This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/U_ZtH6BuJuAfwk59CVWOTzufDxo.roa File: U_ZtH6BuJuAfwk59CVWOTzufDxo.roa (raw, json) Hash identifier: eq5cf9eQphRphK3Yj4u4syqd2Z9WYO6YN8rl/KiVwIE= Subject key identifier: 53:F6:6D:1F:A0:6E:26:E0:1F:C2:4E:7D:09:55:8E:4F:3B:9F:0F:1A Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B7758F4C8092C47DD5A8CE5A4B7A7178E Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/U_ZtH6BuJuAfwk59CVWOTzufDxo.roa Signing time: Thu 01 Jan 2026 02:17:57 +0000 ROA not before: Thu 01 Jan 2026 02:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209771 IP address blocks: 5.1.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f4:c8:09:2c:47:dd:5a:8c:e5:a4:b7:a7:17:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Jan 1 02:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53f66d1fa06e26e01fc24e7d09558e4f3b9f0f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:73:0d:2d:bd:27:de:28:27:0f:db:28:d6:4b: 04:ce:11:8f:30:8c:05:e0:55:a6:12:a9:ee:00:e8: c3:10:50:91:a2:3f:bd:34:c2:d8:84:b2:4e:10:79: 70:9c:31:5a:0b:2f:f3:55:47:6d:49:95:99:f9:5d: 9f:a7:bc:20:74:99:d4:5c:ac:7c:e2:9e:02:c3:1e: bf:c8:16:e4:8f:45:c3:54:5d:ea:53:e5:1e:68:86: ab:65:e4:3a:80:7f:81:2e:0a:35:26:36:13:07:11: b2:ce:04:9b:81:30:dd:08:69:7a:dc:70:55:26:19: c2:d4:d0:95:5d:0f:e2:6d:76:b0:d0:61:7f:90:d5: 94:d2:87:67:fe:7d:03:c6:5d:e1:74:76:1c:20:d2: ef:5f:d4:74:4c:d7:d5:e5:01:85:ed:43:e8:b5:59: 74:49:ac:6c:41:b1:b2:2b:a9:84:e8:6a:db:df:43: 25:8c:5b:9b:32:f7:70:5b:78:d8:88:f4:57:b0:87: 08:16:16:e9:ef:57:02:d5:00:df:b8:e9:0e:c1:ad: 4c:22:88:85:f9:50:f9:df:82:07:4f:7d:82:fb:fd: 15:40:20:4a:f6:1e:df:0d:3b:16:fc:5e:ce:f9:eb: 23:f2:cb:cf:1b:85:2c:cc:67:43:bc:79:18:72:4b: 94:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F6:6D:1F:A0:6E:26:E0:1F:C2:4E:7D:09:55:8E:4F:3B:9F:0F:1A X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/U_ZtH6BuJuAfwk59CVWOTzufDxo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.80.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:b3:b3:b7:8c:cf:2d:19:cd:0f:6b:2a:99:85:bc:b1:89:6d: 3b:37:ef:45:a1:1c:c7:ef:8b:4f:44:92:1e:18:a9:d3:d0:8c: 0c:25:6f:50:8b:93:62:c7:36:f2:03:c3:98:4c:f7:4d:ca:4d: 98:12:d0:20:64:f1:d3:6e:b6:a7:0a:01:31:09:7c:17:3a:0d: 6b:12:56:14:6a:94:08:86:13:39:5f:63:56:cf:a9:6c:0c:e4: 5d:51:dc:9c:ba:d0:f9:92:52:84:fc:7e:ac:ef:93:0a:76:a4: d2:5e:0b:17:ce:4e:ef:62:44:dc:2e:31:1f:62:48:08:23:b2: 05:46:a5:a3:a4:55:d1:72:81:67:de:13:7b:6e:57:b5:9a:67: 26:1d:fb:45:de:f3:24:77:96:0c:91:d9:81:66:9e:ae:0c:56: 7e:4f:41:82:20:1e:92:3d:b9:af:61:e9:ef:1d:83:86:07:95: a2:e3:3c:ca:d5:ad:ca:df:90:d4:e0:72:58:37:ec:8f:dc:af: 2b:d9:40:bd:10:d9:2a:91:e9:2d:00:95:11:4b:02:83:87:d7: 0f:81:83:29:2b:b0:2e:93:11:d2:4d:74:e6:12:b2:91:16:c6: a7:7e:a4:7e:39:85:3c:3f:0b:ea:55:53:0d:27:12:6b:7d:f0: e0:68:6a:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WPTICSxH3VqM5aS3pxeOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjYwMTAxMDIxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2Y2NmQxZmEwNmUyNmUwMWZjMjRlN2QwOTU1OGU0ZjNiOWYwZjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXMNLb0n3ignD9so1ksEzhGPMIwF 4FWmEqnuAOjDEFCRoj+9NMLYhLJOEHlwnDFaCy/zVUdtSZWZ+V2fp7wgdJnUXKx8 4p4Cwx6/yBbkj0XDVF3qU+UeaIarZeQ6gH+BLgo1JjYTBxGyzgSbgTDdCGl63HBV JhnC1NCVXQ/ibXaw0GF/kNWU0odn/n0Dxl3hdHYcINLvX9R0TNfV5QGF7UPotVl0 SaxsQbGyK6mE6Grb30MljFubMvdwW3jYiPRXsIcIFhbp71cC1QDfuOkOwa1MIoiF +VD534IHT32C+/0VQCBK9h7fDTsW/F7O+esj8svPG4UszGdDvHkYckuUewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFP2bR+gbibgH8JOfQlVjk87nw8aMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEvVV9adEg2QnVKdUFmd2s1OUNWV09UenVmRHhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQFQMA0G CSqGSIb3DQEBCwUAA4IBAQCfs7O3jM8tGc0PayqZhbyxiW07N+9FoRzH74tPRJIe GKnT0IwMJW9Qi5NixzbyA8OYTPdNyk2YEtAgZPHTbranCgExCXwXOg1rElYUapQI hhM5X2NWz6lsDORdUdycutD5klKE/H6s75MKdqTSXgsXzk7vYkTcLjEfYkgII7IF RqWjpFXRcoFn3hN7ble1mmcmHftF3vMkd5YMkdmBZp6uDFZ+T0GCIB6SPbmvYenv HYOGB5Wi4zzK1a3K35DU4HJYN+yP3K8r2UC9ENkqkektAJURSwKDh9cPgYMpK7Au kxHSTXTmErKRFsanfqR+OYU8PwvqVVMNJxJrffDgaGri -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:20 2026 by rpki-client