This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/USkUk1O_55dbtUL8NgX3D9MuJlk.roa File: USkUk1O_55dbtUL8NgX3D9MuJlk.roa (raw, json) Hash identifier: l0RD4Yub4vls7PSxviu1JxH4TvO1gXOCiQ61YNO4X7c= Subject key identifier: 51:29:14:93:53:BF:E7:97:5B:B5:42:FC:36:05:F7:0F:D3:2E:26:59 Certificate issuer: /CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc Certificate serial: 019B7F155F39B6E7434250F7469FA8EC50E6 Authority key identifier: 0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/USkUk1O_55dbtUL8NgX3D9MuJlk.roa Signing time: Fri 02 Jan 2026 14:21:05 +0000 ROA not before: Fri 02 Jan 2026 14:21:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200689 IP address blocks: 178.255.116.0/22 maxlen: 22 185.98.164.0/22 maxlen: 22 2a06:d00::/29 maxlen: 29 2a0d:20c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:5f:39:b6:e7:43:42:50:f7:46:9f:a8:ec:50:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc Validity Not Before: Jan 2 14:21:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5129149353bfe7975bb542fc3605f70fd32e2659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c6:f0:3a:9b:65:cd:61:e5:2b:92:89:9d:48: 12:92:be:8c:02:a9:c6:c4:d9:13:38:67:30:93:68: 5b:0f:81:10:e8:97:eb:c3:61:f8:70:54:69:a6:9d: ff:93:98:92:9b:a8:4c:46:be:58:b4:dc:ad:e5:5a: a2:e8:58:ac:71:27:72:53:8a:d8:0f:1a:aa:6c:af: ba:5e:ec:81:26:c5:c6:a4:95:e1:95:47:d8:41:3c: 24:1f:8f:fb:6a:e1:3f:e8:74:11:98:ff:a2:7b:73: 09:4f:29:cf:88:03:e1:da:4b:e3:f2:0e:4f:d0:dc: f2:9d:5c:6f:bd:20:7b:4a:ab:5f:ed:78:be:90:86: ef:80:9f:16:44:ff:9c:ff:1a:1f:c7:d6:5d:fd:58: 8d:f8:e1:50:3c:06:fb:ef:10:49:9e:2c:17:13:22: b5:0a:2a:ad:6c:9d:62:be:b2:4e:82:1e:90:b4:a3: 07:0a:78:c6:e3:ba:b9:c4:5a:0f:72:f0:a7:26:33: d1:06:18:9d:8b:4e:39:dd:eb:ba:7f:3a:0f:2d:f1: 0c:57:98:52:e7:9e:3c:a2:96:6f:0c:2d:cb:57:a6: 25:40:94:ae:82:2e:84:f3:c1:76:56:4a:13:32:be: f0:eb:50:11:6e:6c:6c:bd:a6:51:5f:88:ab:95:4d: ea:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:29:14:93:53:BF:E7:97:5B:B5:42:FC:36:05:F7:0F:D3:2E:26:59 X509v3 Authority Key Identifier: keyid:0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/USkUk1O_55dbtUL8NgX3D9MuJlk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.255.116.0/22 185.98.164.0/22 IPv6: 2a06:d00::/29 2a0d:20c0::/29 Signature Algorithm: sha256WithRSAEncryption 6e:28:0c:5a:91:f0:72:6e:f6:b0:09:dc:61:2b:1d:02:56:28: 61:79:24:ac:0f:d9:6c:e7:28:6d:c9:42:bc:5e:54:b4:32:a6: 