This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/UZsKg_QtparPPd-wVk9iuY4cLb8.roa File: UZsKg_QtparPPd-wVk9iuY4cLb8.roa (raw, json) Hash identifier: LXCP+y+LLCN1p4aORJt/oEFqWyCdqeZadpBwWIWxu8s= Subject key identifier: 51:9B:0A:83:F4:2D:A5:AA:CF:3D:DF:B0:56:4F:62:B9:8E:1C:2D:BF Certificate issuer: /CN=d9ad18f4c36067220f4d833cbc78a10f94eb0888 Certificate serial: 019B79EC164C8DA36431225AAD0D79B28DF6 Authority key identifier: D9:AD:18:F4:C3:60:67:22:0F:4D:83:3C:BC:78:A1:0F:94:EB:08:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/UZsKg_QtparPPd-wVk9iuY4cLb8.roa Signing time: Thu 01 Jan 2026 14:17:53 +0000 ROA not before: Thu 01 Jan 2026 14:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59781 IP address blocks: 185.72.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.crl rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:16:4c:8d:a3:64:31:22:5a:ad:0d:79:b2:8d:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9ad18f4c36067220f4d833cbc78a10f94eb0888 Validity Not Before: Jan 1 14:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=519b0a83f42da5aacf3ddfb0564f62b98e1c2dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b0:a7:3d:f2:73:98:9b:6a:12:59:d7:15:ca: ed:d9:9e:18:fd:83:2f:b5:9b:75:9f:f0:7e:db:14: 19:9d:90:12:4c:a1:5b:d7:f4:54:94:e0:ac:ce:51: f4:b2:d3:66:86:0b:eb:06:74:10:ca:c1:d4:9d:72: 06:d6:c8:db:07:c0:8d:85:73:5d:1e:13:1f:93:b3: 01:63:03:94:ff:cd:d9:46:aa:df:5d:09:81:ba:a5: 33:94:38:83:19:2a:d1:11:fe:2c:a9:ee:1b:18:e6: 00:2d:6f:14:66:b8:e7:a4:b1:43:2c:f6:7e:4c:e2: 88:06:e8:4e:00:d8:dd:74:36:5e:7c:66:1e:0c:2f: c9:d4:df:25:65:de:e9:9e:e0:02:c4:1c:43:8d:fc: c9:5a:26:15:10:1f:45:9a:fe:8b:37:c7:24:80:d3: 7f:bd:f7:85:91:e7:8d:03:bd:5d:92:24:51:8b:7f: 8e:43:74:3f:dc:ba:25:dd:e1:c0:ee:91:18:c1:b9: 22:f2:83:03:f7:fa:4a:de:61:02:c2:6d:f9:0e:4d: 72:ab:6c:59:b6:00:e2:ff:17:cd:a0:16:e9:cc:b4: 2b:0a:d9:64:9e:2f:40:ca:a8:bf:42:a8:64:40:21: 58:aa:5f:9c:10:6e:62:d5:ed:da:62:97:05:cb:15: cc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:9B:0A:83:F4:2D:A5:AA:CF:3D:DF:B0:56:4F:62:B9:8E:1C:2D:BF X509v3 Authority Key Identifier: keyid:D9:AD:18:F4:C3:60:67:22:0F:4D:83:3C:BC:78:A1:0F:94:EB:08:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/UZsKg_QtparPPd-wVk9iuY4cLb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.72.48.0/24 Signature Algorithm: sha256WithRSAEncryption 05:f5:3a:d1:c0:2d:34:b7:f2:11:eb:42:db:4a:de:2b:cb:ed: