This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/UFP0zE3dMws0gf4Yf2gpfUeItQU.roa File: UFP0zE3dMws0gf4Yf2gpfUeItQU.roa (raw, json) Hash identifier: R/Eoqvt/r51mRYa0ZGM6FlFXF+VOBcNGZ2cjBGX2QHI= Subject key identifier: 50:53:F4:CC:4D:DD:33:0B:34:81:FE:18:7F:68:29:7D:47:88:B5:05 Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83 Certificate serial: 019B7BA339A5CC25D12BCF76787CE6ED7E0A Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/UFP0zE3dMws0gf4Yf2gpfUeItQU.roa Signing time: Thu 01 Jan 2026 22:17:33 +0000 ROA not before: Thu 01 Jan 2026 22:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9123 IP address blocks: 45.82.14.0/24 maxlen: 24 45.91.67.0/24 maxlen: 24 91.200.148.0/24 maxlen: 24 91.200.150.0/24 maxlen: 24 91.200.151.0/24 maxlen: 24 194.187.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.mft rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 01:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:39:a5:cc:25:d1:2b:cf:76:78:7c:e6:ed:7e:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83 Validity Not Before: Jan 1 22:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5053f4cc4ddd330b3481fe187f68297d4788b505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:69:2c:2b:e5:2b:4a:2d:ee:91:32:ef:60:76: a4:2f:33:ae:12:d7:71:e0:7a:1d:ee:c9:aa:a6:02: 1e:05:3d:ca:03:60:f9:60:a4:28:43:4d:58:c1:fc: 56:f0:71:95:e3:5b:05:0f:ee:a8:7c:73:a9:3e:74: 3c:e7:d0:f7:d1:2d:63:6c:e3:ab:18:3c:75:ef:39: 78:52:fd:0e:b6:6d:c9:9c:5c:c6:30:be:f1:9f:85: 9b:41:81:7b:d1:54:49:b8:ad:50:dd:63:30:e5:03: 70:d0:9f:e2:44:d6:3f:67:b4:24:8a:c1:45:24:2f: 95:fe:a5:08:1d:59:f9:5a:01:48:19:fb:bf:03:35: fc:d6:75:49:66:c3:86:c8:f1:28:64:83:eb:75:3e: e0:e8:30:1d:c5:5f:c9:c8:51:b2:57:e6:e3:ec:e6: 97:ed:c3:bf:09:44:2e:fb:47:cf:2e:4d:f7:7b:d6: 4e:4e:0c:25:6a:07:bd:93:b0:ef:5a:3f:ed:80:7c: fc:ae:e4:c5:14:d8:69:86:f2:c8:b7:2f:08:2e:5b: a9:27:7b:0d:51:d0:5f:ef:7a:a4:c8:c2:39:87:ab: bd:09:07:fe:17:14:a1:6b:ab:a4:3c:18:cf:4f:20: 01:f6:a2:6c:6a:73:11:f5:35:a4:3a:d2:86:fa:57: 1e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:53:F4:CC:4D:DD:33:0B:34:81:FE:18:7F:68:29:7D:47:88:B5:05 X509v3 Authority Key Identifier: keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/UFP0zE3dMws0gf4Yf2gpfUeItQU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.14.0/24 45.91.67.0/24 91.200.148.0/24 91.200.150.0/23 194.187.122.