This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/uRzlID_nfuupcIGUXbHpyyUrxts.roa File: uRzlID_nfuupcIGUXbHpyyUrxts.roa (raw, json) Hash identifier: 5LvqBXGtCHTt2jvIwKxCsctM10tlaiQJ5CWlpcE9cx8= Subject key identifier: B9:1C:E5:20:3F:E7:7E:EB:A9:70:81:94:5D:B1:E9:CB:25:2B:C6:DB Certificate issuer: /CN=dc6917645d9d220435f91c7e46c8110cf89acbe4 Certificate serial: 019B7BA347AFD01D5E9079C62FF3F658A613 Authority key identifier: DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/uRzlID_nfuupcIGUXbHpyyUrxts.roa Signing time: Thu 01 Jan 2026 22:17:36 +0000 ROA not before: Thu 01 Jan 2026 22:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204661 IP address blocks: 185.172.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:47:af:d0:1d:5e:90:79:c6:2f:f3:f6:58:a6:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc6917645d9d220435f91c7e46c8110cf89acbe4 Validity Not Before: Jan 1 22:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b91ce5203fe77eeba97081945db1e9cb252bc6db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ed:f2:84:38:55:6b:cb:bd:82:e4:4b:0a:86: 5b:0c:2b:e3:3e:03:b7:bf:1e:f5:52:29:a6:24:e1: 43:a3:d2:1c:b1:12:64:56:21:9e:17:33:c8:0c:1a: 9e:e1:92:cd:93:98:ca:90:97:a4:18:da:a9:9d:31: d1:bd:f1:5e:a6:93:6a:fe:57:20:1b:a8:81:88:c8: 47:a7:6b:cb:35:02:1b:7a:61:96:ef:32:30:17:19: 99:fc:b4:c7:0b:e8:0d:a2:ec:39:2d:e2:97:3d:a2: 8b:1b:34:f6:bd:ea:98:1a:45:d2:e2:b4:c4:74:cc: a2:6f:a5:fc:b6:f0:a2:33:db:52:f9:12:0b:5d:01: 4a:37:09:db:e5:8b:92:d5:d2:12:36:bc:bc:2d:c2: 74:eb:55:01:76:74:cd:a9:6f:99:fd:93:c5:ac:fe: d1:29:47:65:72:81:22:8a:18:9c:9f:0e:63:f7:4c: 9d:68:cc:80:45:2e:f6:39:76:03:92:8a:d9:62:65: c2:39:c9:1f:c3:df:b4:74:52:52:5f:6b:f3:3d:cd: 9d:21:a5:44:7c:96:a5:34:c4:e4:5a:7e:1e:22:2e: 96:eb:05:1d:10:3e:1a:d3:37:16:04:3d:d8:65:9b: d9:de:cf:5a:98:08:22:49:6c:2d:ea:e5:7d:f6:aa: c1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:1C:E5:20:3F:E7:7E:EB:A9:70:81:94:5D:B1:E9:CB:25:2B:C6:DB X509v3 Authority Key Identifier: keyid:DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/uRzlID_nfuupcIGUXbHpyyUrxts.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.172.224.0/24 Signature Algorithm: sha256WithRSAEncryption 03:33:a3:90:10:13:fd:d7:06:2b:b4:3e:c9:1b:05:3c:5f:a4: 6e:a2:37:f7:b0:2c:cc:2e:0d:d3:49:0c:eb:bd:8e:39:79:34: 2a:e6:d2:05:12:72:27:9f:97:e4:9a:a3:e3:ea:09:da:e2:84: 07:93:c8:5b:26:b7:ca:1b:16:61:26:7e:75:35:e3:a0:19:5d: e7:18:ec:81:e2:5a:a8:eb:c2:1c:b4:48:63:8c:6e:86:96:ae: b0:29:03:59:6f:f3:85:cb:56:b0:95:8c:73:20:f5:ea:e1:e1: 29:d0:fd:f9:39:98:a8:b6:d1:65:57:c3:9b:2a:9d:47:74:43: 10:de:c3:9a:4d:97:ee:69:bb:9e:28:c4:49:9f:90:6d:4d:d4: 28:b8:bd:da:81:24:b4:e0:95:1d:fc:57:e6:bc:f1:8c:d3:4c: 76:23:22:b9:aa:15:e5:8e:07:0f:73:d2:42:ef:9b:ec:31:67: e0:28:56:90:6f:19:35:b5:22:32:a4:9e:6a:89:66:70:8b:93: e7:15:44:a0:0a:f3:89:8d:19:e0:f7:f6:d2:47:e0:f0:b9:c2: 14:51:3c:3a:14:27:44:2f:8d:06:44:8e:2e:8e:e8:6a:26:15: d9:2c:a8:8f:2b:49:f8:ce:4e:62:3a:b2:bd:84:cd:07:c5:95: da:34:80:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o0ev0B1ekHnGL/P2WKYTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNjkxNzY0NWQ5ZDIyMDQzNWY5MWM3ZTQ2YzgxMTBjZjg5 YWNiZTQwHhcNMjYwMTAxMjIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTFjZTUyMDNmZTc3ZWViYTk3MDgxOTQ1ZGIxZTljYjI1MmJjNmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAze3yhDhVa8u9guRLCoZbDCvjPgO3 vx71UimmJOFDo9IcsRJkViGeFzPIDBqe4ZLNk5jKkJekGNqpnTHRvfFeppNq/lcg G6iBiMhHp2vLNQIbemGW7zIwFxmZ/LTHC+gNouw5LeKXPaKLGzT2veqYGkXS4rTE dMyib6X8tvCiM9tS+RILXQFKNwnb5YuS1dISNry8LcJ061UBdnTNqW+Z/ZPFrP7R KUdlcoEiihicnw5j90ydaMyARS72OXYDkorZYmXCOckfw9+0dFJSX2vzPc2dIaVE fJalNMTkWn4eIi6W6wUdED4a0zcWBD3YZZvZ3s9amAgiSWwt6uV99qrBdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLkc5SA/537rqXCBlF2x6cslK8bbMB8GA1UdIwQY MBaAFNxpF2RdnSIENfkcfkbIEQz4msvkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0drWFpGMmRJZ1ExLVJ4LVJzZ1JEUGlheS1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zNTQ0YTctZDU1Ni00NzAxLTk1N2Et NDI4YmU5MDA4ZmJhLzEvdVJ6bElEX25mdXVwY0lHVVhiSHB5eVVyeHRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zNTQ0YTctZDU1Ni00NzAxLTk1N2EtNDI4YmU5MDA4ZmJh LzEvM0drWFpGMmRJZ1ExLVJ4LVJzZ1JEUGlheS1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuazgMA0G CSqGSIb3DQEBCwUAA4IBAQADM6OQEBP91wYrtD7JGwU8X6Ruojf3sCzMLg3TSQzr vY45eTQq5tIFEnInn5fkmqPj6gna4oQHk8hbJrfKGxZhJn51NeOgGV3nGOyB4lqo 68IctEhjjG6Glq6wKQNZb/OFy1awlYxzIPXq4eEp0P35OZiottFlV8ObKp1HdEMQ 3sOaTZfuabueKMRJn5BtTdQouL3agSS04JUd/FfmvPGM00x2IyK5qhXljgcPc9JC 75vsMWfgKFaQbxk1tSIypJ5qiWZwi5PnFUSgCvOJjRng9/bSR+DwucIUUTw6FCdE L40GRI4ujuhqJhXZLKiPK0n4zk5iOrK9hM0HxZXaNIBe -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:48 2026 by rpki-client