This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/U_-2UYbUafidz0RvuYiVijfVX6M.roa File: U_-2UYbUafidz0RvuYiVijfVX6M.roa (raw, json) Hash identifier: ZQqMuemSiQ1z6tjxPqoZVYUGHROLqLybPtB8D6Kleus= Subject key identifier: 53:FF:B6:51:86:D4:69:F8:9D:CF:44:6F:B9:88:95:8A:37:D5:5F:A3 Certificate issuer: /CN=110aaf9016a68752fc9132149b91e8fab16e24be Certificate serial: 019B7F152F8D102829E0287F68B902E0EA91 Authority key identifier: 11:0A:AF:90:16:A6:87:52:FC:91:32:14:9B:91:E8:FA:B1:6E:24:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/U_-2UYbUafidz0RvuYiVijfVX6M.roa Signing time: Fri 02 Jan 2026 14:20:53 +0000 ROA not before: Fri 02 Jan 2026 14:20:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47755 IP address blocks: 45.90.164.0/22 maxlen: 24 2a0e:2c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:2f:8d:10:28:29:e0:28:7f:68:b9:02:e0:ea:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=110aaf9016a68752fc9132149b91e8fab16e24be Validity Not Before: Jan 2 14:20:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53ffb65186d469f89dcf446fb988958a37d55fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1b:29:cb:86:64:d6:bf:22:dc:0c:12:2e:3e: 0a:00:89:4f:6d:07:55:7a:ae:e0:f0:2b:a6:45:db: 39:a6:5e:85:98:52:0b:88:51:34:ad:ca:e9:ff:58: e4:87:77:8c:e1:d0:fd:99:06:78:95:95:a9:18:28: ac:46:10:81:f4:cc:0c:11:7d:d1:5f:8d:94:88:c7: 37:eb:f2:bc:e6:b2:fa:bf:26:1e:dd:5a:0e:a6:d4: 95:12:b1:74:0c:92:f2:7a:b4:de:34:37:b7:d8:14: 7c:4e:f9:f6:8f:13:cd:a6:d6:24:36:a5:1b:f0:88: f1:5c:25:ab:1c:c0:11:48:4f:0a:a1:b3:79:25:84: b7:0d:7e:c6:70:63:db:1f:8e:aa:9b:a7:1e:ad:5a: 6d:02:5a:19:cd:e2:08:61:18:fa:35:c4:ee:3b:74: 24:d6:ff:29:95:e3:01:09:d5:77:df:6a:3a:b9:c5: dd:67:e7:d6:ad:d2:8c:b8:91:cb:e7:fd:11:4c:49: 7d:23:50:e1:1c:fb:85:21:f7:b1:c9:65:97:63:7f: 74:74:d0:cc:29:2a:21:c5:a3:93:19:05:09:8a:88: 96:90:5d:49:5a:fa:ea:47:65:74:30:cb:a0:f4:e6: eb:97:d6:e0:b8:c5:2e:c4:07:35:37:cb:ef:b7:9f: b2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:FF:B6:51:86:D4:69:F8:9D:CF:44:6F:B9:88:95:8A:37:D5:5F:A3 X509v3 Authority Key Identifier: keyid:11:0A:AF:90:16:A6:87:52:FC:91:32:14:9B:91:E8:FA:B1:6E:24:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/U_-2UYbUafidz0RvuYiVijfVX6M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.164.0/22 IPv6: 2a0e:2c0::/29 Signature Algorithm: sha256WithRSAEncryption ae:fd:9a:d2:c2:d3:71:cf:97:72:88:01:55:db:5f:89:e7:93: 13:66:26:a8:eb:5c:cb:00:c5:d0:f5:35:54:88:f2:18:f7:54: 