This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/U87Q2NMvSj3QrC4k_pqy75MWuOQ.roa File: U87Q2NMvSj3QrC4k_pqy75MWuOQ.roa (raw, json) Hash identifier: uDHwF0JT1FAD3yFvexfULGa75xAecjAscZ1J4KrEfUY= Subject key identifier: 53:CE:D0:D8:D3:2F:4A:3D:D0:AC:2E:24:FE:9A:B2:EF:93:16:B8:E4 Certificate issuer: /CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce Certificate serial: 019B79106CCDA0D5D57238A51ADC9263D802 Authority key identifier: 7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/U87Q2NMvSj3QrC4k_pqy75MWuOQ.roa Signing time: Thu 01 Jan 2026 10:17:58 +0000 ROA not before: Thu 01 Jan 2026 10:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201966 IP address blocks: 94.229.83.0/24 maxlen: 24 94.229.84.0/23 maxlen: 23 2a05:2c7:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.mft rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6c:cd:a0:d5:d5:72:38:a5:1a:dc:92:63:d8:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce Validity Not Before: Jan 1 10:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53ced0d8d32f4a3dd0ac2e24fe9ab2ef9316b8e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1f:cf:a1:dc:ff:a4:f7:95:ad:c1:d7:07:16: d1:55:5e:16:14:38:be:cb:58:00:85:32:be:d1:82: 8d:2d:07:5f:46:49:8e:2f:cc:d0:ca:fa:f9:f9:bb: 70:a3:59:b0:25:c6:a9:2a:37:32:4a:be:21:48:bb: fd:da:f0:ab:28:70:3d:79:81:b2:1d:f4:3d:bd:6b: 4e:64:0d:8a:3a:0b:e8:57:34:7b:a1:0e:7c:5a:1c: 66:3d:0e:b4:12:c2:5c:c6:0f:c0:52:38:e9:e9:89: 39:01:47:09:fe:3a:5b:ed:8c:e6:31:ec:be:f9:61: 96:77:49:9b:09:c3:d8:4c:af:2d:91:66:94:40:c3: 24:22:4b:66:47:51:5b:d5:14:0f:43:1e:3c:3a:61: 88:69:bc:7e:ba:b4:f7:24:87:d3:24:95:45:da:df: 26:53:e1:d0:54:93:42:8b:61:24:e3:28:77:fe:42: ab:81:e2:a0:9e:85:7d:b6:07:d2:37:6f:6f:1f:ce: e0:33:40:af:cc:d2:b3:2b:5e:db:0d:01:89:46:37: 55:51:dd:24:78:a4:7c:1d:74:6b:9f:e5:b2:55:c0: dc:fe:0e:c4:80:1a:c3:87:1c:98:e3:af:37:58:cb: 42:4e:e4:23:6d:0c:75:c9:ed:24:d3:42:86:a8:f6: 32:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:CE:D0:D8:D3:2F:4A:3D:D0:AC:2E:24:FE:9A:B2:EF:93:16:B8:E4 X509v3 Authority Key Identifier: keyid:7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/U87Q2NMvSj3QrC4k_pqy75MWuOQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.229.83.0-94.229.85.255 IPv6: 2a05:2c7:c000::/34 Signature Algorithm: sha256WithRSAEncryption 7c:91:33:c9:b0:a2:bf:2e:16:90:77:20:34:c0:df:87:a0:a8: 84:ee:b5:dd:83:81:03:e5:c8:53:ba:aa:d4:a2:98:70:9e:f1: 