This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/U1sfV9HH8u88t2HBLjDAkG-CyLg.roa File: U1sfV9HH8u88t2HBLjDAkG-CyLg.roa (raw, json) Hash identifier: tpq5q5jvhF2tXurj200oQaFHHR4X1vOHV0qottraasM= Subject key identifier: 53:5B:1F:57:D1:C7:F2:EF:3C:B7:61:C1:2E:30:C0:90:6F:82:C8:B8 Certificate issuer: /CN=60fa7fdfcebc07a272db89cdaf877870c687e04f Certificate serial: 019B7AC8A80925FA2DE5CC6F5FECA34C741E Authority key identifier: 60:FA:7F:DF:CE:BC:07:A2:72:DB:89:CD:AF:87:78:70:C6:87:E0:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/U1sfV9HH8u88t2HBLjDAkG-CyLg.roa Signing time: Thu 01 Jan 2026 18:18:49 +0000 ROA not before: Thu 01 Jan 2026 18:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28821 IP address blocks: 185.104.56.0/22 maxlen: 22 185.104.56.0/24 maxlen: 24 185.104.57.0/24 maxlen: 24 185.104.58.0/24 maxlen: 24 185.104.59.0/24 maxlen: 24 2a06:2f00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.mft rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a8:09:25:fa:2d:e5:cc:6f:5f:ec:a3:4c:74:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60fa7fdfcebc07a272db89cdaf877870c687e04f Validity Not Before: Jan 1 18:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=535b1f57d1c7f2ef3cb761c12e30c0906f82c8b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ed:77:f4:5f:89:e0:fd:cb:b0:1e:50:43:f6: d6:c2:0a:ed:a3:36:d0:bc:23:a1:40:bd:02:18:f2: 4f:a9:b0:b6:a0:9f:ef:06:bd:70:92:c9:7a:65:24: cb:f3:8b:cd:cf:61:d8:b6:92:64:11:f2:39:de:f6: fa:11:14:4c:16:3f:5b:8f:cb:88:36:f4:ac:76:6c: 3a:ab:7c:a8:e9:2b:40:1f:30:72:34:35:da:40:d0: ca:9d:67:d2:b4:37:02:96:82:1e:83:13:c9:ae:29: 30:be:4f:84:b3:c0:39:fa:ca:c9:d7:da:8d:b4:df: b7:67:de:27:39:0c:4e:2f:c7:22:d6:f5:10:c7:41: 13:8d:15:41:40:a0:13:4b:b7:e5:e8:6b:8d:ae:fb: 5a:55:ce:07:4a:9d:0e:cc:84:0a:2f:8e:b9:7a:36: 43:23:4a:1a:d7:3d:75:ec:7c:ad:06:61:d7:36:b1: b9:9b:8b:a0:bf:f0:9b:c2:c0:18:fd:57:6e:12:88: c8:2a:55:b0:e6:10:e0:47:af:91:f6:69:e8:6c:9c: 39:c9:ad:ce:f2:e6:b3:da:8f:0b:bb:da:7d:31:83: f9:38:e2:0a:37:22:30:e9:40:2e:92:c1:61:dc:cc: 3d:cb:c7:91:d7:e3:33:4b:c5:2a:17:79:9a:38:8e: 45:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5B:1F:57:D1:C7:F2:EF:3C:B7:61:C1:2E:30:C0:90:6F:82:C8:B8 X509v3 Authority Key Identifier: keyid:60:FA:7F:DF:CE:BC:07:A2:72:DB:89:CD:AF:87:78:70:C6:87:E0:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPp_3868B6Jy24nNr4d4cMaH4E8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/U1sfV9HH8u88t2HBLjDAkG-CyLg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cea4-514a-4349-9cbc-f9ec30cb9b4b/1/YPp_3868B6Jy24nNr4d4cMaH4E8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.104.56.0/22 