This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/U5mnoIrhi2-xwQ0MbfRjL_85uWo.roa File: U5mnoIrhi2-xwQ0MbfRjL_85uWo.roa (raw, json) Hash identifier: MKGyp4HJxPM8RFddtv+Sf1HDZ8q6UPmk/UuasqpHff0= Subject key identifier: 53:99:A7:A0:8A:E1:8B:6F:B1:C1:0D:0C:6D:F4:63:2F:FF:39:B9:6A Certificate issuer: /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b Certificate serial: 019B7F15C8F31294C49AF40A0DFA7CEB0656 Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/U5mnoIrhi2-xwQ0MbfRjL_85uWo.roa Signing time: Fri 02 Jan 2026 14:21:32 +0000 ROA not before: Fri 02 Jan 2026 14:21:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199058 IP address blocks: 45.158.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:c8:f3:12:94:c4:9a:f4:0a:0d:fa:7c:eb:06:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b Validity Not Before: Jan 2 14:21:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5399a7a08ae18b6fb1c10d0c6df4632fff39b96a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:03:d0:5f:e6:7e:13:4d:73:56:6b:84:82:1e: a1:75:32:45:d8:65:9b:67:29:ff:64:88:00:01:64: 34:46:5c:6b:18:18:e5:c6:1a:4d:8f:dc:8e:8c:de: 22:d7:34:ee:35:30:7a:8b:4c:ee:6f:09:3c:87:dd: 18:8c:c7:8c:9b:62:b9:1d:88:21:e5:09:e6:7c:53: dc:b8:62:e2:51:54:4a:7a:41:82:2c:d9:9e:b1:cf: 50:67:73:e6:c5:2c:e3:f0:f2:d9:25:23:bc:99:c8: f5:48:4f:0b:a3:d3:95:59:56:b3:b2:d5:06:81:70: 23:7c:54:c0:f5:6d:a1:d5:c1:4d:8c:eb:bf:b8:e6: 76:43:fa:72:e3:62:83:0e:fc:c8:b1:43:82:83:bb: ce:64:23:1e:4d:3d:57:24:bc:58:e7:e5:99:71:8c: c4:fc:4c:56:7c:70:ab:9c:be:10:7b:aa:08:15:03: 76:86:15:fc:a1:d0:d5:e2:32:44:44:34:b7:c2:7f: 64:41:76:c3:d0:a7:e7:66:b4:69:ab:cf:0d:55:cc: b4:05:27:54:2a:f5:2e:aa:18:73:6f:11:27:c4:97: 5f:fa:98:4b:47:26:b1:eb:33:b1:e0:f1:d9:4c:55: a5:1a:35:09:8b:9d:ef:88:45:9c:31:50:26:79:48: 06:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:99:A7:A0:8A:E1:8B:6F:B1:C1:0D:0C:6D:F4:63:2F:FF:39:B9:6A X509v3 Authority Key Identifier: keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/U5mnoIrhi2-xwQ0MbfRjL_85uWo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.127.0/24 Signature Algorithm: sha256WithRSAEncryption 53:30:98:0d:d6:4c:35:dc:3c:b6:e2:76:20:f4:84:07:0a:82: 0d:12:e9:51:19:fe:aa:96:88:e3:71:67:98:ea:cb:4c:b3:6f: 71:0b:49:30:32:67:2a:e7:f2:41:0f:4f:61:76:fe:f3:24:7a: 87:f2:a9:19:e1:d5:b3:8c:a4:f2:8e:2a:87:8b:8e:cb:cf:9b: 0d:5d:c5:1e:c1:48:99:31:32:0b:c7:af:b0:4f:6c:06:55:6a: 96:68:85:e3:d4:d7:21:3a:7c:16:dc:d6:af:e1:e3:6c:10:80: 1f:57:6e:89:7e:44:f5:36:19:e5:ce:e3:52:09:82:89:f7:6c: 09:a5:f8:a1:b0:1f:d8:fd:4c:16:70:52:32:82:ed:5f:d9:d0: aa:f5:86:97:83:7b:06:4e:28:5d:13:68:ad:4b:90:ac:27:80: e7:8e:b0:75:61:10:54:bd:52:0f:c1:0d:98:43:c2:3a:51:87: a3:9b:60:06:bc:23:fd:c5:a3:6a:ac:25:4e:95:2b:f1:a3:fe: ef:37:36:08:6d:5e:19:8e:72:1b:5a:5d:fc:45:b1:8f:b5:1a: 96:51:60:fe:44:55:3f:9d:2e:49:e5:04:86:9c:38:63:24:46: 38:7d:9f:3e:84:05:d0:23:57:10:76:be:70:53:f2:b4:7d:62: c8:82:84:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FcjzEpTEmvQKDfp86wZWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNTE1ZWFkMDk1ZWVkOWFjNGNhYmM1YWI0YWQwYjU4Njdk OWYwMWIwHhcNMjYwMTAyMTQyMTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Mzk5YTdhMDhhZTE4YjZmYjFjMTBkMGM2ZGY0NjMyZmZmMzliOTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQPQX+Z+E01zVmuEgh6hdTJF2GWb Zyn/ZIgAAWQ0RlxrGBjlxhpNj9yOjN4i1zTuNTB6i0zubwk8h90YjMeMm2K5HYgh 5QnmfFPcuGLiUVRKekGCLNmesc9QZ3PmxSzj8PLZJSO8mcj1SE8Lo9OVWVazstUG gXAjfFTA9W2h1cFNjOu/uOZ2Q/py42KDDvzIsUOCg7vOZCMeTT1XJLxY5+WZcYzE /ExWfHCrnL4Qe6oIFQN2hhX8odDV4jJERDS3wn9kQXbD0KfnZrRpq88NVcy0BSdU KvUuqhhzbxEnxJdf+phLRyax6zOx4PHZTFWlGjUJi53viEWcMVAmeUgG5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFOZp6CK4YtvscENDG30Yy//OblqMB8GA1UdIwQY MBaAFH9RXq0JXu2axMq8WrStC1hn2fAbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjFGZXJRbGU3WnJFeXJ4YXRLMExXR2ZaOEJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81YzJhNTktNjAyNS00MDBlLWFiMjgt ZjBhNjI0ZDQwOTEyLzEvVTVtbm9JcmhpMi14d1EwTWJmUmpMXzg1dVdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy81YzJhNTktNjAyNS00MDBlLWFiMjgtZjBhNjI0ZDQwOTEy LzEvZjFGZXJRbGU3WnJFeXJ4YXRLMExXR2ZaOEJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ5/MA0G CSqGSIb3DQEBCwUAA4IBAQBTMJgN1kw13Dy24nYg9IQHCoINEulRGf6qlojjcWeY 6stMs29xC0kwMmcq5/JBD09hdv7zJHqH8qkZ4dWzjKTyjiqHi47Lz5sNXcUewUiZ MTILx6+wT2wGVWqWaIXj1NchOnwW3Nav4eNsEIAfV26JfkT1NhnlzuNSCYKJ92wJ pfihsB/Y/UwWcFIygu1f2dCq9YaXg3sGTihdE2itS5CsJ4DnjrB1YRBUvVIPwQ2Y Q8I6UYejm2AGvCP9xaNqrCVOlSvxo/7vNzYIbV4ZjnIbWl38RbGPtRqWUWD+RFU/ nS5J5QSGnDhjJEY4fZ8+hAXQI1cQdr5wU/K0fWLIgoSy -----END CERTIFICATE-----Generated at Mon Jan 19 23:23:23 2026 by rpki-client