This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/U4TxPsVTa7fVhEoJHiqaFCDJadQ.roa File: U4TxPsVTa7fVhEoJHiqaFCDJadQ.roa (raw, json) Hash identifier: TUqXRMJgLOSn2/O8sMVIs8GuCwrxlUKOQLqWYOYh/YE= Subject key identifier: 53:84:F1:3E:C5:53:6B:B7:D5:84:4A:09:1E:2A:9A:14:20:C9:69:D4 Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019B7B3609A4EE529CDAE9338190E46F9773 Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/U4TxPsVTa7fVhEoJHiqaFCDJadQ.roa Signing time: Thu 01 Jan 2026 20:18:17 +0000 ROA not before: Thu 01 Jan 2026 20:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142578 IP address blocks: 45.93.18.0/24 maxlen: 24 45.93.19.0/24 maxlen: 24 85.92.113.0/24 maxlen: 24 193.107.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:09:a4:ee:52:9c:da:e9:33:81:90:e4:6f:97:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Jan 1 20:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5384f13ec5536bb7d5844a091e2a9a1420c969d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:16:f0:ee:01:eb:94:b2:a9:27:cc:7f:5e:93: c1:d3:3b:db:af:68:b2:0d:f2:63:1b:00:9b:45:d0: ba:36:78:e6:8b:e4:16:03:9c:95:bb:38:c2:df:c1: 49:45:96:21:57:57:18:63:42:eb:38:07:80:28:e6: 2b:b9:00:19:a2:7c:ae:6b:5a:23:79:8c:95:d9:eb: fb:e5:31:85:3f:d0:eb:55:9d:1e:2a:6a:8f:6c:75: fb:eb:5a:0b:80:bf:80:d4:50:4a:6f:fb:eb:80:34: aa:42:5c:5c:77:e0:16:1d:7a:9a:a9:c9:6d:3c:37: 60:79:62:9b:d5:92:6c:fd:30:4b:73:83:57:8c:89: 3f:d7:2f:98:9c:55:bc:67:a7:49:34:80:ad:c0:cf: ab:39:91:1c:81:0c:69:38:0c:cb:5e:1d:8e:28:3e: 58:f3:a1:fa:f4:54:0f:a3:8b:38:16:f7:65:52:31: f2:e3:c9:56:fe:91:95:32:c2:e3:69:a3:0a:2c:4f: 26:a4:7d:ea:62:8b:0a:cb:11:42:04:7d:77:df:99: 76:f3:26:8d:e8:bc:67:54:da:17:6c:02:37:59:71: 61:cb:4b:83:39:01:31:35:09:20:9a:a3:ce:23:f4: 3c:1d:5d:c9:18:27:e9:26:3f:97:d6:83:bd:ff:f6: 75:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:84:F1:3E:C5:53:6B:B7:D5:84:4A:09:1E:2A:9A:14:20:C9:69:D4 X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/U4TxPsVTa7fVhEoJHiqaFCDJadQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.18.0/23 85.92.113.0/24 193.107.219.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:7c:d2:9c:d0:a4:d2:e3:5b:92:63:eb:76:54:d7:54:30:32: a4:9d:ac:ba:64:37:c0:f9:d2:4d:67:a7:34:38:0f:78:4d:c3: 89:b1:8c:b0:7a:5a:4e:8b:fd:b2:45:a0:36:4c:c5:68:2e:28: 8c:51:6c:76:58:35:7b:71:aa:c2:b0:0b:da:95:15:05:51:30: b1:a4:34:48:8d:10:eb:af:c7:09:9e:e5:db:7e:54:6a:95:c0: b1:e8:c4:a2:1f:c3:b5:61:73:2c:13:75:19:98:0e:4d:cb:c5: 95:a4:a6:01:6e:4d:44:85:06:d2:7e:99:33:d3:6f:02:8a:ab: c2:bb:70:dc:84:ae:be:93:0c:84:de:fd:6f:d9:6f:bb:17:66: f6:d8:56:45:5b:e7:32:05:5f:cf:bc:3e:e9:d9:31:dc:43:23: 2f:31:5c:e1:69:e9:e0:4a:12:7e:10:53:66:e6:a9:64:99:86: fc:20:cf:13:c0:8e:9b:62:68:ff:c9:a3:e6:4b:c6:ff:f3:d3: fa:e4:e5:a9:62:46:48:97:33:f3:54:b4:c1:55:0e:7f:5d:3b: bc:1a:e8:88:2c:77:f6:1f:12:bc:78:62:9a:a9:a7:0b:f0:4d: 39:0b:17:30:a7:5e:65:ae:a7:d4:7e:0a:88:16:17:1d:10:97: cb:be:6c:32 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7Ngmk7lKc2ukzgZDkb5dzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjYwMTAxMjAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Mzg0ZjEzZWM1NTM2YmI3ZDU4NDRhMDkxZTJhOWExNDIwYzk2OWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxbw7gHrlLKpJ8x/XpPB0zvbr2iy DfJjGwCbRdC6Nnjmi+QWA5yVuzjC38FJRZYhV1cYY0LrOAeAKOYruQAZonyua1oj eYyV2ev75TGFP9DrVZ0eKmqPbHX761oLgL+A1FBKb/vrgDSqQlxcd+AWHXqaqclt PDdgeWKb1ZJs/TBLc4NXjIk/1y+YnFW8Z6dJNICtwM+rOZEcgQxpOAzLXh2OKD5Y 86H69FQPo4s4FvdlUjHy48lW/pGVMsLjaaMKLE8mpH3qYosKyxFCBH1335l28yaN 6LxnVNoXbAI3WXFhy0uDOQExNQkgmqPOI/Q8HV3JGCfpJj+X1oO9//Z1zQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFOE8T7FU2u31YRKCR4qmhQgyWnUMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvVTRUeFBzVlRhN2ZWaEVvSkhpcWFGQ0RKYWRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLV0SAwQA VVxxAwQAwWvbMA0GCSqGSIb3DQEBCwUAA4IBAQAtfNKc0KTS41uSY+t2VNdUMDKk nay6ZDfA+dJNZ6c0OA94TcOJsYywelpOi/2yRaA2TMVoLiiMUWx2WDV7carCsAva lRUFUTCxpDRIjRDrr8cJnuXbflRqlcCx6MSiH8O1YXMsE3UZmA5Ny8WVpKYBbk1E hQbSfpkz028CiqvCu3DchK6+kwyE3v1v2W+7F2b22FZFW+cyBV/PvD7p2THcQyMv MVzhaengShJ+EFNm5qlkmYb8IM8TwI6bYmj/yaPmS8b/89P65OWpYkZIlzPzVLTB VQ5/XTu8GuiILHf2HxK8eGKaqacL8E05Cxcwp15lrqfUfgqIFhcdEJfLvmwy -----END CERTIFICATE-----Generated at Wed Jan 21 09:21:32 2026 by rpki-client