This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/mT1y4Vcpn5hGJXQzo130fr7-JU8.roa File: mT1y4Vcpn5hGJXQzo130fr7-JU8.roa (raw, json) Hash identifier: 5+RIIvJ1lvndyR9sJPil/4SfnDQMNqbmhhM2Do86aWY= Subject key identifier: 99:3D:72:E1:57:29:9F:98:46:25:74:33:A3:5D:F4:7E:BE:FE:25:4F Certificate issuer: /CN=5353a9a85fa11fc4bf156fab4d8d84a08e5d66f9 Certificate serial: 019B77592BF7C1F3C938CB3F759DA29F4A94 Authority key identifier: 53:53:A9:A8:5F:A1:1F:C4:BF:15:6F:AB:4D:8D:84:A0:8E:5D:66:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/mT1y4Vcpn5hGJXQzo130fr7-JU8.roa Signing time: Thu 01 Jan 2026 02:18:11 +0000 ROA not before: Thu 01 Jan 2026 02:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24642 IP address blocks: 81.18.160.0/20 maxlen: 20 185.70.212.0/22 maxlen: 23 2001:1aa8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.mft rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:2b:f7:c1:f3:c9:38:cb:3f:75:9d:a2:9f:4a:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5353a9a85fa11fc4bf156fab4d8d84a08e5d66f9 Validity Not Before: Jan 1 02:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=993d72e157299f9846257433a35df47ebefe254f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:63:ee:5b:76:8d:6a:9c:05:7c:d2:90:a4:cb: 2f:4a:7e:d1:d0:f4:7b:7d:11:5d:bb:10:7f:1d:21: 78:41:a8:49:a5:eb:7f:11:f4:fe:ab:28:fc:b1:21: 93:c9:c3:eb:eb:25:1f:65:25:7a:9f:19:21:35:5a: e7:de:7b:27:df:a9:51:07:52:32:9e:ba:da:c6:b4: be:61:07:d7:18:06:50:56:41:70:13:9b:97:65:07: d9:b4:a8:63:2a:f4:7c:7c:71:c1:39:b2:c9:24:07: 5b:8c:d1:a7:b3:a2:9d:54:8c:0d:39:66:48:b5:f0: 09:95:01:4e:e2:96:fe:05:f3:24:3c:66:9b:99:2b: 0a:82:c2:69:d9:c3:e6:30:23:ac:df:d0:5f:2b:d6: 36:fc:f7:5b:8d:ca:47:25:ae:80:bc:b4:93:cc:9c: d0:52:87:00:cf:a3:7e:44:44:c6:33:bd:fe:7d:af: c8:6b:00:60:91:0f:46:97:6a:04:31:21:46:fe:29: 03:c1:fa:13:92:b9:60:5c:f3:c5:48:8e:5e:d1:6a: 2a:ea:fd:f8:df:e1:90:1e:3d:17:00:32:ce:c4:5f: 9a:94:93:57:40:59:ca:0b:42:59:29:d4:5c:5a:e9: 7d:69:49:01:d0:ae:2c:3f:4c:7e:98:88:6f:45:e3: 2d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3D:72:E1:57:29:9F:98:46:25:74:33:A3:5D:F4:7E:BE:FE:25:4F X509v3 Authority Key Identifier: keyid:53:53:A9:A8:5F:A1:1F:C4:BF:15:6F:AB:4D:8D:84:A0:8E:5D:66:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1OpqF-hH8S_FW-rTY2EoI5dZvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/mT1y4Vcpn5hGJXQzo130fr7-JU8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b929ce-ec17-4d50-a6ae-79d934e4a99a/1/U1OpqF-hH8S_FW-rTY2EoI5dZvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.18.160.0/20 185.70.212.0/22 IPv6: 