64:d1:f5:31:01:2f:1f:b5:d0:ff:a9:87:d7:55:51:f0:d9:82: 71:97:8e:77:16:a5:f9:83:eb:1d:1f:f5:ac:59:cf:4f:c3:43: 02:06:eb:94:4f:ff:14:3f:a2:89:5b:e2:75:81:b8:f4:08:2d: be:88:fb:cf:bd:7b:64:ee:b6:21:40:6a:17:1a:76:28:b7:60: a1:72:7f:2f:8c:ed:66:43:1a:16:5e:a1:c1:67:7d:82:67:07: 93:65:7e:b5:23:a1:87:fc:d0:78:34:f8:04:03:97:99:e5:0a: e3:ae:ac:db:9d:74:da:0d:2d:24:53:a0:8f:d7:a7:e1:02:3e: 52:c2:93:7a:2b:e1:8d:af:e9:77:6d:1b:34:bb:f8:49:89:09: e1:5b:90:db:a9:3e:c0:d4:2c:4b:0a:70:a3:93:64:23:0d:76: 04:06:fe:b4:6d:d0:55:60:62:64:0f:4e:ab:de:34:b2:c9:04: 2a:04:b4:af:96:fe:91:db:31:ca:ac:4f:de:31:9d:99:05:e8: e6:f4:70:c5:38:ed:5d:ea:0c:43:ed:1a:2c:93:df:bc:3f:c2: 39:9c:99:4c -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt5EGzNoNXVcjilGtySY9gCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjZmM5MmIwYTc1Yjg5YWQyZTNjNTdmN2NiYTBlNDc4Njg0 MjE5Y2UwHhcNMjYwMTAxMTAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2NlZDBkOGQzMmY0YTNkZDBhYzJlMjRmZTlhYjJlZjkzMTZiOGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjx/Podz/pPeVrcHXBxbRVV4WFDi+ y1gAhTK+0YKNLQdfRkmOL8zQyvr5+btwo1mwJcapKjcySr4hSLv92vCrKHA9eYGy HfQ9vWtOZA2KOgvoVzR7oQ58WhxmPQ60EsJcxg/AUjjp6Yk5AUcJ/jpb7YzmMey+ +WGWd0mbCcPYTK8tkWaUQMMkIktmR1Fb1RQPQx48OmGIabx+urT3JIfTJJVF2t8m U+HQVJNCi2Ek4yh3/kKrgeKgnoV9tgfSN29vH87gM0CvzNKzK17bDQGJRjdVUd0k eKR8HXRrn+WyVcDc/g7EgBrDhxyY4683WMtCTuQjbQx1ye0k00KGqPYyGQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFFPO0NjTL0o90KwuJP6asu+TFrjkMB8GA1UdIwQY MBaAFHz8krCnW4mtLjxX98ug5HhoQhnOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlB5U3NLZGJpYTB1UEZmM3k2RGtlR2hDR2M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xNzc2Y2ItMWM3OC00ZGNjLWI0M2It MzZkN2I0Zjg0ZTVjLzEvVTg3UTJOTXZTajNRckM0a19wcXk3NU1XdU9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8xNzc2Y2ItMWM3OC00ZGNjLWI0M2ItMzZkN2I0Zjg0ZTVj LzEvZlB5U3NLZGJpYTB1UEZmM3k2RGtlR2hDR2M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAUBAIAATAOMAwDBABe5VMD BAFe5VQwDgQCAAIwCAMGBioFAsfAMA0GCSqGSIb3DQEBCwUAA4IBAQB8kTPJsKK/ LhaQdyA0wN+HoKiE7rXdg4ED5chTuqrUophwnvFk0fUxAS8ftdD/qYfXVVHw2YJx l453FqX5g+sdH/WsWc9Pw0MCBuuUT/8UP6KJW+J1gbj0CC2+iPvPvXtk7rYhQGoX GnYot2Chcn8vjO1mQxoWXqHBZ32CZweTZX61I6GH/NB4NPgEA5eZ5QrjrqzbnXTa DS0kU6CP16fhAj5SwpN6K+GNr+l3bRs0u/hJiQnhW5DbqT7A1CxLCnCjk2QjDXYE Bv60bdBVYGJkD06r3jSyyQQqBLSvlv6R2zHKrE/eMZ2ZBejm9HDFOO1d6gxD7Ros k9+8P8I5nJlM -----END CERTIFICATE-----Generated at Mon Feb 9 22:26:53 2026 by rpki-client