This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/U28ApidzDmW3qwT6pO-KBtH1Onk.roa File: U28ApidzDmW3qwT6pO-KBtH1Onk.roa (raw, json) Hash identifier: YOqXTeJcoEw4Wx+EWqlj/rtnbCvHPCfU7JYCJNjis8Q= Subject key identifier: 53:6F:00:A6:27:73:0E:65:B7:AB:04:FA:A4:EF:8A:06:D1:F5:3A:79 Certificate issuer: /CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf Certificate serial: 019B7CEE3072C7D4E2353D94202BBBCF33F9 Authority key identifier: E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/U28ApidzDmW3qwT6pO-KBtH1Onk.roa Signing time: Fri 02 Jan 2026 04:19:03 +0000 ROA not before: Fri 02 Jan 2026 04:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201608 IP address blocks: 185.69.68.0/23 maxlen: 23 193.108.25.0/24 maxlen: 24 193.108.26.0/24 maxlen: 24 2a0f:8bc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.mft rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:30:72:c7:d4:e2:35:3d:94:20:2b:bb:cf:33:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9052499b0003ea0eeaea2426338c34e0bf8fdcf Validity Not Before: Jan 2 04:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=536f00a627730e65b7ab04faa4ef8a06d1f53a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:69:c2:10:05:06:76:d4:cb:ec:44:ca:28:b2: ce:9a:cd:d9:ac:f0:26:db:d7:0c:bf:ec:0a:6f:e0: 0e:72:6b:8e:56:dc:ab:54:bf:0e:e6:76:d4:7e:56: 35:bf:6a:f6:51:bb:e8:49:f6:8e:40:37:06:63:2a: 4c:a7:e9:0f:a2:56:9f:8e:5e:5c:7a:ea:b8:6b:01: 11:ac:22:c4:fc:63:0a:6c:71:41:bd:67:24:fc:18: 2a:e2:0c:63:a6:05:87:25:62:e7:4e:64:04:d6:3d: 8c:09:e5:63:9a:06:58:24:a7:eb:3e:02:91:f1:48: 52:15:08:4f:54:ab:cf:bf:5b:a2:a3:43:38:dd:aa: 74:b5:0c:35:1e:a4:ce:1d:5b:41:72:fe:fe:f4:7d: 77:a7:ac:6d:38:55:1d:f4:b9:cc:87:e0:33:99:6b: a2:17:ad:61:89:fb:65:da:77:68:b3:6a:a9:63:27: 98:ae:bf:90:b5:87:cd:15:37:d9:bd:60:97:86:44: 72:38:61:23:2b:5f:fe:ca:d9:bf:b3:77:00:a0:25: 7f:e6:f0:0f:91:a7:b6:4e:cc:2e:57:cd:82:35:d2: e9:a3:fe:ce:b0:9e:17:2e:dc:5b:a2:2f:9e:94:1d: b9:2c:cd:a7:08:18:c1:a6:90:3a:f2:59:7e:c2:66: 53:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:6F:00:A6:27:73:0E:65:B7:AB:04:FA:A4:EF:8A:06:D1:F5:3A:79 X509v3 Authority Key Identifier: keyid:E9:05:24:99:B0:00:3E:A0:EE:AE:A2:42:63:38:C3:4E:0B:F8:FD:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QUkmbAAPqDurqJCYzjDTgv4_c8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/U28ApidzDmW3qwT6pO-KBtH1Onk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/787a96-fb0d-432a-8428-710ef47732b0/1/6QUkmbAAPqDurqJCYzjDTgv4_c8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.69.68.0/23 193.108.25.0-193.108.26.255 IPv6: 2a0f:8bc0::/32 