This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/vU_maC-JH0IvkViWYKyQOXCGBcE.roa File: vU_maC-JH0IvkViWYKyQOXCGBcE.roa (raw, json) Hash identifier: NRSTpXd/DsQ6yidtnBy9uKfhJ+R2u9Rlp24X6kqd1ao= Subject key identifier: BD:4F:E6:68:2F:89:1F:42:2F:91:58:96:60:AC:90:39:70:86:05:C1 Certificate issuer: /CN=dac79d2855b897418208d47ba6e51460015b5d7b Certificate serial: 019B797F1B9AEA9ACBFF03C3351B73324862 Authority key identifier: DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/vU_maC-JH0IvkViWYKyQOXCGBcE.roa Signing time: Thu 01 Jan 2026 12:18:51 +0000 ROA not before: Thu 01 Jan 2026 12:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 185.154.216.0/22 maxlen: 24 185.154.216.0/24 maxlen: 24 185.154.217.0/24 maxlen: 24 185.154.218.0/24 maxlen: 24 185.154.219.0/24 maxlen: 24 213.184.80.0/22 maxlen: 24 213.184.80.0/24 maxlen: 24 213.184.81.0/24 maxlen: 24 213.184.82.0/24 maxlen: 24 213.184.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 00:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:1b:9a:ea:9a:cb:ff:03:c3:35:1b:73:32:48:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac79d2855b897418208d47ba6e51460015b5d7b Validity Not Before: Jan 1 12:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bd4fe6682f891f422f91589660ac9039708605c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:af:df:93:4c:d9:7e:a9:74:88:5f:0e:fd:0f: 34:8c:4f:b3:b8:d6:23:b9:69:2b:59:d4:2e:fd:ba: 1e:dc:e1:9e:5d:bf:2f:09:41:93:0e:e2:f9:b6:76: b8:99:86:47:91:39:46:87:69:d9:e5:8c:a9:34:bc: 92:4b:56:1d:15:5b:ec:7d:4f:ef:61:5d:32:bb:c5: 2b:46:47:42:15:70:b5:bd:a3:0e:fc:21:86:27:6c: 46:12:aa:c0:2b:80:3c:d1:45:e1:ad:a5:b5:b7:6b: 42:fc:fc:a6:b7:38:22:7f:8f:cb:68:ac:d3:d3:8f: 39:8b:dd:1a:c2:a6:d7:01:5d:b6:5f:64:88:91:9c: 76:e1:b4:0b:9e:e7:c5:78:76:1a:3a:91:0b:f9:6d: e0:27:be:74:84:e8:de:fb:a4:a1:15:24:3e:9c:a9: 34:9b:5c:3b:cf:1e:ff:95:b5:b4:52:99:be:42:56: 22:20:1b:5a:87:1e:49:ce:92:f3:34:43:c3:8b:ae: e0:fb:a7:a6:1e:27:a1:44:73:f3:5e:c6:cd:b0:d7: 0b:ab:10:54:41:e7:e1:5b:4c:ed:de:95:95:41:86: ca:d0:8f:e0:93:0a:8d:55:76:b2:07:6f:c9:80:08: c7:0b:35:ba:0d:1b:e9:05:2b:5d:98:8e:0d:b6:d8: 02:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:4F:E6:68:2F:89:1F:42:2F:91:58:96:60:AC:90:39:70:86:05:C1 X509v3 Authority Key Identifier: keyid:DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/vU_maC-JH0IvkViWYKyQOXCGBcE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.154.216.0/22 213.184.80.