This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/U2Atptgt39wv3vkk-Rz1Z4xVq7I.roa File: U2Atptgt39wv3vkk-Rz1Z4xVq7I.roa (raw, json) Hash identifier: JTV4DVizzOqXHlZIKppWlN6Mn1J/o8EGgCMYSuimn2E= Subject key identifier: 53:60:2D:A6:D8:2D:DF:DC:2F:DE:F9:24:F9:1C:F5:67:8C:55:AB:B2 Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee Certificate serial: 019B79ECB01251519A478FF79DC834246CF3 Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/U2Atptgt39wv3vkk-Rz1Z4xVq7I.roa Signing time: Thu 01 Jan 2026 14:18:33 +0000 ROA not before: Thu 01 Jan 2026 14:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6723 IP address blocks: 178.255.176.0/22 maxlen: 24 178.255.180.0/23 maxlen: 24 178.255.183.0/24 maxlen: 24 185.5.254.0/24 maxlen: 24 185.5.255.0/24 maxlen: 24 2a01:6d80:f000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:b0:12:51:51:9a:47:8f:f7:9d:c8:34:24:6c:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee Validity Not Before: Jan 1 14:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53602da6d82ddfdc2fdef924f91cf5678c55abb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fb:99:7c:6f:5a:7c:23:bb:98:fa:af:4a:cb: 88:0c:73:fa:f4:73:7b:27:0d:fa:37:fc:79:f5:cd: 8c:a0:15:41:92:e2:46:fc:1f:93:2f:12:05:01:a0: 51:b5:07:37:93:d2:b5:41:c6:7e:12:cd:57:8a:ad: 05:81:dd:c0:3c:1d:96:20:82:7e:e2:6e:e5:dd:43: 8c:0f:de:64:00:63:dd:d5:7c:07:43:94:a1:e9:64: 39:3b:d5:b6:63:b6:ef:21:50:6a:d1:d8:c6:30:4c: 5a:16:92:19:c9:7a:96:8e:17:10:05:7e:b1:2a:c6: 62:45:99:e1:f4:c0:d7:39:2e:ca:a3:38:69:76:78: 9c:06:93:9d:f1:d8:78:ee:f8:32:fc:dc:25:20:b3: 43:7a:23:58:30:ec:ad:b1:af:d6:e6:0e:40:60:17: 3b:74:bd:37:fc:83:75:a2:62:99:e5:98:46:b9:6b: 95:f5:ed:b1:2f:c7:65:3e:0f:3a:f8:9f:fe:b8:1d: d8:31:1d:88:3f:3b:08:16:6d:58:20:65:79:1c:e3: 86:ed:89:a3:17:c2:1b:c3:6b:96:21:f7:d8:48:4b: 8c:56:21:46:d2:2c:89:aa:00:1c:1a:d8:69:48:fd: 4d:8e:2b:1a:73:75:12:f9:db:3b:54:f1:9e:76:7a: 52:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:60:2D:A6:D8:2D:DF:DC:2F:DE:F9:24:F9:1C:F5:67:8C:55:AB:B2 X509v3 Authority Key Identifier: keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/U2Atptgt39wv3vkk-Rz1Z4xVq7I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.255.176.0-178.255.181.255 178.255.183.0/24 185.5.254.0/23 IPv6: 2a01:6d80:f000::/36 Signature Algorithm: sha256WithRSAEncryption 37:24:ad:f7:c7:16:e1:b4:fa:96:67:58:2b:fe:7d:fd:5c:f0: 5b:50:92:cc:d1:2a:83:ea:bc:a2:11:1a:b9:9b:2f:43:ed:84: 