This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/UHpyY7NbwprGP2Xux1Br7Qg2UA4.roa File: UHpyY7NbwprGP2Xux1Br7Qg2UA4.roa (raw, json) Hash identifier: OnUFEX1JE94qw8lGszNtj2Di00Nt/AvUN+2g8yyjt/s= Subject key identifier: 50:7A:72:63:B3:5B:C2:9A:C6:3F:65:EE:C7:50:6B:ED:08:36:50:0E Certificate issuer: /CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3 Certificate serial: 019B7BA3A39082AB8C38EB0B9193C455FEDB Authority key identifier: 1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/UHpyY7NbwprGP2Xux1Br7Qg2UA4.roa Signing time: Thu 01 Jan 2026 22:18:00 +0000 ROA not before: Thu 01 Jan 2026 22:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210808 IP address blocks: 176.100.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.mft rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:a3:90:82:ab:8c:38:eb:0b:91:93:c4:55:fe:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c549fc5d68298784c6a4c5bc99ae7d3016a18a3 Validity Not Before: Jan 1 22:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=507a7263b35bc29ac63f65eec7506bed0836500e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:58:75:70:39:2c:d0:aa:4c:7a:1c:f0:87:ac: 3e:53:db:5c:82:2b:bf:9f:ef:03:e7:96:c6:fd:bc: 03:80:f2:d6:34:f3:4a:42:9c:1c:c6:73:f1:2a:ae: a5:a2:c5:0d:47:57:bd:42:04:5f:01:7e:61:4d:87: 6e:ac:0d:9c:f9:af:51:09:5a:29:7b:30:b4:ea:78: 69:b2:ac:73:1d:4f:2f:94:df:15:26:c0:73:0a:78: eb:bc:dd:96:3d:47:f0:66:a9:f1:e6:78:ec:f8:0d: 97:45:2d:7e:27:b8:ba:7f:66:51:d6:67:f7:09:49: 78:17:ff:f7:c8:b7:93:d9:48:0b:96:e0:1d:76:7b: c0:c5:bb:18:ee:a5:e9:f3:d3:e7:2b:ac:72:e8:ed: 31:b5:8c:6f:b6:a8:a1:b0:20:14:f5:2d:d9:99:d5: b3:fb:8a:20:66:32:94:b9:25:67:44:17:0f:ca:cf: 12:fd:1b:38:d9:3a:93:bf:2c:ed:f8:81:64:13:59: 8b:6d:cb:88:6b:72:d5:1e:e0:27:b8:8c:03:98:46: 23:be:be:a8:23:80:05:6f:49:66:1a:75:fa:a9:44: d4:cf:fa:24:b7:cd:66:1c:1a:be:f8:33:6f:3d:1f: af:af:57:fb:5d:e5:37:39:c9:1d:9a:07:bd:1a:11: 3a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:7A:72:63:B3:5B:C2:9A:C6:3F:65:EE:C7:50:6B:ED:08:36:50:0E X509v3 Authority Key Identifier: keyid:1C:54:9F:C5:D6:82:98:78:4C:6A:4C:5B:C9:9A:E7:D3:01:6A:18:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFSfxdaCmHhMakxbyZrn0wFqGKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/UHpyY7NbwprGP2Xux1Br7Qg2UA4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/854bd3-5098-4964-bb35-5241e31cd8da/1/HFSfxdaCmHhMakxbyZrn0wFqGKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.100.46.0/24 Signature Algorithm: sha256WithRSAEncryption 