This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/u4owkfbGQjlZ17TauPKELfGr4-A.roa File: u4owkfbGQjlZ17TauPKELfGr4-A.roa (raw, json) Hash identifier: Z+tEIRfGIZ+WLPFWkpQEZw9hlIWNtzCNJGfQfR5ByHc= Subject key identifier: BB:8A:30:91:F6:C6:42:39:59:D7:B4:DA:B8:F2:84:2D:F1:AB:E3:E0 Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Certificate serial: 019B79101E6BD096BB92BD0E8B7CEF64DDB3 Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/u4owkfbGQjlZ17TauPKELfGr4-A.roa Signing time: Thu 01 Jan 2026 10:17:38 +0000 ROA not before: Thu 01 Jan 2026 10:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 154049 IP address blocks: 185.92.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 14:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:1e:6b:d0:96:bb:92:bd:0e:8b:7c:ef:64:dd:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Validity Not Before: Jan 1 10:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb8a3091f6c6423959d7b4dab8f2842df1abe3e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6f:d8:2f:d2:7e:15:75:fd:35:7f:66:52:c8: 6e:39:cd:41:9b:69:13:b9:d4:67:50:32:5b:c0:a9: 48:6b:33:b0:6d:81:9c:30:ae:dc:93:29:83:6a:e9: a5:88:ec:a6:65:14:d2:5e:b4:0b:f4:e0:c7:5e:b0: 8c:a5:fd:71:d8:11:1e:e3:18:52:9d:50:f7:56:7d: 35:f5:9a:cf:94:46:3f:d7:25:e3:3f:a5:8d:28:68: 3a:1a:48:cc:dc:ad:07:ad:8a:e1:8c:b1:fc:ad:84: 94:b3:52:9b:8e:2b:60:2a:5b:d4:e2:05:a8:ac:60: fd:b9:8b:c6:99:3e:55:f5:f1:79:b3:bc:8d:fc:c5: b3:89:a9:48:f9:c8:df:a0:46:1e:aa:b3:f0:11:eb: f8:64:a8:25:22:c1:d6:6a:0c:98:eb:d8:dc:73:36: 2d:13:37:67:7a:a3:ae:3d:da:5c:ca:5d:23:1a:f3: 02:cd:e2:74:80:5c:f5:16:d0:c1:75:3b:3b:8a:a8: 41:71:a7:48:96:bc:07:9c:79:07:34:eb:5d:2d:8a: f4:ff:11:14:4b:cd:64:54:4c:02:59:55:30:0d:9e: 3b:26:db:ff:29:86:2a:7a:46:ea:2e:65:5e:f9:82: 8f:3b:8f:ba:90:7a:9c:19:8f:c3:8a:0b:a2:d2:3b: d2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8A:30:91:F6:C6:42:39:59:D7:B4:DA:B8:F2:84:2D:F1:AB:E3:E0 X509v3 Authority Key Identifier: keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/u4owkfbGQjlZ17TauPKELfGr4-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.92.47.0/24 Signature Algorithm: sha256WithRSAEncryption 08:fa:29:4e:58:19:27:21:95:0c:65:59:98:8b:3e:39:b9:c1: 53:0b:98:b2:9a:78:f9:91:9c:d5:4a:f7:bb:ea:4a:05:20:47: 4e:67:a9:e0:66:90:d5:c3:0e:75:52:e3:07:cd:80:7c:23:94: cc:c3:c4:37:25:bf:f7:e8:da:2e:9d:d8:3b:01:bb:e7:33:fd: ac:26:13:a6:82:82:71:46:b6:a8:80:00:48:03:ce:9a:cc:dc: 3f:e5:d6:20:fb:3a:59:b8:58:40:70:42:df:37:0f:f4:ef:bd: 35:80:63:42:6f:b3:65:30:99:91:39:bc:24:ed:e0:45:a5:2a: 2f:f9:82:a9:0e:00:4e:b7:56:34:5a:3b:1e:87:b1:95:0c:2f: 86:b0:71:ee:93:3b:4a:ac:15:a2:9a:90:3a:10:95:2c:50:6f: 75:0e:a6:05:ef:ec:63:6b:b1:4b:06:9a:ac:9e:f2:ce:85:09: 0a:84:c0:90:f2:8d:eb:db:92:2c:54:66:ba:df:a6:11:94:7b: e0:ef:8d:67:23:58:de:bc:e0:ad:b5:1c:b8:ec:4f:ea:65:cb: f1:58:4a:8e:43:e4:f8:11:6a:f7:cf:d6:e0:ad:d7:92:dd:e3: ec:20:26:61:c2:9d:51:0f:81:da:39:64:35:68:22:a5:27:99: 73:c1:b9:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EB5r0Ja7kr0Oi3zvZN2zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh ZTE5MjkwHhcNMjYwMTAxMTAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjhhMzA5MWY2YzY0MjM5NTlkN2I0ZGFiOGYyODQyZGYxYWJlM2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm/YL9J+FXX9NX9mUshuOc1Bm2kT udRnUDJbwKlIazOwbYGcMK7ckymDaumliOymZRTSXrQL9ODHXrCMpf1x2BEe4xhS nVD3Vn019ZrPlEY/1yXjP6WNKGg6GkjM3K0HrYrhjLH8rYSUs1KbjitgKlvU4gWo rGD9uYvGmT5V9fF5s7yN/MWzialI+cjfoEYeqrPwEev4ZKglIsHWagyY69jcczYt EzdneqOuPdpcyl0jGvMCzeJ0gFz1FtDBdTs7iqhBcadIlrwHnHkHNOtdLYr0/xEU S81kVEwCWVUwDZ47Jtv/KYYqekbqLmVe+YKPO4+6kHqcGY/Digui0jvSFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLuKMJH2xkI5Wde02rjyhC3xq+PgMB8GA1UdIwQY MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt MjMxNTQ5NDA5NzIwLzEvdTRvd2tmYkdRamxaMTdUYXVQS0VMZkdyNC1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVwvMA0G CSqGSIb3DQEBCwUAA4IBAQAI+ilOWBknIZUMZVmYiz45ucFTC5iymnj5kZzVSve7 6koFIEdOZ6ngZpDVww51UuMHzYB8I5TMw8Q3Jb/36Noundg7AbvnM/2sJhOmgoJx RraogABIA86azNw/5dYg+zpZuFhAcELfNw/07701gGNCb7NlMJmRObwk7eBFpSov +YKpDgBOt1Y0Wjseh7GVDC+GsHHukztKrBWimpA6EJUsUG91DqYF7+xja7FLBpqs nvLOhQkKhMCQ8o3r25IsVGa636YRlHvg741nI1jevOCttRy47E/qZcvxWEqOQ+T4 EWr3z9bgrdeS3ePsICZhwp1RD4HaOWQ1aCKlJ5lzwbme -----END CERTIFICATE-----Generated at Fri Jan 9 23:45:02 2026 by rpki-client