This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/Us3lx6O95lVOsiWVeNzq7dgC-04.roa File: Us3lx6O95lVOsiWVeNzq7dgC-04.roa (raw, json) Hash identifier: +176HDuPnTiKXa7XvMrd7Iut2ICH6A4vQDi3FgDZZS0= Subject key identifier: 52:CD:E5:C7:A3:BD:E6:55:4E:B2:25:95:78:DC:EA:ED:D8:02:FB:4E Certificate issuer: /CN=076394845325084bb9ef78d4f717fc4b545fa7ed Certificate serial: 019B7FF20B0FAE4AF8A1A89B0976CC648EAA Authority key identifier: 07:63:94:84:53:25:08:4B:B9:EF:78:D4:F7:17:FC:4B:54:5F:A7:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/Us3lx6O95lVOsiWVeNzq7dgC-04.roa Signing time: Fri 02 Jan 2026 18:22:07 +0000 ROA not before: Fri 02 Jan 2026 18:22:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52199 IP address blocks: 45.149.54.0/24 maxlen: 24 2a0b:18c0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:0b:0f:ae:4a:f8:a1:a8:9b:09:76:cc:64:8e:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=076394845325084bb9ef78d4f717fc4b545fa7ed Validity Not Before: Jan 2 18:22:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52cde5c7a3bde6554eb2259578dceaedd802fb4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8d:f2:09:1c:a3:bc:4d:e5:de:ff:f5:b9:01: 7a:30:3f:5d:cd:62:2d:02:bd:2e:bd:ed:36:40:ed: e4:a5:2a:66:14:67:4d:01:f6:b6:10:d5:36:bc:38: 62:dd:82:5d:c9:a3:38:1b:d0:f4:c4:77:31:e3:b2: 3d:e2:e6:94:b3:07:58:3a:84:a3:d0:25:aa:8e:ad: e7:b0:ad:1b:a9:27:58:9e:47:6e:84:f1:fe:88:4a: 7b:dd:1d:12:b1:a4:2f:73:ee:de:1e:a7:b7:8a:db: e6:9d:11:2b:ea:6b:d5:be:64:0e:ef:59:1c:57:15: fb:77:3f:86:d9:b1:64:ba:a9:56:5c:7b:de:8a:ce: cf:0a:a0:b0:54:2a:ab:33:63:49:4c:b4:e5:84:58: 0f:53:00:97:25:6b:27:32:c2:df:70:c9:da:03:d2: 7c:e6:84:b5:bf:0a:ee:f9:b1:0c:f8:28:6f:5d:2a: 97:b6:75:4b:ee:83:f8:d1:d2:fd:5e:90:a8:82:9e: 73:a2:9a:96:cd:94:a2:a6:3a:e4:1f:29:b2:24:c2: fc:40:e5:0f:d0:ab:cf:b3:09:3c:39:5a:26:b7:8a: 56:cb:da:80:b6:8f:2b:d2:57:f3:7f:3f:cd:88:d4: 8d:09:92:de:66:db:87:af:7f:73:7a:49:07:a5:31: 01:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CD:E5:C7:A3:BD:E6:55:4E:B2:25:95:78:DC:EA:ED:D8:02:FB:4E X509v3 Authority Key Identifier: keyid:07:63:94:84:53:25:08:4B:B9:EF:78:D4:F7:17:FC:4B:54:5F:A7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/Us3lx6O95lVOsiWVeNzq7dgC-04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.54.0/24 IPv6: 2a0b:18c0::/29 Signature Algorithm: sha256WithRSAEncryption 01:3d:53:13:51:98:78:d6:6d:a4:7e:40:29:f5:bc:1b:e8:b8: 51:b1:e3:9b:b8:28:87:88:c1:bf:dd:e2:cf:52:e1:26:13:62: 