This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/UhDHWdfAw1hhhXcKRHnFCDj6e2A.roa File: UhDHWdfAw1hhhXcKRHnFCDj6e2A.roa (raw, json) Hash identifier: tEzohecb+xCP1a7bRPls6YuJkN3k9eoJEbJ7eJxTqeI= Subject key identifier: 52:10:C7:59:D7:C0:C3:58:61:85:77:0A:44:79:C5:08:38:FA:7B:60 Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA4941ABEF767D66DBB8D035BFCA1EF Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/UhDHWdfAw1hhhXcKRHnFCDj6e2A.roa Signing time: Thu 01 Jan 2026 22:19:01 +0000 ROA not before: Thu 01 Jan 2026 22:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47204 IP address blocks: 45.131.48.0/24 maxlen: 24 45.131.49.0/24 maxlen: 24 45.131.50.0/24 maxlen: 24 80.76.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:94:1a:be:f7:67:d6:6d:bb:8d:03:5b:fc:a1:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5210c759d7c0c3586185770a4479c50838fa7b60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2a:ea:91:23:12:e1:cf:02:02:56:c3:2e:8c: 7b:b4:d1:64:8e:c5:91:88:7b:c0:cd:79:86:6f:1d: b7:7d:93:e5:43:c2:84:5a:ec:ed:20:d9:ac:6f:c6: c9:1c:80:3a:b1:af:50:c8:6c:c9:21:39:88:36:d6: 8c:af:41:9d:f1:d6:d2:d2:70:b6:4b:c7:0a:dd:fd: 7b:db:e7:f7:40:a4:19:b9:1a:0d:b4:e1:5d:e0:2c: c2:81:4c:ea:f1:67:c8:90:0f:07:ae:ef:50:10:a2: 4e:91:a6:f9:ca:4b:af:bf:c9:d9:1a:d7:3c:e0:14: 1e:2a:d6:97:45:98:df:03:32:ef:ea:c1:04:39:50: 35:dd:16:4f:32:49:36:bb:cc:5a:1e:69:3e:ed:49: f7:14:a7:6f:dc:b6:79:00:08:f2:02:48:76:05:4f: f0:87:08:ee:2d:92:68:cd:20:5f:72:4f:3c:bc:7b: f7:51:99:af:8b:1d:ea:5a:60:be:3e:6c:33:4e:9a: 35:e6:fc:29:be:b4:8e:1c:12:38:f2:7a:8d:29:33: f6:f2:e6:b9:3d:a7:a3:2f:7a:0b:d3:13:93:0b:77: f4:6c:96:28:75:ea:0d:ad:13:60:1e:73:9b:54:2e: 47:23:a4:92:50:7d:3a:d3:a8:f3:d1:47:51:13:d3: 15:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:10:C7:59:D7:C0:C3:58:61:85:77:0A:44:79:C5:08:38:FA:7B:60 X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/UhDHWdfAw1hhhXcKRHnFCDj6e2A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.48.0-45.131.50.255 80.76.63.0/24 Signature Algorithm: sha256WithRSAEncryption 62:c1:72:e1:4a:ec:12:01:ad:a4:5f:25:54:44:3b:3f:d6:29: 06:01:a6:b6:14:3d:61:b2:55:59:82:09:08:15:e0:16:7e:5f: a3:16:15:a4:9d:a1:c4:2a:97:c1:ab:6c:7d:af:4f:36:51:95: f0:58:65:58:8a:ee:36:e7:b6:13:33:1d:26:63:ba:0a:14:7b: 05:2f:64:59:d4:15:b5:5c:77:d2:10:39:13:2c:d2:7c:16:01: 69:64:67:58:cc:d5:db:c0:81:8e:7c:d0:3e:31:67:be:b8:84: 34:63:01:26:64:2e:fc:ec:b3:5f:32:0f:e0:b8:d7:74:69:81: 54:4b:92:3a:47:34:58:4b:9b:1d:50:81:a1:00:f0:88:9e:0a: 52:93:59:b4:93:24:02:52:26:cf:fa:0e:dd:ae:80:e1:a8:40: 4d:15:54:b5:c7:a9:10:40:a1:f4:c5:62:92:32:99:cb:5f:00: a5:00:02:82:f4:f4:f1:8b:1e:a8:da:35:d5:d0:3d:fc:31:51: 8b:44:30:57:8c:9f:46:cd:b7:ff:93:3a:68:54:07:05:e2:c0: 44:a7:2f:0b:8a:91:82:c9:a9:b6:2b:21:04:2e:03:ef:3e:f3: 0e:b4:5b:99:09:40:72:76:5f:7b:9f:b0:f9:eb:e6:91:04:18: 6c:8b:fd:85 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt7pJQavvdn1m27jQNb/KHvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjEwYzc1OWQ3YzBjMzU4NjE4NTc3MGE0NDc5YzUwODM4ZmE3YjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsirqkSMS4c8CAlbDLox7tNFkjsWR iHvAzXmGbx23fZPlQ8KEWuztINmsb8bJHIA6sa9QyGzJITmINtaMr0Gd8dbS0nC2 S8cK3f172+f3QKQZuRoNtOFd4CzCgUzq8WfIkA8Hru9QEKJOkab5ykuvv8nZGtc8 4BQeKtaXRZjfAzLv6sEEOVA13RZPMkk2u8xaHmk+7Un3FKdv3LZ5AAjyAkh2BU/w hwjuLZJozSBfck88vHv3UZmvix3qWmC+PmwzTpo15vwpvrSOHBI48nqNKTP28ua5 PaejL3oL0xOTC3f0bJYodeoNrRNgHnObVC5HI6SSUH0606jz0UdRE9MVTQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFFIQx1nXwMNYYYV3CkR5xQg4+ntgMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvVWhESFdkZkF3MWhoaFhjS1JIbkZDRGo2ZTJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAQtgzAD BAAtgzIDBABQTD8wDQYJKoZIhvcNAQELBQADggEBAGLBcuFK7BIBraRfJVREOz/W KQYBprYUPWGyVVmCCQgV4BZ+X6MWFaSdocQql8GrbH2vTzZRlfBYZViK7jbnthMz HSZjugoUewUvZFnUFbVcd9IQORMs0nwWAWlkZ1jM1dvAgY580D4xZ764hDRjASZk Lvzss18yD+C413RpgVRLkjpHNFhLmx1QgaEA8IieClKTWbSTJAJSJs/6Dt2ugOGo QE0VVLXHqRBAofTFYpIymctfAKUAAoL09PGLHqjaNdXQPfwxUYtEMFeMn0bNt/+T OmhUBwXiwESnLwuKkYLJqbYrIQQuA+8+8w60W5kJQHJ2X3ufsPnr5pEEGGyL/YU= -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:05 2026 by rpki-client