This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/UGOdZFnWOaDTUW1gBJTVRUvwwsg.roa File: UGOdZFnWOaDTUW1gBJTVRUvwwsg.roa (raw, json) Hash identifier: 31f0c90jHRTJFbEadEWirIAL83TgIDaQVunpcdqq/Lc= Subject key identifier: 50:63:9D:64:59:D6:39:A0:D3:51:6D:60:04:94:D5:45:4B:F0:C2:C8 Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65 Certificate serial: 019B7EA6949DDD395F6FCBE6CB7F1D2013BF Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/UGOdZFnWOaDTUW1gBJTVRUvwwsg.roa Signing time: Fri 02 Jan 2026 12:20:04 +0000 ROA not before: Fri 02 Jan 2026 12:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42689 IP address blocks: 46.20.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:94:9d:dd:39:5f:6f:cb:e6:cb:7f:1d:20:13:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67499595a65aab0b53768def08091e31061e9e65 Validity Not Before: Jan 2 12:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50639d6459d639a0d3516d600494d5454bf0c2c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:af:55:fc:44:5e:24:e3:f6:f1:28:43:33:cc: 1c:8a:bd:82:26:40:06:cd:ef:09:2a:94:e2:9b:b7: 62:8e:81:7a:54:0a:1f:ef:90:ec:93:f5:dc:1e:cc: a9:c9:6b:46:63:15:17:5f:17:97:ef:d4:5c:d8:f1: 1f:c2:64:9c:65:fd:95:2f:3d:3b:be:cd:d0:c2:64: c9:f5:49:80:9d:f0:51:a4:bf:17:67:7c:13:16:46: c4:91:b8:3f:3c:d6:c4:33:72:72:91:d5:a3:04:f3: aa:ef:b0:a8:52:b2:9b:3b:65:15:bd:b0:1c:b4:1e: d1:50:b9:29:da:21:58:51:58:69:ce:6e:0c:ee:97: 8e:d6:7d:6e:cf:11:39:92:11:dc:7f:0d:a9:bf:b5: 39:a4:99:68:f2:d7:d3:5b:25:b4:15:12:39:77:f8: 85:e4:4f:4d:e8:2e:47:3c:a3:d2:6f:ce:38:11:04: 4a:cf:91:c5:9f:24:ad:ca:05:35:e4:da:e6:9d:a9: 9c:37:97:e1:d0:66:65:36:f4:97:78:95:bc:47:5f: 3d:8f:76:c9:a3:89:6a:0c:35:c2:d8:52:be:37:e2: 9d:a2:ab:ae:b5:78:58:b5:dd:a7:77:01:9f:65:9f: 96:23:3e:4b:8d:33:53:bc:91:cf:a7:07:8b:0d:31: 9c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:63:9D:64:59:D6:39:A0:D3:51:6D:60:04:94:D5:45:4B:F0:C2:C8 X509v3 Authority Key Identifier: keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/UGOdZFnWOaDTUW1gBJTVRUvwwsg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.20.101.0/24 Signature Algorithm: sha256WithRSAEncryption 95:fa:71:c6:ac:fc:ff:be:c2:4a:f2:7c:f3:a3:9e:da:7d:aa: ff:08:09:3b:66:e3:54:d9:0c:81:17:1d:05:64:42:8d:c5:ed: ef:14:7d:06:69:b3:c6:57:30:1d:eb:64:78:d4:8f:9d:ec:79: 27:30:87:d0:4f:e7:26:d6:f1:12:5a:da:a7:a2:90:57:2e:3a: f8:52:a8:8f:51:47:3c:d6:84:d0:32:56:80:84:44:54:d4:73: 2f:a5:35:4b:59:6a:0f:99:af:40:e5:95:81:f8:63:2a:f5:48: ad:aa:12:ce:bf:fd:66:c0:a7:7e:3c:b5:ab:f2:f3:9c:63:1f: 2d:1b:9e:91:b4:4e:d2:bb:39:dd:1f:14:60:57:12:c0:4f:e1: 98:84:1d:e6:18:9a:ec:53:3a:03:62:0d:7e:00:34:13:47:43: 8a:86:8c:25:1a:7c:81:89:38:f7:5c:ae:74:db:85:c3:aa:37: 3e:c1:ee:cb:27:b8:d1:d7:1d:7e:a3:e1:d0:7c:1e:77:89:28: d7:81:29:a3:a9:f5:7d:25:d9:90:d6:4c:f3:49:fd:ba:fe:dc: 7a:d7:76:a2:c6:1c:95:cd:e1:d3:8f:7c:e9:d1:97:55:1a:0d: a6:9d:e9:38:10:fc:f5:61:08:8c:8e:2e:37:86:36:fc:47:91: f3:f3:9a:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ppSd3Tlfb8vmy38dIBO/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx ZTllNjUwHhcNMjYwMTAyMTIyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDYzOWQ2NDU5ZDYzOWEwZDM1MTZkNjAwNDk0ZDU0NTRiZjBjMmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx69V/EReJOP28ShDM8wcir2CJkAG ze8JKpTim7dijoF6VAof75Dsk/XcHsypyWtGYxUXXxeX79Rc2PEfwmScZf2VLz07 vs3QwmTJ9UmAnfBRpL8XZ3wTFkbEkbg/PNbEM3JykdWjBPOq77CoUrKbO2UVvbAc tB7RULkp2iFYUVhpzm4M7peO1n1uzxE5khHcfw2pv7U5pJlo8tfTWyW0FRI5d/iF 5E9N6C5HPKPSb844EQRKz5HFnyStygU15NrmnamcN5fh0GZlNvSXeJW8R189j3bJ o4lqDDXC2FK+N+KdoquutXhYtd2ndwGfZZ+WIz5LjTNTvJHPpweLDTGcVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFBjnWRZ1jmg01FtYASU1UVL8MLIMB8GA1UdIwQY MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct MzU1MDgwNDE2NTJkLzEvVUdPZFpGbldPYURUVVcxZ0JKVFZSVXZ3d3NnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhRlMA0G CSqGSIb3DQEBCwUAA4IBAQCV+nHGrPz/vsJK8nzzo57afar/CAk7ZuNU2QyBFx0F ZEKNxe3vFH0GabPGVzAd62R41I+d7HknMIfQT+cm1vESWtqnopBXLjr4UqiPUUc8 1oTQMlaAhERU1HMvpTVLWWoPma9A5ZWB+GMq9UitqhLOv/1mwKd+PLWr8vOcYx8t G56RtE7SuzndHxRgVxLAT+GYhB3mGJrsUzoDYg1+ADQTR0OKhowlGnyBiTj3XK50 24XDqjc+we7LJ7jR1x1+o+HQfB53iSjXgSmjqfV9JdmQ1kzzSf26/tx613aixhyV zeHTj3zp0ZdVGg2mnek4EPz1YQiMji43hjb8R5Hz85ov -----END CERTIFICATE-----Generated at Mon Jan 19 23:23:15 2026 by rpki-client