This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/I2UHflhfLByJ0DsfnoJ7CD2pqMQ.roa File: I2UHflhfLByJ0DsfnoJ7CD2pqMQ.roa (raw, json) Hash identifier: BWnWOl/8G30qERg0gVCLQFgtNUljkcSglgMhWJy5GS0= Subject key identifier: 23:65:07:7E:58:5F:2C:1C:89:D0:3B:1F:9E:82:7B:08:3D:A9:A8:C4 Certificate issuer: /CN=5259e000c991f78f243fde5980cd5cef649409e6 Certificate serial: 019B7BA47BD8DE4DA6318BBB3D94D7E8D532 Authority key identifier: 52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/I2UHflhfLByJ0DsfnoJ7CD2pqMQ.roa Signing time: Thu 01 Jan 2026 22:18:55 +0000 ROA not before: Thu 01 Jan 2026 22:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35292 IP address blocks: 78.31.168.0/21 maxlen: 24 87.239.136.0/21 maxlen: 24 193.47.73.0/24 maxlen: 24 2001:678:2a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:7b:d8:de:4d:a6:31:8b:bb:3d:94:d7:e8:d5:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5259e000c991f78f243fde5980cd5cef649409e6 Validity Not Before: Jan 1 22:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2365077e585f2c1c89d03b1f9e827b083da9a8c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ac:d5:42:c2:bb:11:25:4b:0a:a4:28:c1:21: 80:4f:39:9a:17:79:f6:f1:b4:95:72:ae:4b:fb:e9: 5d:4c:f4:b2:d2:1d:f5:8b:36:e4:99:ee:3c:1a:2e: 17:1b:bf:4e:e9:7b:3d:07:02:2d:0f:bb:f5:3e:83: 7c:49:5a:43:30:d4:85:78:4b:0f:b3:95:87:d9:e7: e9:b5:20:cf:d0:60:b3:b5:38:46:52:d2:4f:df:9a: 08:26:30:f4:f0:64:7a:db:32:5e:57:56:11:e5:f8: 44:12:f3:71:e5:07:30:d4:00:6a:03:ae:32:3c:16: ca:0c:16:56:79:08:a9:fb:11:6c:22:3e:32:e1:a8: 99:76:ae:c0:76:64:3c:a8:74:d9:84:9e:3f:5b:c6: 63:06:6f:04:20:bf:fb:f8:04:8a:5c:d3:5d:1a:fd: f0:84:0e:9d:e8:12:c6:30:29:c1:58:dc:54:26:eb: 05:6e:a9:3c:1a:73:87:2b:9b:d4:c9:1b:8f:af:be: 8f:01:6a:0d:19:71:ec:f2:74:7b:6a:fd:80:0e:01: 25:72:c3:78:7c:e1:e3:99:a3:8d:d4:85:32:d3:6d: 7d:14:79:0c:cc:d0:e5:0b:53:0e:8e:c5:1e:5d:8f: 17:ac:5a:ec:b0:09:d4:5a:08:4a:88:00:96:79:3a: 4c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:65:07:7E:58:5F:2C:1C:89:D0:3B:1F:9E:82:7B:08:3D:A9:A8:C4 X509v3 Authority Key Identifier: keyid:52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/I2UHflhfLByJ0DsfnoJ7CD2pqMQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.31.168.0/21 87.239.136.0/21 193.47.73.0/24 IPv6: 2001:678:2a0::/48 Signature Algorithm: sha256WithRSAEncryption 67:ad:ef:82:07:af:0e:01:f2:8d:5e:3e:39:6f:17:c8:12:a7: 01:2e:68:75:88:3a:36:a7:39:e1:de:68:75:67:8d:50:5d:da: 