2001:1aa8::/32 Signature Algorithm: sha256WithRSAEncryption 45:0c:13:63:69:73:72:a3:d8:12:eb:8e:ff:08:58:26:30:de: ca:35:0f:02:40:af:91:97:e6:88:83:a2:aa:88:36:db:7b:aa: 4c:af:1f:32:e0:28:99:55:e6:5d:7d:f8:26:da:30:83:25:a8: 19:aa:c3:44:d9:aa:9b:8f:a7:92:74:71:6d:6b:52:14:2b:d1: 43:4e:31:44:d6:aa:48:20:c3:e3:28:f4:ae:7a:35:eb:5b:cd: 6c:46:eb:08:91:10:41:f1:d3:de:91:3e:36:23:3e:fa:b7:70: ef:7d:b5:05:30:42:9e:de:9a:cc:13:e5:c5:da:17:fa:e5:07: 3a:09:1e:05:9e:c9:d1:91:a1:25:55:3c:8a:79:df:f7:6b:df: d7:37:a7:0a:a5:22:c3:f6:a1:41:cf:10:7a:e5:8a:55:1b:c4: 33:b3:ad:81:02:01:90:8a:b7:4e:83:01:1f:45:3a:fe:c8:97: 3c:ef:da:73:00:13:c1:28:95:e4:cb:0d:a0:1c:7c:28:0c:d4: 5c:03:39:89:63:e1:d8:12:4d:39:b5:ba:9d:98:eb:04:79:61: 1b:ad:72:2b:6c:b3:df:5d:f1:80:4e:24:f3:07:bd:ea:1c:09: 22:61:6d:7c:d5:fa:a4:8b:04:9a:22:47:06:4b:18:c8:cd:50: 63:a0:df:4e -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3WSv3wfPJOMs/dZ2in0qUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzNTNhOWE4NWZhMTFmYzRiZjE1NmZhYjRkOGQ4NGEwOGU1 ZDY2ZjkwHhcNMjYwMTAxMDIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OTNkNzJlMTU3Mjk5Zjk4NDYyNTc0MzNhMzVkZjQ3ZWJlZmUyNTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2PuW3aNapwFfNKQpMsvSn7R0PR7 fRFduxB/HSF4QahJpet/EfT+qyj8sSGTycPr6yUfZSV6nxkhNVrn3nsn36lRB1Iy nrraxrS+YQfXGAZQVkFwE5uXZQfZtKhjKvR8fHHBObLJJAdbjNGns6KdVIwNOWZI tfAJlQFO4pb+BfMkPGabmSsKgsJp2cPmMCOs39BfK9Y2/PdbjcpHJa6AvLSTzJzQ UocAz6N+RETGM73+fa/IawBgkQ9Gl2oEMSFG/ikDwfoTkrlgXPPFSI5e0Woq6v34 3+GQHj0XADLOxF+alJNXQFnKC0JZKdRcWul9aUkB0K4sP0x+mIhvReMtLwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJk9cuFXKZ+YRiV0M6Nd9H6+/iVPMB8GA1UdIwQY MBaAFFNTqahfoR/EvxVvq02NhKCOXWb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTFPcHFGLWhIOFNfRlctclRZMkVvSTVkWnZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9iOTI5Y2UtZWMxNy00ZDUwLWE2YWUt NzlkOTM0ZTRhOTlhLzEvbVQxeTRWY3BuNWhHSlhRem8xMzBmcjctSlU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9iOTI5Y2UtZWMxNy00ZDUwLWE2YWUtNzlkOTM0ZTRhOTlh LzEvVTFPcHFGLWhIOFNfRlctclRZMkVvSTVkWnZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEURKgAwQC uUbUMA0EAgACMAcDBQAgARqoMA0GCSqGSIb3DQEBCwUAA4IBAQBFDBNjaXNyo9gS 647/CFgmMN7KNQ8CQK+Rl+aIg6KqiDbbe6pMrx8y4CiZVeZdffgm2jCDJagZqsNE 2aqbj6eSdHFta1IUK9FDTjFE1qpIIMPjKPSuejXrW81sRusIkRBB8dPekT42Iz76 t3DvfbUFMEKe3prME+XF2hf65Qc6CR4FnsnRkaElVTyKed/3a9/XN6cKpSLD9qFB zxB65YpVG8Qzs62BAgGQirdOgwEfRTr+yJc879pzABPBKJXkyw2gHHwoDNRcAzmJ Y+HYEk05tbqdmOsEeWEbrXIrbLPfXfGATiTzB73qHAkiYW181fqkiwSaIkcGSxjI zVBjoN9O -----END CERTIFICATE-----Generated at Tue Feb 10 01:23:39 2026 by rpki-client