32:fb:e1:af:92:fe:b5:f1:f8:50:3f:d4:20:f9:c6:27:1a:54: f1:7e:7c:79:b6:a3:71:e3:c4:62:04:0f:2f:3b:60:67:b0:fb: 7e:53:4f:56:d7:9f:6a:2a:6c:e1:95:a8:4e:88:02:69:65:c9: b0:bb:ae:22:54:07:0d:2f:3c:81:b5:0b:48:ca:7c:72:61:96: 0f:0c:11:4a:89:f6:4f:3a:48:14:64:07:93:3b:34:c1:d5:c0: c4:05:6b:26:2f:9d:03:60:df:60:bc:30:d3:ff:7d:4f:ed:3e: 03:3d:9f:3b:ae:84:cb:35:e6:45:71:1f:b9:10:5d:f0:93:3f: 91:85:53:0a:a5:20:29:3d:11:79:b6:7d:61:e7:52:d4:87:84: 6d:1d:a6:4b:74:73:8c:25:5c:72:99:4f:8b:2e:a6:b0:e6:71: 7b:df:1d:ab:47:8c:96:53:24:ed:a8:09:a9:cd:4e:fb:80:34: 60:1e:d6:ee:55:62:9d:95:e5:48:d6:c8:93:50:11:fa:5a:f3: eb:a8:9c:a8:33:88:da:63:fe:ad:ee:ea:21:05:f2:1d:f6:57: c2:6b:9a:ea -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FS+NECgp4Ch/aLkC4OqRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMGFhZjkwMTZhNjg3NTJmYzkxMzIxNDliOTFlOGZhYjE2 ZTI0YmUwHhcNMjYwMTAyMTQyMDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2ZmYjY1MTg2ZDQ2OWY4OWRjZjQ0NmZiOTg4OTU4YTM3ZDU1ZmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xspy4Zk1r8i3AwSLj4KAIlPbQdV eq7g8CumRds5pl6FmFILiFE0rcrp/1jkh3eM4dD9mQZ4lZWpGCisRhCB9MwMEX3R X42UiMc36/K85rL6vyYe3VoOptSVErF0DJLyerTeNDe32BR8Tvn2jxPNptYkNqUb 8IjxXCWrHMARSE8KobN5JYS3DX7GcGPbH46qm6cerVptAloZzeIIYRj6NcTuO3Qk 1v8pleMBCdV332o6ucXdZ+fWrdKMuJHL5/0RTEl9I1DhHPuFIfexyWWXY390dNDM KSohxaOTGQUJioiWkF1JWvrqR2V0MMug9Obrl9bguMUuxAc1N8vvt5+yJwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFP/tlGG1Gn4nc9Eb7mIlYo31V+jMB8GA1UdIwQY MBaAFBEKr5AWpodS/JEyFJuR6PqxbiS+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVFxdmtCYW1oMUw4a1RJVW01SG8tckZ1Skw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9lNDExZTgtMGRjNi00NmUyLWIzYTct ZDBkZWJjZmZmZDc2LzEvVV8tMlVZYlVhZmlkejBSdnVZaVZpamZWWDZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9lNDExZTgtMGRjNi00NmUyLWIzYTctZDBkZWJjZmZmZDc2 LzEvRVFxdmtCYW1oMUw4a1RJVW01SG8tckZ1Skw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLVqkMA0E AgACMAcDBQMqDgLAMA0GCSqGSIb3DQEBCwUAA4IBAQCu/ZrSwtNxz5dyiAFV21+J 55MTZiao61zLAMXQ9TVUiPIY91Qy++Gvkv618fhQP9Qg+cYnGlTxfnx5tqNx48Ri BA8vO2BnsPt+U09W159qKmzhlahOiAJpZcmwu64iVAcNLzyBtQtIynxyYZYPDBFK ifZPOkgUZAeTOzTB1cDEBWsmL50DYN9gvDDT/31P7T4DPZ87roTLNeZFcR+5EF3w kz+RhVMKpSApPRF5tn1h51LUh4RtHaZLdHOMJVxymU+LLqaw5nF73x2rR4yWUyTt qAmpzU77gDRgHtbuVWKdleVI1siTUBH6WvPrqJyoM4jaY/6t7uohBfId9lfCa5rq -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:39 2026 by rpki-client