This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/u22L_LilXXM7EXjMoxH6uavf0yk.roa File: u22L_LilXXM7EXjMoxH6uavf0yk.roa (raw, json) Hash identifier: 3LyfvQCjsKYSMOrQu/jt/edTUJ42wl7gJCiyzJi+z+o= Subject key identifier: BB:6D:8B:FC:B8:A5:5D:73:3B:11:78:CC:A3:11:FA:B9:AB:DF:D3:29 Certificate issuer: /CN=7b5754e4d208c6435f1abec937cde20009204dc0 Certificate serial: 019B7DCA8B36B99ED1AC36F964F08960E283 Authority key identifier: 7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/u22L_LilXXM7EXjMoxH6uavf0yk.roa Signing time: Fri 02 Jan 2026 08:19:44 +0000 ROA not before: Fri 02 Jan 2026 08:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205709 IP address blocks: 185.123.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:8b:36:b9:9e:d1:ac:36:f9:64:f0:89:60:e2:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5754e4d208c6435f1abec937cde20009204dc0 Validity Not Before: Jan 2 08:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb6d8bfcb8a55d733b1178cca311fab9abdfd329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:68:05:2f:09:4e:8c:db:2a:d6:71:ff:51:4f: 47:2f:d6:7c:61:03:fc:4a:86:bd:dc:e0:7e:46:73: cf:82:b7:fd:69:87:75:60:29:ec:1b:03:3a:64:63: 21:e7:1b:a4:df:42:fa:6e:55:ce:74:93:8d:ce:29: 03:2d:81:75:c0:55:38:53:1b:6e:fa:cc:13:8f:6f: 02:b8:5c:d0:75:8b:fb:b0:c5:1e:7f:33:da:00:0f: d2:ad:25:2c:b3:a8:2b:d8:bf:47:8b:48:f0:c5:54: 13:09:ba:68:8d:1b:0a:93:66:9b:cd:11:24:c1:15: 91:70:30:fd:21:58:2c:9a:c0:e8:00:f6:9f:2d:f1: 93:7a:99:78:c6:a2:2b:3e:f5:77:63:cd:58:04:c8: c9:c2:1f:07:09:dc:05:9e:5e:2e:dd:42:76:15:ea: 34:59:df:6d:d4:64:fc:91:55:f9:b3:3b:8c:46:50: b9:f5:eb:aa:33:47:34:52:77:e2:19:07:e2:cc:c4: 7a:76:e9:3e:15:a7:56:39:57:c2:6b:b3:de:ab:7b: e9:2c:14:da:7a:bb:8c:b9:36:46:8f:2e:f1:15:c0: 4d:35:b1:0e:b3:d3:b5:eb:ad:97:c4:e4:b8:77:9f: 05:c3:b1:fa:45:69:28:07:1d:51:82:a8:e2:f8:6a: bf:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:6D:8B:FC:B8:A5:5D:73:3B:11:78:CC:A3:11:FA:B9:AB:DF:D3:29 X509v3 Authority Key Identifier: keyid:7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/u22L_LilXXM7EXjMoxH6uavf0yk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.123.132.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:a1:0d:ec:56:5e:c7:ea:e0:cc:de:eb:a4:87:4b:bd:98:9f: a2:95:17:1c:fb:5f:24:2f:83:17:4d:a0:6d:f6:4d:a7:0b:61: 03:02:1a:1e:e4:8c:4e:1f:8e:b4:a3:3a:a6:4e:1e:94:a9:b1: 8b:be:23:e5:af:a3:2c:4c:9b:c3:67:9c:5d:63:88:76:d0:83: 52:93:1a:ce:2e:5a:8e:56:41:88:84:45:3f:4a:4f:e6:9f:31: 68:5e:ac:f7:5e:18:45:e6:d2:e7:1e:07:f2:51:96:79:78:82: 24:62:8f:2c:75:d9:c8:cd:71:ba:20:c2:39:52:75:e1:64:e8: 3f:63:95:44:45:8e:23:b7:f9:00:68:94:84:76:c3:d7:94:cc: 99:7e:40:20:1c:56:fb:78:26:bb:ec:da:57:87:1f:d7:b7:79: fb:00:25:49:2f:93:77:47:cc:7c:23:82:13:c1:e0:03:a3:70: b0:32:7d:ec:b6:20:a9:60:93:26:46:54:fe:b7:d3:18:6b:f2: 89:60:f8:2f:2d:06:b7:14:01:f7:55:22:5b:22:04:aa:37:bb: 6f:91:9b:d2:4e:b0:4a:32:e2:52:ab:02:1b:b6:1c:3a:31:2a: 59:92:25:94:61:c8:f5:bd:ab:32:3f:75:f7:a1:d4:d6:80:d0: 27:ed:8d:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yos2uZ7RrDb5ZPCJYOKDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNTc1NGU0ZDIwOGM2NDM1ZjFhYmVjOTM3Y2RlMjAwMDky MDRkYzAwHhcNMjYwMTAyMDgxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjZkOGJmY2I4YTU1ZDczM2IxMTc4Y2NhMzExZmFiOWFiZGZkMzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymgFLwlOjNsq1nH/UU9HL9Z8YQP8 Soa93OB+RnPPgrf9aYd1YCnsGwM6ZGMh5xuk30L6blXOdJONzikDLYF1wFU4Uxtu +swTj28CuFzQdYv7sMUefzPaAA/SrSUss6gr2L9Hi0jwxVQTCbpojRsKk2abzREk wRWRcDD9IVgsmsDoAPafLfGTepl4xqIrPvV3Y81YBMjJwh8HCdwFnl4u3UJ2Feo0 Wd9t1GT8kVX5szuMRlC59euqM0c0UnfiGQfizMR6duk+FadWOVfCa7Peq3vpLBTa eruMuTZGjy7xFcBNNbEOs9O1662XxOS4d58Fw7H6RWkoBx1Rgqji+Gq/wwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLtti/y4pV1zOxF4zKMR+rmr39MpMB8GA1UdIwQY MBaAFHtXVOTSCMZDXxq+yTfN4gAJIE3AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTFkVTVOSUl4a05mR3I3Sk44M2lBQWtnVGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8xZGQxYWMtNGE4Ny00YmYxLThkNTIt ZmQ0OTNjNmE1Yzc2LzEvdTIyTF9MaWxYWE03RVhqTW94SDZ1YXZmMHlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8xZGQxYWMtNGE4Ny00YmYxLThkNTItZmQ0OTNjNmE1Yzc2 LzEvZTFkVTVOSUl4a05mR3I3Sk44M2lBQWtnVGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXuEMA0G CSqGSIb3DQEBCwUAA4IBAQBroQ3sVl7H6uDM3uukh0u9mJ+ilRcc+18kL4MXTaBt 9k2nC2EDAhoe5IxOH460ozqmTh6UqbGLviPlr6MsTJvDZ5xdY4h20INSkxrOLlqO VkGIhEU/Sk/mnzFoXqz3XhhF5tLnHgfyUZZ5eIIkYo8sddnIzXG6IMI5UnXhZOg/ Y5VERY4jt/kAaJSEdsPXlMyZfkAgHFb7eCa77NpXhx/Xt3n7ACVJL5N3R8x8I4IT weADo3CwMn3stiCpYJMmRlT+t9MYa/KJYPgvLQa3FAH3VSJbIgSqN7tvkZvSTrBK MuJSqwIbthw6MSpZkiWUYcj1vasyP3X3odTWgNAn7Y1B -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:25 2026 by rpki-client