This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a140d5-40ee-4108-9b12-b3ef2a2f61b4/1/U6voxKN65jQH_hLBK3btXjUs3XA.roa File: U6voxKN65jQH_hLBK3btXjUs3XA.roa (raw, json) Hash identifier: Q/KwQqI2oZ064L8UakL1/UvH01OXvIiI/6cQL59DWqg= Subject key identifier: 53:AB:E8:C4:A3:7A:E6:34:07:FE:12:C1:2B:76:ED:5E:35:2C:DD:70 Certificate issuer: /CN=0d4531777febf988e5305a2d299f9c548e8d501d Certificate serial: 019BB2AF5710E7CF7E22429543B11008153A Authority key identifier: 0D:45:31:77:7F:EB:F9:88:E5:30:5A:2D:29:9F:9C:54:8E:8D:50:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUUxd3_r-YjlMFotKZ-cVI6NUB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a140d5-40ee-4108-9b12-b3ef2a2f61b4/1/U6voxKN65jQH_hLBK3btXjUs3XA.roa Signing time: Mon 12 Jan 2026 14:49:54 +0000 ROA not before: Mon 12 Jan 2026 14:49:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203678 IP address blocks: 92.53.161.0/24 maxlen: 24 2a0f:9340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/a140d5-40ee-4108-9b12-b3ef2a2f61b4/1/DUUxd3_r-YjlMFotKZ-cVI6NUB0.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/a140d5-40ee-4108-9b12-b3ef2a2f61b4/1/DUUxd3_r-YjlMFotKZ-cVI6NUB0.mft rsync://rpki.ripe.net/repository/DEFAULT/DUUxd3_r-YjlMFotKZ-cVI6NUB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:af:57:10:e7:cf:7e:22:42:95:43:b1:10:08:15:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d4531777febf988e5305a2d299f9c548e8d501d Validity Not Before: Jan 12 14:49:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53abe8c4a37ae63407fe12c12b76ed5e352cdd70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:96:bc:dc:47:b4:55:85:e2:30:97:13:8a:8b: f3:bf:4b:2a:c6:ff:d2:aa:ab:b4:c4:31:d7:b5:f4: 85:26:60:b3:c8:e1:c9:76:b6:67:fd:95:bd:8d:42: a9:a8:5d:6e:e6:1a:10:c0:85:5e:79:03:98:70:52: d8:8e:38:ad:d0:01:4b:dd:04:39:71:13:4b:33:15: f0:82:03:e1:a8:a0:8a:aa:65:e0:14:6c:7e:1b:cd: 8e:6c:b2:7b:de:23:94:28:9b:fc:5c:7d:b4:19:ab: 6d:52:33:8c:81:86:35:df:25:b6:64:9f:17:f7:e2: 57:61:46:7b:e5:e1:19:59:23:a7:45:e8:aa:16:cb: df:93:07:8f:ef:44:ea:9c:8e:1d:6c:70:2d:ee:27: bf:a3:10:68:34:79:6f:a4:f2:7f:46:83:6f:4e:96: a4:e6:83:c3:c3:e9:c0:99:47:e3:c9:b7:68:d1:9d: e0:00:71:06:d0:b6:80:95:4d:14:17:0b:7a:a0:2e: ad:d4:99:bc:80:20:f1:5b:29:88:ab:23:39:a8:26: e2:46:1c:b8:c5:28:3e:08:0b:16:b0:6e:b0:f2:24: 3f:8c:95:32:80:c8:22:7a:80:16:1d:c2:9e:53:7c: 48:05:67:3f:17:5b:2b:e9:ad:e5:50:95:ac:02:6b: ef:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:AB:E8:C4:A3:7A:E6:34:07:FE:12:C1:2B:76:ED:5E:35:2C:DD:70 X509v3 Authority Key Identifier: keyid:0D:45:31:77:7F:EB:F9:88:E5:30:5A:2D:29:9F:9C:54:8E:8D:50:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUUxd3_r-YjlMFotKZ-cVI6NUB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a140d5-40ee-4108-9b12-b3ef2a2f61b4/1/U6voxKN65jQH_hLBK3btXjUs3XA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a140d5-40ee-4108-9b12-b3ef2a2f61b4/1/DUUxd3_r-YjlMFotKZ-cVI6NUB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.53.161.0/24 