This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/UXWpgGFDnRE9Qd9B2_kQeDANeEU.roa File: UXWpgGFDnRE9Qd9B2_kQeDANeEU.roa (raw, json) Hash identifier: 4rUA5GWn/3ql2gbHZLTVs1SZ20Xz3g2AjgFXRxPtMJw= Subject key identifier: 51:75:A9:80:61:43:9D:11:3D:41:DF:41:DB:F9:10:78:30:0D:78:45 Certificate issuer: /CN=7bcb127c7cd778607296b88386e894ae1de385bf Certificate serial: 019B7F8273D1652609146A10256D27567B19 Authority key identifier: 7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/UXWpgGFDnRE9Qd9B2_kQeDANeEU.roa Signing time: Fri 02 Jan 2026 16:20:14 +0000 ROA not before: Fri 02 Jan 2026 16:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 46.174.168.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 16:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:73:d1:65:26:09:14:6a:10:25:6d:27:56:7b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bcb127c7cd778607296b88386e894ae1de385bf Validity Not Before: Jan 2 16:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5175a98061439d113d41df41dbf91078300d7845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6a:2c:eb:c4:1a:4e:40:2f:43:78:38:ab:35: a0:e7:3d:85:9e:99:c3:06:d7:7d:93:e3:d6:85:d5: 29:43:6d:31:11:ad:fd:8e:cc:e6:46:c9:6e:f1:cb: dc:71:f8:43:47:0e:28:27:b4:00:a8:a9:2c:81:e0: f2:ca:40:2a:f4:5a:bc:92:0d:d5:87:da:8f:42:ec: d6:0f:53:e7:bc:fa:2f:c1:50:51:93:fe:a4:32:8f: 3d:e8:5a:8d:51:5a:93:7f:98:a8:a8:f2:86:8c:c0: d8:af:62:29:9c:d9:0b:6e:fe:7e:f6:67:4b:f4:d7: 32:66:f0:df:8c:5e:87:4a:b4:fe:25:73:e4:86:81: 8c:2c:33:83:4b:da:42:87:73:74:77:d1:d2:c2:1e: f4:a2:4d:1e:84:b8:03:f1:1d:7c:b1:36:88:b2:b0: 99:02:3b:80:fe:aa:d9:3b:47:73:3d:89:35:ce:11: 2f:91:4f:64:2f:00:6e:92:1f:b3:a5:3e:a6:f9:d7: 9c:3a:e1:38:bd:67:f1:6a:45:87:cb:10:1d:79:27: a5:00:5c:88:4f:df:91:30:f3:64:ff:36:ea:36:ad: 6a:9f:14:db:93:d9:b7:50:12:0c:c6:50:b1:bc:35: 87:f8:d8:41:e9:c0:48:ee:59:07:72:56:15:6b:38: eb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:75:A9:80:61:43:9D:11:3D:41:DF:41:DB:F9:10:78:30:0D:78:45 X509v3 Authority Key Identifier: keyid:7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/UXWpgGFDnRE9Qd9B2_kQeDANeEU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.174.168.0/21 Signature Algorithm: sha256WithRSAEncryption 34:30:fe:8f:56:af:ce:da:f2:30:41:23:ec:03:ae:5a:47:85: 22:81:b0:22:7a:1c:87:49:11:45:00:ab:b8:1a:32:82:6b:d8: 5f:ad:49:4e:a3:fa:1f:ad:5c:42:af:a3:15:7a:b9:c3:35:72: 5e:65:65:e5:70:b9:d9:a3:bd:af:df:0b:a6:11:91:03:ad:bb: a2:4e:1c:28:46:fe:f9:9a:c1:2f:a7:4e:00:92:da:9e:f8:b0: e4:05:b7:df:12:c2:fc:d5:b1:99:88:d3:70:23:c8:bc:d4:9d: d7:f5:1c:8d:a3:ff:5a:4d:bf:ec:d4:3b:a4:89:31:0f:0b:76: e2:d8:e8:32:fc:9d:be:a2:ce:e9:b9:69:83:90:af:9e:b8:94: b5:e8:c3:cf:05:c3:13:79:ef:58:1b:6f:e7:fc:a9:35:06:f1: 99:ac:d9:d4:73:57:6a:b3:0e:55:ca:75:53:87:14:1c:49:9e: 5c:7e:17:60:f3:70:75:44:b5:3d:35:eb:21:1b:15:97:f6:5f: f5:a6:dc:0c:41:d0:c5:f1:00:58:26:4c:92:55:35:c2:01:df: 3a:93:13:69:87:78:8c:55:8c:ac:8f:40:f4:f7:f8:b1:00:bc: d5:36:a7:ba:ca:fc:84:f9:e7:6a:f4:5c:3e:bb:87:d2:9b:f0: 2c:1f:89:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gnPRZSYJFGoQJW0nVnsZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiY2IxMjdjN2NkNzc4NjA3Mjk2Yjg4Mzg2ZTg5NGFlMWRl Mzg1YmYwHhcNMjYwMTAyMTYyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTc1YTk4MDYxNDM5ZDExM2Q0MWRmNDFkYmY5MTA3ODMwMGQ3ODQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmos68QaTkAvQ3g4qzWg5z2FnpnD Btd9k+PWhdUpQ20xEa39jszmRslu8cvccfhDRw4oJ7QAqKksgeDyykAq9Fq8kg3V h9qPQuzWD1PnvPovwVBRk/6kMo896FqNUVqTf5ioqPKGjMDYr2IpnNkLbv5+9mdL 9NcyZvDfjF6HSrT+JXPkhoGMLDODS9pCh3N0d9HSwh70ok0ehLgD8R18sTaIsrCZ AjuA/qrZO0dzPYk1zhEvkU9kLwBukh+zpT6m+decOuE4vWfxakWHyxAdeSelAFyI T9+RMPNk/zbqNq1qnxTbk9m3UBIMxlCxvDWH+NhB6cBI7lkHclYVazjrSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFF1qYBhQ50RPUHfQdv5EHgwDXhFMB8GA1UdIwQY MBaAFHvLEnx813hgcpa4g4bolK4d44W/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZThzU2ZIelhlR0J5bHJpRGh1aVVyaDNqaGI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9kNjBmZDgtMDNkNS00YWFiLTlkYWIt MmUyMGE3OWY3MTQ1LzEvVVhXcGdHRkRuUkU5UWQ5QjJfa1FlREFOZUVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9kNjBmZDgtMDNkNS00YWFiLTlkYWItMmUyMGE3OWY3MTQ1 LzEvZThzU2ZIelhlR0J5bHJpRGh1aVVyaDNqaGI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLq6oMA0G CSqGSIb3DQEBCwUAA4IBAQA0MP6PVq/O2vIwQSPsA65aR4UigbAiehyHSRFFAKu4 GjKCa9hfrUlOo/ofrVxCr6MVernDNXJeZWXlcLnZo72v3wumEZEDrbuiThwoRv75 msEvp04Aktqe+LDkBbffEsL81bGZiNNwI8i81J3X9RyNo/9aTb/s1DukiTEPC3bi 2Ogy/J2+os7puWmDkK+euJS16MPPBcMTee9YG2/n/Kk1BvGZrNnUc1dqsw5VynVT hxQcSZ5cfhdg83B1RLU9NeshGxWX9l/1ptwMQdDF8QBYJkySVTXCAd86kxNph3iM VYysj0D09/ixALzVNqe6yvyE+edq9Fw+u4fSm/AsH4k1 -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:38 2026 by rpki-client