This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/U-2sblCAHu3qIKD-Lrud2Vu1jU0.roa File: U-2sblCAHu3qIKD-Lrud2Vu1jU0.roa (raw, json) Hash identifier: QBCXbXwqQu101TJcQB50Hnn/s+aowNHvXExjcnPeLEI= Subject key identifier: 53:ED:AC:6E:50:80:1E:ED:EA:20:A0:FE:2E:BB:9D:D9:5B:B5:8D:4D Certificate issuer: /CN=8f4669216a2078cb024231f4632eab4da7ee4bc1 Certificate serial: 019B7C808B80B30072AB15682D8F32177C75 Authority key identifier: 8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/U-2sblCAHu3qIKD-Lrud2Vu1jU0.roa Signing time: Fri 02 Jan 2026 02:19:17 +0000 ROA not before: Fri 02 Jan 2026 02:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210699 IP address blocks: 185.46.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:8b:80:b3:00:72:ab:15:68:2d:8f:32:17:7c:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f4669216a2078cb024231f4632eab4da7ee4bc1 Validity Not Before: Jan 2 02:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53edac6e50801eedea20a0fe2ebb9dd95bb58d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:00:4c:21:e9:2e:a1:dc:07:23:d0:0f:46:ce: 35:ec:fb:a3:f6:e0:11:5e:49:4d:4e:6f:67:57:7e: 17:c1:a3:e4:5d:8f:c1:c9:67:66:eb:bc:57:f3:dc: e0:21:78:86:6a:0b:0c:1a:90:ab:e5:d1:84:a5:12: 50:99:b8:ae:5e:17:93:15:39:5d:0f:ac:60:9d:c7: 3c:53:42:63:87:b0:7c:64:2d:9b:49:b9:cd:55:dd: 5c:f1:f0:d3:2e:d5:c7:4e:31:6c:78:85:6f:10:b4: f7:39:f5:d6:c0:87:32:d9:de:27:df:e1:8f:e3:52: 19:80:71:8a:1f:72:30:e0:f4:10:68:4a:84:69:6c: cc:4c:95:4a:d8:19:aa:79:d2:7b:5a:b6:56:35:d9: 36:f5:ac:17:ef:66:fa:c6:42:62:ce:90:1d:0b:35: 55:67:c4:af:03:30:c1:9c:ea:c1:a3:15:d1:d0:57: b3:2a:0a:06:38:20:ad:ea:78:a1:17:be:95:43:c9: 9f:7d:da:60:9b:80:a6:b4:93:12:ad:e5:f2:4d:9f: c1:50:14:60:20:2e:99:5d:bc:da:b3:d1:09:d0:73: 0c:46:67:71:0c:a5:8e:29:0e:6c:82:8f:e2:19:4d: d5:aa:e2:22:5c:c8:e1:0c:04:e7:1e:34:20:f9:67: ba:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:ED:AC:6E:50:80:1E:ED:EA:20:A0:FE:2E:BB:9D:D9:5B:B5:8D:4D X509v3 Authority Key Identifier: keyid:8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/U-2sblCAHu3qIKD-Lrud2Vu1jU0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.46.112.0/24 Signature Algorithm: sha256WithRSAEncryption 89:2f:02:f2:40:b2:5e:8b:46:a1:e8:84:48:49:08:68:e2:13: e9:62:c8:f8:ec:c9:ec:48:fd:80:e4:3b:1f:01:15:96:74:88: 64:83:51:d5:5f:a0:ce:5e:f8:2d:74:3a:a6:5f:53:d9:8f:a6: f8:46:54:ce:b0:4f:45:56:68:ec:13:ba:bb:40:d2:e9:14:ae: 42:94:4b:2f:06:02:dc:c0:ac:cd:dd:25:a9:35:52:3f:78:b1: d9:9e:e3:d8:10:29:86:50:89:e7:bf:ca:2a:2f:54:df:67:52: 30:b6:7c:ef:0a:59:a2:4e:7f:9c:d9:4e:a5:d3:6f:4e:4c:de: 21:06:08:a9:ae:d5:e8:7d:d2:71:3c:70:0d:1d:42:95:09:59: a4:cd:44:b1:ff:fa:f0:f7:60:f3:f3:fa:09:0f:a5:13:83:62: ed:75:75:b1:35:7f:c9:f4:8a:be:0d:eb:7e:2c:2f:ab:b2:db: 0d:0d:d2:87:2d:9e:c7:4a:50:8b:f9:fb:84:07:5f:ca:ab:59: 5b:d5:f7:53:6c:57:92:33:49:f1:3b:9f:3d:96:13:43:aa:05: bd:7c:0d:f0:63:32:37:c4:93:19:2d:15:22:50:30:2f:80:48: 80:3f:ed:a1:e9:fc:0b:a3:74:d0:a4:16:1f:ad:13:15:8a:30: 65:30:fa:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gIuAswByqxVoLY8yF3x1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmNDY2OTIxNmEyMDc4Y2IwMjQyMzFmNDYzMmVhYjRkYTdl ZTRiYzEwHhcNMjYwMTAyMDIxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2VkYWM2ZTUwODAxZWVkZWEyMGEwZmUyZWJiOWRkOTViYjU4ZDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wBMIekuodwHI9APRs417Puj9uAR XklNTm9nV34XwaPkXY/ByWdm67xX89zgIXiGagsMGpCr5dGEpRJQmbiuXheTFTld D6xgncc8U0Jjh7B8ZC2bSbnNVd1c8fDTLtXHTjFseIVvELT3OfXWwIcy2d4n3+GP 41IZgHGKH3Iw4PQQaEqEaWzMTJVK2BmqedJ7WrZWNdk29awX72b6xkJizpAdCzVV Z8SvAzDBnOrBoxXR0FezKgoGOCCt6nihF76VQ8mffdpgm4CmtJMSreXyTZ/BUBRg IC6ZXbzas9EJ0HMMRmdxDKWOKQ5sgo/iGU3VquIiXMjhDATnHjQg+We6kwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFPtrG5QgB7t6iCg/i67ndlbtY1NMB8GA1UdIwQY MBaAFI9GaSFqIHjLAkIx9GMuq02n7kvBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajBacElXb2dlTXNDUWpIMFl5NnJUYWZ1UzhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kYTQ4ZTItZmY2My00YmNkLTgyYTIt ZDdiOGViNDYwOGUyLzEvVS0yc2JsQ0FIdTNxSUtELUxydWQyVnUxalUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9kYTQ4ZTItZmY2My00YmNkLTgyYTItZDdiOGViNDYwOGUy LzEvajBacElXb2dlTXNDUWpIMFl5NnJUYWZ1UzhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuS5wMA0G CSqGSIb3DQEBCwUAA4IBAQCJLwLyQLJei0ah6IRISQho4hPpYsj47MnsSP2A5Dsf ARWWdIhkg1HVX6DOXvgtdDqmX1PZj6b4RlTOsE9FVmjsE7q7QNLpFK5ClEsvBgLc wKzN3SWpNVI/eLHZnuPYECmGUInnv8oqL1TfZ1IwtnzvClmiTn+c2U6l029OTN4h BgiprtXofdJxPHANHUKVCVmkzUSx//rw92Dz8/oJD6UTg2LtdXWxNX/J9Iq+Det+ LC+rstsNDdKHLZ7HSlCL+fuEB1/Kq1lb1fdTbFeSM0nxO589lhNDqgW9fA3wYzI3 xJMZLRUiUDAvgEiAP+2h6fwLo3TQpBYfrRMVijBlMPrV -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:12 2026 by rpki-client