3e:06:93:b5:87:92:db:fd:77:78:8f:0a:d2:69:56:c6:62:08: 94:f6:70:90:98:3f:4e:26:f7:f5:06:5b:dc:c8:fe:36:6a:3b: 5e:af:bf:47:06:65:ab:03:2b:9b:a2:d5:0d:b2:6e:43:1a:8b: 28:03:9d:5e:d3:b2:86:c9:84:db:5e:cd:88:75:11:26:07:fb: b6:dc:0e:9c:d7:79:44:21:b6:45:90:e2:4c:0b:73:4d:c6:c7: e0:09:0f:99:31:a7:46:23:f7:95:37:95:f9:07:7f:ec:c3:54: 22:67:54:dc:ab:c8:a4:e2:1d:69:af:a9:c7:16:93:3e:9d:15: 06:5e:bd:17:36:9d:cb:a2:94:fd:5d:95:a0:79:be:92:28:15: e1:59:96:1b:f0:a1:01:d9:ce:82:75:87:08:d6:bb:4f:94:84: 07:39:4b:ca:a6:06:7b:5d:f8:45:7f:e8:0f:d9:51:9e:d9:0b: 22:52:16:2a:ae:cb:dd:eb:05:be:ed:21:5f:ac:6b:a7:9e:0e: 1f:4f:da:e6:fa:4f:1b:1a:a6:08:3c:44:b9:5f:0b:bf:a4:02: 75:8c:f4:e4 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt57LASUVGaR4/3ncg0JGzzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjOTRiYjY5NDUzZjEzOWE2MDAyOWUyMmRiMGZiMzQyNGE5 MDZjZWUwHhcNMjYwMTAxMTQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzYwMmRhNmQ4MmRkZmRjMmZkZWY5MjRmOTFjZjU2NzhjNTVhYmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/uZfG9afCO7mPqvSsuIDHP69HN7 Jw36N/x59c2MoBVBkuJG/B+TLxIFAaBRtQc3k9K1QcZ+Es1Xiq0Fgd3APB2WIIJ+ 4m7l3UOMD95kAGPd1XwHQ5Sh6WQ5O9W2Y7bvIVBq0djGMExaFpIZyXqWjhcQBX6x KsZiRZnh9MDXOS7KozhpdnicBpOd8dh47vgy/NwlILNDeiNYMOytsa/W5g5AYBc7 dL03/IN1omKZ5ZhGuWuV9e2xL8dlPg86+J/+uB3YMR2IPzsIFm1YIGV5HOOG7Ymj F8Ibw2uWIffYSEuMViFG0iyJqgAcGthpSP1Njisac3US+ds7VPGednpSuwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFFNgLabYLd/cL975JPkc9WeMVauyMB8GA1UdIwQY MBaAFNyUu2lFPxOaYAKeItsPs0JKkGzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0pTN2FVVV9FNXBnQXA0aTJ3LXpRa3FRYk80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kMDQ1Y2EtYzFmNy00ZWQ5LWFmZGIt MDkwYzQ2ZTlmMmVkLzEvVTJBdHB0Z3QzOXd2M3Zray1SejFaNHhWcTdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9kMDQ1Y2EtYzFmNy00ZWQ5LWFmZGItMDkwYzQ2ZTlmMmVk LzEvM0pTN2FVVV9FNXBnQXA0aTJ3LXpRa3FRYk80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAgBAIAATAaMAwDBASy/7AD BAGy/7QDBACy/7cDBAG5Bf4wDgQCAAIwCAMGBCoBbYDwMA0GCSqGSIb3DQEBCwUA A4IBAQA3JK33xxbhtPqWZ1gr/n39XPBbUJLM0SqD6ryiERq5my9D7YQ+BpO1h5Lb /Xd4jwrSaVbGYgiU9nCQmD9OJvf1BlvcyP42ajter79HBmWrAyubotUNsm5DGoso A51e07KGyYTbXs2IdREmB/u23A6c13lEIbZFkOJMC3NNxsfgCQ+ZMadGI/eVN5X5 B3/sw1QiZ1Tcq8ik4h1pr6nHFpM+nRUGXr0XNp3LopT9XZWgeb6SKBXhWZYb8KEB 2c6CdYcI1rtPlIQHOUvKpgZ7XfhFf+gP2VGe2QsiUhYqrsvd6wW+7SFfrGunng4f T9rm+k8bGqYIPES5Xwu/pAJ1jPTk -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:08 2026 by rpki-client