This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/UUD9roNkskiwye2tqwssSFEocBY.roa File: UUD9roNkskiwye2tqwssSFEocBY.roa (raw, json) Hash identifier: uz8OsG4t9MjUUcUflz9xYFC0CJuPcU2Ss0OyzWUNNtw= Subject key identifier: 51:40:FD:AE:83:64:B2:48:B0:C9:ED:AD:AB:0B:2C:48:51:28:70:16 Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Certificate serial: 019B78A2E06D717FB979A9A724DF5DE0462F Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/UUD9roNkskiwye2tqwssSFEocBY.roa Signing time: Thu 01 Jan 2026 08:18:18 +0000 ROA not before: Thu 01 Jan 2026 08:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39855 IP address blocks: 45.15.211.0/24 maxlen: 24 62.68.76.0/24 maxlen: 24 80.94.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:e0:6d:71:7f:b9:79:a9:a7:24:df:5d:e0:46:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Validity Not Before: Jan 1 08:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5140fdae8364b248b0c9edadab0b2c4851287016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5d:24:7c:14:cf:06:b9:03:43:ee:e9:89:1d: 1e:c7:30:68:58:32:4f:cb:8d:45:91:f6:68:79:bc: 5e:29:85:d2:34:ce:7e:30:1d:33:00:48:b5:be:c9: 25:09:c5:6c:dd:3c:77:e8:b2:d5:c5:43:27:bb:c6: a5:89:a6:ba:27:82:5b:6a:3d:57:6a:c8:c2:7b:be: 20:2e:ba:e8:f2:d4:65:32:74:04:29:dd:ba:cc:e8: b0:41:96:25:cf:1a:cd:64:be:e0:73:a1:dc:ed:f9: 71:7b:c3:b2:5b:32:a5:86:50:a2:bc:3f:05:8d:6f: 7f:3c:2a:a2:97:c9:a7:6c:a5:68:b8:97:9a:ec:ca: 95:29:c3:4c:76:fb:ee:78:4c:cc:06:9f:cb:09:ca: c6:62:68:81:cf:4c:94:e9:53:f7:2a:fc:77:d0:f3: 76:37:98:fa:df:f0:e0:ce:cc:5d:d5:12:7f:97:06: 91:48:0a:05:38:c9:86:4e:0e:3c:4c:20:fc:10:54: ff:2b:89:17:09:d1:19:c8:14:3c:d7:89:6c:c5:0f: 69:82:e1:a7:70:02:b4:b3:3a:fa:30:6d:aa:5a:62: 38:33:2e:e7:b1:a9:ed:9a:0f:56:51:61:ea:6a:57: 69:cf:47:ef:af:e7:2a:be:d2:39:07:18:e8:33:98: 7c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:40:FD:AE:83:64:B2:48:B0:C9:ED:AD:AB:0B:2C:48:51:28:70:16 X509v3 Authority Key Identifier: keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/UUD9roNkskiwye2tqwssSFEocBY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.211.0/24 62.68.76.0/24 80.94.88.0/24 Signature Algorithm: sha256WithRSAEncryption d1:c9:92:dc:87:da:a7:a6:01:51:c5:89:19:4c:e6:06:2c:62: 5a:d3:5a:a5:d5:8c:0d:d8:4d:bd:ba:d6:89:04:1e:05:d0:f9: f0:9d:95:82:68:d3:00:f8:3a:cd:4d:63:36:77:ab:65:e1:a3: ef:e7:fd:67:ae:31:70:08:85:35:0a:56:f4:ce:fa:af:2f:7b: 26:de:20:1e:be:c2:f2:4f:57:85:42:7f:eb:6b:22:47:ed:f6: e6:b0:60:66:de:0c:a3:ab:bb:3c:9f:85:85:37:0c:d3:13:ee: eb:be:2d:19:68:27:e0:4d:64:5b:76:b4:34:19:fc:19:5e:04: 62:4d:28:b9:4b:9a:69:b6:33:0c:5c:95:25:73:dc:7a:e0:b3: 76:60:50:97:5d:48:3c:b1:8f:63:43:8f:74:0e:75:b9:f7:93: b5:8c:9b:c8:af:2d:91:73:af:6d:d3:97:3b:10:33:fa:16:bd: 27:e0:98:2b:05:ee:db:5f:d9:f3:ef:d0:35:51:4e:d0:8d:98: 75:6f:26:ba:fb:e9:45:d1:87:ca:5b:c4:e1:2a:d6:33:41:6a: c6:81:c8:80:75:cf:e0:7b:47:24:70:ad:0d:8b:8e:18:2c:60: ee:39:4c:89:af:d2:cc:cd:aa:8c:95:f8:9e:cb:c1:4a:75:d6: 5b:d0:7d:93 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4ouBtcX+5eamnJN9d4EYvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl MTdjMjcwHhcNMjYwMTAxMDgxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTQwZmRhZTgzNjRiMjQ4YjBjOWVkYWRhYjBiMmM0ODUxMjg3MDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV0kfBTPBrkDQ+7piR0exzBoWDJP y41FkfZoebxeKYXSNM5+MB0zAEi1vsklCcVs3Tx36LLVxUMnu8aliaa6J4Jbaj1X asjCe74gLrro8tRlMnQEKd26zOiwQZYlzxrNZL7gc6Hc7flxe8OyWzKlhlCivD8F jW9/PCqil8mnbKVouJea7MqVKcNMdvvueEzMBp/LCcrGYmiBz0yU6VP3Kvx30PN2 N5j63/Dgzsxd1RJ/lwaRSAoFOMmGTg48TCD8EFT/K4kXCdEZyBQ814lsxQ9pguGn cAK0szr6MG2qWmI4My7nsantmg9WUWHqaldpz0fvr+cqvtI5BxjoM5h8MwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFFA/a6DZLJIsMntrasLLEhRKHAWMB8GA1UdIwQY MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It ZDc4ZDU2MzFkN2Y2LzEvVVVEOXJvTmtza2l3eWUydHF3c3NTRkVvY0JZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2 LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALQ/TAwQA PkRMAwQAUF5YMA0GCSqGSIb3DQEBCwUAA4IBAQDRyZLch9qnpgFRxYkZTOYGLGJa 01ql1YwN2E29utaJBB4F0PnwnZWCaNMA+DrNTWM2d6tl4aPv5/1nrjFwCIU1Clb0 zvqvL3sm3iAevsLyT1eFQn/rayJH7fbmsGBm3gyjq7s8n4WFNwzTE+7rvi0ZaCfg TWRbdrQ0GfwZXgRiTSi5S5pptjMMXJUlc9x64LN2YFCXXUg8sY9jQ490DnW595O1 jJvIry2Rc69t05c7EDP6Fr0n4JgrBe7bX9nz79A1UU7QjZh1bya6++lF0YfKW8Th KtYzQWrGgciAdc/ge0ckcK0Ni44YLGDuOUyJr9LMzaqMlfiey8FKddZb0H2T -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:02 2026 by rpki-client