This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UpBcgQrNhHq-jS69A2pYKlvh0oM.roa File: UpBcgQrNhHq-jS69A2pYKlvh0oM.roa (raw, json) Hash identifier: t5aA9xcTHXp/EHelGKN1Ib96uBpodB0j1HmdSO98ihQ= Subject key identifier: 52:90:5C:81:0A:CD:84:7A:BE:8D:2E:BD:03:6A:58:2A:5B:E1:D2:83 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB3686164BAA85A2FBBE6C1AA129D0 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UpBcgQrNhHq-jS69A2pYKlvh0oM.roa Signing time: Fri 02 Jan 2026 08:20:28 +0000 ROA not before: Fri 02 Jan 2026 08:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49981 IP address blocks: 37.202.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:36:86:16:4b:aa:85:a2:fb:be:6c:1a:a1:29:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52905c810acd847abe8d2ebd036a582a5be1d283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2a:ac:74:ab:25:49:03:a3:3d:df:b4:08:42: 62:38:36:d7:6f:f0:74:59:31:63:94:7c:8f:9c:ed: 8b:d9:ca:bc:d1:9a:37:32:3c:cb:ab:43:c1:2c:67: 80:33:b2:d6:2e:05:db:f6:81:55:8c:cc:94:b7:cc: bd:0e:8f:3a:ed:9b:ac:03:20:52:66:a9:29:e0:b1: bb:1c:af:bf:0c:ba:40:fa:1f:59:f2:bc:ec:01:76: d5:e9:c2:ed:79:3b:e1:09:7a:f9:34:ab:04:3b:a8: 5e:08:5f:a5:9f:4d:8c:77:b1:6f:eb:91:e0:da:2a: 61:07:88:1f:6e:c4:89:46:bd:f7:c8:18:98:f9:0e: 83:41:cc:c2:06:fa:72:d0:76:79:6f:ec:71:34:ea: b7:73:33:9e:77:ed:a0:22:98:3a:a7:b4:6d:88:c8: cb:08:c8:cb:8b:ea:b0:24:8c:6a:33:b4:8f:38:bf: 23:05:7e:4c:b6:80:da:a6:cd:2d:be:c2:6d:3a:56: 5f:2d:49:92:c2:aa:3f:1c:bd:02:98:9d:08:a4:aa: 2c:a2:97:3f:8e:2a:d7:84:62:b4:1b:68:e8:b4:ee: 2f:0b:3d:6d:02:69:f5:89:14:19:21:0d:48:4a:d4: a7:df:21:53:9d:7c:2c:fb:0b:3a:9e:01:07:ad:00: c5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:90:5C:81:0A:CD:84:7A:BE:8D:2E:BD:03:6A:58:2A:5B:E1:D2:83 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UpBcgQrNhHq-jS69A2pYKlvh0oM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.210.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:88:c8:17:23:15:19:19:e4:ef:a4:c9:a4:34:ad:4d:c7:ea: ef:fc:ba:06:3b:99:85:07:0e:e3:a3:f9:d0:2f:18:1f:75:b4: ac:93:99:24:5c:16:08:1b:8a:b2:a5:54:3f:f4:c1:98:b7:3c: b5:62:81:86:ab:47:63:3b:69:5a:34:4c:25:b6:07:e2:88:d9: d5:4b:0f:32:98:31:72:fc:4c:dd:85:fb:1e:2d:f4:c0:8c:6f: 86:4b:d6:fd:00:f8:7a:35:86:ab:08:e4:26:1c:e7:95:fc:9f: ad:27:d7:7f:63:12:4e:02:56:5b:fe:6b:8f:14:c3:b8:3f:66: 92:8c:c4:8e:33:c3:8d:f4:69:02:eb:aa:0d:51:a5:ae:59:e4: d1:3b:ff:55:87:f8:c8:38:b0:8c:09:49:6c:68:fa:38:40:2a: c8:f5:50:3b:5f:e2:1d:b8:b3:2f:c5:dd:7a:9c:71:fc:e9:1a: 40:d5:49:ac:a8:8a:b2:7d:7e:61:05:37:25:f6:88:48:07:da: 8f:8f:73:64:f8:a8:66:bd:8b:d3:84:b9:a8:f4:aa:19:b9:9d: 85:ab:04:db:76:7d:3d:04:09:a2:5a:b3:8f:36:58:68:2e:ea: e5:58:4a:a3:77:67:a3:17:cb:5a:b8:5f:10:b1:7e:1c:20:b0: e1:c2:31:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yzaGFkuqhaL7vmwaoSnQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjkwNWM4MTBhY2Q4NDdhYmU4ZDJlYmQwMzZhNTgyYTViZTFkMjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiqsdKslSQOjPd+0CEJiODbXb/B0 WTFjlHyPnO2L2cq80Zo3MjzLq0PBLGeAM7LWLgXb9oFVjMyUt8y9Do867ZusAyBS Zqkp4LG7HK+/DLpA+h9Z8rzsAXbV6cLteTvhCXr5NKsEO6heCF+ln02Md7Fv65Hg 2iphB4gfbsSJRr33yBiY+Q6DQczCBvpy0HZ5b+xxNOq3czOed+2gIpg6p7RtiMjL CMjLi+qwJIxqM7SPOL8jBX5MtoDaps0tvsJtOlZfLUmSwqo/HL0CmJ0IpKosopc/ jirXhGK0G2jotO4vCz1tAmn1iRQZIQ1IStSn3yFTnXws+ws6ngEHrQDFYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFKQXIEKzYR6vo0uvQNqWCpb4dKDMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvVXBCY2dRck5oSHEtalM2OUEycFlLbHZoMG9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJcrSMA0G CSqGSIb3DQEBCwUAA4IBAQCbiMgXIxUZGeTvpMmkNK1Nx+rv/LoGO5mFBw7jo/nQ LxgfdbSsk5kkXBYIG4qypVQ/9MGYtzy1YoGGq0djO2laNEwltgfiiNnVSw8ymDFy /EzdhfseLfTAjG+GS9b9APh6NYarCOQmHOeV/J+tJ9d/YxJOAlZb/muPFMO4P2aS jMSOM8ON9GkC66oNUaWuWeTRO/9Vh/jIOLCMCUlsaPo4QCrI9VA7X+IduLMvxd16 nHH86RpA1UmsqIqyfX5hBTcl9ohIB9qPj3Nk+KhmvYvThLmo9KoZuZ2FqwTbdn09 BAmiWrOPNlhoLurlWEqjd2ejF8tauF8QsX4cILDhwjHa -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:39 2026 by rpki-client