IPv6: 2a0f:9340::/32 Signature Algorithm: sha256WithRSAEncryption 74:ba:9d:00:02:4b:8b:ca:61:09:31:d3:35:76:0f:8a:af:5c: cb:59:08:f5:f2:50:56:4c:73:55:2d:8c:54:1f:ca:7a:2a:b4: 9e:58:f9:cd:dc:b5:f9:d2:4d:fe:bf:0b:b8:12:19:f2:9c:51: e7:b0:59:52:a8:d7:b0:2c:bf:d2:be:fd:1b:59:1a:67:5d:f1: b0:a9:d1:16:f8:6e:e8:3e:fe:19:b4:d2:c5:85:a4:a3:f1:e8: 43:93:b2:31:78:59:6a:f1:b6:04:b7:92:b7:e5:30:f4:a4:8a: e9:cb:f0:1d:3b:aa:cc:e9:f5:1d:7f:0b:8d:9b:ae:de:91:c8: 41:3f:5c:97:e4:a3:3a:6a:f2:01:69:d7:ad:b2:72:72:e0:e4: c4:f7:a4:40:40:29:e8:80:5b:ee:94:10:c1:a8:d1:bd:48:ec: 91:b2:e8:2b:fc:b8:4c:12:e8:78:29:54:21:20:8a:81:50:68: 83:59:34:0d:cc:ca:8f:6a:3d:44:ce:83:1d:b7:41:17:ad:54: bc:c1:48:14:64:2d:e1:26:2e:4a:93:3d:c2:17:7a:eb:1e:98: 20:88:d3:6f:b3:e6:87:2a:f3:37:ce:79:83:e3:bb:2f:63:d9: 58:53:9b:db:62:4e:e8:d1:d3:b7:d3:f0:17:95:14:8d:85:7c: f3:c6:35:ed -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZuyr1cQ589+IkKVQ7EQCBU6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNDUzMTc3N2ZlYmY5ODhlNTMwNWEyZDI5OWY5YzU0OGU4 ZDUwMWQwHhcNMjYwMTEyMTQ0OTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2FiZThjNGEzN2FlNjM0MDdmZTEyYzEyYjc2ZWQ1ZTM1MmNkZDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJa83Ee0VYXiMJcTiovzv0sqxv/S qqu0xDHXtfSFJmCzyOHJdrZn/ZW9jUKpqF1u5hoQwIVeeQOYcFLYjjit0AFL3QQ5 cRNLMxXwggPhqKCKqmXgFGx+G82ObLJ73iOUKJv8XH20GattUjOMgYY13yW2ZJ8X 9+JXYUZ75eEZWSOnReiqFsvfkweP70TqnI4dbHAt7ie/oxBoNHlvpPJ/RoNvTpak 5oPDw+nAmUfjybdo0Z3gAHEG0LaAlU0UFwt6oC6t1Jm8gCDxWymIqyM5qCbiRhy4 xSg+CAsWsG6w8iQ/jJUygMgieoAWHcKeU3xIBWc/F1sr6a3lUJWsAmvvaQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFOr6MSjeuY0B/4SwSt27V41LN1wMB8GA1UdIwQY MBaAFA1FMXd/6/mI5TBaLSmfnFSOjVAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFVVeGQzX3ItWWpsTUZvdEtaLWNWSTZOVUIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9hMTQwZDUtNDBlZS00MTA4LTliMTIt YjNlZjJhMmY2MWI0LzEvVTZ2b3hLTjY1alFIX2hMQkszYnRYalVzM1hBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9hMTQwZDUtNDBlZS00MTA4LTliMTItYjNlZjJhMmY2MWI0 LzEvRFVVeGQzX3ItWWpsTUZvdEtaLWNWSTZOVUIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAXDWhMA0E AgACMAcDBQAqD5NAMA0GCSqGSIb3DQEBCwUAA4IBAQB0up0AAkuLymEJMdM1dg+K r1zLWQj18lBWTHNVLYxUH8p6KrSeWPnN3LX50k3+vwu4EhnynFHnsFlSqNewLL/S vv0bWRpnXfGwqdEW+G7oPv4ZtNLFhaSj8ehDk7IxeFlq8bYEt5K35TD0pIrpy/Ad O6rM6fUdfwuNm67ekchBP1yX5KM6avIBadetsnJy4OTE96RAQCnogFvulBDBqNG9 SOyRsugr/LhMEuh4KVQhIIqBUGiDWTQNzMqPaj1EzoMdt0EXrVS8wUgUZC3hJi5K kz3CF3rrHpggiNNvs+aHKvM3znmD47svY9lYU5vbYk7o0dO30/AXlRSNhXzzxjXt -----END CERTIFICATE-----Generated at Mon Feb 9 20:45:35 2026 by rpki-client