This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/UNkqnxxpFl_kR5JXzTA1yG-B_Gs.roa File: UNkqnxxpFl_kR5JXzTA1yG-B_Gs.roa (raw, json) Hash identifier: 7o/Aqf3w6kIaEvGwG/HcBaIhHDZY9gCnwVXgpmwPFd0= Subject key identifier: 50:D9:2A:9F:1C:69:16:5F:E4:47:92:57:CD:30:35:C8:6F:81:FC:6B Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B8903FA36F1A3995A5708BD0D94953B83 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/UNkqnxxpFl_kR5JXzTA1yG-B_Gs.roa Signing time: Sun 04 Jan 2026 12:38:17 +0000 ROA not before: Sun 04 Jan 2026 12:38:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47690 IP address blocks: 45.43.158.0/24 maxlen: 24 104.222.189.0/24 maxlen: 24 104.233.59.0/24 maxlen: 24 104.238.12.0/24 maxlen: 24 104.238.13.0/24 maxlen: 24 104.239.55.0/24 maxlen: 24 104.239.56.0/24 maxlen: 24 104.249.9.0/24 maxlen: 24 104.249.17.0/24 maxlen: 24 104.249.23.0/24 maxlen: 24 104.249.46.0/24 maxlen: 24 104.249.47.0/24 maxlen: 24 104.249.48.0/24 maxlen: 24 104.249.49.0/24 maxlen: 24 104.249.50.0/24 maxlen: 24 104.249.51.0/24 maxlen: 24 104.249.52.0/24 maxlen: 24 104.249.53.0/24 maxlen: 24 104.249.54.0/24 maxlen: 24 216.173.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:89:03:fa:36:f1:a3:99:5a:57:08:bd:0d:94:95:3b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 4 12:38:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50d92a9f1c69165fe4479257cd3035c86f81fc6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9c:a2:e5:25:1b:52:ca:3d:42:d7:4d:40:83: e3:8b:7e:aa:c2:c9:9b:ec:a1:e6:b3:c7:63:30:9f: 32:17:f9:cf:68:70:be:9d:69:93:51:24:3d:6b:78: 15:69:e8:df:f0:d6:c9:15:5c:74:03:e5:d9:06:3c: 19:1b:b4:89:d5:7d:76:50:91:09:cb:d7:ab:f6:d6: 9d:aa:81:d8:af:cc:88:44:bb:d8:1d:30:0f:c4:2d: 4b:25:c3:e9:f3:a5:4b:d2:60:c7:e0:f6:8e:ef:a5: 82:a4:8e:e5:f9:6d:a6:5d:1b:a9:de:e1:50:e4:01: 50:6d:bc:0a:29:cd:54:49:11:56:d0:93:27:68:2c: ae:8a:7e:0e:e8:33:89:c4:ad:ba:17:e5:d3:d8:cf: 52:b1:e3:13:a8:28:4d:c4:90:bc:b9:8d:49:0d:ce: 62:1b:22:63:a7:7e:0c:52:cf:93:90:d8:b6:34:3b: 13:2c:2f:aa:75:f2:84:f9:a4:86:70:8c:0b:cf:db: bb:eb:7f:a7:5a:b1:20:32:87:e7:fa:b6:14:c3:2a: 82:77:7b:5e:ee:b8:bb:ac:ee:81:93:3c:47:12:7c: 61:70:1c:f2:06:47:34:b6:4e:b5:c4:6a:36:8f:53: 05:9b:ce:7c:b6:88:27:ee:06:6c:98:1d:80:66:d6: 9e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D9:2A:9F:1C:69:16:5F:E4:47:92:57:CD:30:35:C8:6F:81:FC:6B X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/UNkqnxxpFl_kR5JXzTA1yG-B_Gs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.43.158.0/24 