This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/UL14P1AhHlUZzAIOnswglPjo1V8.roa File: UL14P1AhHlUZzAIOnswglPjo1V8.roa (raw, json) Hash identifier: oIVyB68rjWbYMJyZsMbtBMTHDcN1LK+tN3ZZZFRb1s4= Subject key identifier: 50:BD:78:3F:50:21:1E:55:19:CC:02:0E:9E:CC:20:94:F8:E8:D5:5F Certificate issuer: /CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0 Certificate serial: 019B7B35E64C33710955A04FB8C2F5418F93 Authority key identifier: 08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/UL14P1AhHlUZzAIOnswglPjo1V8.roa Signing time: Thu 01 Jan 2026 20:18:08 +0000 ROA not before: Thu 01 Jan 2026 20:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 178.213.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 08:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:e6:4c:33:71:09:55:a0:4f:b8:c2:f5:41:8f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0 Validity Not Before: Jan 1 20:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50bd783f50211e5519cc020e9ecc2094f8e8d55f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:29:83:02:28:3b:0a:5a:e7:1a:c9:12:68:8c: 85:a4:fa:63:93:a7:16:5b:da:af:7f:61:c1:3a:1b: b2:68:f3:71:c2:4d:9e:71:95:71:b2:fa:f3:8f:4e: 5d:79:3f:c9:e6:d7:11:ef:00:f6:fb:04:2a:c5:f9: 82:73:bc:61:61:7f:b5:b2:51:53:78:89:b6:4b:29: 89:c4:7c:55:8c:0c:c2:5c:79:54:5b:c0:20:68:c5: 5e:1a:fb:9c:c9:f8:b5:17:90:90:8c:f2:a2:6b:3c: 76:01:07:8d:7e:fc:56:95:6d:29:91:3d:0f:6d:22: d9:7c:1d:47:e9:38:56:15:18:11:61:8d:ae:e3:6d: c5:05:e0:45:c9:66:9b:e5:0f:8b:ed:36:22:9b:f0: 6f:7d:8b:b0:52:ab:c3:dd:c1:71:c3:24:a1:45:5a: 62:de:1d:ad:95:ad:56:16:ed:54:61:99:19:0b:de: 7c:03:cb:40:5e:6c:96:df:13:95:b6:ff:23:5b:66: 0e:cf:1a:e8:83:1f:71:f8:38:e6:67:fa:0f:64:bc: 48:39:5f:62:be:24:f2:b4:fc:09:f4:75:b4:6c:71: e1:df:fa:0e:35:d7:fd:88:a3:e9:a8:70:7d:1a:dc: 6a:a4:27:67:bc:db:8d:77:44:2c:3c:df:e1:70:e7: a2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BD:78:3F:50:21:1E:55:19:CC:02:0E:9E:CC:20:94:F8:E8:D5:5F X509v3 Authority Key Identifier: keyid:08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/UL14P1AhHlUZzAIOnswglPjo1V8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.213.75.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:ca:ed:47:4e:bc:be:e5:ed:72:55:62:13:34:5b:d9:03:fe: d4:a5:c5:b9:95:ca:55:e9:ae:16:f2:04:0f:32:ab:5f:95:47: 01:f7:18:04:26:8f:5b:a4:30:b0:ef:f4:42:e5:6d:67:55:2e: f9:1d:76:54:d3:9a:b4:46:ef:df:42:c1:91:ae:41:7c:a4:5a: 9d:70:1b:85:f6:06:1d:2d:cb:36:f4:61:f3:86:99:45:5c:07: fe:90:d6:c9:76:f2:95:c9:c9:ed:43:1a:c4:aa:a8:95:c9:bd: 45:24:c1:e1:48:89:63:c3:2d:69:e9:cb:f0:08:c9:0e:d1:36: d1:0b:5e:cd:99:dc:c9:d5:06:0e:4d:22:0e:b8:20:8a:f8:e6: 94:fe:d2:44:d8:79:eb:91:23:51:e9:50:87:9c:c9:57:20:90: aa:85:11:3e:ec:c1:44:2d:b6:6d:ec:e4:58:57:f1:b3:03:65: e2:7d:6d:93:d8:ae:20:e3:13:20:88:e7:28:21:a9:48:5c:f4: 23:84:34:0f:04:9d:a3:a5:41:70:7f:cc:3d:05:80:c6:d0:8a: 5a:83:e1:1b:fd:0a:53:aa:88:1a:91:0a:ab:d3:d8:3d:6f:fc: 45:c9:f5:69:21:7b:43:56:ec:5d:c6:bb:db:7b:e9:0c:fb:5e: 8a:42:c2:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NeZMM3EJVaBPuML1QY+TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YTI5N2Y4Y2ZhMWNlNmQzZmUyYzUyNjkxMWM0NjhhOWE2 MzE4ZDAwHhcNMjYwMTAxMjAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGJkNzgzZjUwMjExZTU1MTljYzAyMGU5ZWNjMjA5NGY4ZThkNTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyymDAig7ClrnGskSaIyFpPpjk6cW W9qvf2HBOhuyaPNxwk2ecZVxsvrzj05deT/J5tcR7wD2+wQqxfmCc7xhYX+1slFT eIm2SymJxHxVjAzCXHlUW8AgaMVeGvucyfi1F5CQjPKiazx2AQeNfvxWlW0pkT0P bSLZfB1H6ThWFRgRYY2u423FBeBFyWab5Q+L7TYim/BvfYuwUqvD3cFxwyShRVpi 3h2tla1WFu1UYZkZC958A8tAXmyW3xOVtv8jW2YOzxrogx9x+DjmZ/oPZLxIOV9i viTytPwJ9HW0bHHh3/oONdf9iKPpqHB9GtxqpCdnvNuNd0QsPN/hcOeiuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFC9eD9QIR5VGcwCDp7MIJT46NVfMB8GA1UdIwQY MBaAFAiil/jPoc5tP+LFJpEcRoqaYxjQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0tLWC1NLWh6bTBfNHNVbWtSeEdpcHBqR05BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81ZjE1M2QtNzFkOS00NzBhLWJhMjct OTcxMTM5NTE0YmIxLzEvVUwxNFAxQWhIbFVaekFJT25zd2dsUGpvMVY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS81ZjE1M2QtNzFkOS00NzBhLWJhMjctOTcxMTM5NTE0YmIx LzEvQ0tLWC1NLWh6bTBfNHNVbWtSeEdpcHBqR05BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstVLMA0G CSqGSIb3DQEBCwUAA4IBAQAvyu1HTry+5e1yVWITNFvZA/7UpcW5lcpV6a4W8gQP MqtflUcB9xgEJo9bpDCw7/RC5W1nVS75HXZU05q0Ru/fQsGRrkF8pFqdcBuF9gYd Lcs29GHzhplFXAf+kNbJdvKVycntQxrEqqiVyb1FJMHhSIljwy1p6cvwCMkO0TbR C17NmdzJ1QYOTSIOuCCK+OaU/tJE2HnrkSNR6VCHnMlXIJCqhRE+7MFELbZt7ORY V/GzA2XifW2T2K4g4xMgiOcoIalIXPQjhDQPBJ2jpUFwf8w9BYDG0Ipag+Eb/QpT qogakQqr09g9b/xFyfVpIXtDVuxdxrvbe+kM+16KQsKL -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:34 2026 by rpki-client