This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/U_-oEqDoqq4pyChyVJLsATa4hF0.roa File: U_-oEqDoqq4pyChyVJLsATa4hF0.roa (raw, json) Hash identifier: 8Yj0FUG+yJPUHzOrojBoyPpjqX+h2j3Dx9uPO5dyJKM= Subject key identifier: 53:FF:A8:12:A0:E8:AA:AE:29:C8:28:72:54:92:EC:01:36:B8:84:5D Certificate issuer: /CN=f826ffe96cdc41efaa8bfb3125862d6594be9827 Certificate serial: 019B7758792FE84CEB7A417AA3C0E4F3B85F Authority key identifier: F8:26:FF:E9:6C:DC:41:EF:AA:8B:FB:31:25:86:2D:65:94:BE:98:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/U_-oEqDoqq4pyChyVJLsATa4hF0.roa Signing time: Thu 01 Jan 2026 02:17:25 +0000 ROA not before: Thu 01 Jan 2026 02:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207592 IP address blocks: 134.76.0.0/16 maxlen: 16 134.76.175.0/24 maxlen: 24 195.12.38.0/24 maxlen: 24 2a06:93c0::/29 maxlen: 29 2a06:93c0::/48 maxlen: 48 2a06:93c0:1::/48 maxlen: 48 2a06:93c0:2::/48 maxlen: 48 2a06:93c0:3::/48 maxlen: 48 2a06:93c1:129::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:79:2f:e8:4c:eb:7a:41:7a:a3:c0:e4:f3:b8:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f826ffe96cdc41efaa8bfb3125862d6594be9827 Validity Not Before: Jan 1 02:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53ffa812a0e8aaae29c828725492ec0136b8845d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7a:34:89:ab:92:b8:fe:32:58:38:73:81:e9: 41:f6:b9:6c:23:ac:44:75:41:90:2d:9a:3d:42:2f: c3:3e:d0:d0:55:6d:d2:03:95:fd:e4:cf:bf:b5:8e: 9f:42:3b:bf:3f:3f:a4:7b:cf:b3:b0:7f:4b:e9:5e: b9:a8:66:9c:b7:e1:55:5e:c0:fc:0d:46:9e:5a:76: 00:2c:58:1b:94:de:d1:f3:02:3a:76:a0:0c:bc:1e: 7d:5b:60:9e:b4:ee:91:10:e9:ff:55:7b:52:00:2f: 6e:fc:dc:17:5d:4b:83:a8:ba:28:45:6c:0b:ae:49: 42:a7:16:5b:50:5b:8d:fa:c4:80:98:9f:d4:8f:a3: a1:6b:07:ef:1c:5f:cd:4e:27:ca:1f:80:f8:ac:0d: 4d:b4:e8:f2:3e:6f:4d:b3:ae:b0:3d:79:f2:fc:61: 0c:6f:d4:00:4b:ea:f2:80:42:38:56:a1:56:47:57: 43:68:28:e0:05:7d:a6:0c:ae:97:05:4e:57:84:16: db:89:7b:66:39:9b:14:13:c6:2e:cf:92:13:ab:ab: 81:82:2b:00:6d:44:0d:66:11:b0:88:22:81:cf:5f: 01:a9:e1:20:75:c6:9c:9a:60:31:a5:ae:d4:a6:ff: a2:91:c4:77:fe:4d:8a:e3:6b:38:21:a0:8f:bc:e2: 67:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:FF:A8:12:A0:E8:AA:AE:29:C8:28:72:54:92:EC:01:36:B8:84:5D X509v3 Authority Key Identifier: keyid:F8:26:FF:E9:6C:DC:41:EF:AA:8B:FB:31:25:86:2D:65:94:BE:98:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/U_-oEqDoqq4pyChyVJLsATa4hF0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.76.0.0/16 195.12.38.0/24 IPv6: 2a06:93c0::/29 Signature Algorithm: sha256WithRSAEncryption