This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/uC3zCk-SIOTP3v8kN8AvkOioJlk.roa File: uC3zCk-SIOTP3v8kN8AvkOioJlk.roa (raw, json) Hash identifier: t6NH48ochz8I1c27bkPFIEdPItgxlKo5FppJqJnPRh0= Subject key identifier: B8:2D:F3:0A:4F:92:20:E4:CF:DE:FF:24:37:C0:2F:90:E8:A8:26:59 Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 019B7DCA81C098F17D91F19A9747E7264943 Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/uC3zCk-SIOTP3v8kN8AvkOioJlk.roa Signing time: Fri 02 Jan 2026 08:19:42 +0000 ROA not before: Fri 02 Jan 2026 08:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32043 IP address blocks: 45.157.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:81:c0:98:f1:7d:91:f1:9a:97:47:e7:26:49:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Jan 2 08:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b82df30a4f9220e4cfdeff2437c02f90e8a82659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cf:fb:ab:7b:c4:de:a2:06:88:cd:dc:c6:d7: 8c:39:61:4c:58:94:84:17:3f:49:aa:29:2d:3f:62: dc:93:8b:97:ef:4d:9c:e4:dd:ef:e2:97:2d:b4:c3: 5b:23:42:2f:87:f3:ae:c9:76:1a:e9:90:9c:d3:76: 86:03:04:cf:fb:d6:f5:45:77:9b:80:98:2d:3d:17: 70:04:d6:19:5d:cb:c3:3f:fd:14:45:0c:e0:2d:b5: d0:eb:a9:ef:98:fe:01:33:e8:98:5f:a5:d4:78:1e: 68:0e:30:b1:10:5b:50:84:67:a0:36:f5:74:92:59: 43:49:0d:42:ba:89:16:fb:7c:ce:e5:98:30:07:bb: 53:a5:af:44:7e:97:3d:ca:c7:e6:d0:d9:af:cb:ad: ef:13:ef:9f:68:eb:78:ef:d3:e9:f6:29:ce:b8:5b: 8e:c6:0f:bf:db:3e:9f:75:a0:72:16:4d:15:a7:b4: 18:55:f9:2e:0e:3c:6c:65:98:88:3a:84:7d:6f:e0: 31:31:c6:32:17:c2:25:94:9b:4a:a7:bf:f0:2a:c0: 75:85:93:3e:15:63:d4:f4:74:9e:2f:1e:37:5e:fd: 6f:53:db:95:56:7f:69:a0:97:d4:d5:85:61:0e:a4: df:c1:47:9d:1c:e5:da:ea:ad:07:f0:4f:d4:a8:f7: 03:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:2D:F3:0A:4F:92:20:E4:CF:DE:FF:24:37:C0:2F:90:E8:A8:26:59 X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/uC3zCk-SIOTP3v8kN8AvkOioJlk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.137.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:95:dc:b5:cf:08:4f:49:1a:2f:dc:f3:f1:a1:a8:c4:59:e3: 50:b1:61:96:fa:06:26:1b:bb:90:90:bb:09:12:4c:da:4c:f9: 8f:df:c6:76:93:c4:37:35:74:7f:b4:cc:8f:e4:a6:b8:29:16: 88:f9:59:f0:c2:1f:cd:a4:8f:23:9d:1b:2d:9e:fa:11:d6:73: 94:78:ab:af:bd:5c:8c:17:c9:4d:d1:ec:06:0b:51:09:06:d5: a6:e8:bb:c2:96:af:c0:90:c1:de:87:73:49:b0:fe:ca:4a:18: 64:db:44:f3:2a:47:aa:fb:23:f6:dd:0f:c8:15:ee:7b:71:43: 06:f0:d5:ad:e9:4d:3f:89:86:fb:ac:2a:41:8b:d4:14:80:ea: 0a:65:a5:17:2d:60:c9:5c:85:51:e8:fe:9e:13:10:a2:13:42: eb:f6:1c:8d:ed:c3:6c:7c:3d:39:06:fb:3e:78:c7:92:ec:34: 02:56:07:60:43:bd:9d:8c:6a:08:d0:cc:19:ff:c4:92:69:b4: 49:6d:89:e4:b9:13:9d:57:4b:f3:c4:05:18:c2:2d:5a:ca:e5: bf:09:6b:ea:c2:73:45:02:1e:61:13:63:48:2c:2d:ac:82:d2: 69:e4:3c:02:25:af:b5:2b:23:a0:de:c9:c8:b7:6f:23:9c:51: 2b:9a:06:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yoHAmPF9kfGal0fnJklDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjYwMTAyMDgxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODJkZjMwYTRmOTIyMGU0Y2ZkZWZmMjQzN2MwMmY5MGU4YTgyNjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc/7q3vE3qIGiM3cxteMOWFMWJSE Fz9JqiktP2Lck4uX702c5N3v4pcttMNbI0Ivh/OuyXYa6ZCc03aGAwTP+9b1RXeb gJgtPRdwBNYZXcvDP/0URQzgLbXQ66nvmP4BM+iYX6XUeB5oDjCxEFtQhGegNvV0 kllDSQ1CuokW+3zO5ZgwB7tTpa9Efpc9ysfm0Nmvy63vE++faOt479Pp9inOuFuO xg+/2z6fdaByFk0Vp7QYVfkuDjxsZZiIOoR9b+AxMcYyF8IllJtKp7/wKsB1hZM+ FWPU9HSeLx43Xv1vU9uVVn9poJfU1YVhDqTfwUedHOXa6q0H8E/UqPcDXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLgt8wpPkiDkz97/JDfAL5DoqCZZMB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvdUMzekNrLVNJT1RQM3Y4a044QXZrT2lvSmxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ2JMA0G CSqGSIb3DQEBCwUAA4IBAQBMldy1zwhPSRov3PPxoajEWeNQsWGW+gYmG7uQkLsJ EkzaTPmP38Z2k8Q3NXR/tMyP5Ka4KRaI+Vnwwh/NpI8jnRstnvoR1nOUeKuvvVyM F8lN0ewGC1EJBtWm6LvClq/AkMHeh3NJsP7KShhk20TzKkeq+yP23Q/IFe57cUMG 8NWt6U0/iYb7rCpBi9QUgOoKZaUXLWDJXIVR6P6eExCiE0Lr9hyN7cNsfD05Bvs+ eMeS7DQCVgdgQ72djGoI0MwZ/8SSabRJbYnkuROdV0vzxAUYwi1ayuW/CWvqwnNF Ah5hE2NILC2sgtJp5DwCJa+1KyOg3snIt28jnFErmgax -----END CERTIFICATE-----Generated at Wed Jan 21 18:23:03 2026 by rpki-client