This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/U5LwFLNFwIzSSkxpdpnTKouxi20.roa File: U5LwFLNFwIzSSkxpdpnTKouxi20.roa (raw, json) Hash identifier: ovCIG9r02PFi/FWVt8o3at5aILc9+LJLTQmUSraYt70= Subject key identifier: 53:92:F0:14:B3:45:C0:8C:D2:4A:4C:69:76:99:D3:2A:8B:B1:8B:6D Certificate issuer: /CN=83885e38ac77cac044829b53cb3b25abe61e9f64 Certificate serial: 019B7DCB31EC24E6AF1AB27B7C3F5D6C5A21 Authority key identifier: 83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/U5LwFLNFwIzSSkxpdpnTKouxi20.roa Signing time: Fri 02 Jan 2026 08:20:27 +0000 ROA not before: Fri 02 Jan 2026 08:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197730 IP address blocks: 185.142.129.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 17:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:31:ec:24:e6:af:1a:b2:7b:7c:3f:5d:6c:5a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83885e38ac77cac044829b53cb3b25abe61e9f64 Validity Not Before: Jan 2 08:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5392f014b345c08cd24a4c697699d32a8bb18b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9e:54:db:19:35:e9:34:4a:19:e9:ce:cb:f4: 60:87:62:a0:0f:f2:2c:cb:78:38:24:17:95:2d:74: 8c:84:32:2e:17:a5:62:50:c1:0c:33:55:43:58:7a: 09:03:35:85:49:e4:0a:30:0e:97:a8:02:7a:40:6b: 8d:d5:36:85:3f:aa:d0:ab:3d:73:d3:7e:8e:f2:59: 01:d3:e1:c7:da:fc:59:9e:af:22:c5:cb:f5:f2:5d: 11:a0:9a:5f:de:26:72:fb:2a:06:ea:77:fa:8a:92: 84:66:e5:a2:69:18:7b:7e:c8:3f:c9:d7:19:4d:9e: d3:ed:20:0e:b7:50:8a:24:9f:51:61:6f:77:57:12: 1a:6b:ee:ce:52:74:d0:9c:33:08:6d:10:dd:7b:cd: 10:0d:a7:9d:95:df:70:2b:7a:50:91:eb:77:76:6e: 21:42:14:85:29:48:03:09:3f:b0:8b:db:60:c6:f9: 8b:a2:9f:c1:6a:a9:1c:75:d8:66:c2:92:ed:34:87: c9:ff:ed:22:e2:1a:11:58:d6:ad:b2:ec:22:ca:8b: 78:da:e6:4d:f5:64:f1:7b:bc:b9:62:c6:e1:7e:d8: 1d:d0:66:20:42:0d:8d:66:d7:1e:d8:af:77:db:ee: 03:1f:94:18:d7:18:8e:15:b0:19:b3:85:3e:71:03: 2e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:92:F0:14:B3:45:C0:8C:D2:4A:4C:69:76:99:D3:2A:8B:B1:8B:6D X509v3 Authority Key Identifier: keyid:83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/U5LwFLNFwIzSSkxpdpnTKouxi20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.142.129.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:40:4f:90:41:94:14:87:b3:6d:b5:f0:16:e4:57:70:cd:75: 6b:a6:0d:a2:d7:5d:de:83:51:5f:eb:c0:a0:92:ff:a9:20:80: 3f:b2:d2:4e:f8:58:1f:ce:c7:9b:81:e5:43:5e:39:06:77:a4: 3c:23:dc:23:42:73:9a:6b:df:a6:47:a7:aa:79:66:ee:2f:b2: 66:2d:57:c4:05:99:26:7b:05:23:21:8c:f1:cf:1d:62:14:ce: bf:60:f9:93:79:2b:f0:0f:67:14:9e:a1:8f:64:e2:4b:d7:a7: 3b:a7:cb:bb:1c:bc:40:8c:f6:30:91:61:08:c2:72:e8:8b:8f: af:a4:cc:fe:82:6c:95:04:1f:b0:57:64:28:6e:33:4c:c9:ad: 09:de:c6:c8:58:0a:22:90:8e:c6:e2:a5:b3:c9:83:70:ab:92: 48:4c:18:40:69:a3:7d:13:85:5b:09:75:ec:98:8e:59:41:7d: 40:59:2a:39:1c:59:68:be:72:d3:80:7c:dd:3c:42:af:f0:c9: cb:97:07:1a:2e:6e:5a:30:1d:61:be:41:b4:a3:b8:43:f7:b4: bc:e7:a8:3e:1e:ff:eb:f6:52:f3:12:71:ca:5b:42:01:20:f3: 62:4f:ba:08:7b:8a:b7:53:4f:e4:39:87:32:cc:fb:bb:e5:89: 71:03:9d:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yzHsJOavGrJ7fD9dbFohMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzODg1ZTM4YWM3N2NhYzA0NDgyOWI1M2NiM2IyNWFiZTYx ZTlmNjQwHhcNMjYwMTAyMDgyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzkyZjAxNGIzNDVjMDhjZDI0YTRjNjk3Njk5ZDMyYThiYjE4YjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ5U2xk16TRKGenOy/Rgh2KgD/Is y3g4JBeVLXSMhDIuF6ViUMEMM1VDWHoJAzWFSeQKMA6XqAJ6QGuN1TaFP6rQqz1z 036O8lkB0+HH2vxZnq8ixcv18l0RoJpf3iZy+yoG6nf6ipKEZuWiaRh7fsg/ydcZ TZ7T7SAOt1CKJJ9RYW93VxIaa+7OUnTQnDMIbRDde80QDaedld9wK3pQket3dm4h QhSFKUgDCT+wi9tgxvmLop/BaqkcddhmwpLtNIfJ/+0i4hoRWNatsuwiyot42uZN 9WTxe7y5Ysbhftgd0GYgQg2NZtce2K932+4DH5QY1xiOFbAZs4U+cQMunwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFOS8BSzRcCM0kpMaXaZ0yqLsYttMB8GA1UdIwQY MBaAFIOIXjisd8rARIKbU8s7JavmHp9kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzRoZU9LeDN5c0JFZ3B0VHl6c2xxLVllbjJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC80NjM2ODYtY2U0OC00ODdjLWJjM2Qt YTJmNTllYWU4NmQwLzEvVTVMd0ZMTkZ3SXpTU2t4cGRwblRLb3V4aTIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC80NjM2ODYtY2U0OC00ODdjLWJjM2QtYTJmNTllYWU4NmQw LzEvZzRoZU9LeDN5c0JFZ3B0VHl6c2xxLVllbjJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuY6BMA0G CSqGSIb3DQEBCwUAA4IBAQA6QE+QQZQUh7NttfAW5FdwzXVrpg2i113eg1Ff68Cg kv+pIIA/stJO+FgfzsebgeVDXjkGd6Q8I9wjQnOaa9+mR6eqeWbuL7JmLVfEBZkm ewUjIYzxzx1iFM6/YPmTeSvwD2cUnqGPZOJL16c7p8u7HLxAjPYwkWEIwnLoi4+v pMz+gmyVBB+wV2QobjNMya0J3sbIWAoikI7G4qWzyYNwq5JITBhAaaN9E4VbCXXs mI5ZQX1AWSo5HFlovnLTgHzdPEKv8MnLlwcaLm5aMB1hvkG0o7hD97S856g+Hv/r 9lLzEnHKW0IBIPNiT7oIe4q3U0/kOYcyzPu75YlxA53r -----END CERTIFICATE-----Generated at Mon Jan 12 01:17:29 2026 by rpki-client