This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/U3JTOU2Gy5VAC40-QXF532zAI74.roa File: U3JTOU2Gy5VAC40-QXF532zAI74.roa (raw, json) Hash identifier: MLw4NCST20HWu+ZNdPYnnZo+thSPHkDno059n20APN4= Subject key identifier: 53:72:53:39:4D:86:CB:95:40:0B:8D:3E:41:71:79:DF:6C:C0:23:BE Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C13969A6C6C4A5A7651E447915F94EE Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/U3JTOU2Gy5VAC40-QXF532zAI74.roa Signing time: Fri 02 Jan 2026 00:20:17 +0000 ROA not before: Fri 02 Jan 2026 00:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 45.90.19.0/24 maxlen: 24 185.36.204.0/24 maxlen: 24 185.206.248.0/24 maxlen: 24 185.218.22.0/24 maxlen: 24 185.239.140.0/24 maxlen: 24 185.240.120.0/23 maxlen: 24 185.246.115.0/24 maxlen: 24 193.58.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:96:9a:6c:6c:4a:5a:76:51:e4:47:91:5f:94:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=537253394d86cb95400b8d3e417179df6cc023be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9e:64:cf:57:0c:ca:45:0f:ba:10:4e:ee:7a: b6:0e:fe:72:3d:be:8d:c0:50:0a:1e:55:3c:97:a8: f8:6e:81:6b:89:01:03:f0:ee:23:28:88:e6:de:f2: f0:de:45:c6:78:58:39:62:40:d9:ad:4c:1a:c6:c3: 75:fc:5f:5d:35:9e:cb:71:43:48:69:07:ec:d5:d2: 59:cf:3b:d4:24:b6:be:fd:21:48:95:d8:42:b3:56: 09:8b:f7:16:2d:c9:4a:20:7b:a5:c5:d5:d5:0f:d9: 31:89:07:f7:3b:1c:e7:15:de:19:3a:20:22:1b:7c: 18:e5:d9:a6:97:53:b4:e3:78:43:7f:10:9c:5e:72: 8f:e7:c8:29:90:ae:95:2a:7d:9f:59:84:c1:fd:36: 62:55:ba:cd:cb:de:e3:9a:3c:3b:63:fb:e5:d9:ca: ab:56:cb:39:64:12:48:1d:c9:a2:a9:22:37:15:40: 7c:56:80:38:34:15:f8:32:f2:c1:a7:a9:76:7b:7d: 20:a0:5d:bf:08:26:59:9d:45:28:c7:17:a5:98:e8: 30:12:43:59:39:77:0e:c5:3f:cf:06:19:5c:48:bf: 82:e5:ec:25:0a:6f:58:ed:d6:70:04:84:07:32:53: fd:b3:bc:ab:53:de:54:70:f6:58:af:e6:ae:59:db: 42:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:72:53:39:4D:86:CB:95:40:0B:8D:3E:41:71:79:DF:6C:C0:23:BE X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/U3JTOU2Gy5VAC40-QXF532zAI74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.19.0/24 185.36.204.0/24 185.206.248.0/24 185.218.22.0/24 185.239.140.0/24 185.240.120.0/23 185.246.115.0/24 193.58.144.0/24 Signature Algorithm: sha256WithRSAEncryption a0:4d:26:3f:ac:97:48:b1:aa:3b:bf:7c:a6:90:fe:45:2f:14: 04:86:0e:25:c5:d5:1d:aa:da:37:2d:7a:ce:a8:29:da:dc:8d: 8d:5f:89:a5:80:6b:b3:2a:27:d8:61:7b:2e:28:d1:07:56:99: 78:ff:cb:67:1c:13:f9:7f:df:b0:1b:74:82:78:bd:6b:18:ef: 33:8a:ee:cf:53:5d:26:8d:d4:0e:dd:75:58:ab:4c:c5:55:3e: be:be:a6:a0:02:61:e4:37:ec:15:83:d4:ed:47:cc:99:c7:51: 4a:ae:e1:66:46:4a:9f:12:cc:b0:38:c3:a7:5b:90:4d:ba:f3: f0:6a:e9:66:ff:a0:50:a3:18:7d:ab:1d:71:b1:1d:ec:fe:d3: d8:d2:44:3d:46:84:19:9e:14:a5:44:9c:d0:eb:2c:2b:fc:d2: f1:ae:9d:0b:09:35:2b:d4:1a:d3:9c:c1:08:27:45:53:cb:ee: 50:fe:9f:eb:11:22:3e:ad:47:52:17:ff:ef:39:07:87:87:85: 10:18:2c:41:4b:ff:49:7c:d8:bb:09:f2:b5:51:30:d9:5a:82: 53:06:5e:3a:07:34:51:a9:fa:d7:e3:26:fd:a2:46:6b:3f:20: bf:76:f5:5c:97:56:7a:19:d7:7b:ef:88:05:c5:9b:98:e0:c7: c7:72:f8:7d -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt8E5aabGxKWnZR5EeRX5TuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzcyNTMzOTRkODZjYjk1NDAwYjhkM2U0MTcxNzlkZjZjYzAyM2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZ5kz1cMykUPuhBO7nq2Dv5yPb6N wFAKHlU8l6j4boFriQED8O4jKIjm3vLw3kXGeFg5YkDZrUwaxsN1/F9dNZ7LcUNI aQfs1dJZzzvUJLa+/SFIldhCs1YJi/cWLclKIHulxdXVD9kxiQf3OxznFd4ZOiAi G3wY5dmml1O043hDfxCcXnKP58gpkK6VKn2fWYTB/TZiVbrNy97jmjw7Y/vl2cqr Vss5ZBJIHcmiqSI3FUB8VoA4NBX4MvLBp6l2e30goF2/CCZZnUUoxxelmOgwEkNZ OXcOxT/PBhlcSL+C5ewlCm9Y7dZwBIQHMlP9s7yrU95UcPZYr+auWdtCswIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFFNyUzlNhsuVQAuNPkFxed9swCO+MB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvVTNKVE9VMkd5NVZBQzQwLVFYRjUzMnpBSTc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQALVoTAwQA uSTMAwQAuc74AwQAudoWAwQAue+MAwQBufB4AwQAufZzAwQAwTqQMA0GCSqGSIb3 DQEBCwUAA4IBAQCgTSY/rJdIsao7v3ymkP5FLxQEhg4lxdUdqto3LXrOqCna3I2N X4mlgGuzKifYYXsuKNEHVpl4/8tnHBP5f9+wG3SCeL1rGO8ziu7PU10mjdQO3XVY q0zFVT6+vqagAmHkN+wVg9TtR8yZx1FKruFmRkqfEsywOMOnW5BNuvPwaulm/6BQ oxh9qx1xsR3s/tPY0kQ9RoQZnhSlRJzQ6ywr/NLxrp0LCTUr1BrTnMEIJ0VTy+5Q /p/rESI+rUdSF//vOQeHh4UQGCxBS/9JfNi7CfK1UTDZWoJTBl46BzRRqfrX4yb9 okZrPyC/dvVcl1Z6Gdd774gFxZuY4MfHcvh9 -----END CERTIFICATE-----Generated at Fri Jan 2 23:47:31 2026 by rpki-client