This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/u8wDHAu62fejNzSsl66nMVncyJ8.roa File: u8wDHAu62fejNzSsl66nMVncyJ8.roa (raw, json) Hash identifier: DS9lRY1FbYp3Sl7zQdRRW/sRlCsiVp9bm3HNS4WoCpo= Subject key identifier: BB:CC:03:1C:0B:BA:D9:F7:A3:37:34:AC:97:AE:A7:31:59:DC:C8:9F Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901 Certificate serial: 019B7A5B7966AE68DA4A865CACF31BFB5BD1 Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/u8wDHAu62fejNzSsl66nMVncyJ8.roa Signing time: Thu 01 Jan 2026 16:19:33 +0000 ROA not before: Thu 01 Jan 2026 16:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 185.243.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:79:66:ae:68:da:4a:86:5c:ac:f3:1b:fb:5b:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901 Validity Not Before: Jan 1 16:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbcc031c0bbad9f7a33734ac97aea73159dcc89f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:15:b8:f2:45:43:e5:6b:25:68:70:43:bc:1e: 84:dc:27:40:30:a5:13:06:8f:48:7e:63:eb:28:76: fa:73:9f:58:5a:ee:8d:64:17:28:ad:67:1b:6b:eb: ca:62:6e:b2:ef:d6:12:3b:91:25:7b:c6:84:a2:90: d3:a6:80:4f:3d:a0:7c:83:92:85:b5:44:99:55:6d: c6:bf:ec:02:e4:80:17:37:f9:cf:76:21:2d:10:b6: 2e:f3:8b:1b:86:6a:f8:d4:e6:b9:f2:2c:b1:50:bc: 65:bb:90:11:d3:aa:1b:79:26:f6:e1:a4:8d:79:4c: ee:37:ba:ac:67:68:44:bb:3c:03:74:7c:cb:03:89: 02:12:d9:37:62:c2:fb:08:6c:5f:e0:d6:ca:ee:a3: a8:63:44:cc:58:28:93:30:f3:61:ad:d0:1f:ba:be: 9d:d1:71:f1:e1:2e:81:79:e4:b6:c4:a7:b8:78:db: 9e:cf:ee:9c:67:19:e0:e2:b5:90:0e:54:de:59:f3: 58:44:4f:d8:b7:15:6a:6a:2f:71:37:9e:f6:8c:ea: ad:c9:e4:f0:f0:b2:3c:c6:cc:07:b3:0d:a6:6f:be: a1:44:0a:9f:ff:c1:44:92:11:11:8a:78:05:9a:29: fb:5b:fd:9b:98:ee:41:ea:f7:06:ce:82:19:b0:04: 3f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CC:03:1C:0B:BA:D9:F7:A3:37:34:AC:97:AE:A7:31:59:DC:C8:9F X509v3 Authority Key Identifier: keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/u8wDHAu62fejNzSsl66nMVncyJ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.243.153.0/24 Signature Algorithm: sha256WithRSAEncryption 11:02:36:94:39:98:c5:13:54:0c:72:05:a7:41:2a:22:bd:6c: 49:8d:c6:13:06:47:f6:57:14:38:e2:85:3f:5c:b2:e9:81:0e: 53:9f:d5:90:40:49:33:4e:ba:e4:05:3a:cf:17:39:24:12:08: ee:59:59:4c:57:51:12:62:9b:03:18:28:b2:0d:54:18:1b:23: f4:d4:75:b4:68:da:16:ff:cf:ff:79:f1:85:8f:b3:86:e1:dc: 4e:8b:5f:87:90:7c:f7:09:44:23:fa:aa:bf:9e:a9:5c:23:93: df:e6:3e:34:52:de:27:eb:20:56:61:f5:15:0b:2b:77:de:50: 24:fc:b3:c5:88:cf:9e:53:ec:46:e9:60:7e:ff:c4:24:4b:83: 1a:a1:77:4c:81:de:41:39:2a:58:79:37:8b:6d:26:37:05:1f: b5:e2:4e:ea:b9:d7:fe:5d:25:db:f3:45:68:f1:2b:d2:72:42: 82:b2:1c:9a:d1:05:b8:eb:7b:85:8d:46:5b:4c:e3:df:3b:bb: 49:ad:1e:09:0f:26:45:20:ef:37:62:d6:1b:ad:77:f1:f0:2a: e7:8b:38:0b:49:19:a3:c7:1a:8b:4c:fb:ab:37:0b:3f:ba:47: 10:8d:64:63:b8:1f:14:04:a2:db:9b:e4:1c:be:5a:c5:1c:89: 54:cc:db:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W3lmrmjaSoZcrPMb+1vRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi YzU5MDEwHhcNMjYwMTAxMTYxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmNjMDMxYzBiYmFkOWY3YTMzNzM0YWM5N2FlYTczMTU5ZGNjODlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBW48kVD5WslaHBDvB6E3CdAMKUT Bo9IfmPrKHb6c59YWu6NZBcorWcba+vKYm6y79YSO5Ele8aEopDTpoBPPaB8g5KF tUSZVW3Gv+wC5IAXN/nPdiEtELYu84sbhmr41Oa58iyxULxlu5AR06obeSb24aSN eUzuN7qsZ2hEuzwDdHzLA4kCEtk3YsL7CGxf4NbK7qOoY0TMWCiTMPNhrdAfur6d 0XHx4S6BeeS2xKe4eNuez+6cZxng4rWQDlTeWfNYRE/YtxVqai9xN572jOqtyeTw 8LI8xswHsw2mb76hRAqf/8FEkhERingFmin7W/2bmO5B6vcGzoIZsAQ/JwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLvMAxwLutn3ozc0rJeupzFZ3MifMB8GA1UdIwQY MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt NGRkMDQzNDZhYmMzLzEvdTh3REhBdTYyZmVqTnpTc2w2Nm5NVm5jeUo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufOZMA0G CSqGSIb3DQEBCwUAA4IBAQARAjaUOZjFE1QMcgWnQSoivWxJjcYTBkf2VxQ44oU/ XLLpgQ5Tn9WQQEkzTrrkBTrPFzkkEgjuWVlMV1ESYpsDGCiyDVQYGyP01HW0aNoW /8//efGFj7OG4dxOi1+HkHz3CUQj+qq/nqlcI5Pf5j40Ut4n6yBWYfUVCyt33lAk /LPFiM+eU+xG6WB+/8QkS4MaoXdMgd5BOSpYeTeLbSY3BR+14k7qudf+XSXb80Vo 8SvSckKCshya0QW463uFjUZbTOPfO7tJrR4JDyZFIO83YtYbrXfx8CrnizgLSRmj xxqLTPurNws/ukcQjWRjuB8UBKLbm+QcvlrFHIlUzNuh -----END CERTIFICATE-----Generated at Mon Jan 19 16:55:26 2026 by rpki-client