This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/U6PmbsElL-7MtijxdO0BAbrah0Q.roa File: U6PmbsElL-7MtijxdO0BAbrah0Q.roa (raw, json) Hash identifier: Ofq7OHaNVfJq1ZxKrOfI0SrMBFQRCEoouCi2oXZEPBM= Subject key identifier: 53:A3:E6:6E:C1:25:2F:EE:CC:B6:28:F1:74:ED:01:01:BA:DA:87:44 Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019B7D5CD7A62168D7038E72F1572D67C1DB Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/U6PmbsElL-7MtijxdO0BAbrah0Q.roa Signing time: Fri 02 Jan 2026 06:19:55 +0000 ROA not before: Fri 02 Jan 2026 06:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209242 IP address blocks: 31.12.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d7:a6:21:68:d7:03:8e:72:f1:57:2d:67:c1:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Jan 2 06:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53a3e66ec1252feeccb628f174ed0101bada8744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:10:62:e8:a1:1f:d3:10:6e:46:f8:08:1c:01: 41:20:f9:0c:0c:7b:ea:29:5d:a5:dc:d9:43:b4:67: 50:25:ef:3c:3a:0b:89:c6:4d:da:df:cc:72:25:c6: 99:f0:93:ee:f8:ea:4a:3a:7c:44:24:7c:e7:ca:31: f0:66:c0:0b:4f:f0:1d:7b:fd:bd:46:f3:41:09:4f: 22:d2:ac:73:7e:74:c1:fa:19:92:35:22:fd:f0:d0: e2:20:77:69:fd:d4:0a:8c:e3:c9:92:ca:6c:d8:6e: f6:a1:68:35:cc:ac:1d:e4:c7:56:21:b2:5e:3d:76: 33:e1:c3:6f:50:06:13:58:43:fc:17:89:c5:a9:cc: 56:47:0b:ad:67:2a:5e:83:04:2e:c2:62:0d:85:6c: 60:bc:43:e6:91:97:2b:7a:20:7b:2e:80:3a:56:98: d2:5f:5e:52:e3:66:70:6e:82:8d:27:a1:4b:90:e5: f0:05:68:cf:04:ed:be:e0:4c:f4:e7:6b:3c:ac:ce: 24:cd:9a:04:5e:74:ad:94:7d:25:0b:01:7b:3a:0f: 52:ac:3b:de:8c:1a:de:82:bf:8c:ca:56:e6:cf:8f: c1:a0:d6:e5:8b:26:b3:c3:65:d3:12:07:4d:93:59: 6c:bb:b9:98:53:f4:4e:83:58:ec:a8:c5:46:76:0a: 15:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A3:E6:6E:C1:25:2F:EE:CC:B6:28:F1:74:ED:01:01:BA:DA:87:44 X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/U6PmbsElL-7MtijxdO0BAbrah0Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.12.75.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:90:df:67:d1:38:4a:d0:ce:64:ad:2b:ca:1d:3d:18:32:1d: f6:36:62:cd:e5:17:19:97:7e:b5:73:f2:73:04:3d:00:71:50: b7:c4:2e:cb:bb:30:4a:d7:67:19:7c:fd:ff:d6:85:06:16:7a: cc:e2:2e:5d:4f:29:0c:08:80:d2:22:94:bf:3c:89:e6:af:23: 33:e5:ee:85:69:ff:43:61:5b:ad:23:3d:aa:93:6d:71:ed:a9: 64:1c:a5:1f:fe:24:17:a2:73:50:fb:2e:6c:a8:ed:9b:9b:6f: ce:29:ba:ff:5c:af:7a:87:18:0e:10:60:2a:57:9f:0e:38:e9: a2:b7:70:f5:03:02:70:9c:03:31:6a:20:67:db:33:95:09:4b: 83:23:7e:9c:cc:68:d0:12:c7:56:eb:a9:cb:a7:bb:ac:81:81: d8:7c:a2:bf:fe:cc:75:73:c2:12:55:40:da:1e:91:bd:30:84: c2:c2:32:49:26:9a:10:b7:af:ea:e0:03:cb:df:4f:ce:4b:1a: 7d:2e:9b:83:3b:1e:4a:f5:c9:05:d3:dd:c3:f7:7e:c8:e8:7a: b4:8d:bf:87:d5:05:cb:8a:2a:2f:7d:7d:05:fa:a4:35:b6:ed: 43:da:9d:03:f3:9b:c1:5f:c7:3a:c9:ea:f3:10:b5:44:77:16: 0f:4e:7c:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XNemIWjXA45y8VctZ8HbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjYwMTAyMDYxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2EzZTY2ZWMxMjUyZmVlY2NiNjI4ZjE3NGVkMDEwMWJhZGE4NzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRBi6KEf0xBuRvgIHAFBIPkMDHvq KV2l3NlDtGdQJe88OguJxk3a38xyJcaZ8JPu+OpKOnxEJHznyjHwZsALT/Ade/29 RvNBCU8i0qxzfnTB+hmSNSL98NDiIHdp/dQKjOPJksps2G72oWg1zKwd5MdWIbJe PXYz4cNvUAYTWEP8F4nFqcxWRwutZypegwQuwmINhWxgvEPmkZcreiB7LoA6VpjS X15S42ZwboKNJ6FLkOXwBWjPBO2+4Ez052s8rM4kzZoEXnStlH0lCwF7Og9SrDve jBregr+Mylbmz4/BoNbliyazw2XTEgdNk1lsu7mYU/ROg1jsqMVGdgoVYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFOj5m7BJS/uzLYo8XTtAQG62odEMB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvVTZQbWJzRWxMLTdNdGlqeGRPMEJBYnJhaDBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHwxLMA0G CSqGSIb3DQEBCwUAA4IBAQAdkN9n0ThK0M5krSvKHT0YMh32NmLN5RcZl361c/Jz BD0AcVC3xC7LuzBK12cZfP3/1oUGFnrM4i5dTykMCIDSIpS/PInmryMz5e6Faf9D YVutIz2qk21x7alkHKUf/iQXonNQ+y5sqO2bm2/OKbr/XK96hxgOEGAqV58OOOmi t3D1AwJwnAMxaiBn2zOVCUuDI36czGjQEsdW66nLp7usgYHYfKK//sx1c8ISVUDa HpG9MITCwjJJJpoQt6/q4APL30/OSxp9LpuDOx5K9ckF093D937I6Hq0jb+H1QXL iiovfX0F+qQ1tu1D2p0D85vBX8c6yerzELVEdxYPTnx5 -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:34 2026 by rpki-client