This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/U6ayks1P5BRjFFhc1UxRq5VC3jI.roa File: U6ayks1P5BRjFFhc1UxRq5VC3jI.roa (raw, json) Hash identifier: nvEU1lFde+SY+X4ElX6UspKi9KkL8IPg/Z79T8X9J68= Subject key identifier: 53:A6:B2:92:CD:4F:E4:14:63:14:58:5C:D5:4C:51:AB:95:42:DE:32 Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030 Certificate serial: 019B7BA522A9B40083469D175F4E0535FECD Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/U6ayks1P5BRjFFhc1UxRq5VC3jI.roa Signing time: Thu 01 Jan 2026 22:19:38 +0000 ROA not before: Thu 01 Jan 2026 22:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400040 IP address blocks: 185.228.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:22:a9:b4:00:83:46:9d:17:5f:4e:05:35:fe:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030 Validity Not Before: Jan 1 22:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53a6b292cd4fe4146314585cd54c51ab9542de32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f6:0e:d5:1e:45:e3:5d:e0:29:57:90:99:7c: bf:27:ae:fa:2d:20:72:43:69:08:c7:fa:4f:aa:b6: 10:23:7d:04:a8:05:5c:40:01:85:0a:c6:4d:a8:89: 1c:6c:ff:3b:83:c9:67:4c:d8:5c:08:60:4c:b4:ba: 1d:d9:86:3d:46:77:55:27:f2:59:c8:41:ad:a3:96: 3d:a2:a2:c3:95:90:0f:5c:68:15:98:35:72:98:ac: a0:d7:8a:2b:3e:d1:33:04:0f:85:38:bc:c4:f8:c1: 6c:07:34:de:f6:fb:de:7e:52:3a:ce:61:ad:20:f3: a8:ff:5a:da:85:d0:fc:6d:7c:7b:fb:16:77:07:a2: ff:f7:23:bd:41:3e:b9:9e:05:74:97:82:3e:b0:97: fe:ff:b0:c2:76:f6:6b:88:d5:5f:ab:4c:03:3c:5b: 09:75:95:44:f3:99:b2:68:21:a5:63:5a:9a:95:4a: 9d:f8:09:ba:ce:02:bc:f5:ef:60:cc:95:62:fa:0c: 0f:9b:f6:c4:c5:52:10:4f:b0:f9:ba:b1:3e:38:87: 87:2c:a8:7b:93:08:fe:d2:af:d0:30:98:6d:fe:cb: 52:cb:11:23:fd:25:11:16:ab:7b:93:d6:19:ee:b8: 4c:11:c0:ff:0f:2a:0f:df:ce:c2:77:c0:c8:64:32: dc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A6:B2:92:CD:4F:E4:14:63:14:58:5C:D5:4C:51:AB:95:42:DE:32 X509v3 Authority Key Identifier: keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/U6ayks1P5BRjFFhc1UxRq5VC3jI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.228.0.0/24 Signature Algorithm: sha256WithRSAEncryption 44:3e:ad:f5:1b:0b:8e:99:c0:55:ee:10:5d:c4:17:d6:70:eb: 38:e1:4d:c1:0a:4f:70:ba:46:92:30:db:e8:21:0c:29:78:0b: 49:10:82:cc:62:02:f1:5b:ed:33:cd:0b:2c:a2:a9:84:f1:74: f6:8f:2e:46:25:20:51:3d:2a:b6:3e:9a:46:53:3f:4c:89:61: 20:5e:38:65:6b:4d:c1:6d:5a:44:fb:90:25:d5:2f:76:86:c2: 29:1e:5d:a5:fe:af:2a:21:1b:32:91:4b:ac:e6:4d:b3:fa:da: 02:3c:8e:3b:a7:63:9c:06:b6:8e:3d:5b:aa:e2:75:7f:52:50: 03:cd:ba:9d:50:da:81:87:a2:8e:b3:dd:62:9d:ef:a4:38:1b: 34:2c:ec:28:1b:08:18:55:9d:20:a6:7f:9a:52:04:cc:77:83: 72:f0:0d:7c:5b:dd:6a:dd:e4:60:f1:84:0a:1f:cd:fc:7d:46: 19:77:9b:27:c7:0b:8e:db:cd:da:06:cd:ef:92:0e:a6:8a:b9: e1:4c:39:b2:16:19:b0:f5:d0:f0:05:95:62:21:39:7c:da:db: 5e:b1:87:fb:6d:56:06:b8:b3:aa:38:e5:27:0e:63:7a:f7:89: 46:9d:cb:7e:6b:fa:d6:c8:d2:ac:8f:61:a3:89:6a:0d:dc:3c: 06:54:8e:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pSKptACDRp0XX04FNf7NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YzYzNzNlYWIxOWNmNDNkZDJmNDMxMTEzOTgzODNlZTJi YWQwMzAwHhcNMjYwMTAxMjIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2E2YjI5MmNkNGZlNDE0NjMxNDU4NWNkNTRjNTFhYjk1NDJkZTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfYO1R5F413gKVeQmXy/J676LSBy Q2kIx/pPqrYQI30EqAVcQAGFCsZNqIkcbP87g8lnTNhcCGBMtLod2YY9RndVJ/JZ yEGto5Y9oqLDlZAPXGgVmDVymKyg14orPtEzBA+FOLzE+MFsBzTe9vveflI6zmGt IPOo/1rahdD8bXx7+xZ3B6L/9yO9QT65ngV0l4I+sJf+/7DCdvZriNVfq0wDPFsJ dZVE85myaCGlY1qalUqd+Am6zgK89e9gzJVi+gwPm/bExVIQT7D5urE+OIeHLKh7 kwj+0q/QMJht/stSyxEj/SURFqt7k9YZ7rhMEcD/DyoP387Cd8DIZDLcKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFOmspLNT+QUYxRYXNVMUauVQt4yMB8GA1UdIwQY MBaAFKXGNz6rGc9D3S9DEROYOD7iutAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEt YTRlYTBhNjNmNzY2LzEvVTZheWtzMVA1QlJqRkZoYzFVeFJxNVZDM2pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEtYTRlYTBhNjNmNzY2 LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueQAMA0G CSqGSIb3DQEBCwUAA4IBAQBEPq31GwuOmcBV7hBdxBfWcOs44U3BCk9wukaSMNvo IQwpeAtJEILMYgLxW+0zzQssoqmE8XT2jy5GJSBRPSq2PppGUz9MiWEgXjhla03B bVpE+5Al1S92hsIpHl2l/q8qIRsykUus5k2z+toCPI47p2OcBraOPVuq4nV/UlAD zbqdUNqBh6KOs91ine+kOBs0LOwoGwgYVZ0gpn+aUgTMd4Ny8A18W91q3eRg8YQK H838fUYZd5snxwuO283aBs3vkg6mirnhTDmyFhmw9dDwBZViITl82ttesYf7bVYG uLOqOOUnDmN694lGnct+a/rWyNKsj2GjiWoN3DwGVI4W -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:39 2026 by rpki-client