This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/U_rat5lH-1OBTjZW3Kpv35l2bnY.roa File: U_rat5lH-1OBTjZW3Kpv35l2bnY.roa (raw, json) Hash identifier: RWS/4jTw+B9QckGKnUwmlAnGx+MDkdaAdkO4bYQ9r8c= Subject key identifier: 53:FA:DA:B7:99:47:FB:53:81:4E:36:56:DC:AA:6F:DF:99:76:6E:76 Certificate issuer: /CN=f02e3224e3e32928192628d26487d500f2707765 Certificate serial: 019B7DCB28CEAD27A785114BBBDA8BE8427E Authority key identifier: F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/U_rat5lH-1OBTjZW3Kpv35l2bnY.roa Signing time: Fri 02 Jan 2026 08:20:24 +0000 ROA not before: Fri 02 Jan 2026 08:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204642 IP address blocks: 193.203.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:28:ce:ad:27:a7:85:11:4b:bb:da:8b:e8:42:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02e3224e3e32928192628d26487d500f2707765 Validity Not Before: Jan 2 08:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53fadab79947fb53814e3656dcaa6fdf99766e76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:66:31:62:85:ef:c3:8e:ed:08:c9:27:df:2e: 00:57:b5:c5:62:d2:64:48:b4:e9:fa:6d:d0:ce:d9: 16:1e:f6:19:41:8b:96:71:46:50:8e:c0:07:9a:32: e0:f1:43:3d:bb:77:fb:b8:95:8c:cb:20:74:05:04: 42:90:f9:f5:64:92:0b:4d:c6:b2:e1:89:9a:63:d2: d1:38:6b:9f:e3:bf:ec:f4:e8:57:3c:6d:a0:be:c1: 97:61:ac:28:81:26:58:6c:de:62:59:eb:01:59:f3: ca:c0:0a:49:2d:95:c5:59:f5:0d:02:6d:83:2c:5b: 8c:50:84:88:89:68:3b:f1:2f:91:60:51:a7:70:72: 1a:16:a0:25:31:ba:6f:89:07:3e:6c:f5:01:94:7f: 81:6d:6e:00:55:bc:3b:57:11:03:a8:26:0a:d5:33: 57:81:36:3d:50:43:6c:a2:93:79:80:0b:fb:90:5f: 82:e6:13:ec:63:39:d6:c3:ce:0f:3b:b5:00:ab:03: 7a:6b:59:10:8f:c7:c2:b4:fb:72:74:4f:12:b6:99: 99:2b:03:31:55:07:6a:cc:b7:6c:96:d7:ca:c5:cb: 67:5a:78:25:14:17:4d:03:bd:4b:c2:e0:45:d8:ea: 71:e1:09:40:2d:b2:e7:e9:21:ca:dc:37:0b:0d:a7: 80:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:FA:DA:B7:99:47:FB:53:81:4E:36:56:DC:AA:6F:DF:99:76:6E:76 X509v3 Authority Key Identifier: keyid:F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/U_rat5lH-1OBTjZW3Kpv35l2bnY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.203.96.0/23 Signature Algorithm: sha256WithRSAEncryption d7:f0:3b:a6:f9:fb:a7:74:a2:ec:3e:71:b6:5b:16:83:c9:6b: a8:cf:9a:5a:05:68:92:49:21:b5:49:91:ee:a6:a5:48:90:2c: 9e:72:ae:1b:91:81:67:61:19:01:3d:af:74:2e:4f:5e:13:b8: 2b:ee:19:e9:d3:75:8e:cb:f3:6a:e1:75:88:b4:05:5f:69:52: f1:36:bc:22:13:d2:67:10:62:ac:58:c6:b9:fb:9e:48:c5:1a: 0b:44:7c:3a:97:bb:1d:b5:6b:a3:15:ea:3d:bb:2f:d5:ee:46: 59:f9:ab:e0:dc:bc:13:c4:8f:10:45:be:26:44:b5:a2:da:da: 59:cd:21:fa:74:60:c3:46:f0:64:e8:78:4f:40:72:40:4a:54: be:88:f7:ee:4b:a2:eb:05:a6:ff:33:b7:ca:fd:c7:c5:b9:07: 98:75:97:ab:a9:a9:80:0e:8e:68:b5:9d:de:25:47:f0:bc:19: eb:a3:20:33:90:17:98:a0:f7:fe:fc:f5:a0:4e:03:e1:c9:b2: 3c:0a:33:7b:be:6c:84:99:e1:9a:d3:51:8a:91:b2:73:42:9f: 43:fc:a0:f6:45:3d:4e:b4:7d:fd:8f:6a:55:52:0d:fa:29:7b: 4e:49:67:18:63:11:36:2b:b5:7f:6c:ed:6a:25:b2:ef:65:78: 98:66:40:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yyjOrSenhRFLu9qL6EJ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmUzMjI0ZTNlMzI5MjgxOTI2MjhkMjY0ODdkNTAwZjI3 MDc3NjUwHhcNMjYwMTAyMDgyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2ZhZGFiNzk5NDdmYjUzODE0ZTM2NTZkY2FhNmZkZjk5NzY2ZTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGYxYoXvw47tCMkn3y4AV7XFYtJk SLTp+m3QztkWHvYZQYuWcUZQjsAHmjLg8UM9u3f7uJWMyyB0BQRCkPn1ZJILTcay 4YmaY9LROGuf47/s9OhXPG2gvsGXYawogSZYbN5iWesBWfPKwApJLZXFWfUNAm2D LFuMUISIiWg78S+RYFGncHIaFqAlMbpviQc+bPUBlH+BbW4AVbw7VxEDqCYK1TNX gTY9UENsopN5gAv7kF+C5hPsYznWw84PO7UAqwN6a1kQj8fCtPtydE8StpmZKwMx VQdqzLdsltfKxctnWnglFBdNA71LwuBF2Opx4QlALbLn6SHK3DcLDaeAfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFP62reZR/tTgU42Vtyqb9+Zdm52MB8GA1UdIwQY MBaAFPAuMiTj4ykoGSYo0mSH1QDycHdlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEM0eUpPUGpLU2daSmlqU1pJZlZBUEp3ZDJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yNjg4OTAtZDUwOS00NTFlLWI5ZWUt ZmI5OTUzYzA3ZjE1LzEvVV9yYXQ1bEgtMU9CVGpaVzNLcHYzNWwyYm5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8yNjg4OTAtZDUwOS00NTFlLWI5ZWUtZmI5OTUzYzA3ZjE1 LzEvOEM0eUpPUGpLU2daSmlqU1pJZlZBUEp3ZDJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwctgMA0G CSqGSIb3DQEBCwUAA4IBAQDX8Dum+fundKLsPnG2WxaDyWuoz5paBWiSSSG1SZHu pqVIkCyecq4bkYFnYRkBPa90Lk9eE7gr7hnp03WOy/Nq4XWItAVfaVLxNrwiE9Jn EGKsWMa5+55IxRoLRHw6l7sdtWujFeo9uy/V7kZZ+avg3LwTxI8QRb4mRLWi2tpZ zSH6dGDDRvBk6HhPQHJASlS+iPfuS6LrBab/M7fK/cfFuQeYdZerqamADo5otZ3e JUfwvBnroyAzkBeYoPf+/PWgTgPhybI8CjN7vmyEmeGa01GKkbJzQp9D/KD2RT1O tH39j2pVUg36KXtOSWcYYxE2K7V/bO1qJbLvZXiYZkCW -----END CERTIFICATE-----Generated at Tue Feb 10 06:25:28 2026 by rpki-client