This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/ipupcdvp4LbD6D-C1ZVS4_JrtVM.roa File: ipupcdvp4LbD6D-C1ZVS4_JrtVM.roa (raw, json) Hash identifier: 1kO7KglXg+mOXu0757cqWUOoHLIBVcVZE3NF8cCE/Wk= Subject key identifier: 8A:9B:A9:71:DB:E9:E0:B6:C3:E8:3F:82:D5:95:52:E3:F2:6B:B5:53 Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Certificate serial: 019B79ED65AB2696987BD378964F4032EB54 Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/ipupcdvp4LbD6D-C1ZVS4_JrtVM.roa Signing time: Thu 01 Jan 2026 14:19:19 +0000 ROA not before: Thu 01 Jan 2026 14:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44400 IP address blocks: 87.248.140.0/24 maxlen: 24 87.248.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:65:ab:26:96:98:7b:d3:78:96:4f:40:32:eb:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Validity Not Before: Jan 1 14:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a9ba971dbe9e0b6c3e83f82d59552e3f26bb553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2a:de:a5:b1:db:9f:ee:c9:32:34:ed:85:ec: d6:97:10:b2:35:b6:84:bf:88:fb:f6:31:9e:32:eb: 9e:5c:e0:03:18:24:1a:d3:de:5b:72:eb:f3:58:6d: 5a:13:e2:92:53:fe:9e:76:fc:12:b4:5b:f4:50:0c: c5:03:8c:e7:4b:1d:ab:38:30:27:21:9a:b1:2d:5d: a6:f8:a2:aa:78:3c:16:c6:fe:1f:57:7c:19:b4:e1: 40:68:c3:b8:ca:bb:f4:34:6c:ff:3f:b1:02:8b:81: c0:1e:f0:7a:50:2f:b8:0d:c9:8b:f5:08:18:05:f8: 02:b8:c3:a7:cd:2a:6a:f4:a6:34:42:4f:fd:97:87: 56:b6:d0:c6:03:42:17:55:a2:bd:a2:1d:9c:57:fd: 5e:d5:e8:28:f5:4c:2d:12:c1:ab:3b:28:fe:21:63: b4:a2:df:99:16:7d:7d:fe:87:9a:40:89:12:e8:be: de:c7:69:7f:1b:e1:1a:48:ac:15:b3:cf:6b:ec:bf: 1b:d8:b7:76:7a:fe:20:02:bb:18:6d:4e:6f:c3:18: c2:5d:d9:6d:f7:df:f8:96:93:e4:03:2e:48:35:da: a8:94:96:89:8a:65:18:e6:d5:8b:55:70:9e:23:48: 87:cb:9c:55:75:5e:69:f5:78:5d:31:be:b0:e1:c6: d5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9B:A9:71:DB:E9:E0:B6:C3:E8:3F:82:D5:95:52:E3:F2:6B:B5:53 X509v3 Authority Key Identifier: keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/ipupcdvp4LbD6D-C1ZVS4_JrtVM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.248.140.0/23 Signature Algorithm: sha256WithRSAEncryption 89:b0:2c:26:81:19:99:36:37:37:07:99:bc:e0:e4:bf:db:e8: 0d:3e:84:b0:d7:c3:31:4e:e9:9b:46:55:0d:9a:ac:36:05:f5: 1c:55:ef:d2:c4:1e:05:10:f8:19:13:f5:94:1f:fe:8c:2a:59: eb:a2:1c:4d:22:96:56:f3:8b:e8:ff:39:08:50:6e:75:ae:bd: 31:43:7b:c3:22:3f:52:e8:03:39:38:74:ce:7e:97:68:34:ca: f8:eb:f6:2a:7e:b0:61:98:94:f4:04:a2:2f:22:c7:c5:cf:84: 2d:9f:cd:37:f6:26:0e:6f:e5:a9:13:b9:57:0c:79:99:a2:ec: ff:a2:6d:ea:68:c0:ed:85:7b:c8:a7:50:fd:8e:ee:d8:f0:5f: 10:c7:03:a4:e0:b6:69:c4:c6:d5:03:f9:bc:6c:91:8b:89:74: 69:a9:17:8c:9f:84:7c:5a:3c:60:fe:d6:23:b3:11:32:61:69: 15:6a:b2:43:50:9a:24:08:fa:19:90:e6:3a:3e:cf:cb:0a:60: 81:37:cc:b5:cb:03:94:7a:4e:de:4a:c9:d0:88:8f:ee:33:16: 52:16:bd:b5:c1:09:1a:db:a1:32:43:a5:5f:45:7f:64:4b:30: e6:3f:ec:86:0f:1e:e9:ae:b3:ef:9c:ca:fd:ea:9e:5c:98:8f: 44:3a:50:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57WWrJpaYe9N4lk9AMutUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy ZmM4YjQwHhcNMjYwMTAxMTQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTliYTk3MWRiZTllMGI2YzNlODNmODJkNTk1NTJlM2YyNmJiNTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyrepbHbn+7JMjTthezWlxCyNbaE v4j79jGeMuueXOADGCQa095bcuvzWG1aE+KSU/6edvwStFv0UAzFA4znSx2rODAn IZqxLV2m+KKqeDwWxv4fV3wZtOFAaMO4yrv0NGz/P7ECi4HAHvB6UC+4DcmL9QgY BfgCuMOnzSpq9KY0Qk/9l4dWttDGA0IXVaK9oh2cV/1e1ego9UwtEsGrOyj+IWO0 ot+ZFn19/oeaQIkS6L7ex2l/G+EaSKwVs89r7L8b2Ld2ev4gArsYbU5vwxjCXdlt 99/4lpPkAy5INdqolJaJimUY5tWLVXCeI0iHy5xVdV5p9XhdMb6w4cbVnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIqbqXHb6eC2w+g/gtWVUuPya7VTMB8GA1UdIwQY MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct ZDNiMzhjZTlkYzM0LzEvaXB1cGNkdnA0TGJENkQtQzFaVlM0X0pydFZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0 LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBV/iMMA0G CSqGSIb3DQEBCwUAA4IBAQCJsCwmgRmZNjc3B5m84OS/2+gNPoSw18MxTumbRlUN mqw2BfUcVe/SxB4FEPgZE/WUH/6MKlnrohxNIpZW84vo/zkIUG51rr0xQ3vDIj9S 6AM5OHTOfpdoNMr46/YqfrBhmJT0BKIvIsfFz4Qtn8039iYOb+WpE7lXDHmZouz/ om3qaMDthXvIp1D9ju7Y8F8QxwOk4LZpxMbVA/m8bJGLiXRpqReMn4R8Wjxg/tYj sxEyYWkVarJDUJokCPoZkOY6Ps/LCmCBN8y1ywOUek7eSsnQiI/uMxZSFr21wQka 26EyQ6VfRX9kSzDmP+yGDx7prrPvnMr96p5cmI9EOlCu -----END CERTIFICATE-----Generated at Tue Jan 20 02:44:54 2026 by rpki-client