This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/urAOvp2TYK27lU6tRDRA8PqsmXQ.roa File: urAOvp2TYK27lU6tRDRA8PqsmXQ.roa (raw, json) Hash identifier: 2PE5rDrGvCdMv6SRo280tO6Fe90nIsR7iSv5FWPItDg= Subject key identifier: BA:B0:0E:BE:9D:93:60:AD:BB:95:4E:AD:44:34:40:F0:FA:AC:99:74 Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Certificate serial: 019B9777F27399BFE8E762809805AEBAC266 Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/urAOvp2TYK27lU6tRDRA8PqsmXQ.roa Signing time: Wed 07 Jan 2026 07:59:38 +0000 ROA not before: Wed 07 Jan 2026 07:59:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 87.248.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:97:77:f2:73:99:bf:e8:e7:62:80:98:05:ae:ba:c2:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Validity Not Before: Jan 7 07:59:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bab00ebe9d9360adbb954ead443440f0faac9974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dd:0c:a6:e9:5e:58:ef:1c:15:81:92:a8:35: d6:5a:03:64:44:aa:df:6d:09:45:6f:a3:b8:b8:9d: 47:25:7e:f5:47:63:9a:1c:12:10:f7:95:de:84:4e: b1:4b:b6:9e:f8:7c:24:5a:d6:c9:84:9c:38:75:c6: f8:f8:29:83:eb:53:60:04:e0:3d:78:53:25:2f:38: 6e:04:46:ab:85:a4:76:72:ce:d0:ce:1c:e9:46:8b: 44:e5:6c:4e:4c:0d:fd:68:89:cf:d6:ba:9a:82:8a: 5f:f0:39:47:35:76:cc:cb:c2:96:9a:b8:f2:ab:45: 65:76:8a:8a:95:96:07:24:ce:f6:c3:aa:70:13:0d: f4:5d:c7:be:a7:65:2e:b8:6e:ca:f8:81:85:f1:ca: 69:df:37:df:2f:2b:9e:c5:23:47:96:a5:94:87:49: a0:d5:57:74:0b:97:91:37:03:db:98:9c:ec:28:2f: fb:d8:87:3b:e7:c3:1e:67:81:dc:39:f9:9e:06:4c: a1:56:fc:09:e2:c3:13:c5:30:7d:95:a4:f9:ca:2a: 49:86:7a:b2:c8:53:e7:42:f1:cd:3a:f8:e8:f2:ce: 35:1e:40:01:1f:47:ac:58:6d:87:5c:33:30:19:8f: cd:4b:e5:ce:e8:61:fa:1e:53:2b:e4:3f:b1:1f:ef: 1a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B0:0E:BE:9D:93:60:AD:BB:95:4E:AD:44:34:40:F0:FA:AC:99:74 X509v3 Authority Key Identifier: keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/urAOvp2TYK27lU6tRDRA8PqsmXQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.248.143.0/24 Signature Algorithm: sha256WithRSAEncryption 20:f1:32:20:7e:45:1e:60:26:7b:d0:19:27:44:08:55:83:58: e3:87:3a:c0:45:a4:32:47:2a:72:e2:31:77:c0:fb:5d:d8:ee: da:21:6a:93:9b:5a:7a:d1:c6:f6:87:e4:d7:79:91:70:56:12: bf:2b:ed:fe:19:77:29:1f:82:e7:cd:ef:a7:cb:2a:2f:1e:fa: 71:a8:9c:84:fd:b9:6f:6a:0f:a0:e6:c4:24:a0:80:6f:c8:b6: de:8c:71:89:2f:a0:a3:91:79:0f:2c:d4:15:45:56:0e:42:11: 47:96:29:01:6c:1e:60:8d:7a:5e:79:b6:8a:0a:c2:6b:5b:46: 0f:21:01:b7:45:a6:e3:09:ab:c9:5f:a7:3c:06:e2:17:31:2d: 51:ee:bb:fe:b8:ff:d8:ca:58:83:28:80:dc:94:8c:f3:e1:07: c5:12:79:ac:79:8c:19:e8:0b:d5:40:e1:cb:0c:89:1f:a5:23: 68:8b:80:ac:60:f8:87:47:8b:b5:ed:83:d9:7e:8c:6b:17:77: c0:a9:77:6c:ed:81:1b:44:f5:66:a5:a4:a7:b1:a1:0f:84:51: 75:47:04:61:82:65:ab:74:43:48:d8:0a:d5:51:d3:44:fd:bd: 69:a1:40:45:d4:9d:1d:fc:50:a7:13:7c:e4:94:86:af:53:a1: 60:0a:c8:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuXd/Jzmb/o52KAmAWuusJmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy ZmM4YjQwHhcNMjYwMTA3MDc1OTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWIwMGViZTlkOTM2MGFkYmI5NTRlYWQ0NDM0NDBmMGZhYWM5OTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst0MpuleWO8cFYGSqDXWWgNkRKrf bQlFb6O4uJ1HJX71R2OaHBIQ95XehE6xS7ae+HwkWtbJhJw4dcb4+CmD61NgBOA9 eFMlLzhuBEarhaR2cs7QzhzpRotE5WxOTA39aInP1rqagopf8DlHNXbMy8KWmrjy q0VldoqKlZYHJM72w6pwEw30Xce+p2UuuG7K+IGF8cpp3zffLyuexSNHlqWUh0mg 1Vd0C5eRNwPbmJzsKC/72Ic758MeZ4HcOfmeBkyhVvwJ4sMTxTB9laT5yipJhnqy yFPnQvHNOvjo8s41HkABH0esWG2HXDMwGY/NS+XO6GH6HlMr5D+xH+8aaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLqwDr6dk2Ctu5VOrUQ0QPD6rJl0MB8GA1UdIwQY MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct ZDNiMzhjZTlkYzM0LzEvdXJBT3ZwMlRZSzI3bFU2dFJEUkE4UHFzbVhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0 LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/iPMA0G CSqGSIb3DQEBCwUAA4IBAQAg8TIgfkUeYCZ70BknRAhVg1jjhzrARaQyRypy4jF3 wPtd2O7aIWqTm1p60cb2h+TXeZFwVhK/K+3+GXcpH4Lnze+nyyovHvpxqJyE/blv ag+g5sQkoIBvyLbejHGJL6CjkXkPLNQVRVYOQhFHlikBbB5gjXpeebaKCsJrW0YP IQG3RabjCavJX6c8BuIXMS1R7rv+uP/YyliDKIDclIzz4QfFEnmseYwZ6AvVQOHL DIkfpSNoi4CsYPiHR4u17YPZfoxrF3fAqXds7YEbRPVmpaSnsaEPhFF1RwRhgmWr dENI2ArVUdNE/b1poUBF1J0d/FCnE3zklIavU6FgCsgo -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:24 2026 by rpki-client