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:5f:38:8b:4f:1a:d6:b1:c6:6e:bb:50:33:78:44:6e:a6:a8: 15:bc:0a:1f:39:14:35:90:82:45:3d:49:5a:a9:a8:40:53:32: ea:42:0e:b1:4a:e3:4a:00:25:dc:11:be:6a:11:93:99:97:f4: de:ef:f2:52:01:c9:ab:f2:48:14:f0:fa:bc:a0:f4:79:00:42: e1:03:5a:1b:62:53:37:91:89:bb:f9:53:fe:57:18:7d:f5:d0: e1:bc:0b:03:53:6c:71:fd:4d:d5:87:af:14:67:f2:b1:67:db: 2b:f4:cd:b0:44:6b:fa:33:c1:fd:1a:a4:1b:df:20:49:c2:97: f1:e2:4c:e6:74:05:83:51:e9:c1:50:30:a8:49:99:3d:6e:11: b9:08:38:06:7a:57:7c:83:36:a2:3e:46:d2:76:35:45:d1:c6: 48:18:46:26:63:a8:9a:34:dd:01:25:e5:81:dc:b1:7a:b4:6e: 49:16:7c:6f:6c:0a:81:03:f3:f6:77:ab:46:0b:ff:1c:44:6a: 9d:63:aa:46:5f:c0:e9:a4:e9:26:4e:fb:39:fe:70:8c:14:2e: 4c:bd:23:d2:71:88:60:7a:14:a4:40:fb:d3:5b:12:d7:ba:b4: 78:9c:da:a6:e0:59:ed:54:6d:b2:e2:e6:d5:16:03:42:3f:48: 7f:bb:4f:be -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt7ozmlzCXRK892eHzm7X4KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NWViYTVjMWE4MGY4NmE0NTg5Mjc4ZWRkOTMwNGIzZjUx NjlmODMwHhcNMjYwMTAxMjIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDUzZjRjYzRkZGQzMzBiMzQ4MWZlMTg3ZjY4Mjk3ZDQ3ODhiNTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2ksK+UrSi3ukTLvYHakLzOuEtdx 4Hod7smqpgIeBT3KA2D5YKQoQ01YwfxW8HGV41sFD+6ofHOpPnQ859D30S1jbOOr GDx17zl4Uv0Otm3JnFzGML7xn4WbQYF70VRJuK1Q3WMw5QNw0J/iRNY/Z7QkisFF JC+V/qUIHVn5WgFIGfu/AzX81nVJZsOGyPEoZIPrdT7g6DAdxV/JyFGyV+bj7OaX 7cO/CUQu+0fPLk33e9ZOTgwlage9k7DvWj/tgHz8ruTFFNhphvLIty8ILlupJ3sN UdBf73qkyMI5h6u9CQf+FxSha6ukPBjPTyAB9qJsanMR9TWkOtKG+lceLwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFFBT9MxN3TMLNIH+GH9oKX1HiLUFMB8GA1UdIwQY MBaAFEZeulwagPhqRYknjt2TBLP1Fp+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmw2NlhCcUEtR3BGaVNlTzNaTUVzX1VXbjRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9jMTJhN2ItNWNhZi00ZTdjLTk3MGQt NWM0NzZlMzMyNWY1LzEvVUZQMHpFM2RNd3MwZ2Y0WWYyZ3BmVWVJdFFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9jMTJhN2ItNWNhZi00ZTdjLTk3MGQtNWM0NzZlMzMyNWY1 LzEvUmw2NlhCcUEtR3BGaVNlTzNaTUVzX1VXbjRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALVIOAwQA LVtDAwQAW8iUAwQBW8iWAwQAwrt6MA0GCSqGSIb3DQEBCwUAA4IBAQA8XziLTxrW scZuu1AzeERupqgVvAofORQ1kIJFPUlaqahAUzLqQg6xSuNKACXcEb5qEZOZl/Te 7/JSAcmr8kgU8Pq8oPR5AELhA1obYlM3kYm7+VP+Vxh99dDhvAsDU2xx/U3Vh68U Z/KxZ9sr9M2wRGv6M8H9GqQb3yBJwpfx4kzmdAWDUenBUDCoSZk9bhG5CDgGeld8 gzaiPkbSdjVF0cZIGEYmY6iaNN0BJeWB3LF6tG5JFnxvbAqBA/P2d6tGC/8cRGqd Y6pGX8DppOkmTvs5/nCMFC5MvSPScYhgehSkQPvTWxLXurR4nNqm4FntVG2y4ubV FgNCP0h/u0++ -----END CERTIFICATE-----Generated at Wed Jan 21 11:13:33 2026 by rpki-client