This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/u0553KvE-2qE4rnbtVwX2fR3c6w.roa File: u0553KvE-2qE4rnbtVwX2fR3c6w.roa (raw, json) Hash identifier: L+E/bQw8e04ZOStKC2BrH0X3ELTKpFBh3ifFPFW2VBk= Subject key identifier: BB:4E:79:DC:AB:C4:FB:6A:84:E2:B9:DB:B5:5C:17:D9:F4:77:73:AC Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B98EDCC40B80261EBA458E31B51D1DBA7 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/u0553KvE-2qE4rnbtVwX2fR3c6w.roa Signing time: Wed 07 Jan 2026 14:47:59 +0000 ROA not before: Wed 07 Jan 2026 14:47:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42083 IP address blocks: 188.132.163.0/24 maxlen: 24 188.132.203.0/24 maxlen: 24 188.132.214.0/24 maxlen: 24 212.68.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:98:ed:cc:40:b8:02:61:eb:a4:58:e3:1b:51:d1:db:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 7 14:47:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb4e79dcabc4fb6a84e2b9dbb55c17d9f47773ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2a:fa:50:94:b5:d2:fe:7a:c2:46:e5:1a:0a: 93:5b:cd:8c:1d:77:bf:17:8c:a8:ad:3c:00:d3:2c: ff:2a:3b:ae:0d:8a:fa:18:f5:ec:02:d5:6d:2f:75: bb:57:38:78:0a:05:d5:88:5c:25:b4:0f:11:3a:ab: 83:32:98:75:b0:9f:fc:94:e3:b8:3e:29:bf:68:bf: 43:fa:1e:99:67:28:94:76:ce:86:ce:39:b5:9c:0c: c6:09:03:f4:3e:7c:da:ce:62:e2:4c:ca:41:55:9f: 5f:9a:48:c7:4f:ff:dc:35:6d:a0:ed:45:ce:30:be: d2:bb:c4:c3:0c:ea:a9:d5:14:37:16:10:fd:7b:43: f4:da:bc:2f:ae:16:f9:f8:89:56:c6:6d:bf:b8:9f: ad:76:7a:26:35:aa:6a:6e:6d:97:5f:cb:09:15:97: 9e:94:4c:35:dc:a8:3b:b3:c8:97:d7:64:1f:25:95: 8d:44:4a:70:37:00:83:67:d7:2e:7f:50:1d:a9:45: ce:19:71:6c:0c:94:77:6f:52:63:4c:94:57:0f:fe: a0:0b:87:ff:fd:2c:c1:2f:14:b7:bf:74:7b:ee:29: 54:94:12:34:0a:6d:8e:61:a3:9e:71:f4:a8:9c:a0: 36:a0:67:6a:a4:a7:63:f3:8f:1c:f8:b9:28:5e:b7: 64:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:4E:79:DC:AB:C4:FB:6A:84:E2:B9:DB:B5:5C:17:D9:F4:77:73:AC X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/u0553KvE-2qE4rnbtVwX2fR3c6w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.132.163.0/24 188.132.203.0/24 188.132.214.0/24 212.68.38.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:13:de:e4:b5:b3:ed:4b:c1:aa:a0:51:8c:47:a8:72:ec:0e: 46:85:27:01:bf:a2:ba:00:97:11:ba:93:74:51:56:61:4c:ea: 9d:7e:94:4d:48:38:cb:ed:98:5c:18:6c:06:39:b8:d9:dd:22: a0:a5:80:a5:a7:75:b5:98:49:8d:ac:ea:12:f3:bb:2e:dc:29: f8:d6:72:21:b7:61:24:92:7e:a4:d6:a9:12:54:30:b0:0b:a3: d3:13:6d:8e:22:3c:b7:4d:cc:7a:90:cd:4a:d5:64:84:85:45: f8:b3:91:a8:9e:f5:9e:fe:5c:3a:57:66:c7:44:e7:8e:e2:e9: 6c:98:d5:75:54:16:12:90:16:5e:21:8e:3a:2f:aa:dc:21:dc: a7:68:78:22:e4:69:8e:17:33:b8:bd:47:05:6c:af:87:03:f8: 54:b7:5d:54:06:69:21:b9:65:d6:75:96:2b:a5:f0:ef:9e:bd: 9d:25:ae:b4:b1:1d:70:7d:66:0b:db:1d:15:56:4b:46:4a:3b: 7d:c5:99:b6:d2:fc:7b:1a:5b:c1:05:b7:08:48:cb:6a:df:ae: 99:e8:78:76:27:df:08:6d:e9:8d:06:aa:5b:d4:13:01:b0:9d: 47:c2:e7:93:a1:3c:a9:85:c4:a6:13:62:ac:68:29:9a:8d:7c: 96:fa:d8:42 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZuY7cxAuAJh66RY4xtR0dunMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTA3MTQ0NzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjRlNzlkY2FiYzRmYjZhODRlMmI5ZGJiNTVjMTdkOWY0Nzc3M2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyr6UJS10v56wkblGgqTW82MHXe/ F4yorTwA0yz/KjuuDYr6GPXsAtVtL3W7Vzh4CgXViFwltA8ROquDMph1sJ/8lOO4 Pim/aL9D+h6ZZyiUds6Gzjm1nAzGCQP0PnzazmLiTMpBVZ9fmkjHT//cNW2g7UXO ML7Su8TDDOqp1RQ3FhD9e0P02rwvrhb5+IlWxm2/uJ+tdnomNapqbm2XX8sJFZee lEw13Kg7s8iX12QfJZWNREpwNwCDZ9cuf1AdqUXOGXFsDJR3b1JjTJRXD/6gC4f/ /SzBLxS3v3R77ilUlBI0Cm2OYaOecfSonKA2oGdqpKdj848c+LkoXrdkwQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLtOedyrxPtqhOK527VcF9n0d3OsMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvdTA1NTNLdkUtMnFFNHJuYnRWd1gyZlIzYzZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAvISjAwQA vITLAwQAvITWAwQA1EQmMA0GCSqGSIb3DQEBCwUAA4IBAQBaE97ktbPtS8GqoFGM R6hy7A5GhScBv6K6AJcRupN0UVZhTOqdfpRNSDjL7ZhcGGwGObjZ3SKgpYClp3W1 mEmNrOoS87su3Cn41nIht2Ekkn6k1qkSVDCwC6PTE22OIjy3Tcx6kM1K1WSEhUX4 s5GonvWe/lw6V2bHROeO4ulsmNV1VBYSkBZeIY46L6rcIdynaHgi5GmOFzO4vUcF bK+HA/hUt11UBmkhuWXWdZYrpfDvnr2dJa60sR1wfWYL2x0VVktGSjt9xZm20vx7 GlvBBbcISMtq366Z6Hh2J98IbemNBqpb1BMBsJ1HwueToTyphcSmE2KsaCmajXyW +thC -----END CERTIFICATE-----Generated at Wed Jan 21 13:33:15 2026 by rpki-client