This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/rcuhAyb47ghJSUkGluQz5xbi7a8.roa File: rcuhAyb47ghJSUkGluQz5xbi7a8.roa (raw, json) Hash identifier: dSp7RJi/mX+RduoQcYjQOlir9QxlgPqiE3UuXIucR2M= Subject key identifier: AD:CB:A1:03:26:F8:EE:08:49:49:49:06:96:E4:33:E7:16:E2:ED:AF Certificate issuer: /CN=f5346d3edbec6da72780722c0a41abeea63661d8 Certificate serial: 019B7C8038C1C975600E8A2BB69CAEC7A193 Authority key identifier: F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/rcuhAyb47ghJSUkGluQz5xbi7a8.roa Signing time: Fri 02 Jan 2026 02:18:56 +0000 ROA not before: Fri 02 Jan 2026 02:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.57.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:38:c1:c9:75:60:0e:8a:2b:b6:9c:ae:c7:a1:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5346d3edbec6da72780722c0a41abeea63661d8 Validity Not Before: Jan 2 02:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=adcba10326f8ee084949490696e433e716e2edaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:49:aa:34:65:6a:37:b6:a3:c3:5a:28:75:0e: 9d:53:18:40:3b:ca:a1:43:24:07:78:77:6f:0c:34: c1:15:49:98:a1:45:d9:ba:9a:2b:c5:0c:7b:7a:3f: 9a:07:5d:07:f9:78:0c:64:d4:e5:12:6e:bc:e8:1b: 8d:9a:70:3d:31:5a:09:e8:57:5b:e5:f6:15:72:08: b7:20:96:8c:4e:70:90:08:a1:49:39:95:f6:f2:81: 29:5b:cf:72:ce:d4:8e:44:a5:45:99:9e:24:ac:2d: 57:8e:6c:f6:9d:3d:05:fa:c6:f8:4f:4e:ba:5e:f3: c6:23:c1:b3:a1:fc:e8:6c:f3:e8:8a:aa:d3:5d:c2: a9:31:c0:ff:9a:98:37:4e:61:93:02:06:40:e8:e1: 39:d3:43:1d:8a:96:e8:25:bb:b8:7e:e0:fe:84:16: 2c:7e:8d:60:5b:72:67:dd:6b:6a:0d:0d:1f:13:b4: 3c:b1:a2:1b:16:1b:3a:be:6a:6d:29:5c:08:6d:e3: c4:4b:91:20:00:11:3b:8e:e8:1d:a9:59:56:4f:80: 0a:74:48:fc:2d:26:ca:07:e8:e1:8a:5e:9b:75:49: 26:1a:64:be:ab:0e:f6:96:77:16:0b:70:54:9c:aa: 65:ce:4c:7a:f3:23:9f:0d:df:02:37:16:3d:dd:9a: 58:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:CB:A1:03:26:F8:EE:08:49:49:49:06:96:E4:33:E7:16:E2:ED:AF X509v3 Authority Key Identifier: keyid:F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/rcuhAyb47ghJSUkGluQz5xbi7a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.57.216.0/22 Signature Algorithm: sha256WithRSAEncryption da:8e:4b:6d:e2:b5:71:8f:f1:9e:05:b6:29:c2:1e:19:64:f3: df:64:72:c4:a2:72:6e:8c:9c:e4:f7:0e:7b:97:6d:43:7a:e3: 47:b5:e9:34:00:a7:8f:d6:82:2c:fe:2e:04:a1:3a:f2:37:43: ee:56:0b:e3:93:17:d6:de:89:63:0a:d7:27:aa:c3:96:5c:f2: 9f:e7:60:0b:87:4b:4b:7a:6d:90:69:ce:d1:91:58:93:ef:03: 85:8c:4d:59:b0:74:cd:97:fe:27:23:c2:8f:c7:66:20:99:18: dc:5f:c1:84:af:d1:67:e7:ac:4e:07:08:44:8d:72:23:e4:3c: a0:35:d8:b0:be:ef:bb:d1:82:ba:19:2e:f9:c8:52:ee:57:42: eb:bd:7a:c4:6e:08:06:c3:c3:75:fd:4e:dc:0c:a1:3a:b6:58: 9c:12:6b:00:fd:e8:03:fe:09:34:fc:f9:3d:17:38:d2:ec:c9: ca:b2:d3:8d:02:1e:5c:ba:f7:29:de:af:c6:e1:73:19:b0:7f: cd:62:be:12:c7:f1:33:1a:40:de:ca:86:1b:61:e2:d3:ab:bc: 87:2d:9d:ed:d8:21:a7:20:a3:21:fd:c0:1e:fb:78:73:d6:fe: ff:60:c3:6a:42:70:cf:0d:8b:c8:ca:b0:8d:2d:02:4b:23:00: 9d:c9:67:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gDjByXVgDoortpyux6GTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MzQ2ZDNlZGJlYzZkYTcyNzgwNzIyYzBhNDFhYmVlYTYz NjYxZDgwHhcNMjYwMTAyMDIxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGNiYTEwMzI2ZjhlZTA4NDk0OTQ5MDY5NmU0MzNlNzE2ZTJlZGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kmqNGVqN7ajw1oodQ6dUxhAO8qh QyQHeHdvDDTBFUmYoUXZuporxQx7ej+aB10H+XgMZNTlEm686BuNmnA9MVoJ6Fdb 5fYVcgi3IJaMTnCQCKFJOZX28oEpW89yztSORKVFmZ4krC1Xjmz2nT0F+sb4T066 XvPGI8GzofzobPPoiqrTXcKpMcD/mpg3TmGTAgZA6OE500MdipboJbu4fuD+hBYs fo1gW3Jn3WtqDQ0fE7Q8saIbFhs6vmptKVwIbePES5EgABE7jugdqVlWT4AKdEj8 LSbKB+jhil6bdUkmGmS+qw72lncWC3BUnKplzkx68yOfDd8CNxY93ZpYxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK3LoQMm+O4ISUlJBpbkM+cW4u2vMB8GA1UdIwQY MBaAFPU0bT7b7G2nJ4ByLApBq+6mNmHYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVRSdFB0dnNiYWNuZ0hJc0NrR3I3cVkyWWRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iZTgwNjQtOWUxMS00NjFhLTkzNmQt ZmE3MGJkOTBlODk0LzEvcmN1aEF5YjQ3Z2hKU1VrR2x1UXo1eGJpN2E4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9iZTgwNjQtOWUxMS00NjFhLTkzNmQtZmE3MGJkOTBlODk0 LzEvOVRSdFB0dnNiYWNuZ0hJc0NrR3I3cVkyWWRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTnYMA0G CSqGSIb3DQEBCwUAA4IBAQDajktt4rVxj/GeBbYpwh4ZZPPfZHLEonJujJzk9w57 l21DeuNHtek0AKeP1oIs/i4EoTryN0PuVgvjkxfW3oljCtcnqsOWXPKf52ALh0tL em2Qac7RkViT7wOFjE1ZsHTNl/4nI8KPx2YgmRjcX8GEr9Fn56xOBwhEjXIj5Dyg Ndiwvu+70YK6GS75yFLuV0LrvXrEbggGw8N1/U7cDKE6tlicEmsA/egD/gk0/Pk9 FzjS7MnKstONAh5cuvcp3q/G4XMZsH/NYr4Sx/EzGkDeyoYbYeLTq7yHLZ3t2CGn IKMh/cAe+3hz1v7/YMNqQnDPDYvIyrCNLQJLIwCdyWdW -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:18 2026 by rpki-client