This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/Ul4e9Mh9DtQbW0bFXtJWj8pCCUg.roa File: Ul4e9Mh9DtQbW0bFXtJWj8pCCUg.roa (raw, json) Hash identifier: QgVe3zyOWZmLsqhPjT0zFXeKP6/Au91Grh/gUobRiJU= Subject key identifier: 52:5E:1E:F4:C8:7D:0E:D4:1B:5B:46:C5:5E:D2:56:8F:CA:42:09:48 Certificate issuer: /CN=468b68141796ca95e4c72f4bfa696acea5083af3 Certificate serial: 019B7DCA51C741962283E2C11E595AB17492 Authority key identifier: 46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/Ul4e9Mh9DtQbW0bFXtJWj8pCCUg.roa Signing time: Fri 02 Jan 2026 08:19:29 +0000 ROA not before: Fri 02 Jan 2026 08:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214415 IP address blocks: 185.175.108.0/24 maxlen: 24 185.175.109.0/24 maxlen: 24 185.175.110.0/24 maxlen: 24 185.175.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:51:c7:41:96:22:83:e2:c1:1e:59:5a:b1:74:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468b68141796ca95e4c72f4bfa696acea5083af3 Validity Not Before: Jan 2 08:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=525e1ef4c87d0ed41b5b46c55ed2568fca420948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b1:ea:d0:48:26:2c:f8:64:fd:c6:e9:05:ca: 79:4d:67:23:14:fe:1e:01:a6:81:40:bc:16:ba:e2: a5:d7:4f:7f:70:05:3f:8d:f0:3d:e8:e1:cd:a0:2e: a2:02:96:d2:48:b4:ac:7d:ed:b0:0e:6e:c9:92:06: 01:09:61:98:5f:4f:a4:65:da:d1:ad:e6:88:49:ca: cf:f4:cb:51:25:7e:16:8d:ef:75:56:d7:d7:8e:0e: 5f:de:81:98:2f:42:6c:61:21:8f:8a:8b:12:e5:7a: 07:c3:bb:8c:49:0b:34:12:b7:a1:50:11:9e:47:51: 93:a7:90:9f:86:b2:90:ca:38:ff:06:9a:ca:23:c8: 65:32:ed:8d:29:0e:31:df:d3:f6:23:c3:96:8d:86: 0d:6d:2c:62:97:1b:7c:32:b8:bc:32:6c:de:57:49: 6e:1c:3d:57:8e:81:52:e4:e5:78:84:2e:3a:08:fb: 58:e1:60:ba:c5:71:71:aa:95:3d:89:a4:e1:56:dd: a8:11:ab:f8:1c:b7:05:5b:04:68:7c:b8:39:21:0e: cd:bb:fb:7f:b8:3a:46:37:66:81:ef:f4:76:59:dd: 32:47:ef:42:a8:41:71:c0:a5:18:a8:31:08:0f:d3: 46:3d:ce:8d:49:f4:df:43:82:33:5d:9a:bd:04:4a: c2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5E:1E:F4:C8:7D:0E:D4:1B:5B:46:C5:5E:D2:56:8F:CA:42:09:48 X509v3 Authority Key Identifier: keyid:46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/Ul4e9Mh9DtQbW0bFXtJWj8pCCUg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.175.108.0/22 Signature Algorithm: sha256WithRSAEncryption 12:9a:30:1e:25:0c:24:00:2c:f8:7e:39:d5:8d:c0:11:d4:31: 5c:f6:5e:55:ba:22:dc:13:fc:84:1a:a7:a6:7a:03:9a:3f:ba: