This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/UIWO1tH7l45W5gLDswucgr5vbdM.roa File: UIWO1tH7l45W5gLDswucgr5vbdM.roa (raw, json) Hash identifier: M5qZG3ahwBwavfm3Q9xaK79pjeLPgUMKR/MGbhLdiGw= Subject key identifier: 50:85:8E:D6:D1:FB:97:8E:56:E6:02:C3:B3:0B:9C:82:BE:6F:6D:D3 Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F853E9627385400485E8E5A403C41D6 Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/UIWO1tH7l45W5gLDswucgr5vbdM.roa Signing time: Fri 02 Jan 2026 16:23:17 +0000 ROA not before: Fri 02 Jan 2026 16:23:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62013 IP address blocks: 45.67.118.0/23 maxlen: 23 185.181.40.0/23 maxlen: 24 185.181.42.0/23 maxlen: 24 185.181.48.0/23 maxlen: 24 185.181.50.0/23 maxlen: 24 194.213.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:3e:96:27:38:54:00:48:5e:8e:5a:40:3c:41:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50858ed6d1fb978e56e602c3b30b9c82be6f6dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7a:5f:07:0c:a1:1f:39:ee:79:c9:7e:3c:dd: ff:e3:3f:b1:37:f8:5c:e8:bf:ca:d2:bb:9c:86:85: 81:04:ad:69:2e:64:90:e9:19:3b:f8:ea:27:f3:42: bb:5e:51:ff:c7:cf:8d:7d:2c:10:f3:c2:44:f2:f1: ae:4f:cc:3a:18:89:5b:6b:50:21:c1:3f:b3:6f:93: 10:af:2e:15:40:d1:70:e3:c0:9e:f2:15:72:97:a3: 32:f5:3f:95:fe:7b:82:71:15:8b:0d:f0:a8:5d:a1: a7:75:7f:6d:eb:e5:ba:d0:ae:ca:3e:09:3c:c9:7c: 4f:8a:f2:d0:69:1d:cf:b7:8c:d0:a1:d2:a5:c2:9c: 58:18:0b:fa:87:23:27:77:eb:38:15:c1:10:0b:d5: c1:6f:81:74:41:cb:ec:10:3b:6b:74:aa:3c:5c:39: 00:d0:77:80:f3:25:47:e9:95:92:13:91:ac:95:e6: aa:23:f6:28:d7:4a:b1:8a:5a:0b:cb:e4:82:2c:d2: 81:96:14:0b:8c:8c:e2:51:a8:c1:9a:c1:30:76:99: e1:7d:99:ca:25:e3:a9:b6:af:21:24:c9:2e:d7:cb: be:25:bf:1c:66:43:ee:37:31:27:6d:ce:90:22:86: f4:a5:80:67:39:07:48:1b:79:b3:d0:9c:4d:2c:a7: c7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:85:8E:D6:D1:FB:97:8E:56:E6:02:C3:B3:0B:9C:82:BE:6F:6D:D3 X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/UIWO1tH7l45W5gLDswucgr5vbdM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.118.0/23 185.181.40.0/22 185.181.48.0/22 194.213.8.0/24 Signature Algorithm: sha256WithRSAEncryption a0:bf:7f:45:ba:e6:83:73:2f:b7:49:1e:57:37:21:74:31:80: f8:f2:0d:87:63:04:18:72:1f:94:e7:05:46:21:b9:03:78:d6: 36:04:b1:6e:0e:dc:79:12:43:77:df:84:1a:b0:00:ff:10:95: 71:55:71:db:06:33:c4:49:64:20:7a:bc:23:0a:83:0f:cf:ae: b2:93:d0:29:57:be:e4:79:76:76:01:2d:c7:3b:e0:fd:01:97: b3:09:db:3d:41:85:a3:2a:81:c9:9b:77:97:7d:23:10:50:6e: ec:79:2b:bd:c0:2f:95:43:1d:e7:25:fd:43:01:67:52:53:e3: 7d:02:97:da:82:71:9c:fc:f0:d1:da:69:02:b0:f9:8f:78:a2: 2d:46:9a:14:71:9d:50:d5:9b:68:54:f5:0d:5c:54:21:ac:11: a2:ef:cb:e9:a1:96:16:21:69:bd:6c:2c:35:73:4d:9e:56:53: 14:57:35:41:68:0e:a6:e1:19:49:cb:91:9b:db:06:2e:36:8e: 0a:cc:53:95:a9:ac:7f:a3:74:53:9a:7f:f6:20:fe:9c:18:4a: c3:30:01:ba:4f:2a:dd:5e:ef:5d:7a:53:fa:b8:38:4a:de:5b: e5:d8:6e:f7:b9:a2:49:0b:ca:58:5b:b2:ce:79:8e:ea:97:31: 09:de:0f:ce -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/hT6WJzhUAEhejlpAPEHWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDg1OGVkNmQxZmI5NzhlNTZlNjAyYzNiMzBiOWM4MmJlNmY2ZGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXpfBwyhHznuecl+PN3/4z+xN/hc 6L/K0ruchoWBBK1pLmSQ6Rk7+Oon80K7XlH/x8+NfSwQ88JE8vGuT8w6GIlba1Ah wT+zb5MQry4VQNFw48Ce8hVyl6My9T+V/nuCcRWLDfCoXaGndX9t6+W60K7KPgk8 yXxPivLQaR3Pt4zQodKlwpxYGAv6hyMnd+s4FcEQC9XBb4F0QcvsEDtrdKo8XDkA 0HeA8yVH6ZWSE5GsleaqI/Yo10qxiloLy+SCLNKBlhQLjIziUajBmsEwdpnhfZnK JeOptq8hJMku18u+Jb8cZkPuNzEnbc6QIob0pYBnOQdIG3mz0JxNLKfHUwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFFCFjtbR+5eOVuYCw7MLnIK+b23TMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvVUlXTzF0SDdsNDVXNWdMRHN3dWNncjV2YmRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLUN2AwQC ubUoAwQCubUwAwQAwtUIMA0GCSqGSIb3DQEBCwUAA4IBAQCgv39FuuaDcy+3SR5X NyF0MYD48g2HYwQYch+U5wVGIbkDeNY2BLFuDtx5EkN334QasAD/EJVxVXHbBjPE SWQgerwjCoMPz66yk9ApV77keXZ2AS3HO+D9AZezCds9QYWjKoHJm3eXfSMQUG7s eSu9wC+VQx3nJf1DAWdSU+N9ApfagnGc/PDR2mkCsPmPeKItRpoUcZ1Q1ZtoVPUN XFQhrBGi78vpoZYWIWm9bCw1c02eVlMUVzVBaA6m4RlJy5Gb2wYuNo4KzFOVqax/ o3RTmn/2IP6cGErDMAG6TyrdXu9delP6uDhK3lvl2G73uaJJC8pYW7LOeY7qlzEJ 3g/O -----END CERTIFICATE-----Generated at Sun Jan 25 19:58:56 2026 by rpki-client