79:c9:76:ef:95:cb:12:4e:37:86:e9:ae:63:35:df:26:d9:89: 1b:02:03:0e:b1:df:a8:4e:08:34:cc:c2:f1:5e:e0:45:97:31: f3:92:e7:d5:da:82:f9:02:d1:de:6f:9d:78:fd:2f:0b:e7:73: a7:dc:0b:0f:70:4a:cc:bd:1b:74:3b:97:c4:df:cb:ec:0d:eb: 04:b3:c6:bd:43:04:e0:33:08:fb:62:ea:89:6f:8d:49:6b:a1: 23:2f:8d:b9:6f:5e:94:8b:11:65:66:44:8a:fc:5a:33:8b:76: c9:b7:79:b7:34:ac:f8:74:11:c9:71:87:a9:d2:d3:08:25:75: 36:25:12:e7:0a:67:7f:03:ec:84:36:85:50:fe:4b:6c:61:3e: a3:0a:63:f5:12:62:dc:87:7f:1c:ba:1b:e6:82:3b:c0:da:fd: 77:4b:4e:d6:d6:36:64:11:8f:f3:2b:a5:5a:c1:6d:d5:f1:fa: 30:73:63:8a:45:27:ad:27:bb:40:7f:97:e4:3a:f1:54:f2:24: 8d:ef:7b:e9:84:6a:22:c8:1a:a5:e5:1f:75:95:ce:ee:bb:b6: ad:12:bd:5f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/8gsPrkr4oaibCXbMZI6qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NjM5NDg0NTMyNTA4NGJiOWVmNzhkNGY3MTdmYzRiNTQ1 ZmE3ZWQwHhcNMjYwMTAyMTgyMjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmNkZTVjN2EzYmRlNjU1NGViMjI1OTU3OGRjZWFlZGQ4MDJmYjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI3yCRyjvE3l3v/1uQF6MD9dzWIt Ar0uve02QO3kpSpmFGdNAfa2ENU2vDhi3YJdyaM4G9D0xHcx47I94uaUswdYOoSj 0CWqjq3nsK0bqSdYnkduhPH+iEp73R0SsaQvc+7eHqe3itvmnREr6mvVvmQO71kc VxX7dz+G2bFkuqlWXHveis7PCqCwVCqrM2NJTLTlhFgPUwCXJWsnMsLfcMnaA9J8 5oS1vwru+bEM+ChvXSqXtnVL7oP40dL9XpCogp5zopqWzZSipjrkHymyJML8QOUP 0KvPswk8OVomt4pWy9qAto8r0lfzfz/NiNSNCZLeZtuHr39zekkHpTEBgwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFLN5cejveZVTrIllXjc6u3YAvtOMB8GA1UdIwQY MBaAFAdjlIRTJQhLue941PcX/EtUX6ftMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjJPVWhGTWxDRXU1NzNqVTl4ZjhTMVJmcC0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lOTk2YWEtMmRjYi00YzQzLTkzZmQt MzRiN2QxN2ZmNzE1LzEvVXMzbHg2Tzk1bFZPc2lXVmVOenE3ZGdDLTA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9lOTk2YWEtMmRjYi00YzQzLTkzZmQtMzRiN2QxN2ZmNzE1 LzEvQjJPVWhGTWxDRXU1NzNqVTl4ZjhTMVJmcC0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALZU2MA0E AgACMAcDBQMqCxjAMA0GCSqGSIb3DQEBCwUAA4IBAQABPVMTUZh41m2kfkAp9bwb 6LhRseObuCiHiMG/3eLPUuEmE2J5yXbvlcsSTjeG6a5jNd8m2YkbAgMOsd+oTgg0 zMLxXuBFlzHzkufV2oL5AtHeb514/S8L53On3AsPcErMvRt0O5fE38vsDesEs8a9 QwTgMwj7YuqJb41Ja6EjL425b16UixFlZkSK/Fozi3bJt3m3NKz4dBHJcYep0tMI JXU2JRLnCmd/A+yENoVQ/ktsYT6jCmP1EmLch38cuhvmgjvA2v13S07W1jZkEY/z K6VawW3V8fowc2OKRSetJ7tAf5fkOvFU8iSN73vphGoiyBql5R91lc7uu7atEr1f -----END CERTIFICATE-----Generated at Tue Feb 10 05:58:03 2026 by rpki-client