aa:fc:40:15:83:04:99:9c:24:46:19:c5:a1:22:32:da:ba:b7: be:eb:a9:89:16:d3:9f:73:db:df:ec:94:a2:36:d2:81:d1:5b: 21:09:66:55:9e:59:95:f8:72:8c:f5:99:2d:88:e3:8e:8c:34: 2b:2d:1c:69:a2:82:26:1d:9e:10:86:1e:62:f5:31:3c:b3:a6: 72:40:a1:84:ad:2e:22:84:dc:df:a7:83:ee:3b:e8:a0:af:8a: 4b:1e:0a:6b:57:5e:ba:1b:18:3a:b0:52:bc:08:69:fe:28:ee: 35:a2:8a:8a:75:40:46:44:ba:4e:a4:59:da:67:7e:d7:a6:7c: dc:5d:50:72:76:a9:6c:03:89:2d:4d:68:c5:9a:b3:26:6e:85: 91:66:f8:14:45:59:e9:59:ad:eb:fc:33:b9:1e:dd:1c:69:26: ee:bc:0d:71:aa:bc:3f:97:68:27:f2:d6:dd:8e:40:be:07:7f: 4c:7a:e5:b9:81:3e:fc:8b:92:db:43:1e:fe:c5:cd:40:4c:13: 0c:45:6a:9d:4c:55:d4:4d:3b:12:6c:61:d0:00:93:2b:ac:d0: 49:2b:e2:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ylHHQZYig+LBHllasXSSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OGI2ODE0MTc5NmNhOTVlNGM3MmY0YmZhNjk2YWNlYTUw ODNhZjMwHhcNMjYwMTAyMDgxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjVlMWVmNGM4N2QwZWQ0MWI1YjQ2YzU1ZWQyNTY4ZmNhNDIwOTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7Hq0EgmLPhk/cbpBcp5TWcjFP4e AaaBQLwWuuKl109/cAU/jfA96OHNoC6iApbSSLSsfe2wDm7JkgYBCWGYX0+kZdrR reaIScrP9MtRJX4Wje91VtfXjg5f3oGYL0JsYSGPiosS5XoHw7uMSQs0ErehUBGe R1GTp5CfhrKQyjj/BprKI8hlMu2NKQ4x39P2I8OWjYYNbSxilxt8Mri8MmzeV0lu HD1XjoFS5OV4hC46CPtY4WC6xXFxqpU9iaThVt2oEav4HLcFWwRofLg5IQ7Nu/t/ uDpGN2aB7/R2Wd0yR+9CqEFxwKUYqDEID9NGPc6NSfTfQ4IzXZq9BErC7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFJeHvTIfQ7UG1tGxV7SVo/KQglIMB8GA1UdIwQY MBaAFEaLaBQXlsqV5McvS/ppas6lCDrzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm90b0ZCZVd5cFhreHk5TC1tbHF6cVVJT3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81OThlOGItYTYzZi00MjVlLWI0Zjct NDUyZDZkMzgyNmY3LzEvVWw0ZTlNaDlEdFFiVzBiRlh0SldqOHBDQ1VnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi81OThlOGItYTYzZi00MjVlLWI0ZjctNDUyZDZkMzgyNmY3 LzEvUm90b0ZCZVd5cFhreHk5TC1tbHF6cVVJT3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCua9sMA0G CSqGSIb3DQEBCwUAA4IBAQASmjAeJQwkACz4fjnVjcAR1DFc9l5VuiLcE/yEGqem egOaP7qq/EAVgwSZnCRGGcWhIjLaure+66mJFtOfc9vf7JSiNtKB0VshCWZVnlmV +HKM9ZktiOOOjDQrLRxpooImHZ4Qhh5i9TE8s6ZyQKGErS4ihNzfp4PuO+igr4pL HgprV166Gxg6sFK8CGn+KO41ooqKdUBGRLpOpFnaZ37XpnzcXVBydqlsA4ktTWjF mrMmboWRZvgURVnpWa3r/DO5Ht0caSbuvA1xqrw/l2gn8tbdjkC+B39MeuW5gT78 i5LbQx7+xc1ATBMMRWqdTFXUTTsSbGHQAJMrrNBJK+JV -----END CERTIFICATE-----Generated at Tue Feb 10 06:06:20 2026 by rpki-client