This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/UZ3Zh5sbw9GQyuWThFTa8ax6K-k.roa File: UZ3Zh5sbw9GQyuWThFTa8ax6K-k.roa (raw, json) Hash identifier: yAGOxTch7/IeLN3QFrJm+PJnLSPNYzzaqiRQZwJHefI= Subject key identifier: 51:9D:D9:87:9B:1B:C3:D1:90:CA:E5:93:84:54:DA:F1:AC:7A:2B:E9 Certificate issuer: /CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc Certificate serial: 019B7CEE504CE73FB742CE311EB4BC51565F Authority key identifier: 2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/UZ3Zh5sbw9GQyuWThFTa8ax6K-k.roa Signing time: Fri 02 Jan 2026 04:19:11 +0000 ROA not before: Fri 02 Jan 2026 04:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41714 IP address blocks: 93.157.80.0/21 maxlen: 24 146.185.56.0/21 maxlen: 24 185.163.148.0/22 maxlen: 24 185.163.148.0/23 maxlen: 24 185.225.172.0/22 maxlen: 24 193.37.128.0/23 maxlen: 24 193.37.130.0/24 maxlen: 24 2a06:e300::/29 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.mft rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:50:4c:e7:3f:b7:42:ce:31:1e:b4:bc:51:56:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc Validity Not Before: Jan 2 04:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=519dd9879b1bc3d190cae5938454daf1ac7a2be9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2a:f4:ae:7f:69:e4:5f:97:d7:85:97:f1:9d: 40:fd:f1:65:98:2c:9d:85:a4:e7:f7:b4:30:ad:dc: 27:8b:87:14:23:bd:bf:19:01:ed:71:9f:fe:c2:00: 9d:af:fd:15:b3:36:98:df:e8:da:54:39:0e:b9:24: c1:33:e2:b7:ff:07:2d:a3:49:c7:de:a7:f8:3f:89: 5c:c5:45:1d:dd:ca:15:59:1c:3e:49:ac:98:5b:59: 1a:19:67:05:41:1f:96:72:c5:c0:1c:00:99:42:0f: 0a:65:8c:ee:16:64:ed:08:0f:7f:86:33:b6:5e:0f: 11:7a:f3:5f:9c:25:4d:f5:84:39:cd:07:e6:6e:88: c5:d4:00:29:27:b3:b4:1f:c2:f4:7e:57:2f:8e:c8: c4:84:98:57:84:83:78:b8:de:3f:72:75:0c:d3:d6: 6b:62:db:ed:94:33:44:03:3b:96:71:29:47:70:25: 73:26:47:92:4c:eb:9b:a1:88:fa:e4:c0:00:11:53: 56:4f:ea:f0:46:1d:c3:62:e5:49:f9:b1:88:0a:3e: c4:26:15:bd:db:5f:54:47:93:b6:14:1d:3c:ff:3a: 90:c4:12:de:be:f0:d6:4c:0f:f6:1f:97:ed:69:07: 99:94:16:3d:d9:a9:23:ef:75:77:17:64:13:b0:3a: 7f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:9D:D9:87:9B:1B:C3:D1:90:CA:E5:93:84:54:DA:F1:AC:7A:2B:E9 X509v3 Authority Key Identifier: keyid:2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/UZ3Zh5sbw9GQyuWThFTa8ax6K-k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.157.80.0/21 146.185.56.0/21 185.163.148.0/22 185.225.172.0/22 193.37.128.0-193.37.130.255 IPv6: 2a06:e300::/29 Signature Algorithm: sha256WithRSAEncryption 