This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1-uBktbQn9pwb5pjDfnu3g8ljre8.roa File: 1-uBktbQn9pwb5pjDfnu3g8ljre8.roa (raw, json) Hash identifier: SAN/aDv7ahvP7OjDJSLnUxdVxrpPV3TtUjbRGX5nvmM= Subject key identifier: FA:E0:64:B5:B4:27:F6:9C:1B:E6:98:C3:7E:7B:B7:83:C9:63:AD:EF Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37B8B026AD65BC8750804F6CE086A9 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1-uBktbQn9pwb5pjDfnu3g8ljre8.roa Signing time: Fri 02 Jan 2026 10:18:59 +0000 ROA not before: Fri 02 Jan 2026 10:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47377 IP address blocks: 45.150.116.0/22 maxlen: 24 185.51.54.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:b8:b0:26:ad:65:bc:87:50:80:4f:6c:e0:86:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fae064b5b427f69c1be698c37e7bb783c963adef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:64:a5:2b:52:1f:69:8c:5d:be:1c:a9:a5:37: 51:4c:e7:49:ec:be:83:99:c8:84:12:57:b9:5c:c8: 0d:07:1c:6d:37:9f:6d:5b:28:2f:8f:da:22:3d:45: 04:36:0b:f6:1c:e9:07:c8:d2:b6:e5:f3:4d:1e:c2: 9e:ec:bd:81:8e:6f:98:a5:47:db:06:9b:b1:1f:e2: ff:6e:0c:71:30:fc:da:e2:9d:bd:ad:bc:7f:6b:f6: cf:ec:bf:33:a6:c4:e9:0a:00:4a:e8:c7:9f:af:6d: 4a:13:2d:d7:6f:78:a3:e9:8e:df:b5:7d:85:16:73: ef:49:40:b7:bc:ed:90:db:b9:62:c8:7c:8d:a7:da: 1f:58:e8:f1:df:45:aa:83:7a:1b:fa:ae:6e:dd:87: cb:7a:59:d9:72:47:81:4e:7f:79:30:9e:42:ba:1c: bf:aa:24:fd:68:13:6a:e5:7e:73:00:b0:69:c3:30: 57:90:9d:41:b6:f0:b2:9c:cf:3a:00:66:76:24:fb: 9a:9e:9a:e8:55:50:81:6e:60:a8:6c:c0:e1:56:3e: e1:6e:d1:12:81:9e:bf:ce:db:44:f0:ff:f6:4a:3e: 07:5b:f2:03:3b:7b:16:28:ea:44:88:d0:e2:d7:4a: 90:2d:91:b3:6a:67:1a:81:71:fc:81:d0:91:27:d2: 68:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E0:64:B5:B4:27:F6:9C:1B:E6:98:C3:7E:7B:B7:83:C9:63:AD:EF X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/1-uBktbQn9pwb5pjDfnu3g8ljre8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.116.0/22 185.51.54.0/23 Signature Algorithm: sha256WithRSAEncryption 34:f3:41:cf:d8:56:8f:fb:c1:bf:aa:21:a5:33:75:87:ba:cb: b8:4b:ad:20:3a:62:ea:a9:46:ad:eb:e2:03:e2:ed:3e:46:41: fe:f0:a5:14:da:19:f0:dc:7b:bb:f3:36:83:50:0e:b9:a7:7a: 2c:ec:a3:48:f6:0c:4e:74:b7:52:6c:31:4b:69:4f:8c:74:c1: af:55:1d:92:82:8e:ca:c3:3c:0a:bd:88:81:84:9d:ae:34:2f: 5b:8b:57:8c:46:ff:a5:cd:dc:34:63:dd:36:69:e1:f6:2a:90: b9:9e:22:90:c2:4e:57:94:c8:78:45:5e:95:23:2b:1d:8a:3c: 7c:54:00:47:b6:ba:9f:1f:df:f1:25:c4:08:ca:62:2b:eb:2c: 7c:5b:51:65:56:38:8e:b5:7d:ca:2f:7b:ae:45:41:55:f1:72: 27:1d:37:27:ce:83:36:d4:4f:ef:81:1e:e6:7f:81:bd:af:04: f9:4c:5a:c5:18:28:5d:51:73:b4:ed:02:2b:2a:ae:94:3c:b5: f6:c4:af:96:71:3b:3d:e6:80:1b:78:cf:b7:db:21:6b:01:89: 2d:5b:5d:46:62:e6:7b:14:ff:4c:d1:6f:ce:62:e2:ad:97:8a: 12:5a:d4:77:0f:89:de:bb:96:65:b4:6c:11:c7:fd:b7:a0:2b: 1f:8a:8e:20 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt+N7iwJq1lvIdQgE9s4IapMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWUwNjRiNWI0MjdmNjljMWJlNjk4YzM3ZTdiYjc4M2M5NjNhZGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmSlK1IfaYxdvhyppTdRTOdJ7L6D mciEEle5XMgNBxxtN59tWygvj9oiPUUENgv2HOkHyNK25fNNHsKe7L2Bjm+YpUfb BpuxH+L/bgxxMPza4p29rbx/a/bP7L8zpsTpCgBK6Mefr21KEy3Xb3ij6Y7ftX2F FnPvSUC3vO2Q27liyHyNp9ofWOjx30Wqg3ob+q5u3YfLelnZckeBTn95MJ5Cuhy/ qiT9aBNq5X5zALBpwzBXkJ1BtvCynM86AGZ2JPuanproVVCBbmCobMDhVj7hbtES gZ6/zttE8P/2Sj4HW/IDO3sWKOpEiNDi10qQLZGzamcagXH8gdCRJ9JoCQIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPrgZLW0J/acG+aYw357t4PJY63vMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvMS11Qmt0YlFuOXB3YjVwakRmbnUzZzhsanJlOC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjYvMmJhOTdlLTU5OGItNDhkZC04ZDU2LWY1ZmI3MWI5YTUx Zi8xLzhFcFlCSDgzdThCWGxFdV9qSzJIUW9lVmt0by5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAi2WdAME AbkzNjANBgkqhkiG9w0BAQsFAAOCAQEANPNBz9hWj/vBv6ohpTN1h7rLuEutIDpi 6qlGreviA+LtPkZB/vClFNoZ8Nx7u/M2g1AOuad6LOyjSPYMTnS3UmwxS2lPjHTB r1UdkoKOysM8Cr2IgYSdrjQvW4tXjEb/pc3cNGPdNmnh9iqQuZ4ikMJOV5TIeEVe lSMrHYo8fFQAR7a6nx/f8SXECMpiK+ssfFtRZVY4jrV9yi97rkVBVfFyJx03J86D NtRP74Ee5n+Bva8E+UxaxRgoXVFztO0CKyqulDy19sSvlnE7PeaAG3jPt9shawGJ LVtdRmLmexT/TNFvzmLirZeKElrUdw+J3ruWZbRsEcf9t6ArH4qOIA== -----END CERTIFICATE-----Generated at Fri Jan 23 04:39:20 2026 by rpki-client