This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/UIBjpglW4YWleiz-oKKmcURIxwc.roa File: UIBjpglW4YWleiz-oKKmcURIxwc.roa (raw, json) Hash identifier: ErWPaj7tYXmjYMsLMNAAh1j4o0c+Mnbdnzjy6PRwJIk= Subject key identifier: 50:80:63:A6:09:56:E1:85:A5:7A:2C:FE:A0:A2:A6:71:44:48:C7:07 Certificate issuer: /CN=d9ad18f4c36067220f4d833cbc78a10f94eb0888 Certificate serial: 019B79EC173EC5FF7500B4A05BF15CEEC60D Authority key identifier: D9:AD:18:F4:C3:60:67:22:0F:4D:83:3C:BC:78:A1:0F:94:EB:08:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/UIBjpglW4YWleiz-oKKmcURIxwc.roa Signing time: Thu 01 Jan 2026 14:17:54 +0000 ROA not before: Thu 01 Jan 2026 14:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208652 IP address blocks: 185.72.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.crl rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:17:3e:c5:ff:75:00:b4:a0:5b:f1:5c:ee:c6:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9ad18f4c36067220f4d833cbc78a10f94eb0888 Validity Not Before: Jan 1 14:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=508063a60956e185a57a2cfea0a2a6714448c707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ee:36:dd:bf:d9:46:df:23:96:e3:79:68:16: 93:86:a2:a3:80:63:8b:9e:a2:6d:97:7c:c0:34:01: ff:f4:52:32:aa:33:da:9b:94:30:8f:09:8c:2b:89: 3d:4c:31:af:a7:dd:85:0a:1c:97:72:67:54:1e:cf: 1b:0b:da:e9:0c:b8:72:ef:ec:a4:e8:77:c0:f2:ca: b4:56:58:ac:61:f2:68:36:0c:6a:c0:7d:64:74:6b: 6d:02:b2:c2:26:33:5d:af:c5:7b:78:09:4c:e2:d4: 85:05:04:92:0e:3d:b3:ff:59:b5:2b:e7:0c:1f:4f: d4:98:f7:4e:cf:e6:4c:99:8e:33:85:56:34:2e:32: c8:d5:d2:28:c1:bc:de:3e:29:f7:e7:62:d0:0c:4e: 30:15:91:23:3f:91:8c:69:7d:68:61:3a:bc:78:fa: 6b:5a:d5:cd:b9:4d:65:f6:2b:8f:a6:2d:42:c1:8b: 9e:d6:aa:94:84:5a:c4:ac:fa:eb:e3:5a:e1:45:e5: 60:36:9b:9c:0d:ca:7e:6d:a6:58:20:78:1b:13:53: 16:3b:53:d2:66:71:9b:25:10:71:80:13:9b:12:af: a2:e6:88:0a:5d:f1:e2:d5:b2:1d:07:01:60:32:2c: 4b:ed:be:2f:58:a7:5e:7b:c2:5c:df:d1:b2:88:af: ba:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:80:63:A6:09:56:E1:85:A5:7A:2C:FE:A0:A2:A6:71:44:48:C7:07 X509v3 Authority Key Identifier: keyid:D9:AD:18:F4:C3:60:67:22:0F:4D:83:3C:BC:78:A1:0F:94:EB:08:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/UIBjpglW4YWleiz-oKKmcURIxwc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.72.51.