This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Uv7iCQNHsqbUJpOmJjeL31Wfjts.roa File: Uv7iCQNHsqbUJpOmJjeL31Wfjts.roa (raw, json) Hash identifier: Yih9pWM/7s5kdikHwmdxYWgmO7VjN22CMbNiL80TIn8= Subject key identifier: 52:FE:E2:09:03:47:B2:A6:D4:26:93:A6:26:37:8B:DF:55:9F:8E:DB Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019B7BA56246F43681CEE550BE0ABC68C5D4 Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Uv7iCQNHsqbUJpOmJjeL31Wfjts.roa Signing time: Thu 01 Jan 2026 22:19:54 +0000 ROA not before: Thu 01 Jan 2026 22:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212042 IP address blocks: 45.87.29.0/24 maxlen: 24 45.150.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:62:46:f4:36:81:ce:e5:50:be:0a:bc:68:c5:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 1 22:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52fee2090347b2a6d42693a626378bdf559f8edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4e:a2:bc:44:b1:1a:d5:c3:82:14:be:b7:0b: 40:43:08:4c:4c:8a:40:e4:fc:31:50:09:cc:6c:da: 17:3d:e4:dd:08:e2:3b:a9:73:47:14:c1:5a:cd:5b: 7d:b3:c2:62:29:dc:07:df:12:14:55:33:8b:43:0f: 3c:08:e4:99:ea:51:8c:3e:3d:4a:01:72:c7:64:df: 8b:60:08:c7:04:ce:d6:ee:94:98:2f:ce:ac:bc:41: a8:f1:8a:42:f5:43:38:67:a7:8a:17:d8:4d:74:2c: 3e:62:01:1d:23:9c:6b:2b:21:40:b2:72:31:95:e7: 3d:7d:d8:e0:ad:f0:f8:30:af:b2:00:52:b6:a2:1a: 4a:98:83:c4:9f:cb:a2:79:55:7a:b7:e7:ff:ac:3a: d5:f9:04:36:c1:fb:87:ec:38:00:a5:d2:92:62:fb: 5d:0b:36:88:18:af:c2:5b:2c:a1:b7:e5:fd:ed:56: a3:43:3a:67:f7:15:4d:ce:fc:b1:aa:3d:c0:ba:33: bc:dc:be:c1:63:2b:3b:99:22:72:85:ee:bf:58:fe: a4:13:dc:4d:b2:7d:03:88:2a:65:57:de:d6:af:4e: f7:92:a5:c9:dc:f6:fd:df:06:91:c7:d9:69:9e:a6: 4b:68:e3:05:bf:d0:a3:18:af:c6:70:69:af:22:c7: 61:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FE:E2:09:03:47:B2:A6:D4:26:93:A6:26:37:8B:DF:55:9F:8E:DB X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Uv7iCQNHsqbUJpOmJjeL31Wfjts.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.29.0/24 45.150.95.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:f8:63:b4:e4:8e:95:16:b0:be:3b:ea:eb:5f:59:cb:72:f6: 9a:59:47:21:28:22:18:b7:f8:71:85:77:b7:dc:77:e4:93:a9: 5c:cf:50:33:b5:1c:17:04:78:8e:8e:ce:6c:5e:18:0f:0c:a2: 39:4e:c2:f7:8f:5d:46:06:72:d6:a0:54:07:bf:26:87:52:f4: e7:07:74:fb:58:f4:1d:e4:5d:3b:cb:96:f3:21:09:9f:9c:df: ad:70:f1:66:1f:0f:62:27:04:9e:81:d0:63:7d:29:86:cd:c5: 28:e7:17:c5:41:fe:12:1d:f0:82:f7:48:bb:65:9b:47:79:66: 44:85:1e:94:27:c6:30:b1:99:a2:41:43:6f:12:a5:9c:45:a6: 5f:22:27:6b:c0:d4:1f:fe:19:1f:b3:5c:3a:e3:22:37:a4:bc: 1f:33:71:d7:83:ab:01:41:5f:ba:fb:1b:f4:57:f0:d6:2d:cc: 73:b7:3e:f4:47:a6:bb:d1:60:54:7c:d7:17:7f:7b:de:9e:de: 47:28:26:7f:3b:85:91:98:ea:d3:30:22:7d:b2:bf:d7:4a:52: 9c:87:63:19:c9:d1:86:b4:78:e1:d4:de:17:1d:f4:11:24:c6: 6b:2a:7a:f7:04:5c:28:fa:b8:da:d3:aa:d3:65:cb:a7:a1:d6: 19:b8:e4:f4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pWJG9DaBzuVQvgq8aMXUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTAxMjIxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmZlZTIwOTAzNDdiMmE2ZDQyNjkzYTYyNjM3OGJkZjU1OWY4ZWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp06ivESxGtXDghS+twtAQwhMTIpA 5PwxUAnMbNoXPeTdCOI7qXNHFMFazVt9s8JiKdwH3xIUVTOLQw88COSZ6lGMPj1K AXLHZN+LYAjHBM7W7pSYL86svEGo8YpC9UM4Z6eKF9hNdCw+YgEdI5xrKyFAsnIx lec9fdjgrfD4MK+yAFK2ohpKmIPEn8uieVV6t+f/rDrV+QQ2wfuH7DgApdKSYvtd CzaIGK/CWyyht+X97VajQzpn9xVNzvyxqj3AujO83L7BYys7mSJyhe6/WP6kE9xN sn0DiCplV97Wr073kqXJ3Pb93waRx9lpnqZLaOMFv9CjGK/GcGmvIsdhhQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFL+4gkDR7Km1CaTpiY3i99Vn47bMB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvVXY3aUNRTkhzcWJVSnBPbUpqZUwzMVdmanRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVcdAwQA LZZfMA0GCSqGSIb3DQEBCwUAA4IBAQAb+GO05I6VFrC+O+rrX1nLcvaaWUchKCIY t/hxhXe33Hfkk6lcz1AztRwXBHiOjs5sXhgPDKI5TsL3j11GBnLWoFQHvyaHUvTn B3T7WPQd5F07y5bzIQmfnN+tcPFmHw9iJwSegdBjfSmGzcUo5xfFQf4SHfCC90i7 ZZtHeWZEhR6UJ8YwsZmiQUNvEqWcRaZfIidrwNQf/hkfs1w64yI3pLwfM3HXg6sB QV+6+xv0V/DWLcxztz70R6a70WBUfNcXf3vent5HKCZ/O4WRmOrTMCJ9sr/XSlKc h2MZydGGtHjh1N4XHfQRJMZrKnr3BFwo+rja06rTZcunodYZuOT0 -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:01 2026 by rpki-client