104.222.189.0/24 104.233.59.0/24 104.238.12.0/23 104.239.55.0-104.239.56.255 104.249.9.0/24 104.249.17.0/24 104.249.23.0/24 104.249.46.0-104.249.54.255 216.173.91.0/24 Signature Algorithm: sha256WithRSAEncryption 39:ee:a1:ba:e8:cd:97:9f:02:12:34:88:20:84:31:64:63:7b: d7:42:7d:96:54:29:2b:ad:29:8c:5f:b2:ff:b5:51:a8:57:d7: cb:1f:59:24:5f:52:b8:a9:2b:2e:3b:4d:71:a5:40:80:dc:df: d4:21:62:c9:0b:2f:2c:41:0d:34:16:88:34:d8:e7:00:4e:53: bd:92:36:44:73:ff:b0:5f:29:aa:a2:80:37:44:fd:15:34:7e: 6b:ee:64:e8:26:d4:85:34:cf:f9:c9:4f:89:4f:6d:3f:63:98: f5:6f:89:44:73:57:67:9c:1e:fa:b4:a1:2c:5f:34:29:a5:16: ab:55:b8:f2:5c:42:16:b4:4f:5f:a5:a3:ff:82:fe:34:5f:55: 60:77:53:d7:e9:69:bd:1d:b2:83:6a:19:1f:66:81:30:a1:17: 6b:a6:56:5c:7d:14:6c:cb:04:35:a5:e0:fd:2a:72:1f:33:57: 4f:e4:fb:5b:61:aa:49:73:1e:84:2e:b5:18:c2:bc:0b:ad:53: ba:a5:bb:36:f4:0b:76:c3:67:c0:25:fa:28:64:ae:63:94:d3: 33:72:ab:cc:6c:d2:e7:97:ce:cd:09:d0:cc:5d:e9:2c:7d:66: 85:14:d4:d2:df:59:e2:b4:35:ad:39:ac:1b:ca:d9:89:f7:fc: ce:4f:b8:ac -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZuJA/o28aOZWlcIvQ2UlTuDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTA0MTIzODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGQ5MmE5ZjFjNjkxNjVmZTQ0NzkyNTdjZDMwMzVjODZmODFmYzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypyi5SUbUso9QtdNQIPji36qwsmb 7KHms8djMJ8yF/nPaHC+nWmTUSQ9a3gVaejf8NbJFVx0A+XZBjwZG7SJ1X12UJEJ y9er9tadqoHYr8yIRLvYHTAPxC1LJcPp86VL0mDH4PaO76WCpI7l+W2mXRup3uFQ 5AFQbbwKKc1USRFW0JMnaCyuin4O6DOJxK26F+XT2M9SseMTqChNxJC8uY1JDc5i GyJjp34MUs+TkNi2NDsTLC+qdfKE+aSGcIwLz9u763+nWrEgMofn+rYUwyqCd3te 7ri7rO6BkzxHEnxhcBzyBkc0tk61xGo2j1MFm858togn7gZsmB2AZtae+wIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFFDZKp8caRZf5EeSV80wNchvgfxrMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvVU5rcW54eHBGbF9rUjVKWHpUQTF5Ry1CX0dzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMAwQALSueAwQA aN69AwQAaOk7AwQBaO4MMAwDBABo7zcDBABo7zgDBABo+QkDBABo+REDBABo+Rcw DAMEAWj5LgMEAGj5NgMEANitWzANBgkqhkiG9w0BAQsFAAOCAQEAOe6huujNl58C EjSIIIQxZGN710J9llQpK60pjF+y/7VRqFfXyx9ZJF9SuKkrLjtNcaVAgNzf1CFi yQsvLEENNBaINNjnAE5TvZI2RHP/sF8pqqKAN0T9FTR+a+5k6CbUhTTP+clPiU9t P2OY9W+JRHNXZ5we+rShLF80KaUWq1W48lxCFrRPX6Wj/4L+NF9VYHdT1+lpvR2y g2oZH2aBMKEXa6ZWXH0UbMsENaXg/SpyHzNXT+T7W2GqSXMehC61GMK8C61TuqW7 NvQLdsNnwCX6KGSuY5TTM3KrzGzS55fOzQnQzF3pLH1mhRTU0t9Z4rQ1rTmsG8rZ iff8zk+4rA== -----END CERTIFICATE-----Generated at Thu Jan 8 16:06:05 2026 by rpki-client