83:f3:a4:70:02:61:fc:2e:97:f8:1f:d4:2c:2b:b1:f7:ed:a0: 56:b9:08:10:8a:55:eb:b9:a0:7a:3a:ea:d3:84:2e:be:dc:8e: 90:cf:e1:3a:da:30:1a:b1:5a:ac:50:7e:9a:59:63:16:b3:d3: 27:ff:6e:cd:3e:3e:5e:57:7c:84:f3:76:8f:ca:a3:b6:be:99: c4:c7:4e:6c:5a:89:01:75:60:fd:0a:71:63:90:b2:2b:25:c3: 2a:21:c0:79:03:d5:75:56:24:77:de:44:d3:00:1f:46:62:88: 9a:98:6e:df:c5:29:1e:3b:de:53:5b:2f:8c:30:45:f1:51:15: 55:6f:00:e4:ca:76:80:1d:b1:15:ec:85:9f:cb:24:1d:50:4e: f5:70:4b:d1:83:9c:65:72:01:5d:6c:62:21:1f:32:90:66:66: ba:55:6b:cd:65:3d:36:93:af:e3:77:25:63:ea:c4:62:1e:df: ea:a2:23:6f:88:66:06:00:84:4b:3e:ab:57:21:bf:de:61:a9: 3b:3f:45:10:bf:8b:b9:04:df:4a:b4:c8:58:d8:42:03:dd:e7: 36:ac:5c:ec -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt/FV85tudDQlD3Rp+o7FDmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOWJjMWIxNGYwZDk2NTNmNTE0ZWMxNjc3NzFiNzc1NTlh YzYzY2MwHhcNMjYwMTAyMTQyMTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTI5MTQ5MzUzYmZlNzk3NWJiNTQyZmMzNjA1ZjcwZmQzMmUyNjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cbwOptlzWHlK5KJnUgSkr6MAqnG xNkTOGcwk2hbD4EQ6Jfrw2H4cFRppp3/k5iSm6hMRr5YtNyt5Vqi6FiscSdyU4rY DxqqbK+6XuyBJsXGpJXhlUfYQTwkH4/7auE/6HQRmP+ie3MJTynPiAPh2kvj8g5P 0NzynVxvvSB7Sqtf7Xi+kIbvgJ8WRP+c/xofx9Zd/ViN+OFQPAb77xBJniwXEyK1 CiqtbJ1ivrJOgh6QtKMHCnjG47q5xFoPcvCnJjPRBhidi0453eu6fzoPLfEMV5hS 5548opZvDC3LV6YlQJSugi6E88F2VkoTMr7w61ARbmxsvaZRX4irlU3qJQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFEpFJNTv+eXW7VC/DYF9w/TLiZZMB8GA1UdIwQY MBaAFAybwbFPDZZT9RTsFndxt3VZrGPMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREp2QnNVOE5sbFAxRk93V2QzRzNkVm1zWTh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YzM4ZjQtNWRhZS00ZDJjLTgyMDgt MWQxOTQ5OWQwOThmLzEvVVNrVWsxT181NWRidFVMOE5nWDNEOU11SmxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YzM4ZjQtNWRhZS00ZDJjLTgyMDgtMWQxOTQ5OWQwOThm LzEvREp2QnNVOE5sbFAxRk93V2QzRzNkVm1zWTh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCsv90AwQC uWKkMBQEAgACMA4DBQMqBg0AAwUDKg0gwDANBgkqhkiG9w0BAQsFAAOCAQEAbigM WpHwcm72sAncYSsdAlYoYXkkrA/ZbOcobclCvF5UtDKmg/OkcAJh/C6X+B/ULCux 9+2gVrkIEIpV67mgejrq04QuvtyOkM/hOtowGrFarFB+mlljFrPTJ/9uzT4+Xld8 hPN2j8qjtr6ZxMdObFqJAXVg/QpxY5CyKyXDKiHAeQPVdVYkd95E0wAfRmKImphu 38UpHjveU1svjDBF8VEVVW8A5Mp2gB2xFeyFn8skHVBO9XBL0YOcZXIBXWxiIR8y kGZmulVrzWU9NpOv43clY+rEYh7f6qIjb4hmBgCESz6rVyG/3mGpOz9FEL+LuQTf SrTIWNhCA93nNqxc7A== -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:45 2026 by rpki-client