This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/UiLYQZs4ETqxGHF0Nk-vZZuobko.roa File: UiLYQZs4ETqxGHF0Nk-vZZuobko.roa (raw, json) Hash identifier: Jdyygi5nVoD9JFa7Dv/N7D+EKBlLsfRdiVhBxv3yTfk= Subject key identifier: 52:22:D8:41:9B:38:11:3A:B1:18:71:74:36:4F:AF:65:9B:A8:6E:4A Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C1344D1C4B276AB026596918FADD4A6 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/UiLYQZs4ETqxGHF0Nk-vZZuobko.roa Signing time: Fri 02 Jan 2026 00:19:56 +0000 ROA not before: Fri 02 Jan 2026 00:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 273171 IP address blocks: 45.81.127.0/24 maxlen: 24 201.77.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:44:d1:c4:b2:76:ab:02:65:96:91:8f:ad:d4:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5222d8419b38113ab1187174364faf659ba86e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f7:22:39:34:9a:c1:5d:1e:a7:a0:a5:41:4a: a2:b4:3f:53:fc:f1:5f:b4:dd:2d:52:80:ac:05:93: 92:dd:22:fc:f9:59:87:4b:5f:f5:4d:1c:3c:75:8b: 52:f8:53:79:18:2a:03:00:24:9c:9c:7e:e0:7c:96: 53:a8:d1:c7:b7:e3:29:29:71:03:ae:f8:a5:40:23: bf:bd:b6:6b:01:9c:b5:25:0e:2a:a6:5e:df:a9:c2: 24:df:56:6e:47:3a:da:5d:4b:6b:79:db:8a:57:b5: ef:2a:d9:84:f2:bd:5c:ab:b9:75:5c:44:6c:66:41: 44:1e:fe:8d:da:da:67:f3:fa:a4:62:8b:0a:80:b8: 53:bc:ac:86:a1:f2:36:1c:3a:cf:0c:67:17:4a:c6: 2f:8b:48:48:fe:27:87:84:85:b8:c2:1b:ad:4d:60: f9:b0:92:13:66:cc:24:8a:cb:56:d1:76:86:19:7e: 00:be:26:0b:4d:92:90:54:32:c6:08:0e:dc:26:57: ff:9d:9b:62:65:bc:bb:84:22:d3:61:c2:5e:56:1c: 3f:92:28:d3:de:de:b4:6a:17:2f:2c:02:d4:c7:65: e3:ca:d5:14:09:72:7d:aa:0b:d2:1a:63:97:44:f1: a1:ca:b4:65:82:79:66:a4:c9:fe:c9:26:67:86:0a: 10:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:22:D8:41:9B:38:11:3A:B1:18:71:74:36:4F:AF:65:9B:A8:6E:4A X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/UiLYQZs4ETqxGHF0Nk-vZZuobko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.127.0/24 201.77.63.0/24 Signature Algorithm: sha256WithRSAEncryption 44:2b:53:38:a0:e0:f9:9a:0f:bd:11:2e:eb:3f:ce:2f:3f:14: 76:1a:25:a3:60:b7:36:a6:af:5b:49:c9:66:5a:32:11:cd:f1: 11:6f:87:9c:3d:ae:b6:69:69:3d:6c:d4:00:4c:a8:bc:d4:7a: d8:7e:d6:c4:43:73:ed:0e:50:a1:21:08:41:5f:ab:c7:27:3a: 78:2d:63:3a:a0:5b:21:d0:19:07:a5:21:e6:b1:f3:c5:7f:b2: 06:bc:2d:b5:28:1a:bc:85:64:f0:fb:6a:52:bd:30:a2:70:30: b6:29:9b:34:21:d3:15:3c:10:c7:b1:35:16:1a:ee:12:97:00: e7:0c:18:df:07:7c:4b:a3:07:5c:e1:70:94:86:b7:1b:35:3a: 80:a1:30:2e:53:0b:a5:06:3a:8b:b9:db:44:4a:dc:0f:74:5d: 71:e3:82:da:2a:18:fc:3a:12:64:56:40:42:b4:0b:bd:ca:db: 19:bc:f6:af:96:2d:55:fa:2d:7e:fc:07:a0:36:0b:00:ac:e2: 4c:e2:57:82:6d:76:3f:66:1d:0e:66:e7:cd:d8:5b:5d:7a:e6: 2d:b9:e2:4a:9e:c0:3c:66:cc:45:6c:73:86:5e:0d:6e:59:4b: 37:87:06:3f:97:dd:a7:08:64:88:75:de:b4:db:f3:6e:9a:d7: d5:7b:da:73 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8E0TRxLJ2qwJllpGPrdSmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjIyZDg0MTliMzgxMTNhYjExODcxNzQzNjRmYWY2NTliYTg2ZTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/ciOTSawV0ep6ClQUqitD9T/PFf tN0tUoCsBZOS3SL8+VmHS1/1TRw8dYtS+FN5GCoDACScnH7gfJZTqNHHt+MpKXED rvilQCO/vbZrAZy1JQ4qpl7fqcIk31ZuRzraXUtreduKV7XvKtmE8r1cq7l1XERs ZkFEHv6N2tpn8/qkYosKgLhTvKyGofI2HDrPDGcXSsYvi0hI/ieHhIW4whutTWD5 sJITZswkistW0XaGGX4AviYLTZKQVDLGCA7cJlf/nZtiZby7hCLTYcJeVhw/kijT 3t60ahcvLALUx2XjytUUCXJ9qgvSGmOXRPGhyrRlgnlmpMn+ySZnhgoQCQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFIi2EGbOBE6sRhxdDZPr2WbqG5KMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvVWlMWVFaczRFVHF4R0hGME5rLXZaWnVvYmtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVF/AwQA yU0/MA0GCSqGSIb3DQEBCwUAA4IBAQBEK1M4oOD5mg+9ES7rP84vPxR2GiWjYLc2 pq9bSclmWjIRzfERb4ecPa62aWk9bNQATKi81HrYftbEQ3PtDlChIQhBX6vHJzp4 LWM6oFsh0BkHpSHmsfPFf7IGvC21KBq8hWTw+2pSvTCicDC2KZs0IdMVPBDHsTUW Gu4SlwDnDBjfB3xLowdc4XCUhrcbNTqAoTAuUwulBjqLudtEStwPdF1x44LaKhj8 OhJkVkBCtAu9ytsZvPavli1V+i1+/AegNgsArOJM4leCbXY/Zh0OZufN2FtdeuYt ueJKnsA8ZsxFbHOGXg1uWUs3hwY/l92nCGSIdd602/NumtfVe9pz -----END CERTIFICATE-----Generated at Fri Jan 23 21:38:37 2026 by rpki-client