This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/53UVpgTQ6GPGb3F7iaw4F7ggFJ4.roa File: 53UVpgTQ6GPGb3F7iaw4F7ggFJ4.roa (raw, json) Hash identifier: Rge2VTZzY9AJwofj3q/Q6jFmREW3CoHsGJkonCRjf/E= Subject key identifier: E7:75:15:A6:04:D0:E8:63:C6:6F:71:7B:89:AC:38:17:B8:20:14:9E Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019B797EF91EF15E6B9219D6FAE55A820167 Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/53UVpgTQ6GPGb3F7iaw4F7ggFJ4.roa Signing time: Thu 01 Jan 2026 12:18:43 +0000 ROA not before: Thu 01 Jan 2026 12:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395954 IP address blocks: 89.249.192.0/24 maxlen: 24 212.42.192.0/24 maxlen: 24 212.42.195.0/24 maxlen: 24 212.42.199.0/24 maxlen: 24 212.42.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f9:1e:f1:5e:6b:92:19:d6:fa:e5:5a:82:01:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Jan 1 12:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e77515a604d0e863c66f717b89ac3817b820149e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5b:7c:6d:dd:78:f3:7b:ec:8b:eb:8c:16:5e: 82:04:35:14:6c:ab:9b:05:f9:13:15:d0:be:b2:70: 39:56:19:3b:c0:65:f3:bc:72:b7:16:c2:d0:54:3d: 8f:4e:4e:66:f4:5d:9e:12:45:b2:e0:df:67:f8:dd: ed:ac:be:64:9b:cd:50:00:07:81:85:59:cf:5e:5f: 28:02:87:46:5e:0d:70:c9:0d:dd:9a:f8:31:4d:3f: 73:1a:86:3f:a2:54:4c:40:ec:41:fc:3f:7d:39:3c: 33:33:ea:94:f0:24:52:63:2f:e3:d9:e6:70:e1:d5: 52:af:0c:20:f3:df:ab:f6:73:86:a0:75:82:c9:03: 9c:ea:fc:17:c7:aa:f7:83:c0:e9:f4:88:d0:00:15: 88:7a:80:6c:4f:20:72:a6:96:3d:3d:5f:ae:98:ea: a5:d8:bd:e3:76:c6:3a:cc:73:39:84:26:fb:66:8e: d6:a6:48:1d:e1:92:35:ea:26:13:78:74:e3:64:59: bf:0d:a6:c4:40:42:ce:2e:33:20:ac:06:37:4f:d2: e1:c9:3c:2c:d4:7a:d3:91:38:fb:48:87:74:28:8b: 41:d6:f2:df:bb:c5:9d:ea:1a:2d:9a:d3:0e:33:77: 08:d0:99:41:5e:a4:29:5e:b3:29:0a:5b:6b:24:89: 86:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:75:15:A6:04:D0:E8:63:C6:6F:71:7B:89:AC:38:17:B8:20:14:9E X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/53UVpgTQ6GPGb3F7iaw4F7ggFJ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.249.192.0/24 212.42.192.0/24 212.42.195.0/24 212.42.199.0/24 212.42.203.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:24:25:25:30:ac:f2:f3:bf:55:f9:d0:0c:db:5a:52:59:82: e5:6e:89:e3:1a:75:10:f6:04:1e:a4:9a:47:10:09:d2:e9:0c: 36:28:03:6e:d6:a5:d0:5c:43:57:7e:5d:eb:af:93:f4:2b:97: 83:4b:cf:c5:69:53:92:70:8b:f8:80:87:aa:64:5b:85:e8:a7: f2:6c:15:e4:2c:24:16:90:d2:0f:79:54:33:d0:0a:12:e4:73: 35:07:2f:c7:b6:01:41:54:d4:f1:d0:e2:08:09:fd:c5:2d:b5: e9:cc:4f:ff:b1:86:94:bf:8a:75:ba:b9:a2:e3:ca:84:25:97: 94:26:c6:d7:fd:5b:0d:d6:a6:83:51:19:36:15:de:44:9c:b9: b1:5c:0f:da:bb:0c:63:10:a6:18:f0:8e:58:12:8d:af:27:ff: 20:7e:7e:e1:59:f0:67:51:ab:a8:f3:d7:72:a2:04:6b:c5:31: 2e:4d:26:49:2f:6a:1c:bd:03:7b:6b:16:0e:51:5f:60:07:f6: cc:71:0e:9f:05:88:11:ae:37:91:1a:0b:14:37:bd:8e:15:c2: 42:1d:fd:d2:18:af:40:bc:02:e0:f2:51:1a:10:06:35:a3:e4: 22:bf:63:2c:cf:d0:83:08:e4:64:7a:6a:b0:37:36:df:07:37: db:6f:8d:9e -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt5fvke8V5rkhnW+uVaggFnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjYwMTAxMTIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzc1MTVhNjA0ZDBlODYzYzY2ZjcxN2I4OWFjMzgxN2I4MjAxNDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVt8bd1483vsi+uMFl6CBDUUbKub BfkTFdC+snA5Vhk7wGXzvHK3FsLQVD2PTk5m9F2eEkWy4N9n+N3trL5km81QAAeB hVnPXl8oAodGXg1wyQ3dmvgxTT9zGoY/olRMQOxB/D99OTwzM+qU8CRSYy/j2eZw 4dVSrwwg89+r9nOGoHWCyQOc6vwXx6r3g8Dp9IjQABWIeoBsTyByppY9PV+umOql 2L3jdsY6zHM5hCb7Zo7Wpkgd4ZI16iYTeHTjZFm/DabEQELOLjMgrAY3T9LhyTws 1HrTkTj7SId0KItB1vLfu8Wd6hotmtMOM3cI0JlBXqQpXrMpCltrJImGzQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFOd1FaYE0Ohjxm9xe4msOBe4IBSeMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvNTNVVnBnVFE2R1BHYjNGN2lhdzRGN2dnRko0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAWfnAAwQA 1CrAAwQA1CrDAwQA1CrHAwQA1CrLMA0GCSqGSIb3DQEBCwUAA4IBAQB/JCUlMKzy 879V+dAM21pSWYLlbonjGnUQ9gQepJpHEAnS6Qw2KANu1qXQXENXfl3rr5P0K5eD S8/FaVOScIv4gIeqZFuF6KfybBXkLCQWkNIPeVQz0AoS5HM1By/HtgFBVNTx0OII Cf3FLbXpzE//sYaUv4p1urmi48qEJZeUJsbX/VsN1qaDURk2Fd5EnLmxXA/auwxj EKYY8I5YEo2vJ/8gfn7hWfBnUauo89dyogRrxTEuTSZJL2ocvQN7axYOUV9gB/bM cQ6fBYgRrjeRGgsUN72OFcJCHf3SGK9AvALg8lEaEAY1o+Qiv2Msz9CDCORkemqw NzbfBzfbb42e -----END CERTIFICATE-----Generated at Sat Jan 10 21:06:19 2026 by rpki-client