This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/U3zArEs7OwJ9nfBspr_JzD0bg7E.roa File: U3zArEs7OwJ9nfBspr_JzD0bg7E.roa (raw, json) Hash identifier: d1G0EYlsTdKcROo0cRKePlxWkAY1LVflpTsLiPdRKeE= Subject key identifier: 53:7C:C0:AC:4B:3B:3B:02:7D:9D:F0:6C:A6:BF:C9:CC:3D:1B:83:B1 Certificate issuer: /CN=b90dfc2a651b5efab2c0cd59322d6d3b55906563 Certificate serial: 019BFFC6895277ECA3C889EFE3FC01CCB8C8 Authority key identifier: B9:0D:FC:2A:65:1B:5E:FA:B2:C0:CD:59:32:2D:6D:3B:55:90:65:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQ38KmUbXvqywM1ZMi1tO1WQZWM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/U3zArEs7OwJ9nfBspr_JzD0bg7E.roa Signing time: Tue 27 Jan 2026 14:05:59 +0000 ROA not before: Tue 27 Jan 2026 14:05:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51865 IP address blocks: 185.238.172.0/24 maxlen: 24 2a01:ad00:128::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.mft rsync://rpki.ripe.net/repository/DEFAULT/uQ38KmUbXvqywM1ZMi1tO1WQZWM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:c6:89:52:77:ec:a3:c8:89:ef:e3:fc:01:cc:b8:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b90dfc2a651b5efab2c0cd59322d6d3b55906563 Validity Not Before: Jan 27 14:05:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=537cc0ac4b3b3b027d9df06ca6bfc9cc3d1b83b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:45:26:7f:27:50:20:05:bf:62:56:72:f9:fc: b0:41:ed:64:69:e2:c1:db:cd:5d:8a:85:77:9b:81: 26:b1:30:41:2c:d0:37:15:06:25:81:cc:5d:3d:cc: 0f:a8:8d:83:5a:b0:26:d5:c2:e9:a3:59:43:4e:15: 96:de:c8:bb:59:08:8f:80:63:1a:98:2b:17:6e:52: 74:82:90:33:a2:53:17:d5:4a:88:fc:5b:0e:78:04: 9f:8a:c2:b8:84:b6:3d:41:7a:ca:90:c6:42:c1:12: 07:be:3b:a8:d8:b4:2d:9a:36:fc:5c:7f:ed:92:3f: d8:49:ac:a1:bf:85:13:89:f8:06:af:28:4f:5f:0e: bb:54:2a:94:80:a7:c5:71:da:c4:72:8f:e7:61:20: cc:6b:cf:a7:22:cb:25:ae:02:2f:8d:0e:65:b2:aa: bc:a6:d6:6b:6b:fb:bc:39:36:61:5a:04:aa:c0:99: d5:e9:63:6f:68:e0:03:92:83:8d:87:0a:9a:e7:aa: 24:e4:58:d6:82:43:81:82:53:6e:26:08:50:24:06: 7e:d8:50:7f:ed:e0:79:d3:0a:d0:ae:39:67:0b:e9: 3e:51:8c:d1:f0:b0:21:ce:66:58:62:d2:fd:e8:cd: 0f:89:90:e0:af:43:54:dc:88:96:7b:f4:3b:f0:fd: 2a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:7C:C0:AC:4B:3B:3B:02:7D:9D:F0:6C:A6:BF:C9:CC:3D:1B:83:B1 X509v3 Authority Key Identifier: keyid:B9:0D:FC:2A:65:1B:5E:FA:B2:C0:CD:59:32:2D:6D:3B:55:90:65:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ38KmUbXvqywM1ZMi1tO1WQZWM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/U3zArEs7OwJ9nfBspr_JzD0bg7E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.238.172.0/24 IPv6: 