IPv6: 2a06:2f00::/29 Signature Algorithm: sha256WithRSAEncryption 03:74:5f:f4:d0:c5:49:e4:5e:61:26:76:56:32:f2:ef:2a:1b: 8b:17:e0:6e:ef:44:f7:fa:2d:33:f4:77:9e:f0:28:8a:71:d0: ee:b0:96:12:cc:5b:2f:0f:9b:46:ba:61:41:e7:2f:25:cb:3e: 8b:f8:18:41:a3:d8:f0:a0:8e:e8:52:98:39:4c:06:12:3d:85: c4:9a:0e:3b:26:97:fb:83:06:d7:ee:55:7f:86:69:64:7a:15: 73:53:16:eb:71:88:63:67:05:ca:6d:22:87:fe:b5:67:dc:aa: 35:a7:8e:5b:e7:2e:3f:19:69:6e:37:dc:c7:61:a7:a4:b8:b1: 46:3a:23:69:51:a7:59:62:8c:9f:6c:cc:54:e5:9b:9f:fe:52: 04:00:08:d6:84:bf:17:4f:be:a8:4c:a8:22:f9:1c:62:1f:9d: 84:c1:1d:77:0d:f6:c7:9d:90:c5:ac:97:ae:ff:cc:c4:40:da: 35:69:59:cc:bf:3c:91:37:82:76:ec:b5:b7:a5:39:53:d9:d9: ef:86:32:03:3a:c9:28:36:23:c4:ba:75:2b:3f:1f:96:33:87: f6:a8:13:9d:74:11:1d:d1:3a:9c:fa:f9:54:47:3a:e8:57:92: 66:d3:9e:05:9b:40:6f:98:54:17:7a:25:4b:b8:86:5b:65:7a: 8e:77:10:4b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yKgJJfot5cxvX+yjTHQeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZmE3ZmRmY2ViYzA3YTI3MmRiODljZGFmODc3ODcwYzY4 N2UwNGYwHhcNMjYwMTAxMTgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzViMWY1N2QxYzdmMmVmM2NiNzYxYzEyZTMwYzA5MDZmODJjOGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu139F+J4P3LsB5QQ/bWwgrtozbQ vCOhQL0CGPJPqbC2oJ/vBr1wksl6ZSTL84vNz2HYtpJkEfI53vb6ERRMFj9bj8uI NvSsdmw6q3yo6StAHzByNDXaQNDKnWfStDcCloIegxPJrikwvk+Es8A5+srJ19qN tN+3Z94nOQxOL8ci1vUQx0ETjRVBQKATS7fl6GuNrvtaVc4HSp0OzIQKL465ejZD I0oa1z117HytBmHXNrG5m4ugv/CbwsAY/VduEojIKlWw5hDgR6+R9mnobJw5ya3O 8uaz2o8Lu9p9MYP5OOIKNyIw6UAuksFh3Mw9y8eR1+MzS8UqF3maOI5FJwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFNbH1fRx/LvPLdhwS4wwJBvgsi4MB8GA1UdIwQY MBaAFGD6f9/OvAeictuJza+HeHDGh+BPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVBwXzM4NjhCNkp5MjRuTnI0ZDRjTWFINEU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMmNlYTQtNTE0YS00MzQ5LTljYmMt ZjllYzMwY2I5YjRiLzEvVTFzZlY5SEg4dTg4dDJIQkxqREFrRy1DeUxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9lMmNlYTQtNTE0YS00MzQ5LTljYmMtZjllYzMwY2I5YjRi LzEvWVBwXzM4NjhCNkp5MjRuTnI0ZDRjTWFINEU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWg4MA0E AgACMAcDBQMqBi8AMA0GCSqGSIb3DQEBCwUAA4IBAQADdF/00MVJ5F5hJnZWMvLv KhuLF+Bu70T3+i0z9Hee8CiKcdDusJYSzFsvD5tGumFB5y8lyz6L+BhBo9jwoI7o Upg5TAYSPYXEmg47Jpf7gwbX7lV/hmlkehVzUxbrcYhjZwXKbSKH/rVn3Ko1p45b 5y4/GWluN9zHYaekuLFGOiNpUadZYoyfbMxU5Zuf/lIEAAjWhL8XT76oTKgi+Rxi H52EwR13DfbHnZDFrJeu/8zEQNo1aVnMvzyRN4J27LW3pTlT2dnvhjIDOskoNiPE unUrPx+WM4f2qBOddBEd0Tqc+vlURzroV5Jm054Fm0BvmFQXeiVLuIZbZXqOdxBL -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:16 2026 by rpki-client