This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/CbUjr1UvlkF8n-aSwRMeoAKRr08.roa File: CbUjr1UvlkF8n-aSwRMeoAKRr08.roa (raw, json) Hash identifier: uLotTSOrlblRssB3pzAzK8VGcBOkdwWIKgpcVkQ5HL8= Subject key identifier: 09:B5:23:AF:55:2F:96:41:7C:9F:E6:92:C1:13:1E:A0:02:91:AF:4F Certificate issuer: /CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf Certificate serial: 019B7EA757C70D25928BF5D0EB721C7C07D1 Authority key identifier: 5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/CbUjr1UvlkF8n-aSwRMeoAKRr08.roa Signing time: Fri 02 Jan 2026 12:20:54 +0000 ROA not before: Fri 02 Jan 2026 12:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60502 IP address blocks: 185.221.224.0/22 maxlen: 22 185.221.224.0/23 maxlen: 23 185.221.226.0/23 maxlen: 23 2a0c:5000::/30 maxlen: 30 2a0c:5000::/32 maxlen: 32 2a0c:5000::/48 maxlen: 48 2a0c:5000:225::/48 maxlen: 48 2a0c:5000:3072::/48 maxlen: 48 2a0c:5000:3073::/48 maxlen: 48 2a0c:5000:3082::/48 maxlen: 48 2a0c:5000:3083::/48 maxlen: 48 2a0c:5000:3084::/48 maxlen: 48 2a0c:5001::/32 maxlen: 32 2a0c:5002::/32 maxlen: 32 2a0c:5003::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:57:c7:0d:25:92:8b:f5:d0:eb:72:1c:7c:07:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf Validity Not Before: Jan 2 12:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09b523af552f96417c9fe692c1131ea00291af4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0c:4b:59:dc:63:93:a7:00:36:05:26:85:78: 30:21:13:ec:b6:ed:66:17:76:ec:c4:91:2f:3c:ea: 6f:6f:dd:bb:8b:95:e8:69:2c:02:24:41:a8:11:6d: 50:24:8f:ce:94:b5:92:8b:98:ab:56:49:1e:8d:2e: 14:32:e3:a1:90:dc:1a:97:2b:67:f3:7a:58:bc:4f: d5:a8:ce:07:81:ca:64:33:f6:c9:34:0e:82:61:44: bf:0c:f2:27:61:6f:c8:5a:7a:f6:de:19:fb:ec:d1: 5c:8e:d8:ea:8d:5d:38:f8:e9:12:31:f0:13:01:2e: 1d:9c:83:21:41:8d:f9:b2:1b:de:bb:35:4a:5f:ee: 5e:c9:99:fa:4e:4c:59:c0:54:41:cc:19:81:84:18: 8a:af:d0:e6:80:a0:be:8d:7f:a9:3b:be:84:f2:3b: 93:26:52:8e:9c:e2:0f:6f:6a:28:80:c4:f2:28:3e: f9:fd:6b:fd:b4:df:98:b5:3c:6b:0e:08:c5:96:8b: 9e:f8:42:79:3d:2d:46:d6:c9:34:9c:f9:31:75:ff: bb:f0:d4:1b:55:13:e4:89:e9:5b:c8:71:38:99:20: 11:d5:1d:85:80:79:28:28:36:ec:7d:66:97:09:0d: 74:b6:60:a6:8d:16:f7:c2:e6:ed:9b:ef:58:10:26: 34:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B5:23:AF:55:2F:96:41:7C:9F:E6:92:C1:13:1E:A0:02:91:AF:4F X509v3 Authority Key Identifier: keyid:5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/CbUjr1UvlkF8n-aSwRMeoAKRr08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.221.224.0/22 IPv6: 2a0c:5000::/30 Signature