This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/UrR8he9LeX1_n_grB04eKjIEfn4.roa File: UrR8he9LeX1_n_grB04eKjIEfn4.roa (raw, json) Hash identifier: 6VYM1BE9h3lSboPJRgPSxyvYhSPFOMNMfzzxqBF3w0s= Subject key identifier: 52:B4:7C:85:EF:4B:79:7D:7F:9F:F8:2B:07:4E:1E:2A:32:04:7E:7E Certificate issuer: /CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b Certificate serial: 019B78A2D8983E0F03584A2D1EBBE3B1BEB2 Authority key identifier: F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/UrR8he9LeX1_n_grB04eKjIEfn4.roa Signing time: Thu 01 Jan 2026 08:18:16 +0000 ROA not before: Thu 01 Jan 2026 08:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13002 IP address blocks: 45.92.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:d8:98:3e:0f:03:58:4a:2d:1e:bb:e3:b1:be:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b Validity Not Before: Jan 1 08:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52b47c85ef4b797d7f9ff82b074e1e2a32047e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0c:2b:02:01:cc:5f:4b:ac:14:13:eb:c3:0c: 85:29:8f:b0:91:1d:84:12:59:cb:31:52:da:1d:6b: c6:81:29:a1:85:24:be:66:c7:87:d4:d8:dc:f4:53: d0:0f:dd:a0:7d:c3:f8:6b:1c:8f:c0:16:ab:fd:54: c9:61:d2:6f:c6:d3:23:f7:b9:9c:41:f1:e3:8a:f7: 0f:64:6b:35:ce:7b:eb:18:05:b4:01:d2:38:24:f6: 3f:8d:92:f8:05:ba:63:e3:1a:7f:d2:59:79:e3:d6: 0a:89:47:f6:d0:87:b6:4e:52:eb:40:e5:77:04:c9: 15:9c:1d:98:8e:a6:8b:67:27:46:c1:4c:fc:f4:db: a5:58:41:94:92:8a:34:47:9c:43:f5:d4:f8:3c:f1: d8:31:4c:46:93:e2:67:bd:a7:81:fd:05:c5:03:ae: 9b:f4:93:f6:cb:18:fc:83:5f:95:0e:17:07:d4:6c: da:c3:d1:e2:6a:f4:e6:72:c1:23:a3:36:29:9c:2f: f8:91:0a:f8:e0:e8:66:81:c6:e9:91:00:89:7d:c5: 04:8a:0d:21:a3:0d:b4:85:2d:cf:af:8b:37:23:cd: 92:40:1f:68:00:e5:9f:fe:5e:43:38:38:9a:9b:34: cc:05:e9:bd:91:3c:b3:d1:28:ae:b2:ca:9f:8e:75: 36:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B4:7C:85:EF:4B:79:7D:7F:9F:F8:2B:07:4E:1E:2A:32:04:7E:7E X509v3 Authority Key Identifier: keyid:F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/UrR8he9LeX1_n_grB04eKjIEfn4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.131.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:7c:4a:e0:93:7f:bd:16:8e:f0:c0:b4:17:93:c7:93:ed:41: 81:82:cb:55:09:75:7f:03:c4:92:c7:d8:d4:e4:85:28:28:61: 2f:45:d5:ca:5e:54:6c:02:fc:54:35:ed:c9:22:64:bb:8e:f0: 6c:2c:76:7f:eb:30:18:45:b3:3b:bb:d5:4d:28:d9:a3:e2:66: d0:3d:42:7e:6b:fd:38:92:f9:ad:47:18:2e:d6:4a:5a:b0:3d: f3:7f:50:53:aa:65:5d:39:ea:d2:da:4b:99:a2:83:21:a7:e3: 16:20:50:41:d6:52:7b:ed:53:e4:de:34:a6:92:0e:7b:b8:f0: db:da:23:21:06:5f:76:e2:68:1c:26:22:22:90:f1:eb:b7:f8: d1:2f:33:5e:3b:de:19:11:55:25:c2:15:6b:84:ea:d0:10:64: b1:45:ca:83:e7:c0:5a:56:09:b3:74:a9:1e:ca:f9:cd:94:dd: 96:75:c3:a4:4a:8a:4b:62:ba:31:2a:8d:20:ca:51:23:70:d5: c7:be:cd:57:d7:a0:f6:e7:5c:23:04:43:56:1a:5b:3d:c9:95: 5f:ca:f4:94:10:b7:1a:94:76:0d:77:69:1c:3c:f9:74:2e:ab: 6e:41:18:1c:8e:66:40:d5:61:f8:fd:2e:3d:ee:87:37:f8:d6: 3b:d3:5d:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4otiYPg8DWEotHrvjsb6yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0MWM3ZDQ3NzE4YThhNGE5ZDhjNTBiMjYwODNlNzE4NTI1 YjZjMWIwHhcNMjYwMTAxMDgxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmI0N2M4NWVmNGI3OTdkN2Y5ZmY4MmIwNzRlMWUyYTMyMDQ3ZTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gwrAgHMX0usFBPrwwyFKY+wkR2E ElnLMVLaHWvGgSmhhSS+ZseH1Njc9FPQD92gfcP4axyPwBar/VTJYdJvxtMj97mc QfHjivcPZGs1znvrGAW0AdI4JPY/jZL4Bbpj4xp/0ll549YKiUf20Ie2TlLrQOV3 BMkVnB2YjqaLZydGwUz89NulWEGUkoo0R5xD9dT4PPHYMUxGk+JnvaeB/QXFA66b 9JP2yxj8g1+VDhcH1Gzaw9HiavTmcsEjozYpnC/4kQr44OhmgcbpkQCJfcUEig0h ow20hS3Pr4s3I82SQB9oAOWf/l5DODiamzTMBem9kTyz0SiussqfjnU2hwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFK0fIXvS3l9f5/4KwdOHioyBH5+MB8GA1UdIwQY MBaAFPQcfUdxiopKnYxQsmCD5xhSW2wbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUJ4OVIzR0tpa3FkakZDeVlJUG5HRkpiYkJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81MzZjYzQtYjc5MC00MWMyLWEzMmUt NjBiMmM5ODIxMDc4LzEvVXJSOGhlOUxlWDFfbl9nckIwNGVLaklFZm40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS81MzZjYzQtYjc5MC00MWMyLWEzMmUtNjBiMmM5ODIxMDc4 LzEvOUJ4OVIzR0tpa3FkakZDeVlJUG5HRkpiYkJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVyDMA0G CSqGSIb3DQEBCwUAA4IBAQAefErgk3+9Fo7wwLQXk8eT7UGBgstVCXV/A8SSx9jU 5IUoKGEvRdXKXlRsAvxUNe3JImS7jvBsLHZ/6zAYRbM7u9VNKNmj4mbQPUJ+a/04 kvmtRxgu1kpasD3zf1BTqmVdOerS2kuZooMhp+MWIFBB1lJ77VPk3jSmkg57uPDb 2iMhBl924mgcJiIikPHrt/jRLzNeO94ZEVUlwhVrhOrQEGSxRcqD58BaVgmzdKke yvnNlN2WdcOkSopLYroxKo0gylEjcNXHvs1X16D251wjBENWGls9yZVfyvSUELca lHYNd2kcPPl0LqtuQRgcjmZA1WH4/S497oc3+NY7012/ -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:18 2026 by rpki-client