This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/URzbRc-qYA-jqGN2INzPGr3qGIs.roa File: URzbRc-qYA-jqGN2INzPGr3qGIs.roa (raw, json) Hash identifier: pdWeMvzH737tn0fqVYH1dvD9WQjSjaeJBSWYN+4lA3w= Subject key identifier: 51:1C:DB:45:CF:AA:60:0F:A3:A8:63:76:20:DC:CF:1A:BD:EA:18:8B Certificate issuer: /CN=db269d0ea8caa40c7a704382cab53e1b026d6b43 Certificate serial: 019B7BA3EE1C14DEC8BF408CA89FB5B5FBDE Authority key identifier: DB:26:9D:0E:A8:CA:A4:0C:7A:70:43:82:CA:B5:3E:1B:02:6D:6B:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/URzbRc-qYA-jqGN2INzPGr3qGIs.roa Signing time: Thu 01 Jan 2026 22:18:19 +0000 ROA not before: Thu 01 Jan 2026 22:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62336 IP address blocks: 85.209.60.0/22 maxlen: 22 2a09:88c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.mft rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:ee:1c:14:de:c8:bf:40:8c:a8:9f:b5:b5:fb:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db269d0ea8caa40c7a704382cab53e1b026d6b43 Validity Not Before: Jan 1 22:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=511cdb45cfaa600fa3a8637620dccf1abdea188b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a3:56:2e:0e:9d:16:fd:bb:4a:64:c0:ed:61: 5e:5a:a9:7c:d7:76:35:ac:e9:82:6a:4a:a6:02:38: 82:5c:7d:c8:2b:66:67:23:5f:1f:f2:74:68:85:87: d4:00:23:fc:14:d9:39:2e:22:40:2b:e5:fe:ad:31: cd:ea:cc:ea:17:21:05:38:58:ce:37:06:66:3f:d8: 6f:f5:97:32:f3:25:e1:7d:70:9e:d7:00:0c:c4:fd: e9:c7:41:90:f8:07:28:29:77:bd:fe:a9:c4:36:2c: f5:86:57:fe:ed:a1:4a:2b:af:bc:90:6c:53:66:40: 89:4b:0c:2f:71:cc:5b:89:24:37:c7:2d:93:86:22: 9b:a7:44:8b:31:88:c0:0e:ba:39:e3:bf:49:45:e8: 52:bd:1d:eb:77:80:68:88:ac:67:a4:d1:31:35:e8: 9c:ac:25:3e:d9:35:c3:63:40:a5:2f:7a:69:a3:21: 09:c6:e8:cc:ec:5c:59:25:39:a2:26:9b:a7:fb:99: be:5f:2a:7b:86:05:e8:28:16:a8:5a:5e:94:13:1b: 9a:74:4a:65:2e:32:88:c1:6a:31:25:af:78:71:70: bd:29:55:e7:90:5d:79:e6:2d:81:e9:00:26:ee:df: 09:52:a8:74:c7:b8:00:51:0f:b2:be:df:f7:b7:df: 78:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:1C:DB:45:CF:AA:60:0F:A3:A8:63:76:20:DC:CF:1A:BD:EA:18:8B X509v3 Authority Key Identifier: keyid:DB:26:9D:0E:A8:CA:A4:0C:7A:70:43:82:CA:B5:3E:1B:02:6D:6B:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yadDqjKpAx6cEOCyrU-GwJta0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/URzbRc-qYA-jqGN2INzPGr3qGIs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/16634f-9724-4d8d-962d-698f818bbd33/1/2yadDqjKpAx6cEOCyrU-GwJta0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.209.60.0/22 IPv6: 2a09:88c0::/29 