This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tU8EK-NEOFr4C8Qln5kHTB4hSkI.roa File: tU8EK-NEOFr4C8Qln5kHTB4hSkI.roa (raw, json) Hash identifier: VYGTuRU7UssVJj22pO0DK2+xHQdbycfFZBopQmyATe4= Subject key identifier: B5:4F:04:2B:E3:44:38:5A:F8:0B:C4:25:9F:99:07:4C:1E:21:4A:42 Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B7758F3B2FCBC668232940BE17D7E01CF Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tU8EK-NEOFr4C8Qln5kHTB4hSkI.roa Signing time: Thu 01 Jan 2026 02:17:56 +0000 ROA not before: Thu 01 Jan 2026 02:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207439 IP address blocks: 5.1.67.0/24 maxlen: 32 5.1.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f3:b2:fc:bc:66:82:32:94:0b:e1:7d:7e:01:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Jan 1 02:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b54f042be344385af80bc4259f99074c1e214a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7f:82:31:2c:3a:9c:f4:02:de:e8:d2:7b:2c: 30:f8:36:14:08:c0:2c:f3:66:0c:ff:26:54:09:b3: ee:07:df:af:cb:0a:eb:ec:43:21:99:ff:e7:32:77: af:38:16:d8:bc:1e:33:4a:27:14:36:fe:c8:1e:bb: 40:53:8c:0a:e5:a5:b8:0b:00:5c:f3:89:a0:ec:b7: 5b:fa:1a:bf:de:23:da:a2:ff:3a:a8:b9:d3:32:e5: 98:7d:72:b0:9b:69:d2:36:25:00:3d:4c:2a:cb:9a: 99:f1:8b:f1:84:cf:75:b8:21:c0:b1:61:f5:9f:cc: 1f:17:88:ee:ff:4e:c5:c0:95:12:c2:35:72:15:25: 46:b4:0d:28:a9:dd:56:5a:3c:f7:ee:cd:a6:42:ba: e9:71:13:23:5c:d4:90:82:07:e5:02:a7:44:c9:ed: 08:b8:45:c7:92:55:f2:48:96:86:c4:65:30:96:dd: 7d:4e:30:27:be:be:ce:04:b1:da:4b:01:4c:6e:08: 61:53:bc:d7:76:ad:d6:54:75:7c:75:4a:74:2f:33: c3:04:17:18:15:22:fc:82:9c:0b:2a:46:6d:52:6a: 19:36:73:60:c3:17:b6:42:57:1d:47:d6:9d:9c:87: 60:da:2f:f9:a8:50:2d:4e:ea:eb:48:cc:81:4a:02: 54:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:4F:04:2B:E3:44:38:5A:F8:0B:C4:25:9F:99:07:4C:1E:21:4A:42 X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tU8EK-NEOFr4C8Qln5kHTB4hSkI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.67.0/24 5.1.85.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:f5:88:d4:44:20:02:b5:d4:0f:e8:41:b2:d3:56:d9:bb:06: 8f:eb:e6:44:37:77:11:15:91:ac:ab:74:d3:88:f2:47:93:07: c0:d7:89:d8:55:b0:d6:7c:57:de:31:2b:a5:ec:93:7b:72:a8: 89:1f:42:86:ca:e9:e0:7d:66:c0:20:ec:76:fc:43:96:35:98: 9f:bf:7f:1d:ca:81:07:3b:b0:b7:88:a6:92:b3:3c:8e:f6:5d: c7:55:7d:ff:fc:ee:b8:7f:69:43:83:24:7a:e3:59:7d:a5:15: 7c:ab:29:1e:7e:26:8c:9e:9b:fb:fb:0b:72:12:c3:3b:6e:da: ac:c9:8d:bc:02:1c:2a:8f:b7:42:d0:6c:25:db:7e:c8:f3:a1: c1:b3:b4:1b:c2:f0:43:60:e8:6e:cb:1b:78:5e:83:2b:00:67: d2:0d:88:e8:d5:97:54:0f:e4:4b:f1:4b:5d:0e:87:cf:14:27: e8:98:89:5a:d5:c5:32:b3:a8:6a:1a:55:d8:61:55:ce:98:b8: a9:8a:cf:0c:f7:99:73:73:54:b5:3a:be:93:93:31:25:87:f2: da:a7:38:16:fc:f2:00:fe:36:46:d1:16:73:72:57:c9:b2:64: ac:2a:30:5e:40:d7:c4:f8:7d:95:f5:53:f1:19:54:67:44:e3: 0e:ca:c8:6a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WPOy/LxmgjKUC+F9fgHPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjYwMTAxMDIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTRmMDQyYmUzNDQzODVhZjgwYmM0MjU5Zjk5MDc0YzFlMjE0YTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5X+CMSw6nPQC3ujSeyww+DYUCMAs 82YM/yZUCbPuB9+vywrr7EMhmf/nMnevOBbYvB4zSicUNv7IHrtAU4wK5aW4CwBc 84mg7Ldb+hq/3iPaov86qLnTMuWYfXKwm2nSNiUAPUwqy5qZ8YvxhM91uCHAsWH1 n8wfF4ju/07FwJUSwjVyFSVGtA0oqd1WWjz37s2mQrrpcRMjXNSQggflAqdEye0I uEXHklXySJaGxGUwlt19TjAnvr7OBLHaSwFMbghhU7zXdq3WVHV8dUp0LzPDBBcY FSL8gpwLKkZtUmoZNnNgwxe2QlcdR9adnIdg2i/5qFAtTurrSMyBSgJULwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLVPBCvjRDha+AvEJZ+ZB0weIUpCMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEvdFU4RUstTkVPRnI0QzhRbG41a0hUQjRoU2tJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABQFDAwQA BQFVMA0GCSqGSIb3DQEBCwUAA4IBAQBK9YjURCACtdQP6EGy01bZuwaP6+ZEN3cR FZGsq3TTiPJHkwfA14nYVbDWfFfeMSul7JN7cqiJH0KGyungfWbAIOx2/EOWNZif v38dyoEHO7C3iKaSszyO9l3HVX3//O64f2lDgyR641l9pRV8qykefiaMnpv7+wty EsM7btqsyY28Ahwqj7dC0Gwl237I86HBs7QbwvBDYOhuyxt4XoMrAGfSDYjo1ZdU D+RL8UtdDofPFCfomIla1cUys6hqGlXYYVXOmLipis8M95lzc1S1Or6TkzElh/La pzgW/PIA/jZG0RZzclfJsmSsKjBeQNfE+H2V9VPxGVRnROMOyshq -----END CERTIFICATE-----Generated at Wed Jan 21 00:03:47 2026 by rpki-client