This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/uTl0JvlxYYPXSlWv5UjY4JUTXms.roa File: uTl0JvlxYYPXSlWv5UjY4JUTXms.roa (raw, json) Hash identifier: vAyl07+E7ZfATYQNzl4ukqmCla5aJ3MshRD6eW95zyg= Subject key identifier: B9:39:74:26:F9:71:61:83:D7:4A:55:AF:E5:48:D8:E0:95:13:5E:6B Certificate issuer: /CN=1262f7da8fee5d2a7bcdd4014a70a927db499fa4 Certificate serial: 019B7DCABC8D2E5CCE884CC09AB3FDD1E284 Authority key identifier: 12:62:F7:DA:8F:EE:5D:2A:7B:CD:D4:01:4A:70:A9:27:DB:49:9F:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/uTl0JvlxYYPXSlWv5UjY4JUTXms.roa Signing time: Fri 02 Jan 2026 08:19:56 +0000 ROA not before: Fri 02 Jan 2026 08:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41828 IP address blocks: 185.53.12.0/23 maxlen: 23 185.53.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:bc:8d:2e:5c:ce:88:4c:c0:9a:b3:fd:d1:e2:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1262f7da8fee5d2a7bcdd4014a70a927db499fa4 Validity Not Before: Jan 2 08:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9397426f9716183d74a55afe548d8e095135e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0d:ec:4f:7e:15:6e:22:16:43:2f:cf:56:89: 2f:eb:cc:70:21:ad:df:30:23:6d:b8:3c:40:1a:85: c3:70:ba:a9:23:0f:9f:41:f5:17:e5:ee:bc:73:7e: 55:d7:fa:e7:24:89:67:d6:04:fd:f9:1d:71:16:03: a3:7d:54:a5:4f:e0:06:8e:a7:72:d0:f0:51:14:bf: 3b:6f:2d:da:0f:ac:26:0c:c4:6e:cd:24:c4:de:5f: e0:c0:1b:95:b2:78:46:38:ed:f1:85:15:a1:19:9c: d2:50:3f:2b:a8:58:bb:3f:e0:29:03:bd:9e:0e:ca: f0:60:82:d5:86:60:30:89:5a:aa:88:16:d4:07:8b: 84:b0:bf:ea:f5:33:a3:2b:a4:87:f2:5c:00:e8:71: 46:20:b7:97:d6:0d:39:d6:05:9e:f9:9f:79:46:10: 1c:da:a8:91:36:89:94:d0:d0:7d:98:21:ec:ae:79: bf:05:bb:54:a0:d4:34:dd:fb:5d:29:c7:7c:95:6f: 92:b3:39:4d:fa:62:e4:20:80:b2:1b:e0:04:38:51: af:cb:8e:c7:02:8f:3f:2d:07:4c:ca:e4:81:8c:14: 3a:c2:74:b4:83:30:10:2a:dc:93:e1:c3:ba:78:5d: be:17:33:97:ca:05:e0:a5:25:8a:d2:ec:b2:7c:de: db:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:39:74:26:F9:71:61:83:D7:4A:55:AF:E5:48:D8:E0:95:13:5E:6B X509v3 Authority Key Identifier: keyid:12:62:F7:DA:8F:EE:5D:2A:7B:CD:D4:01:4A:70:A9:27:DB:49:9F:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/uTl0JvlxYYPXSlWv5UjY4JUTXms.