61:83:4f:c1:3e:72:a0:d7:4c:a9:67:d4:fa:f4:75:a7:88:77: 7a:4e:9e:79:7f:f3:fd:ac:51:20:82:f4:a6:1c:8b:2b:05:ac: 94:49:a3:07:9e:02:1e:2c:1b:2a:69:34:77:96:e4:ce:2c:ab: be:6a:84:4f:6d:4e:83:97:14:21:82:4f:85:a5:b4:41:2f:7d: 20:44:ab:d0:87:87:b8:55:61:a1:fe:e4:1b:6c:a1:b2:16:96: 4a:5e:d2:56:7a:c9:7b:cb:58:cc:ba:e5:fc:a7:0d:23:ff:6a: 93:c1:ea:3a:7f:10:78:4c:93:1d:c7:51:61:02:a2:81:e5:4d: af:94:9a:66:39:50:e4:89:d8:ff:9f:8f:f1:3f:90:a5:1a:47: 0e:e3:df:ea:37:84:96:6c:50:56:33:8e:c0:2e:e9:16:17:ad: 1f:2f:c1:52:a5:9e:df:b5:90:1b:b8:65:df:68:0f:57:c5:aa: 98:c3:4a:cc:d9:3b:22:c7:4f:7a:dc:d8:8b:51:1b:66:0b:e8: 22:11:a7:f6:1e:1f:ef:40:1b:81:7a:2f:87:e0:aa:41:2e:4e: a9:31:47:0b:f2:73:45:18:55:bd:ff:dc:59:04:db:d3:82:2e: 6d:54:c6:80:25:69:6a:a2:99:04:c3:13:a7:54:ca:39:9d:9a: a1:b1:c1:b2 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt87lBM5z+3Qs4xHrS8UVZfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkODY5NTZjY2Q3ZTNhYmI0MjkxZGQ1NGRiZDhiNDM0MmJm OTU3Y2MwHhcNMjYwMTAyMDQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTlkZDk4NzliMWJjM2QxOTBjYWU1OTM4NDU0ZGFmMWFjN2EyYmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiir0rn9p5F+X14WX8Z1A/fFlmCyd haTn97Qwrdwni4cUI72/GQHtcZ/+wgCdr/0VszaY3+jaVDkOuSTBM+K3/wcto0nH 3qf4P4lcxUUd3coVWRw+SayYW1kaGWcFQR+WcsXAHACZQg8KZYzuFmTtCA9/hjO2 Xg8RevNfnCVN9YQ5zQfmbojF1AApJ7O0H8L0flcvjsjEhJhXhIN4uN4/cnUM09Zr YtvtlDNEAzuWcSlHcCVzJkeSTOuboYj65MAAEVNWT+rwRh3DYuVJ+bGICj7EJhW9 219UR5O2FB08/zqQxBLevvDWTA/2H5ftaQeZlBY92akj73V3F2QTsDp//QIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFFGd2YebG8PRkMrlk4RU2vGseivpMB8GA1UdIwQY MBaAFC2GlWzNfjq7QpHdVNvYtDQr+VfMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFlhVmJNMS1PcnRDa2QxVTI5aTBOQ3Y1Vjh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8wNjRlMzUtODgxNC00M2Y2LWI0OGIt YTI2ZGUzMTNiMzRkLzEvVVozWmg1c2J3OUdReXVXVGhGVGE4YXg2Sy1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8wNjRlMzUtODgxNC00M2Y2LWI0OGItYTI2ZGUzMTNiMzRk LzEvTFlhVmJNMS1PcnRDa2QxVTI5aTBOQ3Y1Vjh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQDXZ1QAwQD krk4AwQCuaOUAwQCueGsMAwDBAfBJYADBADBJYIwDQQCAAIwBwMFAyoG4wAwDQYJ KoZIhvcNAQELBQADggEBAGGDT8E+cqDXTKln1Pr0daeId3pOnnl/8/2sUSCC9KYc iysFrJRJoweeAh4sGyppNHeW5M4sq75qhE9tToOXFCGCT4WltEEvfSBEq9CHh7hV YaH+5BtsobIWlkpe0lZ6yXvLWMy65fynDSP/apPB6jp/EHhMkx3HUWECooHlTa+U mmY5UOSJ2P+fj/E/kKUaRw7j3+o3hJZsUFYzjsAu6RYXrR8vwVKlnt+1kBu4Zd9o D1fFqpjDSszZOyLHT3rc2ItRG2YL6CIRp/YeH+9AG4F6L4fgqkEuTqkxRwvyc0UY Vb3/3FkE29OCLm1UxoAlaWqimQTDE6dUyjmdmqGxwbI= -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:37 2026 by rpki-client