This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ueICjxpUglXhVGt5NanNhOvkMEY.roa File: ueICjxpUglXhVGt5NanNhOvkMEY.roa (raw, json) Hash identifier: mdimo7bcYaX/Rpy2szpLbVRVeS3EpBnIIVM9s5aoXfo= Subject key identifier: B9:E2:02:8F:1A:54:82:55:E1:54:6B:79:35:A9:CD:84:EB:E4:30:46 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15EA483CC0310EBBE55DFD8644FE6E Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ueICjxpUglXhVGt5NanNhOvkMEY.roa Signing time: Fri 02 Jan 2026 14:21:41 +0000 ROA not before: Fri 02 Jan 2026 14:21:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198361 IP address blocks: 45.9.28.0/24 maxlen: 24 45.88.138.0/24 maxlen: 24 77.83.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ea:48:3c:c0:31:0e:bb:e5:5d:fd:86:44:fe:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9e2028f1a548255e1546b7935a9cd84ebe43046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a6:94:12:71:9f:36:43:3c:8f:d4:5d:7b:39: ad:6f:ff:2c:6b:1c:23:de:72:3a:71:40:16:29:c5: 71:ba:91:24:64:f7:98:4e:f0:15:3c:b7:22:29:79: 76:b5:df:4d:54:2c:42:db:88:d8:7b:f7:4e:c3:6b: 0d:98:9e:10:08:da:a9:f0:b1:76:9a:77:0f:26:17: 41:b2:ec:e2:36:fe:31:28:21:d1:f9:a2:81:82:0f: f7:3b:c4:1d:f1:cd:8b:8e:df:ad:c5:1e:58:4b:0c: 8d:5c:83:b3:b6:23:31:f5:67:23:df:d2:7d:6d:cd: e7:81:5b:be:41:29:a5:ec:33:ec:e6:0c:61:e7:d7: bd:49:e0:5e:67:a2:78:15:33:db:25:37:3d:8a:df: 8d:e7:14:bc:3b:16:73:c3:2c:b8:cf:fa:b3:ea:e7: b8:04:6e:b8:d6:67:12:7e:96:3d:d5:75:4b:d7:ec: 42:2e:df:fd:3a:85:1f:ce:e7:3c:99:b8:fb:fd:7b: 0c:dc:7a:c1:a0:5b:23:c6:1f:f5:37:1f:6e:49:2a: 0d:37:da:c7:20:55:75:03:08:43:f4:f7:0d:23:dd: a0:dc:f1:6e:6f:b5:78:0b:f1:9b:e4:74:79:b5:a8: 6f:3f:c5:4d:82:b7:bb:e0:c4:15:a8:66:19:63:38: 1d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E2:02:8F:1A:54:82:55:E1:54:6B:79:35:A9:CD:84:EB:E4:30:46 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ueICjxpUglXhVGt5NanNhOvkMEY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.28.0/24 45.88.138.0/24 77.83.38.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:f4:89:36:4f:ca:c1:7a:08:6b:61:a3:5f:13:9e:9b:32:a4: 3d:fe:95:32:e3:8f:b5:99:b2:de:12:e0:ef:31:6d:75:8a:e7: b3:eb:37:b0:4a:89:9c:01:74:f6:54:90:25:bd:b3:1b:3f:64: 2f:d4:f9:3c:55:a6:ad:31:6f:27:ee:44:30:d9:89:d2:fd:fe: 1c:b6:99:08:ca:ad:48:8a:54:c6:6d:0a:cf:10:c5:65:c1:fc: 6e:27:a3:0f:55:ec:06:0e:16:d2:2d:01:c0:3e:4c:e6:08:02: e1:2a:88:39:c2:a8:b1:f4:a9:1d:fc:d1:07:47:cf:79:e1:f9: 70:fc:70:ad:ce:f5:d3:d7:99:b4:c4:54:d5:5a:69:43:53:a1: 02:2e:a6:aa:42:72:12:1b:06:45:b9:e8:79:88:99:5b:ab:26: bb:3d:72:4b:9b:8d:fd:be:a5:47:69:ff:f1:d4:56:ef:58:76: 76:45:79:d1:b0:39:55:43:07:22:e7:53:78:f9:1e:08:f5:f9: 27:5c:b8:f2:ed:cd:03:d4:34:65:2e:8c:fa:72:16:4e:5c:fc: 65:d8:55:d0:9f:b1:af:fd:22:e1:0b:a4:d0:e4:4d:fa:0f:fa: dd:6a:08:d3:34:8d:df:a8:38:28:14:b2:03:07:93:ea:da:d6: 18:e9:0b:4d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FepIPMAxDrvlXf2GRP5uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWUyMDI4ZjFhNTQ4MjU1ZTE1NDZiNzkzNWE5Y2Q4NGViZTQzMDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaaUEnGfNkM8j9Rdezmtb/8saxwj 3nI6cUAWKcVxupEkZPeYTvAVPLciKXl2td9NVCxC24jYe/dOw2sNmJ4QCNqp8LF2 mncPJhdBsuziNv4xKCHR+aKBgg/3O8Qd8c2Ljt+txR5YSwyNXIOztiMx9Wcj39J9 bc3ngVu+QSml7DPs5gxh59e9SeBeZ6J4FTPbJTc9it+N5xS8OxZzwyy4z/qz6ue4 BG641mcSfpY91XVL1+xCLt/9OoUfzuc8mbj7/XsM3HrBoFsjxh/1Nx9uSSoNN9rH IFV1AwhD9PcNI92g3PFub7V4C/Gb5HR5tahvP8VNgre74MQVqGYZYzgdTwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLniAo8aVIJV4VRreTWpzYTr5DBGMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvdWVJQ2p4cFVnbFhoVkd0NU5hbk5oT3ZrTUVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALQkcAwQA LViKAwQATVMmMA0GCSqGSIb3DQEBCwUAA4IBAQBa9Ik2T8rBeghrYaNfE56bMqQ9 /pUy44+1mbLeEuDvMW11iuez6zewSomcAXT2VJAlvbMbP2Qv1Pk8VaatMW8n7kQw 2YnS/f4ctpkIyq1IilTGbQrPEMVlwfxuJ6MPVewGDhbSLQHAPkzmCALhKog5wqix 9Kkd/NEHR8954flw/HCtzvXT15m0xFTVWmlDU6ECLqaqQnISGwZFueh5iJlbqya7 PXJLm439vqVHaf/x1FbvWHZ2RXnRsDlVQwci51N4+R4I9fknXLjy7c0D1DRlLoz6 chZOXPxl2FXQn7Gv/SLhC6TQ5E36D/rdagjTNI3fqDgoFLIDB5Pq2tYY6QtN -----END CERTIFICATE-----Generated at Tue Jan 6 20:51:26 2026 by rpki-client