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.53.12.0/23 Signature Algorithm: sha256WithRSAEncryption 62:df:aa:ab:08:d1:aa:ba:3d:8a:08:18:fb:fe:bc:84:71:1a: 36:40:8a:5c:d3:36:c1:5f:00:43:47:71:ec:d8:80:7d:dc:87: 5f:5d:9f:9c:82:e7:22:17:30:17:2e:fa:2e:ee:de:26:d1:4d: dc:8a:a6:f8:ab:b2:23:df:1f:c9:e0:97:f6:f6:03:06:03:8c: 40:34:67:08:f0:5f:48:b0:cc:a0:ad:d0:d8:8c:13:b9:32:49: 57:87:1c:70:f3:81:44:55:0a:76:ea:ec:fb:ec:59:e1:25:b5: f6:99:14:78:3e:59:2b:83:98:d7:48:d7:13:ea:1a:6c:f4:f8: bd:8f:bc:93:04:d9:4c:7c:fb:46:5f:47:2d:2f:34:46:88:d3: 2b:95:24:9b:20:53:de:5c:44:87:4b:6b:6e:ce:5a:9e:19:be: dd:15:bb:00:6e:d0:aa:db:02:ec:e5:f3:df:02:e3:0c:54:97: 51:4f:19:3b:4d:1e:fe:59:25:7f:41:d5:2a:2f:6e:ca:67:b0: a2:2e:e5:43:4e:7b:52:c8:f2:a1:5b:bb:db:7c:5b:99:62:0c: 17:23:9e:b9:ce:a9:28:29:0e:6c:c5:ae:6e:e4:d3:69:35:ae: b6:18:41:7e:0c:f9:8f:b6:ba:0e:22:93:a0:74:6a:3d:45:64: 8c:d1:8c:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yryNLlzOiEzAmrP90eKEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNjJmN2RhOGZlZTVkMmE3YmNkZDQwMTRhNzBhOTI3ZGI0 OTlmYTQwHhcNMjYwMTAyMDgxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTM5NzQyNmY5NzE2MTgzZDc0YTU1YWZlNTQ4ZDhlMDk1MTM1ZTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3w3sT34VbiIWQy/PVokv68xwIa3f MCNtuDxAGoXDcLqpIw+fQfUX5e68c35V1/rnJIln1gT9+R1xFgOjfVSlT+AGjqdy 0PBRFL87by3aD6wmDMRuzSTE3l/gwBuVsnhGOO3xhRWhGZzSUD8rqFi7P+ApA72e DsrwYILVhmAwiVqqiBbUB4uEsL/q9TOjK6SH8lwA6HFGILeX1g051gWe+Z95RhAc 2qiRNomU0NB9mCHsrnm/BbtUoNQ03ftdKcd8lW+SszlN+mLkIICyG+AEOFGvy47H Ao8/LQdMyuSBjBQ6wnS0gzAQKtyT4cO6eF2+FzOXygXgpSWK0uyyfN7blwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLk5dCb5cWGD10pVr+VI2OCVE15rMB8GA1UdIwQY MBaAFBJi99qP7l0qe83UAUpwqSfbSZ+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW1MMzJvX3VYU3A3emRRQlNuQ3BKOXRKbjZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zNWE4MDctYjI4ZC00NDJkLWJhYjAt YTYxMGQ3NWMzMmUyLzEvdVRsMEp2bHhZWVBYU2xXdjVValk0SlVUWG1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8zNWE4MDctYjI4ZC00NDJkLWJhYjAtYTYxMGQ3NWMzMmUy LzEvRW1MMzJvX3VYU3A3emRRQlNuQ3BKOXRKbjZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuTUMMA0G CSqGSIb3DQEBCwUAA4IBAQBi36qrCNGquj2KCBj7/ryEcRo2QIpc0zbBXwBDR3Hs 2IB93IdfXZ+cguciFzAXLvou7t4m0U3ciqb4q7Ij3x/J4Jf29gMGA4xANGcI8F9I sMygrdDYjBO5MklXhxxw84FEVQp26uz77FnhJbX2mRR4Plkrg5jXSNcT6hps9Pi9 j7yTBNlMfPtGX0ctLzRGiNMrlSSbIFPeXESHS2tuzlqeGb7dFbsAbtCq2wLs5fPf AuMMVJdRTxk7TR7+WSV/QdUqL27KZ7CiLuVDTntSyPKhW7vbfFuZYgwXI565zqko KQ5sxa5u5NNpNa62GEF+DPmPtroOIpOgdGo9RWSM0YxD -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:41 2026 by rpki-client