This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/urEdR1rkKC37QLchd2Eu3Uvae7w.roa File: urEdR1rkKC37QLchd2Eu3Uvae7w.roa (raw, json) Hash identifier: kKj8ZOJ0MJkO16pSik4xWptNoglu7DaHV1OVMMkcbVU= Subject key identifier: BA:B1:1D:47:5A:E4:28:2D:FB:40:B7:21:77:61:2E:DD:4B:DA:7B:BC Certificate issuer: /CN=a86057859d1660e8d872979ee6d6a6b2c433a305 Certificate serial: 019B7F8369A35E2E892BB1985CBAE647D239 Authority key identifier: A8:60:57:85:9D:16:60:E8:D8:72:97:9E:E6:D6:A6:B2:C4:33:A3:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBXhZ0WYOjYcpee5tamssQzowU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/urEdR1rkKC37QLchd2Eu3Uvae7w.roa Signing time: Fri 02 Jan 2026 16:21:17 +0000 ROA not before: Fri 02 Jan 2026 16:21:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35565 IP address blocks: 194.187.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.crl rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.mft rsync://rpki.ripe.net/repository/DEFAULT/qGBXhZ0WYOjYcpee5tamssQzowU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:69:a3:5e:2e:89:2b:b1:98:5c:ba:e6:47:d2:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a86057859d1660e8d872979ee6d6a6b2c433a305 Validity Not Before: Jan 2 16:21:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bab11d475ae4282dfb40b72177612edd4bda7bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:11:bd:d2:07:f5:ac:de:83:f9:be:5b:9b:69: cc:37:e1:dc:00:85:79:7b:e2:8f:1b:28:a7:65:b1: 6b:50:95:d8:a9:d0:8d:d8:7d:c5:3b:ec:a7:0f:f6: 1c:68:42:05:0b:b8:54:00:7d:4d:a0:69:ad:89:4a: c1:01:af:19:21:1f:54:60:76:14:08:ff:36:ed:cc: 84:25:31:94:dd:dc:e3:ba:32:bd:a2:31:92:56:d8: e4:76:75:9f:ac:9a:c8:c3:9e:cc:de:ec:3a:c1:56: 36:b4:b6:b5:5d:e8:f0:15:24:82:0e:a4:4f:bd:88: ad:45:bc:d5:6c:ae:0e:f5:60:98:8c:ea:a6:8d:f3: 81:75:a5:fe:c6:a8:16:49:aa:31:bb:de:e8:67:c1: 06:fc:89:7e:1e:87:b1:a1:ca:53:f8:5c:f5:64:2c: fd:dc:11:c3:34:ca:b6:17:26:d6:7e:d8:8b:9a:9b: 70:fc:a8:c7:96:8c:0b:83:59:65:f2:ce:bc:2d:37: 5b:fd:6f:b6:b5:6a:60:a7:01:6a:12:c9:2b:1b:d9: 15:d9:02:72:81:4f:8d:d0:0a:34:b6:6c:ce:f0:88: fd:ca:c2:01:88:ac:3c:27:f2:6d:ba:3f:bf:d9:81: be:c9:c5:ef:76:a4:24:1c:be:51:02:e7:94:76:8d: 3c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B1:1D:47:5A:E4:28:2D:FB:40:B7:21:77:61:2E:DD:4B:DA:7B:BC X509v3 Authority Key Identifier: keyid:A8:60:57:85:9D:16:60:E8:D8:72:97:9E:E6:D6:A6:B2:C4:33:A3:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBXhZ0WYOjYcpee5tamssQzowU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/urEdR1rkKC37QLchd2Eu3Uvae7w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.187.60.0/22 