This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/undQHaKT6czAToaH0ngpfA6qrow.roa File: undQHaKT6czAToaH0ngpfA6qrow.roa (raw, json) Hash identifier: dPBsqWDRKveHU3jcvCAMgjg8l0Q11jENskFPm5MGXFc= Subject key identifier: BA:77:50:1D:A2:93:E9:CC:C0:4E:86:87:D2:78:29:7C:0E:AA:AE:8C Certificate issuer: /CN=7292226567da72dd86883cadd5f3de6ffd5b3573 Certificate serial: 019B7BA3825029EBFD5D6CA74CD9675981F1 Authority key identifier: 72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/undQHaKT6czAToaH0ngpfA6qrow.roa Signing time: Thu 01 Jan 2026 22:17:51 +0000 ROA not before: Thu 01 Jan 2026 22:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56911 IP address blocks: 45.117.232.0/22 maxlen: 22 176.119.217.0/24 maxlen: 24 2a07:9340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:82:50:29:eb:fd:5d:6c:a7:4c:d9:67:59:81:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7292226567da72dd86883cadd5f3de6ffd5b3573 Validity Not Before: Jan 1 22:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba77501da293e9ccc04e8687d278297c0eaaae8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d8:01:e2:5d:55:30:94:3b:d0:b8:5f:5a:33: 90:ea:1f:94:50:42:2c:66:23:c2:30:f6:f5:45:c0: b1:99:9f:5e:b6:be:15:ea:b9:d5:2b:7b:0d:dc:29: 53:d8:63:5f:49:10:46:81:cc:ab:1a:1b:9e:e2:9c: 65:8e:9a:27:3d:ad:6d:39:6a:3a:26:a5:26:7d:75: 53:a9:ad:c1:70:03:ad:a0:5c:42:9b:b3:3d:4d:ce: 29:fb:fd:9c:9c:96:42:16:25:9d:e1:ed:5b:10:da: e5:88:85:70:de:a2:9b:c7:e6:58:22:8c:70:73:80: 27:da:77:b1:38:33:24:cb:51:25:e9:4b:1d:ee:fe: 55:c6:82:57:72:8f:a2:46:af:d6:22:73:9e:dd:6a: 5f:3b:7b:6b:3c:de:c1:d9:bf:88:52:87:16:f5:59: 1e:9b:f7:fa:19:8a:66:5c:80:32:4a:c7:5c:58:e6: c4:de:43:8c:71:ba:28:93:2c:40:be:2d:6d:42:38: a3:2f:6f:67:6e:7d:ae:c9:b8:81:6d:be:a9:b9:c5: 58:f6:aa:ab:ca:15:e0:0b:10:de:91:90:c4:bc:bf: dc:3d:b5:8c:fb:f5:30:68:7f:fd:09:96:b3:5c:12: bf:9b:16:25:4c:97:72:d3:37:00:0e:7e:20:62:42: e0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:77:50:1D:A2:93:E9:CC:C0:4E:86:87:D2:78:29:7C:0E:AA:AE:8C X509v3 Authority Key Identifier: keyid:72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/undQHaKT6czAToaH0ngpfA6qrow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.117.232.0/22 176.119.217.0/24 IPv6: 2a07:9340::/32 Signature Algorithm: sha256WithRSAEncryption 79:eb:b5:81:2a:b3:ff:b9:e2:16:65:21:ea:98:7d:f5:47:c3: f6:29:fa:36:b9:19:fa:ea:a9:af:6a:8a:73:3b:d3:64:a6:47: 