This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/ulmVQiOp1gOs49EtEkyImPsqtd0.roa File: ulmVQiOp1gOs49EtEkyImPsqtd0.roa (raw, json) Hash identifier: f351U+o3k5FK4942+J3BTuz1lhxg1e9CRMaV4iDlrp0= Subject key identifier: BA:59:95:42:23:A9:D6:03:AC:E3:D1:2D:12:4C:88:98:FB:2A:B5:DD Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65 Certificate serial: 019B7EA69713E27BDC50AA2BAC783463C70A Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/ulmVQiOp1gOs49EtEkyImPsqtd0.roa Signing time: Fri 02 Jan 2026 12:20:05 +0000 ROA not before: Fri 02 Jan 2026 12:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51847 IP address blocks: 46.20.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:97:13:e2:7b:dc:50:aa:2b:ac:78:34:63:c7:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67499595a65aab0b53768def08091e31061e9e65 Validity Not Before: Jan 2 12:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba59954223a9d603ace3d12d124c8898fb2ab5dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:98:04:a5:06:b0:4c:cc:bd:25:94:37:75:ed: 73:c7:ff:fa:5f:e1:9c:62:67:37:dd:91:ff:2d:22: 01:9d:ab:8f:45:7a:00:a4:47:c0:eb:e4:11:e6:a4: 76:73:27:64:85:6d:dc:3c:3d:f1:ad:3d:9b:4b:85: 2e:b3:e2:e4:c3:44:14:be:ca:b0:9e:90:55:eb:c2: 61:2e:99:a7:37:1d:09:1a:cb:91:6d:7f:e2:c5:47: f0:f0:0e:1d:ea:d8:13:74:75:1a:bf:19:c7:c8:8a: f2:0d:51:8f:84:91:03:d0:69:cd:50:56:1a:9b:16: 5b:61:c0:f6:4f:27:99:a4:2f:63:ee:b7:94:4c:42: e8:c3:5e:28:17:f9:b2:52:93:03:c0:32:25:4d:90: ec:ee:69:ae:f9:e0:25:2a:f3:61:9d:a0:df:5c:41: 8f:75:5d:f7:8b:9e:14:88:b6:1a:97:db:39:c8:fc: b6:df:c8:76:6e:f6:f7:e8:30:ae:e4:c9:d1:21:d6: 6c:24:af:62:74:3e:b6:2d:28:18:e4:a2:20:53:2d: e0:3b:62:56:f9:a3:e5:67:78:f7:72:14:68:4b:4d: df:e7:40:99:9c:35:66:3d:95:17:0f:9e:a2:d2:4a: 31:ba:1e:0f:59:0f:6b:4a:8b:cb:e7:48:fe:e7:14: 9b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:59:95:42:23:A9:D6:03:AC:E3:D1:2D:12:4C:88:98:FB:2A:B5:DD X509v3 Authority Key Identifier: keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/ulmVQiOp1gOs49EtEkyImPsqtd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.20.109.0/24 Signature Algorithm: sha256WithRSAEncryption 30:ab:2b:43:55:1a:b3:c9:8a:8f:be:a4:4f:db:74:a6:ce:cd: a1:9a:10:e4:b3:6f:72:4e:bc:c6:33:f4:ef:72:b9:cd:99:f5: cf:6c:ff:c7:54:47:2d:34:60:ba:0b:66:9a:ff:48:5b:d4:87: 08:98:71:f7:4f:f5:b0:13:24:b0:b5:59:67:f9:a9:f7:fc:0b: 25:1d:56:7b:45:e6:76:a8:79:1b:ed:c1:19:a9:80:aa:80:80: 54:85:b5:42:8b:03:a9:9b:c0:3f:e0:f5:d9:51:50:55:a9:af: 70:07:f9:b5:a3:00:cc:e2:89:00:49:da:e0:2c:68:61:b0:c4: 5b:ad:ef:43:5a:6f:00:08:1e:7c:ab:c9:a9:84:5a:c0:44:bb: 20:3d:17:d0:01:0a:aa:db:2d:6f:6a:f8:26:a9:8d:df:7f:94: d1:21:1d:8a:ee:67:92:80:01:ce:44:a7:05:69:1d:5d:ba:8a: f5:15:27:8b:b1:e5:04:ec:4a:ff:70:99:72:c2:56:3e:dc:df: d5:1d:33:56:f4:a3:59:60:f6:e5:1a:52:72:35:c9:4d:e5:9f: 33:c8:2e:f4:bf:2b:69:d1:86:58:01:fe:ce:c3:ee:97:3c:20: f4:e8:e2:c7:cb:aa:6e:bd:ab:41:4d:58:39:c1:e0:fe:fb:9f: 66:65:51:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ppcT4nvcUKorrHg0Y8cKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx ZTllNjUwHhcNMjYwMTAyMTIyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTU5OTU0MjIzYTlkNjAzYWNlM2QxMmQxMjRjODg5OGZiMmFiNWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5gEpQawTMy9JZQ3de1zx//6X+Gc Ymc33ZH/LSIBnauPRXoApEfA6+QR5qR2cydkhW3cPD3xrT2bS4Uus+Lkw0QUvsqw npBV68JhLpmnNx0JGsuRbX/ixUfw8A4d6tgTdHUavxnHyIryDVGPhJED0GnNUFYa mxZbYcD2TyeZpC9j7reUTELow14oF/myUpMDwDIlTZDs7mmu+eAlKvNhnaDfXEGP dV33i54UiLYal9s5yPy238h2bvb36DCu5MnRIdZsJK9idD62LSgY5KIgUy3gO2JW +aPlZ3j3chRoS03f50CZnDVmPZUXD56i0koxuh4PWQ9rSovL50j+5xSbGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLpZlUIjqdYDrOPRLRJMiJj7KrXdMB8GA1UdIwQY MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct MzU1MDgwNDE2NTJkLzEvdWxtVlFpT3AxZ09zNDlFdEVreUltUHNxdGQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhRtMA0G CSqGSIb3DQEBCwUAA4IBAQAwqytDVRqzyYqPvqRP23Smzs2hmhDks29yTrzGM/Tv crnNmfXPbP/HVEctNGC6C2aa/0hb1IcImHH3T/WwEySwtVln+an3/AslHVZ7ReZ2 qHkb7cEZqYCqgIBUhbVCiwOpm8A/4PXZUVBVqa9wB/m1owDM4okASdrgLGhhsMRb re9DWm8ACB58q8mphFrARLsgPRfQAQqq2y1vavgmqY3ff5TRIR2K7meSgAHORKcF aR1duor1FSeLseUE7Er/cJlywlY+3N/VHTNW9KNZYPblGlJyNclN5Z8zyC70vytp 0YZYAf7Ow+6XPCD06OLHy6puvatBTVg5weD++59mZVEt -----END CERTIFICATE-----Generated at Sun Jan 18 04:10:32 2026 by rpki-client