c1:e0:0f:9a:33:e4:e9:1f:ed:91:50:73:16:70:f9:df:4c:fd: 3b:a0:2e:42:81:de:1b:b0:66:f7:59:fb:3b:0b:6f:1d:58:7b: a2:9a:39:51:f0:99:9d:46:ff:81:73:86:0b:b3:0b:20:d0:e3: 1a:98:4d:84:27:63:83:66:cb:a6:02:68:5e:e6:e5:41:8d:b1: f2:ae:fa:5c:f7:a6:69:3b:16:56:df:5e:df:82:66:37:b5:2a: 63:25:a7:03:ca:52:a9:3c:d5:1a:57:8d:02:41:9b:05:77:b0: a6:28:f6:37:ef:30:27:76:44:8d:85:46:c9:db:da:94:e8:28: 44:a4:ad:82:ea:fd:b1:16:6f:8b:19:62:da:fb:f3:03:0c:0f: 61:c5:c2:d5:93:83:42:68:3f:22:83:1f:40:dc:09:fd:7e:64: b3:e7:af:bd:9c:67:ee:b2:1c:cc:c1:86:37:00:3e:15:ef:24: 1b:b4:69:75:5f:94:6b:d9:0e:fe:28:64:31:2b:f0:80:e7:25: e0:65:21:77:79:1d:0f:22:0d:ad:2d:42:a4:6a:64:87:b5:89: 9f:d9:19:9e:12:a4:99:41:af:0f:24:2c:7e:4a:40:35:19:14: 9f:d3:5c:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57BZMjaNkMSJarQ15so32MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5YWQxOGY0YzM2MDY3MjIwZjRkODMzY2JjNzhhMTBmOTRl YjA4ODgwHhcNMjYwMTAxMTQxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTliMGE4M2Y0MmRhNWFhY2YzZGRmYjA1NjRmNjJiOThlMWMyZGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbCnPfJzmJtqElnXFcrt2Z4Y/YMv tZt1n/B+2xQZnZASTKFb1/RUlOCszlH0stNmhgvrBnQQysHUnXIG1sjbB8CNhXNd HhMfk7MBYwOU/83ZRqrfXQmBuqUzlDiDGSrREf4sqe4bGOYALW8UZrjnpLFDLPZ+ TOKIBuhOANjddDZefGYeDC/J1N8lZd7pnuACxBxDjfzJWiYVEB9Fmv6LN8ckgNN/ vfeFkeeNA71dkiRRi3+OQ3Q/3Lol3eHA7pEYwbki8oMD9/pK3mECwm35Dk1yq2xZ tgDi/xfNoBbpzLQrCtlkni9Ayqi/QqhkQCFYql+cEG5i1e3aYpcFyxXMnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFGbCoP0LaWqzz3fsFZPYrmOHC2/MB8GA1UdIwQY MBaAFNmtGPTDYGciD02DPLx4oQ+U6wiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmEwWTlNTmdaeUlQVFlNOHZIaWhENVRyQ0lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9kMzUxYmYtNzFjZS00ODU3LTllNTAt YzI2NDczODVlNzI3LzEvVVpzS2dfUXRwYXJQUGQtd1ZrOWl1WTRjTGI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9kMzUxYmYtNzFjZS00ODU3LTllNTAtYzI2NDczODVlNzI3 LzEvMmEwWTlNTmdaeUlQVFlNOHZIaWhENVRyQ0lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUgwMA0G CSqGSIb3DQEBCwUAA4IBAQAF9TrRwC00t/IR60LbSt4ry+3B4A+aM+TpH+2RUHMW cPnfTP07oC5Cgd4bsGb3Wfs7C28dWHuimjlR8JmdRv+Bc4YLswsg0OMamE2EJ2OD ZsumAmhe5uVBjbHyrvpc96ZpOxZW317fgmY3tSpjJacDylKpPNUaV40CQZsFd7Cm KPY37zAndkSNhUbJ29qU6ChEpK2C6v2xFm+LGWLa+/MDDA9hxcLVk4NCaD8igx9A 3An9fmSz56+9nGfushzMwYY3AD4V7yQbtGl1X5Rr2Q7+KGQxK/CA5yXgZSF3eR0P Ig2tLUKkamSHtYmf2RmeEqSZQa8PJCx+SkA1GRSf01x2 -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:24 2026 by rpki-client