a1:4d:fe:ed:40:c1:4c:f2:91:a0:5c:2e:92:64:ca:55:7f:f0: b1:22:0b:7e:77:d2:94:a4:a5:35:75:7a:b8:4c:11:9f:1d:3f: 95:e6:2b:33:98:fd:16:5f:9f:52:1f:1a:e7:29:71:4c:eb:d5: 5f:da:6c:e9:32:04:42:d4:4f:63:15:1d:08:89:33:4c:42:a1: 84:76:d0:e5:c8:fd:05:27:15:57:a9:d9:e6:dd:ee:62:70:1c: 08:b3:d6:27:7f:ca:77:48:e5:a7:d9:e6:2e:97:6a:f0:34:11: 77:2c:8c:57:ef:54:80:82:e0:9e:cb:50:2c:df:f2:c2:39:b1: 22:d1:7b:d7:a0:42:49:5e:03:78:bd:58:d8:97:91:c7:88:0f: 7b:02:33:cd:5d:c2:75:3d:47:44:0d:38:dc:b3:85:0c:4b:70: 0d:1c:ac:3f:d1:f1:02:39:71:c6:05:c7:ea:d9:b6:cd:cb:ac: 54:3e:4c:3c:42:37:80:50:02:2a:27:cd:1f:7e:25:0d:b7:8b: a3:e2:a5:70:fa:44:2e:f4:99:95:a2:ee:3d:c5:4c:d3:15:db: ac:41:e5:ab:c7:0f:cd:9c:17:87:81:fd:44:6d:00:71:29:df: f5:89:ef:24:a6:75:19:f1:b2:8b:86:a7:e7:53:78:8b:8e:ab: b7:ab:d7:59 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt3WHkv6EzrekF6o8Dk87hfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjZmZmU5NmNkYzQxZWZhYThiZmIzMTI1ODYyZDY1OTRi ZTk4MjcwHhcNMjYwMTAxMDIxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2ZmYTgxMmEwZThhYWFlMjljODI4NzI1NDkyZWMwMTM2Yjg4NDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXo0iauSuP4yWDhzgelB9rlsI6xE dUGQLZo9Qi/DPtDQVW3SA5X95M+/tY6fQju/Pz+ke8+zsH9L6V65qGact+FVXsD8 DUaeWnYALFgblN7R8wI6dqAMvB59W2CetO6REOn/VXtSAC9u/NwXXUuDqLooRWwL rklCpxZbUFuN+sSAmJ/Uj6OhawfvHF/NTifKH4D4rA1NtOjyPm9Ns66wPXny/GEM b9QAS+rygEI4VqFWR1dDaCjgBX2mDK6XBU5XhBbbiXtmOZsUE8Yuz5ITq6uBgisA bUQNZhGwiCKBz18BqeEgdcacmmAxpa7Upv+ikcR3/k2K42s4IaCPvOJnIQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFFP/qBKg6KquKcgoclSS7AE2uIRdMB8GA1UdIwQY MBaAFPgm/+ls3EHvqov7MSWGLWWUvpgnMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DYl82V3pjUWUtcWlfc3hKWVl0WlpTLW1DYy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvNmY2ODI2LTFhYWQtNGMzYy1iZDkx LWNjYTM3ZTJmMjcyOS8xL1VfLW9FcURvcXE0cHlDaHlWSkxzQVRhNGhGMC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYjIvNmY2ODI2LTFhYWQtNGMzYy1iZDkxLWNjYTM3ZTJmMjcy OS8xLzEtQ2JfNld6Y1FlLXFpX3N4SllZdFpaUy1tQ2MuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwMwYIKwYBBQUHAQcBAf8EJDAiMBEEAgABMAsDAwCGTAME AMMMJjANBAIAAjAHAwUDKgaTwDANBgkqhkiG9w0BAQsFAAOCAQEAoU3+7UDBTPKR oFwukmTKVX/wsSILfnfSlKSlNXV6uEwRnx0/leYrM5j9Fl+fUh8a5ylxTOvVX9ps 6TIEQtRPYxUdCIkzTEKhhHbQ5cj9BScVV6nZ5t3uYnAcCLPWJ3/Kd0jlp9nmLpdq 8DQRdyyMV+9UgILgnstQLN/ywjmxItF716BCSV4DeL1Y2JeRx4gPewIzzV3CdT1H RA043LOFDEtwDRysP9HxAjlxxgXH6tm2zcusVD5MPEI3gFACKifNH34lDbeLo+Kl cPpELvSZlaLuPcVM0xXbrEHlq8cPzZwXh4H9RG0AcSnf9YnvJKZ1GfGyi4an51N4 i46rt6vXWQ== -----END CERTIFICATE-----Generated at Tue Feb 3 00:01:34 2026 by rpki-client