Signature Algorithm: sha256WithRSAEncryption ba:40:65:8b:0c:d8:e0:90:84:65:ec:57:1c:d0:1a:8f:35:62: 25:33:cb:5c:a0:2f:1a:f6:e4:e4:d5:b9:6c:5e:c5:4d:1c:be: 8b:a2:82:1d:da:c7:10:9e:86:5f:6e:3f:fc:e9:01:89:8f:83: 4f:f1:03:d3:8a:10:e4:9f:d1:a4:07:80:d8:8c:d7:55:47:7d: df:f1:35:f7:f2:b1:c2:42:3a:be:61:87:96:1b:5f:7d:c1:8c: 31:e4:a6:61:8e:85:b1:cd:4b:fa:f0:58:43:6b:d9:8c:5c:0b: fb:13:b2:52:91:59:5b:47:c9:d1:ed:84:f0:30:5f:5a:ac:0e: a3:5a:68:0b:e6:c3:19:a9:da:9e:9c:11:d0:a7:1f:b1:51:81: ea:4c:ee:fc:01:4e:34:3d:37:a1:18:8a:69:8e:a7:09:3d:dc: a0:aa:0d:79:9d:27:39:f7:82:40:bd:a5:ea:3c:51:4a:d2:41: 5a:38:4c:d4:20:3e:09:87:ed:27:c4:27:66:4a:2e:0b:37:14: ab:56:c5:11:52:ed:4d:b0:64:fe:8d:fa:b4:e7:77:bf:8a:cf: e4:ba:aa:9a:51:b3:07:be:22:ce:c5:77:f0:51:9d:cd:49:7f: dd:e4:78:fd:c6:36:5b:08:bc:4a:f5:fb:a1:7a:d1:5f:55:6f: 0a:48:ef:6b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7o+4cFN7Iv0CMqJ+1tfveMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiMjY5ZDBlYThjYWE0MGM3YTcwNDM4MmNhYjUzZTFiMDI2 ZDZiNDMwHhcNMjYwMTAxMjIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTFjZGI0NWNmYWE2MDBmYTNhODYzNzYyMGRjY2YxYWJkZWExODhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaNWLg6dFv27SmTA7WFeWql813Y1 rOmCakqmAjiCXH3IK2ZnI18f8nRohYfUACP8FNk5LiJAK+X+rTHN6szqFyEFOFjO NwZmP9hv9Zcy8yXhfXCe1wAMxP3px0GQ+AcoKXe9/qnENiz1hlf+7aFKK6+8kGxT ZkCJSwwvccxbiSQ3xy2ThiKbp0SLMYjADro5479JRehSvR3rd4BoiKxnpNExNeic rCU+2TXDY0ClL3ppoyEJxujM7FxZJTmiJpun+5m+Xyp7hgXoKBaoWl6UExuadEpl LjKIwWoxJa94cXC9KVXnkF155i2B6QAm7t8JUqh0x7gAUQ+yvt/3t994owIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFEc20XPqmAPo6hjdiDczxq96hiLMB8GA1UdIwQY MBaAFNsmnQ6oyqQMenBDgsq1PhsCbWtDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnlhZERxaktwQXg2Y0VPQ3lyVS1Hd0p0YTBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xNjYzNGYtOTcyNC00ZDhkLTk2MmQt Njk4ZjgxOGJiZDMzLzEvVVJ6YlJjLXFZQS1qcUdOMklOelBHcjNxR0lzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8xNjYzNGYtOTcyNC00ZDhkLTk2MmQtNjk4ZjgxOGJiZDMz LzEvMnlhZERxaktwQXg2Y0VPQ3lyVS1Hd0p0YTBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCVdE8MA0E AgACMAcDBQMqCYjAMA0GCSqGSIb3DQEBCwUAA4IBAQC6QGWLDNjgkIRl7Fcc0BqP NWIlM8tcoC8a9uTk1blsXsVNHL6LooId2scQnoZfbj/86QGJj4NP8QPTihDkn9Gk B4DYjNdVR33f8TX38rHCQjq+YYeWG199wYwx5KZhjoWxzUv68FhDa9mMXAv7E7JS kVlbR8nR7YTwMF9arA6jWmgL5sMZqdqenBHQpx+xUYHqTO78AU40PTehGIppjqcJ Pdygqg15nSc594JAvaXqPFFK0kFaOEzUID4Jh+0nxCdmSi4LNxSrVsURUu1NsGT+ jfq053e/is/kuqqaUbMHviLOxXfwUZ3NSX/d5Hj9xjZbCLxK9fuhetFfVW8KSO9r -----END CERTIFICATE-----Generated at Mon Jan 26 19:35:01 2026 by rpki-client