Algorithm: sha256WithRSAEncryption 4a:49:bf:53:74:e0:3f:13:52:7d:66:92:2b:4e:d3:a9:82:4f: a1:86:23:70:61:cb:af:32:1d:f0:d3:e1:f3:55:93:25:a7:28: 8b:f2:1f:48:8b:17:67:65:e1:45:9f:e1:6f:63:d8:6b:17:59: f3:f2:9c:ae:3d:6d:67:52:79:18:3e:ee:92:04:1e:b3:88:c9: 58:f9:82:cd:55:d8:fe:d3:46:de:8e:0f:64:d5:10:77:94:86: a0:5c:74:22:93:7f:2b:c3:e2:c2:1a:ed:18:1c:46:cb:6d:85: 35:5f:c3:d3:0b:15:66:55:90:2b:0c:b7:a2:bd:84:66:19:1d: ad:4a:68:ab:de:99:1a:99:28:d1:cd:09:b6:03:3d:34:d4:9e: 46:48:7a:21:a4:3b:86:c0:8b:0b:cf:e8:99:ad:94:16:a9:5b: 7f:02:61:69:93:e0:d3:31:04:24:dd:71:ab:29:80:51:56:b4: 79:8e:cf:03:3f:13:e2:6f:03:7d:5b:e6:b3:7d:b7:5b:ca:37: 1a:0e:bc:2c:c9:34:86:96:e2:19:e5:8f:16:53:fb:c1:30:37: 7c:37:6d:2e:ea:ce:f8:a7:4f:60:86:ff:64:3e:0b:5e:c2:e3: a3:3a:3d:09:07:90:d9:ea:89:b1:0a:06:d6:25:f7:7e:d7:61: d6:48:75:dd -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+p1fHDSWSi/XQ63IcfAfRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYWI0NTZhMDUxZDRhOTM3ODhiZWY0ZmFjMGQwN2JkYzBj OWYwY2YwHhcNMjYwMTAyMTIyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWI1MjNhZjU1MmY5NjQxN2M5ZmU2OTJjMTEzMWVhMDAyOTFhZjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswxLWdxjk6cANgUmhXgwIRPstu1m F3bsxJEvPOpvb927i5XoaSwCJEGoEW1QJI/OlLWSi5irVkkejS4UMuOhkNwalytn 83pYvE/VqM4HgcpkM/bJNA6CYUS/DPInYW/IWnr23hn77NFcjtjqjV04+OkSMfAT AS4dnIMhQY35shveuzVKX+5eyZn6TkxZwFRBzBmBhBiKr9DmgKC+jX+pO76E8juT JlKOnOIPb2oogMTyKD75/Wv9tN+YtTxrDgjFloue+EJ5PS1G1sk0nPkxdf+78NQb VRPkielbyHE4mSAR1R2FgHkoKDbsfWaXCQ10tmCmjRb3wubtm+9YECY0nwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAm1I69VL5ZBfJ/mksETHqACka9PMB8GA1UdIwQY MBaAFF2rRWoFHUqTeIvvT6wNB73AyfDPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGF0RmFnVWRTcE40aS05UHJBMEh2Y0RKOE04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84ZDM4OTUtNjVjMi00YjhlLWE1NDct OGFkNzRjYzZhNmI5LzEvQ2JVanIxVXZsa0Y4bi1hU3dSTWVvQUtScjA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi84ZDM4OTUtNjVjMi00YjhlLWE1NDctOGFkNzRjYzZhNmI5 LzEvWGF0RmFnVWRTcE40aS05UHJBMEh2Y0RKOE04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCud3gMA0E AgACMAcDBQIqDFAAMA0GCSqGSIb3DQEBCwUAA4IBAQBKSb9TdOA/E1J9ZpIrTtOp gk+hhiNwYcuvMh3w0+HzVZMlpyiL8h9IixdnZeFFn+FvY9hrF1nz8pyuPW1nUnkY Pu6SBB6ziMlY+YLNVdj+00bejg9k1RB3lIagXHQik38rw+LCGu0YHEbLbYU1X8PT CxVmVZArDLeivYRmGR2tSmir3pkamSjRzQm2Az001J5GSHohpDuGwIsLz+iZrZQW qVt/AmFpk+DTMQQk3XGrKYBRVrR5js8DPxPibwN9W+azfbdbyjcaDrwsyTSGluIZ 5Y8WU/vBMDd8N20u6s74p09ghv9kPgtewuOjOj0JB5DZ6omxCgbWJfd+12HWSHXd -----END CERTIFICATE-----Generated at Mon Feb 9 18:38:10 2026 by rpki-client