This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/pUGXrda-5CwDfT8dIuT70gU_mF0.roa File: pUGXrda-5CwDfT8dIuT70gU_mF0.roa (raw, json) Hash identifier: erT2OQfqvKXCpo5RhfMrTrP52PKYM1WR0OlhH7BXo1s= Subject key identifier: A5:41:97:AD:D6:BE:E4:2C:03:7D:3F:1D:22:E4:FB:D2:05:3F:98:5D Certificate issuer: /CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d Certificate serial: 019B7CEDB0801D1149732406042E1A137F04 Authority key identifier: DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/pUGXrda-5CwDfT8dIuT70gU_mF0.roa Signing time: Fri 02 Jan 2026 04:18:30 +0000 ROA not before: Fri 02 Jan 2026 04:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213979 IP address blocks: 45.87.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:b0:80:1d:11:49:73:24:06:04:2e:1a:13:7f:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d Validity Not Before: Jan 2 04:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a54197add6bee42c037d3f1d22e4fbd2053f985d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:60:c5:18:9f:05:59:28:75:44:7d:6f:21:f0: 53:91:9d:64:22:90:ca:73:4a:2a:52:63:47:5c:8b: 06:3a:1f:92:d0:89:9a:be:87:f1:1f:61:53:d5:97: a2:ad:36:28:19:25:2e:b9:2d:bd:f4:78:18:4d:99: 7e:8d:d1:40:67:2e:c0:53:9a:8e:e9:bc:bf:da:b5: 06:68:f0:e5:bc:81:3c:6f:5e:6b:7d:3f:6f:a4:ad: a7:a5:ea:1a:3d:d4:18:4e:04:9c:70:d1:3b:af:05: b0:51:b6:87:b0:5a:cf:9e:f2:19:24:8c:1e:b3:0b: e3:6a:93:5f:48:6d:7a:9e:f7:a5:fa:4c:d6:98:20: de:f8:9b:63:1b:ea:11:ba:29:6c:eb:ba:7a:1e:a3: 18:30:59:23:a4:4e:4f:fe:65:cb:ef:0b:5c:53:38: ac:ce:c0:2b:44:07:fa:a4:bb:f9:c1:9c:1b:75:55: c2:30:23:e3:2a:a6:10:31:d7:9f:62:02:36:c7:7f: c0:95:ce:de:7d:53:d3:d8:c5:b4:62:0d:df:b5:8b: 4e:d2:c8:b8:e0:31:c4:e0:3b:a9:19:75:ee:40:80: ae:2f:79:fa:d4:76:af:e0:cb:f3:d2:c7:8d:41:c3: 47:91:b4:f9:22:8f:e8:a8:b5:1c:03:f5:dc:1e:ab: 9f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:41:97:AD:D6:BE:E4:2C:03:7D:3F:1D:22:E4:FB:D2:05:3F:98:5D X509v3 Authority Key Identifier: keyid:DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/pUGXrda-5CwDfT8dIuT70gU_mF0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.89.0/24 Signature Algorithm: sha256WithRSAEncryption 45:52:a5:23:e5:13:5d:1b:1a:43:4f:79:42:fb:3b:65:16:5e: 4c:0e:cb:43:19:eb:46:c4:b8:44:19:e0:8b:5e:cb:c6:7f:87: 28:80:b1:5d:fd:e0:63:d0:17:d4:bb:39:5c:73:4f:68:fd:91: 99:46:ee:1e:1a:e3:7f:9f:ae:20:0f:51:38:2b:8d:82:ea:2a: 57:d8:db:6b:e7:64:0d:6a:ce:e8:92:48:0d:52:5a:73:aa:04: a7:d0:a4:27:f3:38:38:11:77:a3:dc:a3:13:da:79:69:92:95: 21:f1:b9:7f:2d:a0:fb:ee:60:a9:b0:82:c8:04:9f:9e:ec:39: 47:85:2d:ea:5c:e3:c0:df:e1:64:12:64:7c:72:c6:b7:58:fb: a0:14:63:71:5c:d1:81:97:b4:d3:7f:0c:10:94:a4:f6:1b:57: ca:15:87:03:f2:7b:28:48:d1:6f:5f:ad:b1:f4:9a:ac:9b:f5: f6:4a:c8:d6:63:e1:90:4b:8a:ce:a9:2c:dd:51:5c:76:81:47: ea:ab:39:10:e3:8c:09:c5:f0:b6:a7:66:2f:a2:b1:0d:10:9b: 8f:e0:ec:de:ab:d1:5a:3b:51:fa:e3:48:d2:ee:d7:c5:47:e6: b1:67:c5:97:e5:f2:98:25:b4:c7:13:71:d0:14:f9:15:ce:59: d2:69:e4:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87bCAHRFJcyQGBC4aE38EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMGJkZTE0Njc4OTVjNmYzYTQ3MTk3ZWFjNThjYTEzYWU0 YmI3OGQwHhcNMjYwMTAyMDQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTQxOTdhZGQ2YmVlNDJjMDM3ZDNmMWQyMmU0ZmJkMjA1M2Y5ODVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmDFGJ8FWSh1RH1vIfBTkZ1kIpDK c0oqUmNHXIsGOh+S0ImavofxH2FT1ZeirTYoGSUuuS299HgYTZl+jdFAZy7AU5qO 6by/2rUGaPDlvIE8b15rfT9vpK2npeoaPdQYTgSccNE7rwWwUbaHsFrPnvIZJIwe swvjapNfSG16nvel+kzWmCDe+JtjG+oRuils67p6HqMYMFkjpE5P/mXL7wtcUzis zsArRAf6pLv5wZwbdVXCMCPjKqYQMdefYgI2x3/Alc7efVPT2MW0Yg3ftYtO0si4 4DHE4DupGXXuQICuL3n61Hav4Mvz0seNQcNHkbT5Io/oqLUcA/XcHqufIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKVBl63WvuQsA30/HSLk+9IFP5hdMB8GA1UdIwQY MBaAFNwL3hRniVxvOkcZfqxYyhOuS7eNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0F2ZUZHZUpYRzg2UnhsLXJGaktFNjVMdDQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jZjA2M2YtOTQ5My00NmYxLWFjZDEt MzFjN2ZiNDcxNWY2LzEvcFVHWHJkYS01Q3dEZlQ4ZEl1VDcwZ1VfbUYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9jZjA2M2YtOTQ5My00NmYxLWFjZDEtMzFjN2ZiNDcxNWY2 LzEvM0F2ZUZHZUpYRzg2UnhsLXJGaktFNjVMdDQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVdZMA0G CSqGSIb3DQEBCwUAA4IBAQBFUqUj5RNdGxpDT3lC+ztlFl5MDstDGetGxLhEGeCL XsvGf4cogLFd/eBj0BfUuzlcc09o/ZGZRu4eGuN/n64gD1E4K42C6ipX2Ntr52QN as7okkgNUlpzqgSn0KQn8zg4EXej3KMT2nlpkpUh8bl/LaD77mCpsILIBJ+e7DlH hS3qXOPA3+FkEmR8csa3WPugFGNxXNGBl7TTfwwQlKT2G1fKFYcD8nsoSNFvX62x 9Jqsm/X2SsjWY+GQS4rOqSzdUVx2gUfqqzkQ44wJxfC2p2YvorENEJuP4Ozeq9Fa O1H640jS7tfFR+axZ8WX5fKYJbTHE3HQFPkVzlnSaeSt -----END CERTIFICATE-----Generated at Mon Jan 26 14:44:25 2026 by rpki-client