This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/U8WN1zqZlitTPF__hjyiuUy0R1c.roa File: U8WN1zqZlitTPF__hjyiuUy0R1c.roa (raw, json) Hash identifier: mDHRfN2i8bM/0SSYCQob7Dr24tBbE96JKVBgc95p8M4= Subject key identifier: 53:C5:8D:D7:3A:99:96:2B:53:3C:5F:FF:86:3C:A2:B9:4C:B4:47:57 Certificate issuer: /CN=1a001d77025f052af7d0e62e1701016b9e22e002 Certificate serial: 019B7A5A8D7B0CBEA57C1BD2B350A7EFAE6B Authority key identifier: 1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/U8WN1zqZlitTPF__hjyiuUy0R1c.roa Signing time: Thu 01 Jan 2026 16:18:33 +0000 ROA not before: Thu 01 Jan 2026 16:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31043 IP address blocks: 185.218.44.0/22 maxlen: 22 2a0c:8b00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:8d:7b:0c:be:a5:7c:1b:d2:b3:50:a7:ef:ae:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a001d77025f052af7d0e62e1701016b9e22e002 Validity Not Before: Jan 1 16:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53c58dd73a99962b533c5fff863ca2b94cb44757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d8:ae:a8:dd:3e:0b:b5:d2:f3:9d:d7:fd:0b: 30:fc:f2:21:0b:62:7a:02:34:eb:33:dd:1c:04:d0: c8:91:08:34:ba:6c:5c:d9:68:8c:03:f3:00:f1:b9: 32:7a:ab:20:8c:43:39:97:9d:95:10:fe:3f:95:12: c3:23:56:fb:b5:3b:ef:fa:c8:84:c3:9e:f6:34:f6: de:d5:3f:e6:93:24:ec:0f:20:b6:da:2c:d9:7d:c1: e0:fd:2f:87:b4:f3:5c:b6:01:cc:0e:db:03:8e:e1: 01:1b:a0:57:31:87:73:81:76:76:99:df:55:f1:05: 98:9e:fc:90:b8:e1:6a:f2:09:a4:85:d7:1d:c4:59: b9:7d:be:92:96:da:0c:b0:22:d0:ba:c4:88:f4:85: 5b:a1:d0:03:3d:02:dd:67:eb:4f:e9:7c:0b:08:db: 10:5d:10:78:5b:ed:53:06:9f:0e:5e:c9:80:65:c5: a2:1a:fe:ca:57:ca:67:e2:4f:f4:42:89:9f:01:dc: 69:50:12:5a:9b:63:95:40:01:97:3e:f1:d1:a7:3c: c8:d7:32:9b:61:b7:1b:5e:4c:e3:af:b1:de:76:43: e7:dd:53:9a:51:aa:9e:28:2e:99:a8:ff:85:89:63: 02:1a:d8:bb:df:fe:ba:22:8f:0b:e5:7d:a4:87:5c: 49:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C5:8D:D7:3A:99:96:2B:53:3C:5F:FF:86:3C:A2:B9:4C:B4:47:57 X509v3 Authority Key Identifier: keyid:1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/U8WN1zqZlitTPF__hjyiuUy0R1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.218.44.0/22 IPv6: 2a0c:8b00::/32 Signature Algorithm: sha256WithRSAEncryption 24:bc:8c:a4:eb:92:39:6d:16:bd:e7:c2:46:4f:1f:37:fe:7f: 7c:9d:4c:d9:f3:2f:d3:23:f8:cd:ca:48:47:27:ed:77:62:e6: dd:db:dd:6d:06:85:ee:b1:04:8b:ba:f9:6a:02:47:f4:a5:ee: f8:96:b4:fa:b2:a0:6a:f1:30:6f:ce:2a:6e:41:98:e3:af:d8: df:78:f0:e0:78:4b:93:23:cf:3e:ad:fe:a0:d3:f2:34:c8:d0: 18:da:67:73:12:9b:b8:0c:e4:bb:fa:3a:15:4e:ee:e2:e3:07: 3e:4f:b1:2b:21:8e:49:ec:11:b3:dc:4f:71:fa:16:9f:35:38: da:ce:3a:5f:01:fd:c3:20:1f:6a:a8:06:c7:7b:7d:02:c1:dd: e2:2a:0b:0a:0d:01:f3:a5:8b:24:a7:09:67:79:d5:73:9e:b7: f7:bc:54:0c:e0:da:83:35:66:f5:7c:4b:7d:02:db:ed:33:a1: 27:8a:ea:64:1d:e8:7a:7f:2e:54:43:69:1e:14:08:aa:e9:bb: d2:ef:e8:c9:68:30:f5:7e:b7:f3:28:2b:12:a1:9c:97:53:e7: a5:31:1b:46:d1:c4:28:37:e4:17:8a:9b:73:87:27:3e:9e:3a: 6c:aa:aa:b9:73:fb:e0:41:00:5b:67:97:4e:9a:92:a8:34:33: d1:a9:09:89 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6Wo17DL6lfBvSs1Cn765rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMDAxZDc3MDI1ZjA1MmFmN2QwZTYyZTE3MDEwMTZiOWUy MmUwMDIwHhcNMjYwMTAxMTYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2M1OGRkNzNhOTk5NjJiNTMzYzVmZmY4NjNjYTJiOTRjYjQ0NzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdiuqN0+C7XS853X/Qsw/PIhC2J6 AjTrM90cBNDIkQg0umxc2WiMA/MA8bkyeqsgjEM5l52VEP4/lRLDI1b7tTvv+siE w572NPbe1T/mkyTsDyC22izZfcHg/S+HtPNctgHMDtsDjuEBG6BXMYdzgXZ2md9V 8QWYnvyQuOFq8gmkhdcdxFm5fb6SltoMsCLQusSI9IVbodADPQLdZ+tP6XwLCNsQ XRB4W+1TBp8OXsmAZcWiGv7KV8pn4k/0QomfAdxpUBJam2OVQAGXPvHRpzzI1zKb YbcbXkzjr7HedkPn3VOaUaqeKC6ZqP+FiWMCGti73/66Io8L5X2kh1xJDQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFPFjdc6mZYrUzxf/4Y8orlMtEdXMB8GA1UdIwQY MBaAFBoAHXcCXwUq99DmLhcBAWueIuACMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2dBZGR3SmZCU3IzME9ZdUZ3RUJhNTRpNEFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8xZjljZWQtNmJjMi00ODZiLWE0YjYt MDliZGViNmFmYWJkLzEvVThXTjF6cVpsaXRUUEZfX2hqeWl1VXkwUjFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8xZjljZWQtNmJjMi00ODZiLWE0YjYtMDliZGViNmFmYWJk LzEvR2dBZGR3SmZCU3IzME9ZdUZ3RUJhNTRpNEFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudosMA0E AgACMAcDBQAqDIsAMA0GCSqGSIb3DQEBCwUAA4IBAQAkvIyk65I5bRa958JGTx83 /n98nUzZ8y/TI/jNykhHJ+13Yubd291tBoXusQSLuvlqAkf0pe74lrT6sqBq8TBv zipuQZjjr9jfePDgeEuTI88+rf6g0/I0yNAY2mdzEpu4DOS7+joVTu7i4wc+T7Er IY5J7BGz3E9x+hafNTjazjpfAf3DIB9qqAbHe30Cwd3iKgsKDQHzpYskpwlnedVz nrf3vFQM4NqDNWb1fEt9AtvtM6EniupkHeh6fy5UQ2keFAiq6bvS7+jJaDD1frfz KCsSoZyXU+elMRtG0cQoN+QXiptzhyc+njpsqqq5c/vgQQBbZ5dOmpKoNDPRqQmJ -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:21 2026 by rpki-client