Signature Algorithm: sha256WithRSAEncryption 12:1c:07:ac:b0:f2:cc:a0:94:b8:82:61:66:3f:4b:9b:f9:90: df:a3:8c:11:fb:a2:27:d5:38:70:37:a6:07:e2:2e:09:d4:cc: 17:06:53:ee:8a:43:15:f0:6b:f2:a2:5b:dc:99:be:ae:5e:a5: d7:6e:46:21:8d:2c:e5:dd:e5:49:fd:77:33:1a:09:d2:d8:86: 51:5d:f0:5a:6a:07:0d:42:9b:7e:da:8b:30:fd:1b:12:dd:8a: 7e:46:dc:d5:c0:2a:9d:d3:8b:5f:34:56:ac:d3:0a:07:68:35: 90:69:87:5b:67:79:c0:d2:a0:ee:6a:53:92:f9:98:6d:b7:b8: c7:09:de:39:25:4f:f3:97:f4:e9:0d:60:66:f1:ec:15:95:e7: ca:4c:51:04:53:39:8c:ab:de:fb:1b:e7:2b:b5:2c:42:48:15: 2a:1d:18:4d:2e:99:19:ef:ab:87:98:26:14:ff:80:f0:16:ab: 93:34:89:20:5a:8c:67:0e:7f:7a:fd:0f:82:11:a8:2a:da:f0: 95:e1:f9:b1:71:24:cf:24:f7:e1:4e:12:61:14:2c:2e:56:7a: 7f:e8:1e:b2:56:54:22:b9:6d:ff:16:d2:c7:5c:10:5a:c1:63: e8:80:ab:cf:2c:44:c9:74:aa:88:c5:62:af:99:67:cc:9a:eb: ab:5d:51:6d -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt87jByx9TiNT2UICu7zzP5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MDUyNDk5YjAwMDNlYTBlZWFlYTI0MjYzMzhjMzRlMGJm OGZkY2YwHhcNMjYwMTAyMDQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzZmMDBhNjI3NzMwZTY1YjdhYjA0ZmFhNGVmOGEwNmQxZjUzYTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WnCEAUGdtTL7ETKKLLOms3ZrPAm 29cMv+wKb+AOcmuOVtyrVL8O5nbUflY1v2r2UbvoSfaOQDcGYypMp+kPolafjl5c euq4awERrCLE/GMKbHFBvWck/Bgq4gxjpgWHJWLnTmQE1j2MCeVjmgZYJKfrPgKR 8UhSFQhPVKvPv1uio0M43ap0tQw1HqTOHVtBcv7+9H13p6xtOFUd9LnMh+AzmWui F61hiftl2ndos2qpYyeYrr+QtYfNFTfZvWCXhkRyOGEjK1/+ytm/s3cAoCV/5vAP kae2TswuV82CNdLpo/7OsJ4XLtxboi+elB25LM2nCBjBppA68ll+wmZTHQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFFNvAKYncw5lt6sE+qTvigbR9Tp5MB8GA1UdIwQY MBaAFOkFJJmwAD6g7q6iQmM4w04L+P3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlFVa21iQUFQcUR1cnFKQ1l6akRUZ3Y0X2M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83ODdhOTYtZmIwZC00MzJhLTg0Mjgt NzEwZWY0NzczMmIwLzEvVTI4QXBpZHpEbVczcXdUNnBPLUtCdEgxT25rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My83ODdhOTYtZmIwZC00MzJhLTg0MjgtNzEwZWY0NzczMmIw LzEvNlFVa21iQUFQcUR1cnFKQ1l6akRUZ3Y0X2M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQBuUVEMAwD BADBbBkDBADBbBowDQQCAAIwBwMFACoPi8AwDQYJKoZIhvcNAQELBQADggEBABIc B6yw8syglLiCYWY/S5v5kN+jjBH7oifVOHA3pgfiLgnUzBcGU+6KQxXwa/KiW9yZ vq5epdduRiGNLOXd5Un9dzMaCdLYhlFd8FpqBw1Cm37aizD9GxLdin5G3NXAKp3T i180VqzTCgdoNZBph1tnecDSoO5qU5L5mG23uMcJ3jklT/OX9OkNYGbx7BWV58pM UQRTOYyr3vsb5yu1LEJIFSodGE0umRnvq4eYJhT/gPAWq5M0iSBajGcOf3r9D4IR qCra8JXh+bFxJM8k9+FOEmEULC5Wen/oHrJWVCK5bf8W0sdcEFrBY+iAq88sRMl0 qojFYq+ZZ8ya66tdUW0= -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:16 2026 by rpki-client