2a01:ad00:128::/48 Signature Algorithm: sha256WithRSAEncryption 8c:3e:e8:ee:00:0b:60:12:38:11:59:c5:12:24:c0:2f:18:b8: 0e:20:3c:15:d5:d8:76:98:4b:49:a1:12:98:51:41:13:d8:0a: f2:aa:cb:b9:9a:da:45:a1:84:ee:a6:f8:53:46:b4:b9:ba:88: b1:56:d0:fa:9b:62:60:36:13:13:0c:bf:f0:5c:e5:fa:3f:9a: b6:6b:ad:27:02:43:b1:9c:4c:34:ac:07:84:70:20:00:b5:de: 8c:d1:b2:1e:78:83:e7:21:7e:53:e6:3c:31:b3:f7:a5:cb:1a: 99:c0:56:26:19:d4:d1:b5:3e:4d:19:b2:db:87:62:e2:29:a3: 24:16:d4:52:8f:14:e2:45:25:68:86:ce:70:df:4f:47:73:da: d5:f4:5c:09:bf:fe:a8:75:be:10:1c:15:a9:78:2a:b1:f0:e9: 26:f0:f7:c6:6c:42:16:b7:dd:ea:88:cb:3b:03:f0:5a:15:ad: 92:f0:ad:36:18:ab:65:07:4a:dd:2d:54:a2:3c:04:09:67:50: 6d:56:d4:64:db:67:a1:47:24:4f:79:a8:63:de:f6:93:53:d3: a2:83:a5:35:bf:d5:3c:ca:19:e4:6e:3c:68:b1:30:e2:94:52: 94:58:d0:dd:04:cb:a9:65:de:bf:30:2f:c4:ed:8b:99:22:da: 93:ff:35:e2 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZv/xolSd+yjyInv4/wBzLjIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MGRmYzJhNjUxYjVlZmFiMmMwY2Q1OTMyMmQ2ZDNiNTU5 MDY1NjMwHhcNMjYwMTI3MTQwNTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzdjYzBhYzRiM2IzYjAyN2Q5ZGYwNmNhNmJmYzljYzNkMWI4M2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0UmfydQIAW/YlZy+fywQe1kaeLB 281dioV3m4EmsTBBLNA3FQYlgcxdPcwPqI2DWrAm1cLpo1lDThWW3si7WQiPgGMa mCsXblJ0gpAzolMX1UqI/FsOeASfisK4hLY9QXrKkMZCwRIHvjuo2LQtmjb8XH/t kj/YSayhv4UTifgGryhPXw67VCqUgKfFcdrEco/nYSDMa8+nIsslrgIvjQ5lsqq8 ptZra/u8OTZhWgSqwJnV6WNvaOADkoONhwqa56ok5FjWgkOBglNuJghQJAZ+2FB/ 7eB50wrQrjlnC+k+UYzR8LAhzmZYYtL96M0PiZDgr0NU3IiWe/Q78P0qoQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFN8wKxLOzsCfZ3wbKa/ycw9G4OxMB8GA1UdIwQY MBaAFLkN/CplG176ssDNWTItbTtVkGVjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVEzOEttVWJYdnF5d00xWk1pMXRPMVdRWldNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84NDdiYzgtZjdlNi00M2UwLWE1Y2Yt ZDNlMTZhMTYzZGQzLzEvVTN6QXJFczdPd0o5bmZCc3ByX0p6RDBiZzdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC84NDdiYzgtZjdlNi00M2UwLWE1Y2YtZDNlMTZhMTYzZGQz LzEvdVEzOEttVWJYdnF5d00xWk1pMXRPMVdRWldNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAue6sMA8E AgACMAkDBwAqAa0AASgwDQYJKoZIhvcNAQELBQADggEBAIw+6O4AC2ASOBFZxRIk wC8YuA4gPBXV2HaYS0mhEphRQRPYCvKqy7ma2kWhhO6m+FNGtLm6iLFW0PqbYmA2 ExMMv/Bc5fo/mrZrrScCQ7GcTDSsB4RwIAC13ozRsh54g+chflPmPDGz96XLGpnA ViYZ1NG1Pk0ZstuHYuIpoyQW1FKPFOJFJWiGznDfT0dz2tX0XAm//qh1vhAcFal4 KrHw6Sbw98ZsQha33eqIyzsD8FoVrZLwrTYYq2UHSt0tVKI8BAlnUG1W1GTbZ6FH JE95qGPe9pNT06KDpTW/1TzKGeRuPGixMOKUUpRY0N0Ey6ll3r8wL8Tti5ki2pP/ NeI= -----END CERTIFICATE-----Generated at Tue Feb 10 07:12:51 2026 by rpki-client