2d:b1:1d:79:da:fe:94:c3:77:7f:d1:fe:67:3b:1d:09:f5:da: 20:df:f9:6f:7f:3d:d2:04:82:12:7a:f5:3b:67:30:72:1f:22: be:68:f1:b5:32:19:2b:57:55:c1:0a:7d:76:04:b8:9c:2e:68: f3:99:9c:54:7b:9d:b0:65:b2:cb:bb:ca:4a:ef:5b:b1:c9:e9: 13:58:7a:4c:49:09:8b:8c:98:02:41:27:50:0b:18:33:20:64: 80:66:63:e5:63:67:3e:86:a8:d9:29:17:ed:b9:4d:ee:c0:14: 32:de:c7:81:b4:ac:29:d1:48:c7:9f:be:43:d5:59:04:06:17: a2:34:17:36:3d:ab:2a:c2:b6:3e:aa:01:6b:86:94:b4:1b:36: c6:37:3f:28:61:c5:e4:aa:d0:28:3c:88:38:4d:27:e9:f2:b3: fd:40:47:86:67:42:7c:e4:5c:34:ef:c1:b9:58:0e:02:05:5a: f8:cd:9b:6b:9f:e0:2c:62:15:9e:cc:c0:31:db:99:7b:60:e4: c1:91:60:c5:f5:20:b4:18:b9:60:19:19:04:7c:f2:7d:6c:3b: a5:0b:13:13 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt7pHvY3k2mMYu7PZTX6NUyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNTllMDAwYzk5MWY3OGYyNDNmZGU1OTgwY2Q1Y2VmNjQ5 NDA5ZTYwHhcNMjYwMTAxMjIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzY1MDc3ZTU4NWYyYzFjODlkMDNiMWY5ZTgyN2IwODNkYTlhOGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqzVQsK7ESVLCqQowSGATzmaF3n2 8bSVcq5L++ldTPSy0h31izbkme48Gi4XG79O6Xs9BwItD7v1PoN8SVpDMNSFeEsP s5WH2efptSDP0GCztThGUtJP35oIJjD08GR62zJeV1YR5fhEEvNx5Qcw1ABqA64y PBbKDBZWeQip+xFsIj4y4aiZdq7AdmQ8qHTZhJ4/W8ZjBm8EIL/7+ASKXNNdGv3w hA6d6BLGMCnBWNxUJusFbqk8GnOHK5vUyRuPr76PAWoNGXHs8nR7av2ADgElcsN4 fOHjmaON1IUy0219FHkMzNDlC1MOjsUeXY8XrFrssAnUWghKiACWeTpMFwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFCNlB35YXywcidA7H56Cewg9qajEMB8GA1UdIwQY MBaAFFJZ4ADJkfePJD/eWYDNXO9klAnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWxuZ0FNbVI5NDhrUDk1WmdNMWM3MlNVQ2VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lZjk4ZTQtMDFlNS00Yjg4LWJiZjEt MDQ4M2QxYzAxYjI1LzEvSTJVSGZsaGZMQnlKMERzZm5vSjdDRDJwcU1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9lZjk4ZTQtMDFlNS00Yjg4LWJiZjEtMDQ4M2QxYzAxYjI1 LzEvVWxuZ0FNbVI5NDhrUDk1WmdNMWM3MlNVQ2VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQDTh+oAwQD V++IAwQAwS9JMA8EAgACMAkDBwAgAQZ4AqAwDQYJKoZIhvcNAQELBQADggEBAGet 74IHrw4B8o1ePjlvF8gSpwEuaHWIOjanOeHeaHVnjVBd2i2xHXna/pTDd3/R/mc7 HQn12iDf+W9/PdIEghJ69TtnMHIfIr5o8bUyGStXVcEKfXYEuJwuaPOZnFR7nbBl ssu7ykrvW7HJ6RNYekxJCYuMmAJBJ1ALGDMgZIBmY+VjZz6GqNkpF+25Te7AFDLe x4G0rCnRSMefvkPVWQQGF6I0FzY9qyrCtj6qAWuGlLQbNsY3PyhhxeSq0Cg8iDhN J+nys/1AR4ZnQnzkXDTvwblYDgIFWvjNm2uf4CxiFZ7MwDHbmXtg5MGRYMX1ILQY uWAZGQR88n1sO6ULExM= -----END CERTIFICATE-----Generated at Thu Jan 22 01:11:03 2026 by rpki-client