This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/RUESRqs6A6yjfVoMmCKZV1bIU4w.roa File: RUESRqs6A6yjfVoMmCKZV1bIU4w.roa (raw, json) Hash identifier: YPDaFDgeUMF658P60k4edEve7/pjA82XVGxQLNcw/kE= Subject key identifier: 45:41:12:46:AB:3A:03:AC:A3:7D:5A:0C:98:22:99:57:56:C8:53:8C Certificate issuer: /CN=04e50240af40eb2ad60fc3078ac33fc5355d4416 Certificate serial: 019B797F32B5D0995F687C5432CDF91DFB78 Authority key identifier: 04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/RUESRqs6A6yjfVoMmCKZV1bIU4w.roa Signing time: Thu 01 Jan 2026 12:18:57 +0000 ROA not before: Thu 01 Jan 2026 12:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12931 IP address blocks: 46.35.48.0/20 maxlen: 20 213.182.0.0/19 maxlen: 19 2001:14e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.mft rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:32:b5:d0:99:5f:68:7c:54:32:cd:f9:1d:fb:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04e50240af40eb2ad60fc3078ac33fc5355d4416 Validity Not Before: Jan 1 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45411246ab3a03aca37d5a0c9822995756c8538c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:29:a6:81:a0:25:bb:3b:47:ef:6d:c0:a9:e2: 4a:46:c2:5d:f0:e5:69:dc:ce:64:08:8a:ae:66:37: cd:e6:6c:80:1e:c9:50:b6:d3:9d:e0:e9:83:4d:07: b7:a0:95:ea:03:b9:9a:38:ad:ac:d4:04:a5:ed:4e: c4:cf:24:23:89:6e:c2:38:c4:81:d6:8c:8e:2a:b4: 32:6c:b3:e8:ab:c0:c9:a7:d7:5b:7c:03:96:82:80: 59:32:e6:09:65:89:a6:fe:d9:e7:f0:ca:8a:7e:a2: c8:2b:c5:ea:8d:1c:f1:11:ae:49:c4:2f:29:df:61: c2:34:a1:f8:14:0b:f9:4d:81:64:33:f6:58:4d:4b: 12:cc:47:f8:79:d4:f1:d5:6f:44:a3:d3:58:c9:9d: ae:ee:49:41:21:16:a5:e5:ee:e8:ae:32:84:5b:e5: a8:94:85:27:c2:75:72:6f:91:08:95:4b:d9:d6:8c: 12:d1:c2:2c:a4:e7:e0:d1:af:c5:2c:7b:93:c2:c3: 2c:79:d7:69:d2:4b:e2:3c:d5:f0:86:c7:d8:96:45: eb:84:b7:58:51:52:a0:3b:7a:a5:0e:c4:82:bc:3c: 34:50:e6:f4:0e:9b:7d:f3:32:05:7c:55:15:23:55: d1:37:5a:bc:1a:81:19:59:fc:35:fe:2e:7b:85:17: 78:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:41:12:46:AB:3A:03:AC:A3:7D:5A:0C:98:22:99:57:56:C8:53:8C X509v3 Authority Key Identifier: keyid:04:E5:02:40:AF:40:EB:2A:D6:0F:C3:07:8A:C3:3F:C5:35:5D:44:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOUCQK9A6yrWD8MHisM_xTVdRBY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/RUESRqs6A6yjfVoMmCKZV1bIU4w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ed20e6-4f56-4599-82c0-33a9a6f42f0c/1/BOUCQK9A6yrWD8MHisM_xTVdRBY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.35.48.0/20 213.182.0.0/19 IPv6: 2001:14e0::/32 Signature