05:a6:a4:45:f9:72:6a:a8:2b:1d:da:da:38:2f:bb:e3:1c:a6: c9:a2:05:7c:df:d3:a5:d8:59:62:db:02:6d:8c:6e:d4:3c:21: 30:64:53:cf:69:4f:80:94:a8:b9:a3:8a:fc:d6:ba:25:c7:dc: 88:ea:e4:c1:e9:ee:77:da:ea:6a:32:39:6f:3d:4d:98:f0:1d: ca:05:4e:56:dc:4b:af:2d:b3:de:19:ad:cf:e8:a7:7b:e8:0e: 57:0f:80:93:44:4a:6e:66:15:21:e1:3d:e3:bf:1f:fa:90:bc: 02:ac:ad:0e:7f:38:7a:e5:3e:7d:6d:49:3b:eb:95:cc:bc:09: e5:b2:e4:32:94:0c:45:02:e1:36:cb:23:2d:33:30:11:42:7d: 5c:1e:21:c6:50:c3:0f:8a:78:62:33:25:7c:4a:8c:1b:b2:f6: 1c:b4:aa:b8:8d:23:cd:f3:8d:03:a2:50:ba:ab:6d:88:57:4e: 9a:cd:4f:bb:03:f8:88:25:b3:4a:6e:b2:16:02:5e:94:8e:59: e2:97:8f:2c:48:23:72:12:f6:cd:c4:6a:25:db:e0:74:7f:29: 79:55:81:2e -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7o4JQKev9XWynTNlnWYHxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyOTIyMjY1NjdkYTcyZGQ4Njg4M2NhZGQ1ZjNkZTZmZmQ1 YjM1NzMwHhcNMjYwMTAxMjIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTc3NTAxZGEyOTNlOWNjYzA0ZTg2ODdkMjc4Mjk3YzBlYWFhZThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9gB4l1VMJQ70LhfWjOQ6h+UUEIs ZiPCMPb1RcCxmZ9etr4V6rnVK3sN3ClT2GNfSRBGgcyrGhue4pxljponPa1tOWo6 JqUmfXVTqa3BcAOtoFxCm7M9Tc4p+/2cnJZCFiWd4e1bENrliIVw3qKbx+ZYIoxw c4An2nexODMky1El6Usd7v5VxoJXco+iRq/WInOe3WpfO3trPN7B2b+IUocW9Vke m/f6GYpmXIAySsdcWObE3kOMcbookyxAvi1tQjijL29nbn2uybiBbb6pucVY9qqr yhXgCxDekZDEvL/cPbWM+/UwaH/9CZazXBK/mxYlTJdy0zcADn4gYkLgQQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFLp3UB2ik+nMwE6Gh9J4KXwOqq6MMB8GA1UdIwQY MBaAFHKSImVn2nLdhog8rdXz3m/9WzVzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3BJaVpXZmFjdDJHaUR5dDFmUGViXzFiTlhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC80ZWMyMTctZThkNy00ZTgwLTg3Y2Qt MDM5ZGU3ODRkOTQxLzEvdW5kUUhhS1Q2Y3pBVG9hSDBuZ3BmQTZxcm93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC80ZWMyMTctZThkNy00ZTgwLTg3Y2QtMDM5ZGU3ODRkOTQx LzEvY3BJaVpXZmFjdDJHaUR5dDFmUGViXzFiTlhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLXXoAwQA sHfZMA0EAgACMAcDBQAqB5NAMA0GCSqGSIb3DQEBCwUAA4IBAQB567WBKrP/ueIW ZSHqmH31R8P2Kfo2uRn66qmvaopzO9NkpkcFpqRF+XJqqCsd2to4L7vjHKbJogV8 39Ol2Fli2wJtjG7UPCEwZFPPaU+AlKi5o4r81rolx9yI6uTB6e532upqMjlvPU2Y 8B3KBU5W3EuvLbPeGa3P6Kd76A5XD4CTREpuZhUh4T3jvx/6kLwCrK0Ofzh65T59 bUk765XMvAnlsuQylAxFAuE2yyMtMzARQn1cHiHGUMMPinhiMyV8SowbsvYctKq4 jSPN840DolC6q22IV06azU+7A/iIJbNKbrIWAl6Ujlnil48sSCNyEvbNxGol2+B0 fyl5VYEu -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:08 2026 by rpki-client