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:b0:c0:a3:d4:79:21:08:91:e3:32:61:6e:0f:6f:bd:3d:fb: ec:8a:8b:d7:0a:0b:58:d8:e2:be:1c:ad:5e:54:af:11:a2:cc: 32:ff:78:df:6b:e7:ea:dc:95:eb:58:37:94:db:af:2a:5d:cd: 9f:d7:ba:40:0d:10:ad:6c:e2:d2:35:ef:5c:77:9f:aa:bd:34: 12:61:ce:86:cc:87:4d:4c:4b:52:51:59:35:23:a3:35:e8:b1: 07:0d:b7:ea:3d:c1:f4:a4:2c:0b:58:1d:a2:d1:ed:e2:35:4a: 05:66:95:20:d8:54:38:70:b4:96:63:9c:30:f7:51:47:41:fb: c4:ad:5a:8b:ce:e7:e0:c9:ce:0b:ec:1c:8f:0d:fc:b4:0f:3a: 82:e7:f9:da:3c:ec:c9:56:e1:aa:d8:a0:82:65:d2:b1:ba:e9: 50:1f:ed:c1:90:50:8b:23:2e:80:6a:b8:fb:5f:8f:ba:37:7d: 65:a0:48:22:40:aa:b2:7c:7c:78:e6:a6:64:05:ae:c4:50:5f: 22:50:cf:65:fe:42:7e:15:f5:56:72:39:2c:82:ad:03:f8:32: 5c:10:f6:5a:8f:9e:e3:d0:d5:b6:55:bd:93:6a:a7:d4:4b:74: 07:1a:01:90:fa:00:9b:29:83:af:60:e9:9a:8c:83:52:20:6d: 0c:4d:b8:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Bc+xf91ALSgW/Fc7sYNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5YWQxOGY0YzM2MDY3MjIwZjRkODMzY2JjNzhhMTBmOTRl YjA4ODgwHhcNMjYwMTAxMTQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDgwNjNhNjA5NTZlMTg1YTU3YTJjZmVhMGEyYTY3MTQ0NDhjNzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe423b/ZRt8jluN5aBaThqKjgGOL nqJtl3zANAH/9FIyqjPam5QwjwmMK4k9TDGvp92FChyXcmdUHs8bC9rpDLhy7+yk 6HfA8sq0VlisYfJoNgxqwH1kdGttArLCJjNdr8V7eAlM4tSFBQSSDj2z/1m1K+cM H0/UmPdOz+ZMmY4zhVY0LjLI1dIowbzePin352LQDE4wFZEjP5GMaX1oYTq8ePpr WtXNuU1l9iuPpi1CwYue1qqUhFrErPrr41rhReVgNpucDcp+baZYIHgbE1MWO1PS ZnGbJRBxgBObEq+i5ogKXfHi1bIdBwFgMixL7b4vWKdee8Jc39GyiK+6LQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFCAY6YJVuGFpXos/qCipnFESMcHMB8GA1UdIwQY MBaAFNmtGPTDYGciD02DPLx4oQ+U6wiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmEwWTlNTmdaeUlQVFlNOHZIaWhENVRyQ0lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9kMzUxYmYtNzFjZS00ODU3LTllNTAt YzI2NDczODVlNzI3LzEvVUlCanBnbFc0WVdsZWl6LW9LS21jVVJJeHdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9kMzUxYmYtNzFjZS00ODU3LTllNTAtYzI2NDczODVlNzI3 LzEvMmEwWTlNTmdaeUlQVFlNOHZIaWhENVRyQ0lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUgzMA0G CSqGSIb3DQEBCwUAA4IBAQCasMCj1HkhCJHjMmFuD2+9PfvsiovXCgtY2OK+HK1e VK8Roswy/3jfa+fq3JXrWDeU268qXc2f17pADRCtbOLSNe9cd5+qvTQSYc6GzIdN TEtSUVk1I6M16LEHDbfqPcH0pCwLWB2i0e3iNUoFZpUg2FQ4cLSWY5ww91FHQfvE rVqLzufgyc4L7ByPDfy0DzqC5/naPOzJVuGq2KCCZdKxuulQH+3BkFCLIy6Aarj7 X4+6N31loEgiQKqyfHx45qZkBa7EUF8iUM9l/kJ+FfVWcjksgq0D+DJcEPZaj57j 0NW2Vb2TaqfUS3QHGgGQ+gCbKYOvYOmajINSIG0MTbhy -----END CERTIFICATE-----Generated at Tue Feb 10 05:55:31 2026 by rpki-client