This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/nUBRGA1FEWK-usieosyBaTq-H8Q.roa File: nUBRGA1FEWK-usieosyBaTq-H8Q.roa (raw, json) Hash identifier: vDMG9fme7VB9AauE97OnMRGk4k7A0gMGf6ktOmefSMw= Subject key identifier: 9D:40:51:18:0D:45:11:62:BE:BA:C8:9E:A2:CC:81:69:3A:BE:1F:C4 Certificate issuer: /CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759 Certificate serial: 019B77C7387249F71024ED46013FC9E104EE Authority key identifier: AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/nUBRGA1FEWK-usieosyBaTq-H8Q.roa Signing time: Thu 01 Jan 2026 04:18:23 +0000 ROA not before: Thu 01 Jan 2026 04:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200017 IP address blocks: 45.91.33.0/24 maxlen: 24 45.91.35.0/24 maxlen: 24 45.94.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:38:72:49:f7:10:24:ed:46:01:3f:c9:e1:04:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759 Validity Not Before: Jan 1 04:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d4051180d451162bebac89ea2cc81693abe1fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:44:dd:20:5f:fa:00:07:4f:0e:ac:c6:cf:a6: fc:f6:bd:64:70:71:f4:10:67:e0:35:87:89:0a:d0: 89:1e:52:eb:70:32:c5:53:7b:d2:90:9f:bc:cb:e0: 6a:07:d9:25:bf:3b:7e:f3:50:6d:1c:2c:a8:cb:56: 83:28:6e:b9:11:c8:b3:19:b9:17:01:28:99:ee:2f: 45:d7:45:9e:46:38:af:d9:9e:ca:42:3c:6e:3b:92: e7:57:8e:17:e1:52:25:46:8c:59:84:0e:df:d8:28: 2e:fc:be:a0:ac:68:7b:cd:50:7b:d0:d3:ca:f9:08: 5e:ee:bb:bc:34:c2:67:d7:eb:d3:13:d4:37:b4:d9: 76:bc:c7:31:99:eb:cf:84:60:77:9a:5a:e1:9d:c3: e3:66:af:06:ea:aa:79:e2:ac:34:6a:b4:ba:03:8c: b5:f1:6e:7b:2b:ed:f3:dd:75:4f:eb:72:91:93:6e: cf:0d:8b:03:ac:d7:f9:50:a1:9f:8e:96:d1:53:ab: ad:89:34:fc:92:db:77:2d:3b:d2:ea:ce:da:63:ec: 55:db:ad:2b:97:8a:63:c2:04:2a:33:78:57:b7:98: 5a:4a:21:37:d5:2d:b3:ae:0f:f7:ed:ee:7c:8e:af: 93:a2:a9:2f:a6:90:e5:cc:e8:1b:2d:a1:bc:e1:2c: 95:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:40:51:18:0D:45:11:62:BE:BA:C8:9E:A2:CC:81:69:3A:BE:1F:C4 X509v3 Authority Key Identifier: keyid:AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/nUBRGA1FEWK-usieosyBaTq-H8Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.33.0/24 45.91.35.0/24 45.94.239.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:64:e2:c4:ed:80:aa:77:1a:ed:ef:39:34:d3:e0:67:1d:38: 28:e3:15:df:c6:3e:4b:09:8e:bd:e4:74:5c:68:03:e9:32:51: fb:eb:09:7a:8f:d1:fb:7c:46:72:9c:4f:fc:5f:23:70:a1:09: 5b:67:9e:6f:62:2d:8a:9d:0a:66:b7:4f:27:68:7a:2f:35:80: 88:f7:39:59:a4:f3:ff:52:13:8d:00:9a:ff:d0:9f:27:f6:72: 4b:57:d5:ec:cc:82:2b:02:97:0e:9c:f9:6d:f7:de:d7:f4:21: dc:bf:66:89:67:5c:ac:13:be:28:d4:f7:44:43:10:57:25:b6: 9d:57:33:b4:3b:9d:ca:11:00:26:6e:2b:5e:43:b6:22:4c:ea: a7:e3:89:fa:ca:d2:3a:5e:6e:c0:01:2d:a7:46:dd:63:7b:ac: aa:17:48:d7:95:53:c5:a0:61:27:57:ea:6b:a3:3f:46:8e:84: f7:0d:24:94:f0:ee:2c:68:48:f0:39:fd:c1:0f:db:6d:1f:96: 95:d2:66:e6:a1:8a:1d:db:be:4c:3a:aa:eb:64:36:fd:ba:01: cd:14:60:c6:a0:92:9b:d0:d3:27:5e:eb:e5:e4:c6:d0:ab:9d: 40:38:bd:39:16:db:54:8b:26:68:83:e2:d9:cd:82:ff:dd:7b: 2c:89:61:14 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xzhySfcQJO1GAT/J4QTuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNWMyZTc0YzZkNDZjYzczYzk4YTRjMTYwODdhOGEzYjNh NmY3NTkwHhcNMjYwMTAxMDQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDQwNTExODBkNDUxMTYyYmViYWM4OWVhMmNjODE2OTNhYmUxZmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikTdIF/6AAdPDqzGz6b89r1kcHH0 EGfgNYeJCtCJHlLrcDLFU3vSkJ+8y+BqB9klvzt+81BtHCyoy1aDKG65EcizGbkX ASiZ7i9F10WeRjiv2Z7KQjxuO5LnV44X4VIlRoxZhA7f2Cgu/L6grGh7zVB70NPK +Qhe7ru8NMJn1+vTE9Q3tNl2vMcxmevPhGB3mlrhncPjZq8G6qp54qw0arS6A4y1 8W57K+3z3XVP63KRk27PDYsDrNf5UKGfjpbRU6utiTT8ktt3LTvS6s7aY+xV260r l4pjwgQqM3hXt5haSiE31S2zrg/37e58jq+ToqkvppDlzOgbLaG84SyV4wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJ1AURgNRRFivrrInqLMgWk6vh/EMB8GA1UdIwQY MBaAFK1cLnTG1GzHPJikwWCHqKOzpvdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclZ3dWRNYlViTWM4bUtUQllJZW9vN09tOTFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC81ZGEzNzUtOTlhOS00MzI5LTlkMjkt Y2VjODkzMWNlNjMxLzEvblVCUkdBMUZFV0stdXNpZW9zeUJhVHEtSDhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC81ZGEzNzUtOTlhOS00MzI5LTlkMjktY2VjODkzMWNlNjMx LzEvclZ3dWRNYlViTWM4bUtUQllJZW9vN09tOTFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVshAwQA LVsjAwQALV7vMA0GCSqGSIb3DQEBCwUAA4IBAQBeZOLE7YCqdxrt7zk00+BnHTgo 4xXfxj5LCY695HRcaAPpMlH76wl6j9H7fEZynE/8XyNwoQlbZ55vYi2KnQpmt08n aHovNYCI9zlZpPP/UhONAJr/0J8n9nJLV9XszIIrApcOnPlt997X9CHcv2aJZ1ys E74o1PdEQxBXJbadVzO0O53KEQAmbiteQ7YiTOqn44n6ytI6Xm7AAS2nRt1je6yq F0jXlVPFoGEnV+proz9GjoT3DSSU8O4saEjwOf3BD9ttH5aV0mbmoYod275MOqrr ZDb9ugHNFGDGoJKb0NMnXuvl5MbQq51AOL05FttUiyZog+LZzYL/3XssiWEU -----END CERTIFICATE-----Generated at Mon Jan 19 23:23:25 2026 by rpki-client