This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/USugS_iYQ3eD5sCRSZtZhPid9hw.roa File: USugS_iYQ3eD5sCRSZtZhPid9hw.roa (raw, json) Hash identifier: rFbLOYTfpTi2wgCJuEIE9kKZSSY4S1mI3sXNzR0CtBE= Subject key identifier: 51:2B:A0:4B:F8:98:43:77:83:E6:C0:91:49:9B:59:84:F8:9D:F6:1C Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019AC43DCDFE21663A33C89E29483B40F0D6 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/USugS_iYQ3eD5sCRSZtZhPid9hw.roa Signing time: Thu 27 Nov 2025 07:36:16 +0000 ROA not before: Thu 27 Nov 2025 07:36:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209242 IP address blocks: 45.8.211.0/24 maxlen: 24 45.142.120.0/24 maxlen: 24 194.53.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c4:3d:cd:fe:21:66:3a:33:c8:9e:29:48:3b:40:f0:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Nov 27 07:36:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=512ba04bf898437783e6c091499b5984f89df61c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:05:34:b9:96:9c:10:64:82:67:be:98:44:11: c9:59:fb:72:bd:15:5d:ec:66:f3:82:6d:a5:02:97: a7:c7:5e:d1:5c:2c:98:27:f0:db:66:fa:40:78:d5: 66:23:de:67:03:b0:4c:55:95:f8:9b:eb:ea:a2:d0: 0b:90:46:70:82:f4:0e:0b:30:20:b0:c1:52:9f:df: 38:3b:45:6f:1d:0d:aa:e0:99:e5:f5:75:be:0e:91: af:c2:76:21:fb:ca:24:fe:f1:86:ab:3b:cb:36:f6: 8d:1b:dd:46:33:95:1b:bf:8c:79:c3:08:71:7a:8d: e4:fa:93:46:d4:e6:7a:ac:be:7a:38:f0:4c:6c:70: 00:f3:89:3b:bf:eb:8e:e0:7c:c0:6d:51:27:4c:9c: f1:75:22:7c:15:d2:d9:42:82:04:f3:7f:03:57:1c: d6:27:69:8a:0a:24:67:cf:b9:18:85:6a:c4:5e:26: b9:a3:40:9a:a0:cb:08:20:8e:c2:21:23:4c:0b:09: 04:b0:2c:fc:01:8e:ea:f5:88:38:c5:d2:b9:29:d5: f1:e1:67:53:c5:99:f7:cf:c0:33:59:50:10:57:3c: 39:ab:24:1a:60:fc:8e:4b:af:de:56:25:c6:72:6c: ba:74:e0:39:c3:af:0b:05:36:97:20:05:e1:3b:56: cc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:2B:A0:4B:F8:98:43:77:83:E6:C0:91:49:9B:59:84:F8:9D:F6:1C X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/USugS_iYQ3eD5sCRSZtZhPid9hw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.211.0/24 45.142.120.0/24 194.53.53.0/24 Signature Algorithm: sha256WithRSAEncryption a9:bd:96:7b:4a:8f:97:ee:2b:16:bc:62:98:7f:a9:c0:9e:cb: f9:ba:78:c6:89:f6:91:51:44:80:c4:32:6d:0b:ca:10:ee:c7: 39:f5:62:ff:9f:fe:f9:5c:2f:97:9c:97:d7:9a:b9:6c:46:d1: 91:a4:4f:82:ae:f4:1f:89:bc:0f:a0:ed:91:cd:d8:11:33:ed: d2:78:fb:32:31:51:78:f9:23:f4:4d:c3:3b:d2:b5:ba:f2:f2: 7a:38:ba:f8:6f:5b:50:07:97:90:8b:5c:17:d8:bd:6d:c6:9e: ae:dd:06:3c:3b:f6:19:aa:26:2d:cc:33:f2:35:07:5a:6e:63: 55:97:b3:55:98:fd:c9:82:4b:fd:7e:6e:7b:25:ed:a2:f8:a3: fa:54:48:5b:c0:e1:14:d6:12:80:17:71:a2:d9:23:54:6e:44: 04:82:09:b1:17:a1:f7:39:5d:dc:ed:4c:83:b7:3f:44:97:fb: b5:36:23:10:01:2f:b6:1d:37:5e:f4:fb:7a:64:79:67:5f:6f: d5:d3:6f:f5:9f:ca:1b:8b:43:2f:f7:75:71:61:bc:ac:d4:fa: 14:5e:e8:c1:b9:7f:fd:b8:58:ab:d2:60:a6:b7:26:31:8c:53: b2:8e:e9:55:0e:49:c5:dd:2d:96:83:03:d4:d9:00:0b:a0:1d: 54:59:4a:77 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrEPc3+IWY6M8ieKUg7QPDWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjUxMTI3MDczNjE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTJiYTA0YmY4OTg0Mzc3ODNlNmMwOTE0OTliNTk4NGY4OWRmNjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QU0uZacEGSCZ76YRBHJWftyvRVd 7Gbzgm2lApenx17RXCyYJ/DbZvpAeNVmI95nA7BMVZX4m+vqotALkEZwgvQOCzAg sMFSn984O0VvHQ2q4Jnl9XW+DpGvwnYh+8ok/vGGqzvLNvaNG91GM5Ubv4x5wwhx eo3k+pNG1OZ6rL56OPBMbHAA84k7v+uO4HzAbVEnTJzxdSJ8FdLZQoIE838DVxzW J2mKCiRnz7kYhWrEXia5o0CaoMsIII7CISNMCwkEsCz8AY7q9Yg4xdK5KdXx4WdT xZn3z8AzWVAQVzw5qyQaYPyOS6/eViXGcmy6dOA5w68LBTaXIAXhO1bMDQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFEroEv4mEN3g+bAkUmbWYT4nfYcMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvVVN1Z1NfaVlRM2VENXNDUlNadFpoUGlkOWh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALQjTAwQA LY54AwQAwjU1MA0GCSqGSIb3DQEBCwUAA4IBAQCpvZZ7So+X7isWvGKYf6nAnsv5 unjGifaRUUSAxDJtC8oQ7sc59WL/n/75XC+XnJfXmrlsRtGRpE+CrvQfibwPoO2R zdgRM+3SePsyMVF4+SP0TcM70rW68vJ6OLr4b1tQB5eQi1wX2L1txp6u3QY8O/YZ qiYtzDPyNQdabmNVl7NVmP3Jgkv9fm57Je2i+KP6VEhbwOEU1hKAF3Gi2SNUbkQE ggmxF6H3OV3c7UyDtz9El/u1NiMQAS+2HTde9Pt6ZHlnX2/V02/1n8obi0Mv93Vx Ybys1PoUXujBuX/9uFir0mCmtyYxjFOyjulVDknF3S2WgwPU2QALoB1UWUp3 -----END CERTIFICATE-----Generated at Fri Dec 5 21:27:42 2025 by rpki-client