This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/uh5VwZSFyeRZTOd75h5vFTR6u3U.roa File: uh5VwZSFyeRZTOd75h5vFTR6u3U.roa (raw, json) Hash identifier: Zw0JWNmqib6hYoXUpLqRdjuFhNxvOzTCaW+Sr0V2Mgs= Subject key identifier: BA:1E:55:C1:94:85:C9:E4:59:4C:E7:7B:E6:1E:6F:15:34:7A:BB:75 Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce Certificate serial: 019B7CEDF88D48FE98284623B56DA4F13A61 Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/uh5VwZSFyeRZTOd75h5vFTR6u3U.roa Signing time: Fri 02 Jan 2026 04:18:48 +0000 ROA not before: Fri 02 Jan 2026 04:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214481 IP address blocks: 185.244.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:f8:8d:48:fe:98:28:46:23:b5:6d:a4:f1:3a:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce Validity Not Before: Jan 2 04:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba1e55c19485c9e4594ce77be61e6f15347abb75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:52:97:8c:20:e1:75:1e:e9:d1:74:78:6e:30: 3b:6f:74:f6:01:11:dc:f1:71:70:c7:ac:a3:49:e8: fa:48:54:57:c2:45:18:7e:0c:83:be:aa:7a:8c:fa: d6:ff:d7:84:14:81:0e:9e:48:86:61:ae:a6:e7:e2: 0c:77:e4:e4:63:d9:42:31:20:bb:88:3f:88:02:d2: c6:2a:c5:1b:19:2e:ee:74:f3:f3:13:30:26:d5:65: ad:dd:5c:df:d5:e5:86:cb:62:9f:f7:7e:a9:4a:19: 42:90:28:e0:1e:37:82:5e:9f:84:d3:f7:c8:5d:bf: 83:ea:2f:0c:aa:55:03:9e:6b:97:61:21:d6:76:54: 54:cd:36:b0:13:2b:ec:20:f1:26:6e:a5:42:2b:5e: bb:7d:a8:e7:a8:19:01:c3:ad:5f:86:36:ea:e5:54: 2e:99:da:f9:bf:e4:ee:83:ce:be:61:3f:f4:dc:5a: 99:6c:40:79:7b:1f:1b:22:c9:6e:d5:0e:48:10:30: 18:d0:93:fb:b5:08:e0:a7:0c:15:ad:d6:56:c6:e7: c7:44:7e:f5:8a:36:25:c0:97:11:0b:63:d4:ef:bb: ee:08:ba:37:7b:8e:be:93:e5:f3:a5:45:fc:89:08: 00:69:d9:cc:ac:a4:b4:67:eb:28:4c:6d:03:1a:f1: 60:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1E:55:C1:94:85:C9:E4:59:4C:E7:7B:E6:1E:6F:15:34:7A:BB:75 X509v3 Authority Key Identifier: keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/uh5VwZSFyeRZTOd75h5vFTR6u3U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.244.25.0/24 Signature Algorithm: sha256WithRSAEncryption 42:5c:cb:96:17:06:92:57:6c:71:ff:09:b8:c5:68:1e:55:d6: a8:d0:6a:67:04:0d:5e:86:4c:08:44:01:38:04:81:77:99:48: c8:d4:09:b1:65:74:99:26:4b:c3:dc:f9:ef:9d:5b:24:78:f6: 8c:81:1b:e8:3a:fa:28:eb:f0:84:0a:82:58:93:4e:21:69:7f: 2c:ec:19:14:70:da:f4:8a:95:c4:8e:f1:d8:ec:f5:39:77:5b: fc:20:8e:7c:ac:2e:9d:16:67:51:f9:55:24:45:07:a1:f2:a7: 2e:16:ae:0c:e6:d7:f5:92:5b:1a:3c:c2:af:8b:69:70:d1:9e: 37:31:8e:88:20:ef:44:93:f6:0d:09:1d:53:6b:33:65:89:63: 9f:5c:24:f9:9c:e7:47:2b:7b:45:cb:ba:ba:57:2e:5c:29:75: 9a:8e:c7:08:aa:ae:8a:9d:11:3d:40:30:c8:4c:7b:d3:73:d8: ee:5a:4e:37:57:aa:0f:2e:83:ba:f4:05:26:64:42:32:ac:ce: e6:2b:33:1d:4b:ba:b2:8b:b8:54:43:4a:25:89:41:98:39:c6: cf:07:52:e6:9f:ff:98:89:fa:f3:27:81:93:9b:b0:d6:cf:8a: 62:83:0d:e2:ca:1b:85:97:bc:bf:d5:f7:27:5f:b3:a9:74:21: 46:33:10:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87fiNSP6YKEYjtW2k8TphMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYzY5ZDA0NTgzNTAwYzVlZjgxMTM2ODMxMjM3NTkzZTBi Yjg2Y2UwHhcNMjYwMTAyMDQxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTFlNTVjMTk0ODVjOWU0NTk0Y2U3N2JlNjFlNmYxNTM0N2FiYjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11KXjCDhdR7p0XR4bjA7b3T2ARHc 8XFwx6yjSej6SFRXwkUYfgyDvqp6jPrW/9eEFIEOnkiGYa6m5+IMd+TkY9lCMSC7 iD+IAtLGKsUbGS7udPPzEzAm1WWt3Vzf1eWGy2Kf936pShlCkCjgHjeCXp+E0/fI Xb+D6i8MqlUDnmuXYSHWdlRUzTawEyvsIPEmbqVCK167fajnqBkBw61fhjbq5VQu mdr5v+Tug86+YT/03FqZbEB5ex8bIslu1Q5IEDAY0JP7tQjgpwwVrdZWxufHRH71 ijYlwJcRC2PU77vuCLo3e46+k+XzpUX8iQgAadnMrKS0Z+soTG0DGvFgFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLoeVcGUhcnkWUzne+YebxU0ert1MB8GA1UdIwQY MBaAFHPGnQRYNQDF74ETaDEjdZPgu4bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQt ZjljYjBhN2IyMDZjLzEvdWg1VndaU0Z5ZVJaVE9kNzVoNXZGVFI2dTNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQtZjljYjBhN2IyMDZj LzEvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufQZMA0G CSqGSIb3DQEBCwUAA4IBAQBCXMuWFwaSV2xx/wm4xWgeVdao0GpnBA1ehkwIRAE4 BIF3mUjI1AmxZXSZJkvD3PnvnVskePaMgRvoOvoo6/CECoJYk04haX8s7BkUcNr0 ipXEjvHY7PU5d1v8II58rC6dFmdR+VUkRQeh8qcuFq4M5tf1klsaPMKvi2lw0Z43 MY6IIO9Ek/YNCR1TazNliWOfXCT5nOdHK3tFy7q6Vy5cKXWajscIqq6KnRE9QDDI THvTc9juWk43V6oPLoO69AUmZEIyrM7mKzMdS7qyi7hUQ0oliUGYOcbPB1Lmn/+Y ifrzJ4GTm7DWz4pigw3iyhuFl7y/1fcnX7OpdCFGMxD6 -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:51 2026 by rpki-client