This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/U492z7CM5jVf-t4QvcE9_urW2ow.roa File: U492z7CM5jVf-t4QvcE9_urW2ow.roa (raw, json) Hash identifier: /jlkTTrD37FHNPsTnKi/FAkBYiZarctFzNrBmLp88kk= Subject key identifier: 53:8F:76:CF:B0:8C:E6:35:5F:FA:DE:10:BD:C1:3D:FE:EA:D6:DA:8C Certificate issuer: /CN=43acc2f2be1a36b089216544d23c95ace232e143 Certificate serial: 019B7EA4EBCF5D34538146C0159930997D21 Authority key identifier: 43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/U492z7CM5jVf-t4QvcE9_urW2ow.roa Signing time: Fri 02 Jan 2026 12:18:16 +0000 ROA not before: Fri 02 Jan 2026 12:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57154 IP address blocks: 5.10.8.0/21 maxlen: 24 31.47.80.0/21 maxlen: 24 88.133.248.0/21 maxlen: 24 185.36.44.0/22 maxlen: 24 185.80.168.0/22 maxlen: 24 213.152.96.0/19 maxlen: 24 2a03:80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:eb:cf:5d:34:53:81:46:c0:15:99:30:99:7d:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43acc2f2be1a36b089216544d23c95ace232e143 Validity Not Before: Jan 2 12:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=538f76cfb08ce6355ffade10bdc13dfeead6da8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:33:6d:0d:10:55:48:95:62:28:39:e2:d6:96: a1:06:a2:93:53:c4:54:f4:f4:06:94:10:25:19:ea: c2:d6:ca:8e:37:82:33:d8:9d:7d:f8:56:84:e8:ee: 7e:a3:0d:38:72:3a:be:f8:3c:39:95:c1:f0:bd:b2: 4c:8b:af:c7:45:69:cb:43:cb:42:dc:ea:e5:8f:09: 6b:31:ee:df:bf:22:4f:39:83:0a:fb:00:b3:a5:73: 9f:ee:d7:72:ac:f0:0b:8f:b8:5d:8d:73:77:67:10: fa:dc:92:3d:94:5c:74:9f:0d:ab:94:27:94:29:29: a4:9f:eb:10:0e:c1:6f:bd:72:b8:41:ea:81:cb:ae: c1:be:e3:3a:18:a8:6e:76:77:a6:08:29:73:12:c3: 6a:8a:14:6e:54:d6:89:02:fd:f2:e5:75:c6:9b:89: 68:72:e3:98:70:d4:f7:be:44:72:89:69:da:f6:99: 54:f5:b3:b5:9a:03:52:86:2b:ac:82:17:48:8b:72: 3c:d5:11:d0:86:09:d2:4e:d3:bc:53:90:2e:f5:48: 90:ce:87:d6:72:68:ea:5a:72:30:f0:46:5e:c2:44: 6f:49:93:80:c0:22:58:fa:83:4d:bf:6d:40:e9:79: 01:a7:cf:9e:b9:f0:d0:5f:fc:d9:5e:2b:05:65:69: a0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:8F:76:CF:B0:8C:E6:35:5F:FA:DE:10:BD:C1:3D:FE:EA:D6:DA:8C X509v3 Authority Key Identifier: keyid:43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/U492z7CM5jVf-t4QvcE9_urW2ow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.10.8.0/21 31.47.80.0/21 88.133.248.0/21 185.36.44.0/22 185.80.168.0/22 213.152.96.0/19 IPv6: 2a03:80::/32 Signature Algorithm: sha256WithRSAEncryption 71:0f:9a:09:09:49:5e:e7:db:5a:f8:0c:cd:1e:0d:84:72:04: ed:63:68:2e:c7:e7:4d:45:98:48:1d:a3:96:17:34:81:d2:ca: 9a:e4:a7:47:f1:0e:1e:66:ca:ce:71:ab:db:d8:e5:17:d3:25: 25:2a:75:c9:18:5e:67:57:96:8d:21:f2:5c:a9:53:b4:41:81: f5:9d:f5:76:54:eb:b3:7d:f0:3d:07:81:80:f4:15:84:e7:53: 43:23:72:1d:d6:98:b7:70:72:9e:db:4b:6a:1d:bb:46:eb:24: fa:f6:75:46:da:25:74:b5:71:c5:62:41:b5:35:61:3c:8b:00: 3c:d3:0b:6d:ff:aa:ff:f6:34:2f:bc:bc:8f:b8:9e:93:16:75: d8:ab:4c:5c:76:93:5d:ba:80:c1:2f:c5:cb:86:8b:76:6c:db: 4b:ed:ff:8e:aa:5b:79:15:e0:2b:2c:51:d2:a9:f8:7a:8f:44: 32:a3:e0:ce:5e:82:e1:a6:cc:ea:27:d8:dd:d2:63:1c:c1:e7: d5:4e:6a:97:c4:9d:c5:a7:dd:e0:c0:53:72:fc:47:b2:aa:0c: 35:94:11:85:8c:a6:76:57:29:f2:7a:2e:3e:9f:8f:a6:85:2d: 60:e0:ef:e9:a3:cb:4c:6b:9b:29:ac:9e:39:d1:41:77:ea:b5: 74:92:6c:9f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt+pOvPXTRTgUbAFZkwmX0hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYWNjMmYyYmUxYTM2YjA4OTIxNjU0NGQyM2M5NWFjZTIz MmUxNDMwHhcNMjYwMTAyMTIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzhmNzZjZmIwOGNlNjM1NWZmYWRlMTBiZGMxM2RmZWVhZDZkYThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TNtDRBVSJViKDni1pahBqKTU8RU 9PQGlBAlGerC1sqON4Iz2J19+FaE6O5+ow04cjq++Dw5lcHwvbJMi6/HRWnLQ8tC 3OrljwlrMe7fvyJPOYMK+wCzpXOf7tdyrPALj7hdjXN3ZxD63JI9lFx0nw2rlCeU KSmkn+sQDsFvvXK4QeqBy67BvuM6GKhudnemCClzEsNqihRuVNaJAv3y5XXGm4lo cuOYcNT3vkRyiWna9plU9bO1mgNShiusghdIi3I81RHQhgnSTtO8U5Au9UiQzofW cmjqWnIw8EZewkRvSZOAwCJY+oNNv21A6XkBp8+eufDQX/zZXisFZWmg2QIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFFOPds+wjOY1X/reEL3BPf7q1tqMMB8GA1UdIwQY MBaAFEOswvK+GjawiSFlRNI8laziMuFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTZ6QzhyNGFOckNKSVdWRTBqeVZyT0l5NFVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9lYWNkNDgtNzZlYS00ZWM3LWExNDEt ZjUyMDE2NThmYTE0LzEvVTQ5Mno3Q001alZmLXQ0UXZjRTlfdXJXMm93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9lYWNkNDgtNzZlYS00ZWM3LWExNDEtZjUyMDE2NThmYTE0 LzEvUTZ6QzhyNGFOckNKSVdWRTBqeVZyT0l5NFVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDBQoIAwQD Hy9QAwQDWIX4AwQCuSQsAwQCuVCoAwQF1ZhgMA0EAgACMAcDBQAqAwCAMA0GCSqG SIb3DQEBCwUAA4IBAQBxD5oJCUle59ta+AzNHg2EcgTtY2gux+dNRZhIHaOWFzSB 0sqa5KdH8Q4eZsrOcavb2OUX0yUlKnXJGF5nV5aNIfJcqVO0QYH1nfV2VOuzffA9 B4GA9BWE51NDI3Id1pi3cHKe20tqHbtG6yT69nVG2iV0tXHFYkG1NWE8iwA80wtt /6r/9jQvvLyPuJ6TFnXYq0xcdpNduoDBL8XLhot2bNtL7f+Oqlt5FeArLFHSqfh6 j0Qyo+DOXoLhpszqJ9jd0mMcwefVTmqXxJ3Fp93gwFNy/Eeyqgw1lBGFjKZ2Vyny ei4+n4+mhS1g4O/po8tMa5sprJ450UF36rV0kmyf -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:28 2026 by rpki-client