60:49:64:c4:75:83:64:d1:28:18:ed:97:53:b1:3c:48:4c:45: 98:58:f3:e6:b7:75:39:99:14:54:73:36:b9:06:02:1f:b2:9a: 84:93:c4:fe:08:1b:77:09:56:7d:5e:43:1f:13:78:1a:a2:f8: 6c:2c:08:f3:30:01:11:dc:cc:85:a0:92:c8:29:66:0e:ef:f5: 16:fd:08:74:93:bd:ab:c1:b8:cb:f5:24:57:22:5e:86:e1:81: 76:a8:85:00:9a:c6:76:89:dd:ee:c1:12:c1:0e:78:82:64:c5: 7f:91:15:50:46:f0:ce:7a:89:9d:d4:03:f9:c7:dd:14:c0:9c: 3e:4a:3b:5d:c5:ce:a9:92:21:af:4e:42:36:7b:e9:4c:01:90: 2e:88:31:ea:c2:ad:fe:b2:90:fd:13:bf:fe:2e:20:f5:9c:27: 44:85:54:2b:f0:42:f6:eb:d8:4b:b3:81:50:4a:42:40:7f:2f: 9b:fd:b9:91:a7:e7:e5:d7:95:50:c1:33:56:6f:76:41:c0:55: 8a:b2:22:cc:0a:f3:ff:43:51:c6:15:cd:6a:dd:f2:27:da:2a: a6:24:0d:07:a1:c8:9f:59:e3:81:ff:a3:31:9b:6c:6a:f6:9e: 84:6f:ac:1c:da:ba:f1:ce:a6:fa:09:7f:20:f4:f5:c9:12:bd: b9:5a:c0:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o6OQgquMOOsLkZPEVf7bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNTQ5ZmM1ZDY4Mjk4Nzg0YzZhNGM1YmM5OWFlN2QzMDE2 YTE4YTMwHhcNMjYwMTAxMjIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDdhNzI2M2IzNWJjMjlhYzYzZjY1ZWVjNzUwNmJlZDA4MzY1MDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Vh1cDks0KpMehzwh6w+U9tcgiu/ n+8D55bG/bwDgPLWNPNKQpwcxnPxKq6losUNR1e9QgRfAX5hTYdurA2c+a9RCVop ezC06nhpsqxzHU8vlN8VJsBzCnjrvN2WPUfwZqnx5njs+A2XRS1+J7i6f2ZR1mf3 CUl4F//3yLeT2UgLluAddnvAxbsY7qXp89PnK6xy6O0xtYxvtqihsCAU9S3ZmdWz +4ogZjKUuSVnRBcPys8S/Rs42TqTvyzt+IFkE1mLbcuIa3LVHuAnuIwDmEYjvr6o I4AFb0lmGnX6qUTUz/okt81mHBq++DNvPR+vr1f7XeU3Ockdmge9GhE6fQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFB6cmOzW8Kaxj9l7sdQa+0INlAOMB8GA1UdIwQY MBaAFBxUn8XWgph4TGpMW8ma59MBahijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEZTZnhkYUNtSGhNYWt4Ynlacm4wd0ZxR0tNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84NTRiZDMtNTA5OC00OTY0LWJiMzUt NTI0MWUzMWNkOGRhLzEvVUhweVk3TmJ3cHJHUDJYdXgxQnI3UWcyVUE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy84NTRiZDMtNTA5OC00OTY0LWJiMzUtNTI0MWUzMWNkOGRh LzEvSEZTZnhkYUNtSGhNYWt4Ynlacm4wd0ZxR0tNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGQuMA0G CSqGSIb3DQEBCwUAA4IBAQBgSWTEdYNk0SgY7ZdTsTxITEWYWPPmt3U5mRRUcza5 BgIfspqEk8T+CBt3CVZ9XkMfE3gaovhsLAjzMAER3MyFoJLIKWYO7/UW/Qh0k72r wbjL9SRXIl6G4YF2qIUAmsZ2id3uwRLBDniCZMV/kRVQRvDOeomd1AP5x90UwJw+ Sjtdxc6pkiGvTkI2e+lMAZAuiDHqwq3+spD9E7/+LiD1nCdEhVQr8EL269hLs4FQ SkJAfy+b/bmRp+fl15VQwTNWb3ZBwFWKsiLMCvP/Q1HGFc1q3fIn2iqmJA0Hocif WeOB/6Mxm2xq9p6Eb6wc2rrxzqb6CX8g9PXJEr25WsDr -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:42 2026 by rpki-client