This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/UQtw5tWdaxZP2CJRMRMBSVYaxug.roa File: UQtw5tWdaxZP2CJRMRMBSVYaxug.roa (raw, json) Hash identifier: 2LzV8743wH3GnqMZ1Fl0qI8PfZTYptUWzLtTgqqsH2A= Subject key identifier: 51:0B:70:E6:D5:9D:6B:16:4F:D8:22:51:31:13:01:49:56:1A:C6:E8 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D5F82390490FBA7652E472992F3E6 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/UQtw5tWdaxZP2CJRMRMBSVYaxug.roa Signing time: Fri 02 Jan 2026 06:20:29 +0000 ROA not before: Fri 02 Jan 2026 06:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212396 IP address blocks: 45.83.30.0/24 maxlen: 24 185.150.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:5f:82:39:04:90:fb:a7:65:2e:47:29:92:f3:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=510b70e6d59d6b164fd8225131130149561ac6e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a0:89:9d:fb:08:a6:49:8a:3d:5e:21:9d:38: 45:c3:6e:cc:10:69:49:34:74:c6:05:44:b6:51:9a: 84:51:d7:9e:fd:db:52:f7:de:dc:26:d2:6f:0c:ec: 36:52:d4:07:ea:f9:d2:69:93:d0:bb:16:cf:07:ed: da:bc:32:a7:4a:66:14:17:e1:15:30:d4:d7:3c:af: 3c:82:2a:c3:12:ed:d5:76:1c:60:b8:6c:3d:a6:e5: 92:6c:d5:7c:30:ec:11:99:b8:ec:a0:53:70:64:61: e7:28:cf:4f:1b:15:c1:4f:7d:f0:d9:94:1f:d8:8f: 31:e6:b7:5d:0e:a0:45:4e:63:ae:e4:3d:89:4e:a0: 5c:0d:3a:2d:51:9a:78:08:7d:0a:6b:a3:8a:b0:58: 10:f0:50:62:94:dc:1d:4d:bd:f3:64:74:8c:e9:56: dc:31:e4:88:8d:41:7d:b2:d7:49:31:1e:6b:62:f2: 5e:8d:a8:0e:58:34:a1:59:03:6e:c0:dd:59:a4:a1: 7b:1e:4b:64:f5:ac:1b:b9:15:1d:6c:99:42:6b:11: ae:f6:f2:16:e7:29:d5:61:81:d9:d2:a9:0b:65:eb: 11:33:58:64:83:59:6f:6c:29:59:b7:a3:be:eb:68: fe:2b:7e:2e:bc:8c:37:f3:e5:36:01:7f:71:a3:27: ce:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0B:70:E6:D5:9D:6B:16:4F:D8:22:51:31:13:01:49:56:1A:C6:E8 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/UQtw5tWdaxZP2CJRMRMBSVYaxug.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.30.0/24 185.150.1.0/24 Signature Algorithm: sha256WithRSAEncryption 38:9b:c2:25:85:a9:f8:7f:81:8a:f8:5b:64:64:20:46:9d:2c: 84:75:1a:a0:33:38:5d:cc:08:18:d8:3d:38:cf:5d:57:66:17: fc:86:0a:cd:00:9b:c3:88:d6:26:2d:fc:2e:a7:95:c3:88:03: bc:c9:de:f4:7c:ee:61:9c:df:35:2b:b8:1b:a5:d2:7c:63:db: 27:f5:79:bb:0d:c3:c2:c0:4d:5c:98:54:67:17:5c:b3:05:70: 3b:51:60:9a:00:76:cb:1f:23:cc:3c:0d:2f:b3:79:b3:24:65: 7c:d0:91:14:fb:d4:d0:b9:35:31:36:14:2b:43:10:95:3e:5d: c2:91:cc:2d:7a:ae:30:93:8d:dd:b8:fa:44:6c:12:ec:b6:43: e2:63:b2:14:36:78:c1:23:15:3e:4c:b7:d9:93:0c:1c:d8:28: 40:4a:28:c8:29:11:22:86:90:11:35:ee:b0:99:29:23:ae:fa: fd:fc:cc:6b:a9:ff:a3:b2:da:1c:cf:13:45:2f:b5:1d:fe:36: 7a:d6:dc:df:f7:28:d3:35:1b:02:72:f6:12:da:a4:ea:76:87: 15:f6:16:cd:ce:1d:3d:82:32:5b:ed:9c:8f:5b:c9:a4:17:db: 61:89:d7:9c:d4:fa:68:cf:98:f5:b2:32:0a:08:73:ce:ff:3c: a1:20:8a:9a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XV+COQSQ+6dlLkcpkvPmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTBiNzBlNmQ1OWQ2YjE2NGZkODIyNTEzMTEzMDE0OTU2MWFjNmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKCJnfsIpkmKPV4hnThFw27MEGlJ NHTGBUS2UZqEUdee/dtS997cJtJvDOw2UtQH6vnSaZPQuxbPB+3avDKnSmYUF+EV MNTXPK88girDEu3VdhxguGw9puWSbNV8MOwRmbjsoFNwZGHnKM9PGxXBT33w2ZQf 2I8x5rddDqBFTmOu5D2JTqBcDTotUZp4CH0Ka6OKsFgQ8FBilNwdTb3zZHSM6Vbc MeSIjUF9stdJMR5rYvJejagOWDShWQNuwN1ZpKF7Hktk9awbuRUdbJlCaxGu9vIW 5ynVYYHZ0qkLZesRM1hkg1lvbClZt6O+62j+K34uvIw38+U2AX9xoyfOrQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFELcObVnWsWT9giUTETAUlWGsboMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvVVF0dzV0V2RheFpQMkNKUk1STUJTVllheHVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVMeAwQA uZYBMA0GCSqGSIb3DQEBCwUAA4IBAQA4m8Ilhan4f4GK+FtkZCBGnSyEdRqgMzhd zAgY2D04z11XZhf8hgrNAJvDiNYmLfwup5XDiAO8yd70fO5hnN81K7gbpdJ8Y9sn 9Xm7DcPCwE1cmFRnF1yzBXA7UWCaAHbLHyPMPA0vs3mzJGV80JEU+9TQuTUxNhQr QxCVPl3Ckcwteq4wk43duPpEbBLstkPiY7IUNnjBIxU+TLfZkwwc2ChASijIKREi hpARNe6wmSkjrvr9/Mxrqf+jstoczxNFL7Ud/jZ61tzf9yjTNRsCcvYS2qTqdocV 9hbNzh09gjJb7ZyPW8mkF9thidec1Ppoz5j1sjIKCHPO/zyhIIqa -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:28 2026 by rpki-client