This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/U0fRXYHgtW5Lj2ILWS5wUzrlnN4.roa File: U0fRXYHgtW5Lj2ILWS5wUzrlnN4.roa (raw, json) Hash identifier: rlb8IZvmVYRTy9dDl5LBuhuMRpChfmFYGPXw/aHFukE= Subject key identifier: 53:47:D1:5D:81:E0:B5:6E:4B:8F:62:0B:59:2E:70:53:3A:E5:9C:DE Certificate issuer: /CN=7be907dd202152cf1902bedbecb19a2d72ac0859 Certificate serial: 019B7CEE3DF71A8E10FBAB0668C12714C481 Authority key identifier: 7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/U0fRXYHgtW5Lj2ILWS5wUzrlnN4.roa Signing time: Fri 02 Jan 2026 04:19:06 +0000 ROA not before: Fri 02 Jan 2026 04:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43028 IP address blocks: 94.140.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.mft rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:3d:f7:1a:8e:10:fb:ab:06:68:c1:27:14:c4:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7be907dd202152cf1902bedbecb19a2d72ac0859 Validity Not Before: Jan 2 04:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5347d15d81e0b56e4b8f620b592e70533ae59cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4c:cf:ff:6f:53:fa:9f:c7:9b:0d:05:e6:73: 2b:85:36:32:a3:27:c5:0b:9b:cc:13:db:5b:d6:d6: 55:30:93:68:a6:e1:8c:59:f1:b5:b5:2f:19:aa:a6: a0:9b:cd:69:f7:e0:c1:1a:5c:ca:ff:19:21:83:f0: 5d:5a:10:1e:0c:50:41:56:06:87:f6:a3:42:ac:b0: 9d:86:77:05:cf:bc:e5:4d:2a:7e:0f:39:fa:d6:bb: f7:db:e9:fb:74:db:e4:5f:2e:87:80:31:c2:a9:f5: ee:2c:6b:a1:ff:02:6e:43:1f:23:6c:3e:22:3a:05: 66:50:34:e9:99:8c:48:48:fe:c5:37:9f:47:69:e8: 46:78:91:bf:a5:d7:95:53:6e:2c:6d:ed:03:ed:e5: a0:c6:41:60:f7:fc:46:0f:ae:84:8a:38:5c:f8:f1: 81:3a:ca:14:1a:8c:f5:f4:5b:e1:3f:db:16:14:1e: d4:ee:54:5c:6c:35:27:46:27:bf:5e:1b:07:00:11: ad:d9:29:f4:ca:d8:20:a4:fa:e9:08:eb:3f:7d:fb: c9:2c:39:c4:d8:f1:a8:9a:7a:34:df:d1:db:f2:db: f8:d2:b1:db:a3:e7:25:40:8e:58:84:52:b3:5f:f8: 32:51:29:e8:3d:cc:63:00:1b:f8:29:3e:d3:30:21: 4c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:47:D1:5D:81:E0:B5:6E:4B:8F:62:0B:59:2E:70:53:3A:E5:9C:DE X509v3 Authority Key Identifier: keyid:7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/U0fRXYHgtW5Lj2ILWS5wUzrlnN4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.140.104.0/23 Signature Algorithm: sha256WithRSAEncryption 64:91:58:d9:ab:23:2d:50:cb:89:66:2d:de:e2:fc:41:02:b2: 33:d8:48:49:af:cb:8c:78:23:2a:58:73:70:c6:30:c3:6b:f4: 