This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UAQulTB5EqW3ct257AN38ZdJ02I.roa File: UAQulTB5EqW3ct257AN38ZdJ02I.roa (raw, json) Hash identifier: warf2XjzMsKtP5wxayj5+AKDG7F0ncXzSU1QFNGd07w= Subject key identifier: 50:04:2E:95:30:79:12:A5:B7:72:DD:B9:EC:03:77:F1:97:49:D3:62 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BEC4E1AD3F38A63A8A87BBAECDDCB8D2B Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UAQulTB5EqW3ct257AN38ZdJ02I.roa Signing time: Fri 23 Jan 2026 19:21:40 +0000 ROA not before: Fri 23 Jan 2026 19:21:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202051 IP address blocks: 151.247.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 23:21:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ec:4e:1a:d3:f3:8a:63:a8:a8:7b:ba:ec:dd:cb:8d:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 23 19:21:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50042e95307912a5b772ddb9ec0377f19749d362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e7:21:fb:cd:6c:d9:7a:bc:25:ad:af:0a:e8: 3a:43:31:77:0c:7b:3b:f7:56:ec:f3:38:f3:02:a2: 82:5f:d6:37:36:2e:68:9e:93:ea:82:63:73:f6:93: 7b:f4:ef:98:61:c4:c0:cd:44:9c:b5:e7:6d:1a:75: e9:10:78:93:ec:65:53:5d:8b:e3:21:4b:18:f5:e1: e9:40:9d:33:26:b5:13:8a:44:c6:a5:54:34:0b:92: 21:44:11:d8:d6:82:8e:13:35:ab:6a:4a:86:be:47: c4:5f:ed:1e:d5:32:37:3e:fa:12:c2:01:7c:95:d4: 70:9c:33:d1:7c:e8:e0:4c:1b:14:7d:f3:c7:33:d3: 9f:2d:2d:f5:fa:0b:09:63:fa:4e:cb:67:ce:53:d6: 89:29:8f:2c:87:25:a5:2e:9f:5f:5c:f1:ce:48:11: 6c:4a:cf:94:ec:75:65:23:c0:ea:6d:92:29:f1:ee: 0f:9c:2b:a2:8e:dc:c2:ee:12:4c:08:46:35:28:5f: d2:6a:1a:87:a3:53:8f:d7:5e:1e:7e:78:ad:7b:94: 6e:27:ce:8b:71:88:85:f5:fb:63:b8:7d:80:27:4a: d2:3c:73:7b:cb:aa:73:12:28:bf:2e:f5:76:74:8a: 9d:27:e7:a7:ae:c3:4a:c6:72:85:2e:42:16:4b:5c: 07:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:04:2E:95:30:79:12:A5:B7:72:DD:B9:EC:03:77:F1:97:49:D3:62 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UAQulTB5EqW3ct257AN38ZdJ02I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.247.25.0/24 Signature Algorithm: sha256WithRSAEncryption 35:d2:5a:04:3a:60:a7:d6:ef:57:6e:60:b7:bd:a3:b5:dd:2f: 4f:f7:d8:6c:76:d2:de:0e:47:c3:e6:c1:8e:5d:81:5d:85:1d: d3:20:a8:a9:d3:34:cf:83:2d:c3:b3:76:01:42:68:50:11:7e: 22:b8:b6:c4:c2:68:42:4a:ec:d1:44:41:5e:49:83:32:42:0c: aa:27:b5:94:56:a1:95:30:98:e2:f1:0d:c2:53:06:26:3f:f0: 1e:b0:a1:5e:20:05:cb:b5:ca:4d:a1:15:8a:87:3e:34:48:9b: 61:31:fc:c3:7a:de:c0:5f:a0:e8:d5:66:fc:a3:67:64:4c:22: c0:48:8d:84:2a:d3:94:41:64:a8:7b:e6:c0:0c:43:09:0d:da: d7:b6:eb:5b:6b:99:c0:ae:0b:33:54:be:44:ed:8b:2d:83:1a: c3:bf:04:54:0b:d0:ce:1c:a7:c2:3d:90:5d:b2:d7:38:fe:37: 95:b7:44:c7:56:dd:21:8e:e6:45:46:f8:70:c1:b2:66:37:53: af:7a:ef:fa:b8:3b:d0:4d:f9:df:93:66:64:e1:d4:09:22:ed: 4e:11:35:55:bb:ef:57:7e:e1:5c:df:63:aa:96:4a:d9:9e:31: b8:7b:17:7f:af:d8:26:bc:a7:d5:9d:0e:6e:57:6e:bd:1a:c1: d5:37:a0:ea -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvsThrT84pjqKh7uuzdy40rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTIzMTkyMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDA0MmU5NTMwNzkxMmE1Yjc3MmRkYjllYzAzNzdmMTk3NDlkMzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+ch+81s2Xq8Ja2vCug6QzF3DHs7 91bs8zjzAqKCX9Y3Ni5onpPqgmNz9pN79O+YYcTAzUSctedtGnXpEHiT7GVTXYvj IUsY9eHpQJ0zJrUTikTGpVQ0C5IhRBHY1oKOEzWrakqGvkfEX+0e1TI3PvoSwgF8 ldRwnDPRfOjgTBsUffPHM9OfLS31+gsJY/pOy2fOU9aJKY8shyWlLp9fXPHOSBFs Ss+U7HVlI8DqbZIp8e4PnCuijtzC7hJMCEY1KF/SahqHo1OP114efnite5RuJ86L cYiF9ftjuH2AJ0rSPHN7y6pzEii/LvV2dIqdJ+enrsNKxnKFLkIWS1wHfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFAELpUweRKlt3LduewDd/GXSdNiMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvVUFRdWxUQjVFcVczY3QyNTdBTjM4WmRKMDJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/cZMA0G CSqGSIb3DQEBCwUAA4IBAQA10loEOmCn1u9XbmC3vaO13S9P99hsdtLeDkfD5sGO XYFdhR3TIKip0zTPgy3Ds3YBQmhQEX4iuLbEwmhCSuzRREFeSYMyQgyqJ7WUVqGV MJji8Q3CUwYmP/AesKFeIAXLtcpNoRWKhz40SJthMfzDet7AX6Do1Wb8o2dkTCLA SI2EKtOUQWSoe+bADEMJDdrXtutba5nArgszVL5E7YstgxrDvwRUC9DOHKfCPZBd stc4/jeVt0THVt0hjuZFRvhwwbJmN1Oveu/6uDvQTfnfk2Zk4dQJIu1OETVVu+9X fuFc32OqlkrZnjG4exd/r9gmvKfVnQ5uV269GsHVN6Dq -----END CERTIFICATE-----Generated at Sat Jan 24 07:10:36 2026 by rpki-client