This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/uayNlDc6dqVrg_gSSovd6FDOoQ0.roa File: uayNlDc6dqVrg_gSSovd6FDOoQ0.roa (raw, json) Hash identifier: cKRFoq1V2/k3fh1AK8vhlIknI7lIvYcdWYtvyJkyz70= Subject key identifier: B9:AC:8D:94:37:3A:76:A5:6B:83:F8:12:4A:8B:DD:E8:50:CE:A1:0D Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Certificate serial: 019B7A5AA8E664E49159B72758B059AD88D6 Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/uayNlDc6dqVrg_gSSovd6FDOoQ0.roa Signing time: Thu 01 Jan 2026 16:18:40 +0000 ROA not before: Thu 01 Jan 2026 16:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2856 IP address blocks: 45.83.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a8:e6:64:e4:91:59:b7:27:58:b0:59:ad:88:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Validity Not Before: Jan 1 16:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9ac8d94373a76a56b83f8124a8bdde850cea10d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7b:c6:c7:ba:c9:60:79:0f:2e:27:5d:82:08: a9:b9:9f:97:dc:77:54:df:4e:bb:5f:8f:e8:b7:28: b5:39:32:89:fe:35:59:28:fc:af:20:d2:54:28:ac: b4:67:83:9d:28:10:72:6d:01:d2:3c:64:b5:30:c1: 52:a6:9c:37:de:0d:37:cc:45:b4:74:3d:1f:1a:da: 6a:30:1f:16:86:11:f1:94:f2:b4:8f:14:50:e4:78: 4f:7d:8f:e8:39:19:fc:7a:6d:c7:a6:6b:e4:45:c5: f4:e5:d0:58:72:1e:59:c1:18:15:18:19:a0:f3:26: b2:17:cd:d9:3a:19:83:68:e2:2d:6f:eb:08:66:29: 9e:b5:69:57:2b:e6:c7:f1:b6:42:ea:9b:d1:d4:7e: 71:c0:db:a5:44:02:24:32:55:28:19:4c:75:5c:df: 8d:22:34:35:8a:a5:bf:28:1d:e3:63:bf:e8:b6:b5: 04:b9:c9:16:e8:69:f4:d5:f6:e4:47:ae:2c:02:2a: 83:da:99:9e:c8:34:ca:bd:5f:d9:5f:83:f6:f5:01: 7e:d1:17:b2:34:4a:d0:16:97:05:e6:f0:4c:09:ab: 4b:35:0e:2e:71:d1:c1:76:65:f6:c1:4d:54:f4:e3: d7:f5:b9:22:c9:d5:91:84:da:46:f5:f0:6f:78:e7: cf:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:AC:8D:94:37:3A:76:A5:6B:83:F8:12:4A:8B:DD:E8:50:CE:A1:0D X509v3 Authority Key Identifier: keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/uayNlDc6dqVrg_gSSovd6FDOoQ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.238.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:40:48:9a:ed:c0:f0:da:d5:af:b7:64:71:91:08:51:b3:8f: d8:88:13:3a:85:23:41:d1:86:0b:c4:68:eb:20:0f:6d:ad:11: 7a:d1:9a:b2:80:68:c2:1e:24:c9:df:3e:b7:21:c1:a8:68:fc: c5:90:d5:78:e3:48:3f:69:9f:17:dc:90:66:88:93:d3:e9:77: af:2c:f9:ef:33:e7:82:d1:3b:79:39:ad:91:20:57:13:d9:50: c7:ad:17:b5:d4:9d:8c:c0:ae:24:8d:76:ee:14:86:8d:96:98: a7:e6:2f:ed:98:24:36:93:c3:72:99:7a:07:38:e0:68:5f:e3: 2b:41:6b:93:df:58:82:0e:fc:47:ca:52:d2:0f:bd:9b:64:81: 68:2f:28:da:03:20:22:2f:89:1c:74:0f:9f:8e:5a:b3:a0:5f: 26:f4:23:7e:b2:df:78:e8:3d:7c:5d:60:65:31:30:0a:8b:0f: 3a:2b:6e:97:b0:3b:ab:59:bf:6b:bb:ea:32:a7:09:53:32:1f: fd:00:34:a5:bd:e9:e7:b4:17:14:8c:6a:89:2f:67:59:35:95: d7:ab:7b:e8:99:be:85:d3:cf:73:41:39:bd:ab:93:ce:37:d7: 35:e3:09:ff:ed:a1:bc:b4:de:1f:d7:76:d3:b9:5e:2e:aa:12: 8c:e5:d7:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WqjmZOSRWbcnWLBZrYjWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm YmM0YTkwHhcNMjYwMTAxMTYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWFjOGQ5NDM3M2E3NmE1NmI4M2Y4MTI0YThiZGRlODUwY2VhMTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XvGx7rJYHkPLiddggipuZ+X3HdU 3067X4/otyi1OTKJ/jVZKPyvINJUKKy0Z4OdKBBybQHSPGS1MMFSppw33g03zEW0 dD0fGtpqMB8WhhHxlPK0jxRQ5HhPfY/oORn8em3HpmvkRcX05dBYch5ZwRgVGBmg 8yayF83ZOhmDaOItb+sIZimetWlXK+bH8bZC6pvR1H5xwNulRAIkMlUoGUx1XN+N IjQ1iqW/KB3jY7/otrUEuckW6Gn01fbkR64sAiqD2pmeyDTKvV/ZX4P29QF+0Rey NErQFpcF5vBMCatLNQ4ucdHBdmX2wU1U9OPX9bkiydWRhNpG9fBveOfP9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLmsjZQ3Onala4P4EkqL3ehQzqENMB8GA1UdIwQY MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt NmM3ZTU2ODU4OTBjLzEvdWF5TmxEYzZkcVZyZ19nU1NvdmQ2RkRPb1EwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVPuMA0G CSqGSIb3DQEBCwUAA4IBAQCbQEia7cDw2tWvt2RxkQhRs4/YiBM6hSNB0YYLxGjr IA9trRF60ZqygGjCHiTJ3z63IcGoaPzFkNV440g/aZ8X3JBmiJPT6XevLPnvM+eC 0Tt5Oa2RIFcT2VDHrRe11J2MwK4kjXbuFIaNlpin5i/tmCQ2k8NymXoHOOBoX+Mr QWuT31iCDvxHylLSD72bZIFoLyjaAyAiL4kcdA+fjlqzoF8m9CN+st946D18XWBl MTAKiw86K26XsDurWb9ru+oypwlTMh/9ADSlvenntBcUjGqJL2dZNZXXq3vomb6F 089zQTm9q5PON9c14wn/7aG8tN4f13bTuV4uqhKM5ddG -----END CERTIFICATE-----Generated at Thu Jan 8 17:35:00 2026 by rpki-client