Algorithm: sha256WithRSAEncryption 70:7e:be:8b:ea:b8:96:e2:63:28:5c:a1:6d:40:20:55:5e:e1: 69:59:da:66:85:6d:47:2f:2a:a6:ca:f1:43:07:ed:5e:5c:96: 83:42:4b:31:3a:f8:34:55:d8:ad:37:3b:af:88:b8:90:c1:30: 18:32:1d:c8:a8:fe:4f:b4:15:51:55:09:df:01:fa:68:9f:2b: 42:4b:c4:e3:a3:0b:bf:fd:1e:bc:98:1c:6f:11:c8:45:22:b0: dc:72:b2:95:6b:be:6d:e6:3f:bf:14:f6:9e:0a:8a:d9:cb:f4: 98:12:be:1f:3d:1e:ac:f1:16:3c:97:5d:16:5b:41:43:b9:6f: e7:e5:57:93:eb:55:85:b6:23:06:15:3b:36:f2:e4:e5:e0:20: 8c:79:62:d8:de:85:3a:e7:10:94:c0:d7:71:fe:54:40:bb:a2: 55:4f:f6:f7:36:ee:2e:a5:7f:39:64:93:aa:7b:44:49:b5:5c: de:25:6b:7d:80:34:c3:d3:a6:3c:85:ee:ff:bc:30:80:a2:c7: df:a5:6a:8a:17:fa:07:04:b4:43:d7:4a:c6:e0:68:1c:de:6c: 08:d8:3c:65:b3:f2:da:9d:23:c8:13:45:43:8c:c8:1c:3e:46: b6:1f:34:cd:9a:4f:eb:62:1b:08:f9:1f:d6:20:81:1b:1e:6d: 64:ce:81:a1 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5fzK10JlfaHxUMs35Hft4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0ZTUwMjQwYWY0MGViMmFkNjBmYzMwNzhhYzMzZmM1MzU1 ZDQ0MTYwHhcNMjYwMTAxMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTQxMTI0NmFiM2EwM2FjYTM3ZDVhMGM5ODIyOTk1NzU2Yzg1MzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCmmgaAluztH723AqeJKRsJd8OVp 3M5kCIquZjfN5myAHslQttOd4OmDTQe3oJXqA7maOK2s1ASl7U7EzyQjiW7COMSB 1oyOKrQybLPoq8DJp9dbfAOWgoBZMuYJZYmm/tnn8MqKfqLIK8XqjRzxEa5JxC8p 32HCNKH4FAv5TYFkM/ZYTUsSzEf4edTx1W9Eo9NYyZ2u7klBIRal5e7orjKEW+Wo lIUnwnVyb5EIlUvZ1owS0cIspOfg0a/FLHuTwsMseddp0kviPNXwhsfYlkXrhLdY UVKgO3qlDsSCvDw0UOb0Dpt98zIFfFUVI1XRN1q8GoEZWfw1/i57hRd4KQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFEVBEkarOgOso31aDJgimVdWyFOMMB8GA1UdIwQY MBaAFATlAkCvQOsq1g/DB4rDP8U1XUQWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk9VQ1FLOUE2eXJXRDhNSGlzTV94VFZkUkJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lZDIwZTYtNGY1Ni00NTk5LTgyYzAt MzNhOWE2ZjQyZjBjLzEvUlVFU1JxczZBNnlqZlZvTW1DS1pWMWJJVTR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9lZDIwZTYtNGY1Ni00NTk5LTgyYzAtMzNhOWE2ZjQyZjBj LzEvQk9VQ1FLOUE2eXJXRDhNSGlzTV94VFZkUkJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQELiMwAwQF 1bYAMA0EAgACMAcDBQAgARTgMA0GCSqGSIb3DQEBCwUAA4IBAQBwfr6L6riW4mMo XKFtQCBVXuFpWdpmhW1HLyqmyvFDB+1eXJaDQksxOvg0VditNzuviLiQwTAYMh3I qP5PtBVRVQnfAfponytCS8Tjowu//R68mBxvEchFIrDccrKVa75t5j+/FPaeCorZ y/SYEr4fPR6s8RY8l10WW0FDuW/n5VeT61WFtiMGFTs28uTl4CCMeWLY3oU65xCU wNdx/lRAu6JVT/b3Nu4upX85ZJOqe0RJtVzeJWt9gDTD06Y8he7/vDCAosffpWqK F/oHBLRD10rG4Ggc3mwI2Dxls/LanSPIE0VDjMgcPka2HzTNmk/rYhsI+R/WIIEb Hm1kzoGh -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:55 2026 by rpki-client