56:35:2c:62:56:3b:ad:f4:d8:4a:46: 0b:c7:83:b3:26:d5:6f:d9:2f:58:ba:4e:7b:7f:99:3c:48:15: c9:ca:e2:7b:85:92:1d:96:d7:a8:4e:c7:8a:36:18:e0:dc:b2: e6:c3:2a:78:f8:ad:20:67:23:81:24:4f:d7:e5:ea:ee:aa:3d: 43:21:b4:a4:c6:40:b3:a8:cd:64:b8:5e:4f:56:95:db:04:2d: 01:b6:20:09:20:da:5a:5c:fe:1d:44:f7:ba:fa:45:c1:72:b0: f3:e0:de:4b:47:8f:63:4f:07:88:14:6d:9e:90:d7:44:89:d3: f6:a4:78:2f:47:fe:e4:68:24:ea:66:68:f9:51:a2:3a:31:92: 96:af:81:4f:3e:73:be:17:7d:f0:e1:57:f8:f1:63:f9:c0:04: a2:1e:df:fb:cf:e7:41:dc:11:01:35:97:6e:d0:b0:34:e2:6a: 70:82:ca:99:25:bf:99:a1:8a:c2:0a:6a:78:1e:1d:51:60:33: 0e:03:ff:1d:f6:f2:26:b6:8f:ee:01:ff:6e:b6:53:38:c6:d2: f5:ca:4c:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvCBGUNGfZsooZ19iMldBKcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNDllODg0YTQ0MWYwNGI3ZjVlMmVkNDc0YjU4NDdlODMy MTJiY2IwHhcNMjYwMTE1MTQxNzA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzhjODk5OTNkNTI3MWE0ZjhkMjRjYjA2YWMzOTBmMGVlYjRmMzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRJWk5qWc4noRnqCN5ePIOE84Gi4 1gFx2G0nnkQKAcA8nflQqdfc5QikRWATfT0QGOdTNOkzzRTkxr4jKkTmKAw+BZGM kZpl0mhxeNj64TsKVUBjNuAiz9+SXh4OFGbU4bhdVOv5n/r1R3IEZki8aF9yv+wS hyqTWcEeWEbm4Im/1vLdfATKLCoDIyrbtl5xqIdefz+NNh3RSIwavCY11AHLy844 Cqq9Gc4d4HhSLG15rPkS6PBKcEsPyvjRrhSh2RQkeFijI0/LtLlMaKHs2S9cIolL 5P3IpqrV16LYLu3DLv0ufoCxKNcnbox54KXw0ZQ5asbXjRfdNV8yN/ix7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFOMiZk9UnGk+NJMsGrDkPDutPMkMB8GA1UdIwQY MBaAFCtJ6ISkQfBLf14u1HS1hH6DISvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzBub2hLUkI4RXRfWGk3VWRMV0Vmb01oSzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hZjUyOGMtZmY0MS00ZWVmLThhOTMt NDJkZDk4NWNkN2IwLzEvVTR5Sm1UMVNjYVQ0MGt5d2FzT1E4TzYwOHlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9hZjUyOGMtZmY0MS00ZWVmLThhOTMtNDJkZDk4NWNkN2Iw LzEvSzBub2hLUkI4RXRfWGk3VWRMV0Vmb01oSzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuRfYMA0G CSqGSIb3DQEBCwUAA4IBAQCYEII02drBfdbAr7fIWM82J56wr2rjx2IDCG5l/R6Y 0QQXenpksAdF/KFSVjUsYlY7rfTYSkYLx4OzJtVv2S9Yuk57f5k8SBXJyuJ7hZId lteoTseKNhjg3LLmwyp4+K0gZyOBJE/X5eruqj1DIbSkxkCzqM1kuF5PVpXbBC0B tiAJINpaXP4dRPe6+kXBcrDz4N5LR49jTweIFG2ekNdEidP2pHgvR/7kaCTqZmj5 UaI6MZKWr4FPPnO+F33w4Vf48WP5wASiHt/7z+dB3BEBNZdu0LA04mpwgsqZJb+Z oYrCCmp4Hh1RYDMOA/8d9vImto/uAf9utlM4xtL1ykzo -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:02 2026 by rpki-client