This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/U25KDUT1kiHXoe8sojUujuumWwg.roa File: U25KDUT1kiHXoe8sojUujuumWwg.roa (raw, json) Hash identifier: LjA3fdEdP5lLyn1Mt+zwqWJYkSdLJexwSDxARH06BxI= Subject key identifier: 53:6E:4A:0D:44:F5:92:21:D7:A1:EF:2C:A2:35:2E:8E:EB:A6:5B:08 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A336839F567901F69B1480C56308FD Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/U25KDUT1kiHXoe8sojUujuumWwg.roa Signing time: Thu 01 Jan 2026 08:18:40 +0000 ROA not before: Thu 01 Jan 2026 08:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209101 IP address blocks: 45.151.91.0/24 maxlen: 24 94.154.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:36:83:9f:56:79:01:f6:9b:14:80:c5:63:08:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=536e4a0d44f59221d7a1ef2ca2352e8eeba65b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:17:13:66:26:d7:a6:12:2b:4f:dd:b7:f8:2f: 15:15:38:a1:82:a1:8e:a5:79:2a:d9:f2:92:a3:05: 43:c8:3f:53:49:61:f7:66:64:f5:d7:6d:09:44:1d: 7a:5c:60:2e:db:a6:a6:0e:83:2a:06:75:2c:0e:a4: 15:89:a9:38:02:12:cb:f3:bf:de:53:2a:9b:e5:4d: cb:4b:2c:02:26:69:11:16:6c:e4:73:f3:fe:e2:57: 28:72:8c:9d:a3:b3:6e:f7:cf:aa:63:0d:dc:32:60: 68:75:93:64:53:f5:41:a0:80:66:c5:42:14:ad:88: 9e:30:50:22:61:6d:02:a9:dd:7b:b3:3b:18:20:9b: 5e:2b:d9:55:2e:96:a1:ba:dc:89:f5:2a:05:c5:9a: d5:17:a8:44:63:43:7b:0f:24:6c:f4:41:71:7f:7a: 27:57:4b:fb:bc:6f:75:33:70:12:e1:67:9e:6a:2a: a3:a1:f8:f5:95:19:46:ee:9c:f7:4d:d1:33:f4:b6: 81:ee:d0:a8:de:ba:b5:d8:19:c2:ba:07:79:10:fb: f2:58:b3:95:8f:41:5d:cf:ce:12:fa:ac:9a:b8:d4: ef:f2:4e:c5:5e:82:df:88:7b:0e:8f:f8:0e:c7:80: b3:a6:00:f7:45:9a:bb:d1:bb:ae:0d:68:4d:ea:65: 75:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:6E:4A:0D:44:F5:92:21:D7:A1:EF:2C:A2:35:2E:8E:EB:A6:5B:08 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/U25KDUT1kiHXoe8sojUujuumWwg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.91.0/24 94.154.172.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:91:61:17:fd:96:08:31:bd:c4:04:8c:b0:5b:0f:f8:6a:06: ee:64:74:94:25:95:44:8c:27:f1:99:36:75:0c:da:1d:b6:49: 1b:40:8e:84:11:27:13:3b:a9:5f:4f:87:e8:3d:57:8f:45:25: 3f:20:34:b1:af:27:2d:15:35:19:a5:54:0c:0c:57:9c:2e:04: a7:6d:c8:28:6c:bd:b4:c7:fe:15:41:24:89:24:41:25:2c:4e: dd:5c:7c:e0:5c:33:96:9c:74:7e:af:5f:c4:bf:a6:42:54:91: 54:81:f1:45:fc:0f:bc:48:cd:f3:69:3b:1c:6e:f7:36:e5:29: 23:85:7e:70:8c:a4:e9:ff:e9:8c:3b:4e:9f:d7:8b:68:d2:0d: e2:c2:ac:f5:8f:5c:29:7b:b8:ec:54:51:6d:32:53:6e:fb:27: 24:7c:23:ab:f0:d3:6c:3e:af:29:cc:f9:53:37:ad:5d:ac:4c: 01:02:4f:2b:88:bb:ea:cf:6c:87:60:e7:66:18:ea:82:da:32: 71:e2:94:3e:c7:f4:69:54:e4:87:4c:72:0d:79:ab:d5:24:cf: a9:b4:7f:4f:e1:28:ae:c9:e0:78:bb:62:60:5b:ad:65:23:83: af:d6:fe:43:44:6e:42:ec:1b:8b:06:d5:91:de:e0:01:10:86: 32:0f:19:63 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ozaDn1Z5AfabFIDFYwj9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzZlNGEwZDQ0ZjU5MjIxZDdhMWVmMmNhMjM1MmU4ZWViYTY1YjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBcTZibXphIrT923+C8VFTihgqGO pXkq2fKSowVDyD9TSWH3ZmT1120JRB16XGAu26amDoMqBnUsDqQViak4AhLL87/e Uyqb5U3LSywCJmkRFmzkc/P+4lcocoydo7Nu98+qYw3cMmBodZNkU/VBoIBmxUIU rYieMFAiYW0Cqd17szsYIJteK9lVLpahutyJ9SoFxZrVF6hEY0N7DyRs9EFxf3on V0v7vG91M3AS4Weeaiqjofj1lRlG7pz3TdEz9LaB7tCo3rq12BnCugd5EPvyWLOV j0Fdz84S+qyauNTv8k7FXoLfiHsOj/gOx4CzpgD3RZq70buuDWhN6mV1uwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFNuSg1E9ZIh16HvLKI1Lo7rplsIMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvVTI1S0RVVDFraUhYb2U4c29qVXVqdXVtV3dnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZdbAwQA XpqsMA0GCSqGSIb3DQEBCwUAA4IBAQAbkWEX/ZYIMb3EBIywWw/4agbuZHSUJZVE jCfxmTZ1DNodtkkbQI6EEScTO6lfT4foPVePRSU/IDSxryctFTUZpVQMDFecLgSn bcgobL20x/4VQSSJJEElLE7dXHzgXDOWnHR+r1/Ev6ZCVJFUgfFF/A+8SM3zaTsc bvc25SkjhX5wjKTp/+mMO06f14to0g3iwqz1j1wpe7jsVFFtMlNu+yckfCOr8NNs Pq8pzPlTN61drEwBAk8riLvqz2yHYOdmGOqC2jJx4pQ+x/RpVOSHTHINeavVJM+p tH9P4SiuyeB4u2JgW61lI4Ov1v5DRG5C7BuLBtWR3uABEIYyDxlj -----END CERTIFICATE-----Generated at Fri Jan 2 12:07:22 2026 by rpki-client