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:e8:c4:b6:98:60:cb:76:f1:8c:8b:81:3d:56:fa:6c:14:83: 9b:df:10:75:e9:5b:ad:5e:63:42:e9:cf:ae:e4:7f:f2:6c:bf: 96:4e:3e:6d:69:55:d4:28:eb:3a:da:ca:54:bb:eb:48:0d:4f: f0:d7:5f:a8:ab:55:26:d4:b6:34:96:ff:a8:bc:e1:96:4f:84: e4:36:59:8c:07:a8:51:97:e4:dc:98:87:35:57:b1:22:35:18: f9:6f:5f:4e:49:0f:ab:ab:ff:51:f6:00:a2:c8:b6:80:e8:c4: ad:5a:e3:1d:c4:33:ad:d5:41:c5:66:c4:12:0d:7f:f1:b5:78: 29:5f:a8:d7:f2:27:5c:28:ef:f7:00:38:ee:5a:7f:28:98:60: 66:bb:20:30:b6:35:09:9a:c8:f4:97:ce:2a:96:46:f5:96:38: 69:77:d7:56:b8:00:92:4f:9d:f5:c1:9a:30:d4:e5:63:2a:0d: cd:03:ef:63:9b:d8:16:6d:24:d4:4b:d5:6f:76:fb:b4:fc:59: 70:3d:8d:01:1f:71:93:5c:d5:25:9e:96:11:c9:b4:b7:97:40: e3:c5:23:14:7f:75:c8:aa:2c:bd:bd:d9:8d:97:d0:ca:dd:ab: ef:6e:88:9a:b8:ed:8b:3a:a6:7c:12:84:da:13:2f:23:09:2f: f5:09:82:15 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fxua6prL/wPDNRtzMkhiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYzc5ZDI4NTViODk3NDE4MjA4ZDQ3YmE2ZTUxNDYwMDE1 YjVkN2IwHhcNMjYwMTAxMTIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDRmZTY2ODJmODkxZjQyMmY5MTU4OTY2MGFjOTAzOTcwODYwNWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK/fk0zZfql0iF8O/Q80jE+zuNYj uWkrWdQu/boe3OGeXb8vCUGTDuL5tna4mYZHkTlGh2nZ5YypNLySS1YdFVvsfU/v YV0yu8UrRkdCFXC1vaMO/CGGJ2xGEqrAK4A80UXhraW1t2tC/Pymtzgif4/LaKzT 0485i90awqbXAV22X2SIkZx24bQLnufFeHYaOpEL+W3gJ750hOje+6ShFSQ+nKk0 m1w7zx7/lbW0Upm+QlYiIBtahx5JzpLzNEPDi67g+6emHiehRHPzXsbNsNcLqxBU QefhW0zt3pWVQYbK0I/gkwqNVXayB2/JgAjHCzW6DRvpBStdmI4NttgCEQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL1P5mgviR9CL5FYlmCskDlwhgXBMB8GA1UdIwQY MBaAFNrHnShVuJdBggjUe6blFGABW117MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnNlZEtGVzRsMEdDQ05SN3B1VVVZQUZiWFhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81YjExNDktNjQ3ZC00MDY3LTk4MDct NDQ1ZDQ1ODhjMzEyLzEvdlVfbWFDLUpIMEl2a1ZpV1lLeVFPWENHQmNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny81YjExNDktNjQ3ZC00MDY3LTk4MDctNDQ1ZDQ1ODhjMzEy LzEvMnNlZEtGVzRsMEdDQ05SN3B1VVVZQUZiWFhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuZrYAwQC 1bhQMA0GCSqGSIb3DQEBCwUAA4IBAQCK6MS2mGDLdvGMi4E9VvpsFIOb3xB16Vut XmNC6c+u5H/ybL+WTj5taVXUKOs62spUu+tIDU/w11+oq1Um1LY0lv+ovOGWT4Tk NlmMB6hRl+TcmIc1V7EiNRj5b19OSQ+rq/9R9gCiyLaA6MStWuMdxDOt1UHFZsQS DX/xtXgpX6jX8idcKO/3ADjuWn8omGBmuyAwtjUJmsj0l84qlkb1ljhpd9dWuACS T531wZow1OVjKg3NA+9jm9gWbSTUS9Vvdvu0/FlwPY0BH3GTXNUlnpYRybS3l0Dj xSMUf3XIqiy9vdmNl9DK3avvboiauO2LOqZ8EoTaEy8jCS/1CYIV -----END CERTIFICATE-----Generated at Sun Jan 18 08:55:07 2026 by rpki-client