61:11:f6:b8:98:67:8c:be:40:3d:08:8d:4f:06:e8:0a:6d:40: 4f:07:a3:a3:ab:a6:58:71:b5:5e:cb:4d:fd:c3:65:a4:24:09: c6:21:23:24:a9:29:5d:05:60:e0:8f:95:d1:38:6b:aa:37:a0: 96:fc:1d:15:60:0b:85:08:83:71:4e:59:e9:fb:e3:87:6d:04: 63:2a:33:2d:48:86:4d:e7:de:1c:5b:bf:ff:68:ac:36:4b:1f: 66:13:c5:b8:91:f1:e0:e3:b6:f2:49:2d:73:1a:6c:d4:c0:b0: fd:6b:a3:8d:57:91:95:aa:a7:b5:64:64:b2:2a:e7:be:45:f4: 4a:88:eb:04:01:2d:90:56:b8:be:ee:50:e2:1a:c1:75:1d:7d: 4d:4d:9f:fb:71:d8:f3:90:fd:17:a1:e5:ba:23:7a:f6:fd:0a: 35:54:09:a3:a2:60:67:d5:a6:a9:b1:95:1d:8c:a7:c1:40:cd: fe:5f:da:e1:39:7d:84:64:dd:e8:ce:12:74:24:7e:2b:19:52: 00:9e:d2:cf:12:f5:cf:41:9d:56:0d:0e:4b:06:1f:e8:f5:21: 25:1f:07:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87j33Go4Q+6sGaMEnFMSBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZTkwN2RkMjAyMTUyY2YxOTAyYmVkYmVjYjE5YTJkNzJh YzA4NTkwHhcNMjYwMTAyMDQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzQ3ZDE1ZDgxZTBiNTZlNGI4ZjYyMGI1OTJlNzA1MzNhZTU5Y2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEzP/29T+p/Hmw0F5nMrhTYyoyfF C5vME9tb1tZVMJNopuGMWfG1tS8Zqqagm81p9+DBGlzK/xkhg/BdWhAeDFBBVgaH 9qNCrLCdhncFz7zlTSp+Dzn61rv32+n7dNvkXy6HgDHCqfXuLGuh/wJuQx8jbD4i OgVmUDTpmYxISP7FN59HaehGeJG/pdeVU24sbe0D7eWgxkFg9/xGD66Eijhc+PGB OsoUGoz19FvhP9sWFB7U7lRcbDUnRie/XhsHABGt2Sn0ytggpPrpCOs/ffvJLDnE 2PGomno039Hb8tv40rHbo+clQI5YhFKzX/gyUSnoPcxjABv4KT7TMCFMHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFNH0V2B4LVuS49iC1kucFM65ZzeMB8GA1UdIwQY MBaAFHvpB90gIVLPGQK+2+yxmi1yrAhZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZS1rSDNTQWhVczhaQXI3YjdMR2FMWEtzQ0ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yNWU3NmEtZDE0MC00ZTBiLTg4ZTQt ZWYyMTkzODFmMTBlLzEvVTBmUlhZSGd0VzVMajJJTFdTNXdVenJsbk40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8yNWU3NmEtZDE0MC00ZTBiLTg4ZTQtZWYyMTkzODFmMTBl LzEvZS1rSDNTQWhVczhaQXI3YjdMR2FMWEtzQ0ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXoxoMA0G CSqGSIb3DQEBCwUAA4IBAQBkkVjZqyMtUMuJZi3e4vxBArIz2EhJr8uMeCMqWHNw xjDDa/RhEfa4mGeMvkA9CI1PBugKbUBPB6Ojq6ZYcbVey039w2WkJAnGISMkqSld BWDgj5XROGuqN6CW/B0VYAuFCINxTlnp++OHbQRjKjMtSIZN594cW7//aKw2Sx9m E8W4kfHg47bySS1zGmzUwLD9a6ONV5GVqqe1ZGSyKue+RfRKiOsEAS2QVri+7lDi GsF1HX1NTZ/7cdjzkP0XoeW6I3r2/Qo1VAmjomBn1aapsZUdjKfBQM3+X9rhOX2E ZN3ozhJ0JH4rGVIAntLPEvXPQZ1WDQ5LBh/o9SElHweJ -----END CERTIFICATE-----Generated at Mon Feb 9 23:44:48 2026 by rpki-client