This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uLYj97tbcYWsl0wCRvPjtBWE3Ek.roa File: uLYj97tbcYWsl0wCRvPjtBWE3Ek.roa (raw, json) Hash identifier: CcKmIEFhRj0rKCBnkwKUeOjRTZus/MTauc+zZ5IYrH8= Subject key identifier: B8:B6:23:F7:BB:5B:71:85:AC:97:4C:02:46:F3:E3:B4:15:84:DC:49 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A319BA8F3AD924258F5C697BD8AC8F Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uLYj97tbcYWsl0wCRvPjtBWE3Ek.roa Signing time: Thu 01 Jan 2026 08:18:33 +0000 ROA not before: Thu 01 Jan 2026 08:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151704 IP address blocks: 45.95.3.0/24 maxlen: 24 87.121.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:19:ba:8f:3a:d9:24:25:8f:5c:69:7b:d8:ac:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8b623f7bb5b7185ac974c0246f3e3b41584dc49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4c:74:82:31:f5:0a:b1:46:ea:93:b9:51:e4: 63:b1:27:ce:31:5c:4f:e5:8b:03:0e:e8:b3:fe:9a: dd:f2:e3:ba:d4:25:0d:93:6b:8f:d1:81:b7:d0:d3: ab:17:27:a3:29:ca:74:15:1e:ef:5b:85:d5:67:1c: c6:2d:bb:58:7b:e3:92:55:d6:a2:ca:bf:d8:05:da: 3b:ee:0d:9e:e8:ec:b0:9b:19:6a:4e:af:fb:63:df: 6f:69:13:e7:8d:6f:ce:ab:34:70:f1:56:e9:82:56: 98:b3:bc:79:60:66:43:15:61:33:81:13:dc:21:0d: 65:a5:80:e9:8a:2e:cc:a7:79:46:fd:7a:ad:0c:1f: 28:75:86:20:7e:27:a9:2a:d5:d8:e8:29:8f:68:40: 5d:ad:b2:76:05:84:03:48:98:a8:8c:15:a8:90:35: d4:93:0b:3f:fa:9b:ed:6c:0f:87:4d:17:f5:c8:06: 4a:9b:3c:85:3f:a2:70:cf:8e:ec:37:40:60:dc:51: bf:62:9f:96:59:c3:3a:80:3c:86:38:7b:c7:81:4f: 58:14:b5:92:35:27:a2:ce:6f:b5:4f:00:05:15:cb: 8f:34:0e:6b:a8:e5:ab:dd:f4:50:74:6f:6d:50:77: 18:4e:42:e4:f5:14:95:b5:fa:8f:4d:0f:92:35:5d: cd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B6:23:F7:BB:5B:71:85:AC:97:4C:02:46:F3:E3:B4:15:84:DC:49 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uLYj97tbcYWsl0wCRvPjtBWE3Ek.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.3.0/24 87.121.98.0/24 Signature Algorithm: sha256WithRSAEncryption 47:26:ef:ed:07:ac:8e:b1:c6:6e:1e:a9:10:05:e7:51:04:d9: 12:74:0f:3e:fb:8a:55:90:ab:5d:a8:b7:9e:64:22:9e:15:07: 7f:23:a0:25:d2:de:02:03:09:89:d1:e0:ed:2b:de:26:e7:d0: d5:b4:9f:75:ee:b2:68:fc:bb:3f:d5:4e:25:df:7c:67:47:13: 39:72:53:81:0e:01:db:87:7d:33:83:d3:9a:f8:8d:67:fe:51: b7:df:3f:d5:01:c0:a9:2d:1b:79:d0:93:54:1b:53:4f:d0:b9: 8f:99:d2:c6:2d:80:5b:e6:02:86:b1:95:04:41:e7:6a:18:20: 26:5e:93:92:6f:f6:77:b9:9d:dd:4b:5e:36:46:cc:3a:04:ee: 39:61:63:87:d3:15:62:f0:dc:6d:2c:35:2f:0e:6e:39:3d:f8: 52:d4:80:8a:82:94:67:ba:17:d7:3a:aa:a0:03:e4:69:c8:d4: e0:cf:f6:58:e9:3d:ff:d8:a8:08:b5:27:d0:d3:3d:f1:f8:b4: 0d:69:67:96:6b:bf:64:49:f2:58:69:a2:58:ee:5d:45:6b:29: 3e:a3:3e:07:8e:45:11:d8:32:aa:ae:62:12:00:2f:41:ae:63: 21:e5:fa:aa:a2:a8:41:6c:c2:13:84:3a:8c:01:97:50:64:7f: 52:56:39:0d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4oxm6jzrZJCWPXGl72KyPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGI2MjNmN2JiNWI3MTg1YWM5NzRjMDI0NmYzZTNiNDE1ODRkYzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0x0gjH1CrFG6pO5UeRjsSfOMVxP 5YsDDuiz/prd8uO61CUNk2uP0YG30NOrFyejKcp0FR7vW4XVZxzGLbtYe+OSVdai yr/YBdo77g2e6OywmxlqTq/7Y99vaRPnjW/OqzRw8VbpglaYs7x5YGZDFWEzgRPc IQ1lpYDpii7Mp3lG/XqtDB8odYYgfiepKtXY6CmPaEBdrbJ2BYQDSJiojBWokDXU kws/+pvtbA+HTRf1yAZKmzyFP6Jwz47sN0Bg3FG/Yp+WWcM6gDyGOHvHgU9YFLWS NSeizm+1TwAFFcuPNA5rqOWr3fRQdG9tUHcYTkLk9RSVtfqPTQ+SNV3NkwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLi2I/e7W3GFrJdMAkbz47QVhNxJMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvdUxZajk3dGJjWVdzbDB3Q1J2UGp0QldFM0VrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALV8DAwQA V3liMA0GCSqGSIb3DQEBCwUAA4IBAQBHJu/tB6yOscZuHqkQBedRBNkSdA8++4pV kKtdqLeeZCKeFQd/I6Al0t4CAwmJ0eDtK94m59DVtJ917rJo/Ls/1U4l33xnRxM5 clOBDgHbh30zg9Oa+I1n/lG33z/VAcCpLRt50JNUG1NP0LmPmdLGLYBb5gKGsZUE QedqGCAmXpOSb/Z3uZ3dS142Rsw6BO45YWOH0xVi8NxtLDUvDm45PfhS1ICKgpRn uhfXOqqgA+RpyNTgz/ZY6T3/2KgItSfQ0z3x+LQNaWeWa79kSfJYaaJY7l1Fayk+ oz4HjkUR2DKqrmISAC9BrmMh5fqqoqhBbMIThDqMAZdQZH9SVjkN -----END CERTIFICATE-----Generated at Fri Jan 2 12:09:00 2026 by rpki-client