Signature Algorithm: sha256WithRSAEncryption a9:0e:47:77:68:91:de:48:b8:08:80:29:67:ed:45:37:ae:ab: 3a:65:92:17:9d:80:c0:db:91:79:a8:41:15:b5:98:c7:80:b0: 0b:bf:57:c9:3d:40:73:f1:ff:89:2e:37:d1:1e:69:45:0f:32: dd:d9:b2:77:ba:30:76:a0:a5:ab:d0:cd:99:dd:19:d7:38:67: 40:b3:f4:68:b0:a4:26:70:d1:d3:3a:9f:48:32:1a:bc:48:ef: 3c:28:17:37:5d:38:d3:69:ee:88:4e:5b:a0:c8:51:a6:0f:83: 72:77:e8:26:29:87:81:56:63:99:52:69:91:36:23:ad:54:e4: 55:dc:71:9a:8e:b0:64:0d:2e:9c:2e:29:49:2d:26:1d:c8:74: 4b:d2:8b:fe:1c:1d:2a:89:25:31:79:80:91:48:eb:fd:53:04: ae:0c:da:2e:d2:b5:db:1a:0f:3e:1d:b9:88:a1:b4:4c:a3:a5: 09:6f:2a:dd:5b:7a:bd:99:fb:dd:9d:84:8d:1f:42:62:10:05: fb:5b:8d:08:7d:b6:fe:41:11:3f:4e:f1:c5:37:c6:00:65:f4: c0:a4:9e:6c:d8:25:28:d9:65:48:6e:0f:48:ab:f0:eb:7a:42: d2:f4:ce:a4:d4:f3:25:b1:21:44:2d:68:e9:e8:d2:54:43:9f: df:b0:f1:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g2mjXi6JK7GYXLrmR9I5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NjA1Nzg1OWQxNjYwZThkODcyOTc5ZWU2ZDZhNmIyYzQz M2EzMDUwHhcNMjYwMTAyMTYyMTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWIxMWQ0NzVhZTQyODJkZmI0MGI3MjE3NzYxMmVkZDRiZGE3YmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRG90gf1rN6D+b5bm2nMN+HcAIV5 e+KPGyinZbFrUJXYqdCN2H3FO+ynD/YcaEIFC7hUAH1NoGmtiUrBAa8ZIR9UYHYU CP827cyEJTGU3dzjujK9ojGSVtjkdnWfrJrIw57M3uw6wVY2tLa1XejwFSSCDqRP vYitRbzVbK4O9WCYjOqmjfOBdaX+xqgWSaoxu97oZ8EG/Il+HoexocpT+Fz1ZCz9 3BHDNMq2FybWftiLmptw/KjHlowLg1ll8s68LTdb/W+2tWpgpwFqEskrG9kV2QJy gU+N0Ao0tmzO8Ij9ysIBiKw8J/Jtuj+/2YG+ycXvdqQkHL5RAueUdo08DwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLqxHUda5Cgt+0C3IXdhLt1L2nu8MB8GA1UdIwQY MBaAFKhgV4WdFmDo2HKXnubWprLEM6MFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUdCWGhaMFdZT2pZY3BlZTV0YW1zc1F6b3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8yMTM0NWItNGRlNy00MDg2LTlhYmYt ZDRlZGMyMGNjMWFjLzEvdXJFZFIxcmtLQzM3UUxjaGQyRXUzVXZhZTd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS8yMTM0NWItNGRlNy00MDg2LTlhYmYtZDRlZGMyMGNjMWFj LzEvcUdCWGhaMFdZT2pZY3BlZTV0YW1zc1F6b3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwrs8MA0G CSqGSIb3DQEBCwUAA4IBAQCpDkd3aJHeSLgIgCln7UU3rqs6ZZIXnYDA25F5qEEV tZjHgLALv1fJPUBz8f+JLjfRHmlFDzLd2bJ3ujB2oKWr0M2Z3RnXOGdAs/RosKQm cNHTOp9IMhq8SO88KBc3XTjTae6ITlugyFGmD4Nyd+gmKYeBVmOZUmmRNiOtVORV 3HGajrBkDS6cLilJLSYdyHRL0ov+HB0qiSUxeYCRSOv9UwSuDNou0rXbGg8+HbmI obRMo6UJbyrdW3q9mfvdnYSNH0JiEAX7W40Ifbb+QRE/TvHFN8YAZfTApJ5s2CUo 2WVIbg9Iq/DrekLS9M6k1PMlsSFELWjp6NJUQ5/fsPFy -----END CERTIFICATE-----Generated at Tue Feb 10 00:28:50 2026 by rpki-client