This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/UOrL-fWfhp63hwmPTmyope9X71A.roa File: UOrL-fWfhp63hwmPTmyope9X71A.roa (raw, json) Hash identifier: nFYQ4BgnX+b8v7k7hkFu7iArSobGMSHyFyRY+Uph3/4= Subject key identifier: 50:EA:CB:F9:F5:9F:86:9E:B7:87:09:8F:4E:6C:A8:A5:EF:57:EF:50 Certificate issuer: /CN=91521bd62c46e9943ec80cb774126d1da8393f3a Certificate serial: 019B7835352ED4CC53001BF6F8F598FB7724 Authority key identifier: 91:52:1B:D6:2C:46:E9:94:3E:C8:0C:B7:74:12:6D:1D:A8:39:3F:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/UOrL-fWfhp63hwmPTmyope9X71A.roa Signing time: Thu 01 Jan 2026 06:18:31 +0000 ROA not before: Thu 01 Jan 2026 06:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51189 IP address blocks: 195.54.44.0/23 maxlen: 23 195.54.44.0/24 maxlen: 24 195.54.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.mft rsync://rpki.ripe.net/repository/DEFAULT/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:35:2e:d4:cc:53:00:1b:f6:f8:f5:98:fb:77:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91521bd62c46e9943ec80cb774126d1da8393f3a Validity Not Before: Jan 1 06:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50eacbf9f59f869eb787098f4e6ca8a5ef57ef50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a2:8f:88:2f:e3:90:25:2e:d0:00:22:68:24: c5:59:73:03:bc:2c:63:ec:8e:0c:07:53:22:d3:4a: b5:f5:94:11:b0:14:53:96:eb:1e:48:0d:ca:e0:d9: b7:d8:e2:ce:55:d5:8c:50:c4:0e:5a:ef:c6:73:30: 04:18:ed:39:33:30:d5:86:6b:2f:83:af:f1:06:c2: 02:da:8e:fe:a6:2f:6b:9a:95:ec:b1:d9:b2:da:8a: 1f:31:6e:54:0b:fc:79:e8:0a:c6:d6:88:0f:1d:95: 77:2d:b0:14:29:38:70:48:31:b1:b4:2f:4d:15:3c: 2d:37:b3:95:c5:cf:eb:a6:9c:e0:32:21:a5:77:45: 70:9a:f6:73:9c:15:d2:39:c8:8c:7c:94:a5:52:50: 1a:be:6d:73:0f:ae:cc:13:df:b6:b2:fe:b1:21:ac: 01:60:de:ab:45:11:80:a5:28:4b:9a:f5:6d:ad:ae: 8c:1e:c8:38:e0:a3:d1:2b:9d:30:81:57:62:9f:89: da:ec:7a:eb:76:4e:c2:55:8f:fe:f1:80:8b:2e:36: f3:bf:ad:47:11:12:83:10:34:f2:56:66:92:d2:17: c5:a2:0f:11:2a:e0:da:be:1f:23:27:2a:06:aa:47: 18:a0:e7:47:74:87:06:62:bc:ef:39:84:23:40:f0: 20:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:EA:CB:F9:F5:9F:86:9E:B7:87:09:8F:4E:6C:A8:A5:EF:57:EF:50 X509v3 Authority Key Identifier: keyid:91:52:1B:D6:2C:46:E9:94:3E:C8:0C:B7:74:12:6D:1D:A8:39:3F:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/UOrL-fWfhp63hwmPTmyope9X71A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/208c15-bf0d-4fbc-a0e6-a393dc7dec58/1/kVIb1ixG6ZQ-yAy3dBJtHag5Pzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.54.44.0/23 Signature Algorithm: sha256WithRSAEncryption 19:10:21:ab:f4:77:90:ed:b7:33:8c:87:00:c7:9c:4c:77:27: 51:0a:4b:18:58:94:2c:85:b8:c8:21:c0:77:7d:8d:2e:70:2d: 95:49:fe:f0:19:ae:ee:c9:f0:1d:0c:32:50:b2:e8:6b:e4:dd: 21:00:26:a8:a9:55:41:07:ad:97:68:03:56:a1:d0:e0:f8:ed: 6f:04:a6:fd:7a:dd:aa:2c:9f:b3:76:0c:95:5d:4d:a3:94:35: 6c:0f:3c:cf:aa:47:aa:ac:0e:21:87:66:85:21:ce:31:8a:a3: 37:f5:57:f2:d7:aa:37:49:5b:1a:a2:5b:8b:9d:b9:bd:67:5d: 6d:3f:d7:14:ff:70:9a:34:69:24:25:c2:4e:22:00:84:90:16: 40:47:f2:2a:7e:bc:f9:92:9f:0a:76:c0:ae:1d:dd:68:f7:57: 9a:9a:be:3c:f5:a5:c3:0e:2e:21:95:0a:88:eb:44:ea:80:64: 16:14:63:e5:0e:43:d8:72:72:3e:b3:67:5b:23:8a:17:38:3a: 70:bf:4e:b4:25:68:09:5f:aa:04:d2:25:75:11:44:b7:a4:f8: 7a:97:1b:d4:79:1d:04:b7:a2:99:3c:72:ec:47:64:c0:54:31: 90:87:05:d6:eb:34:b4:15:19:10:53:e5:b8:92:48:09:40:86: ec:67:b9:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NTUu1MxTABv2+PWY+3ckMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNTIxYmQ2MmM0NmU5OTQzZWM4MGNiNzc0MTI2ZDFkYTgz OTNmM2EwHhcNMjYwMTAxMDYxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGVhY2JmOWY1OWY4NjllYjc4NzA5OGY0ZTZjYThhNWVmNTdlZjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKKPiC/jkCUu0AAiaCTFWXMDvCxj 7I4MB1Mi00q19ZQRsBRTluseSA3K4Nm32OLOVdWMUMQOWu/GczAEGO05MzDVhmsv g6/xBsIC2o7+pi9rmpXssdmy2oofMW5UC/x56ArG1ogPHZV3LbAUKThwSDGxtC9N FTwtN7OVxc/rppzgMiGld0VwmvZznBXSOciMfJSlUlAavm1zD67ME9+2sv6xIawB YN6rRRGApShLmvVtra6MHsg44KPRK50wgVdin4na7Hrrdk7CVY/+8YCLLjbzv61H ERKDEDTyVmaS0hfFog8RKuDavh8jJyoGqkcYoOdHdIcGYrzvOYQjQPAgfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFDqy/n1n4aet4cJj05sqKXvV+9QMB8GA1UdIwQY MBaAFJFSG9YsRumUPsgMt3QSbR2oOT86MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1ZJYjFpeEc2WlEteUF5M2RCSnRIYWc1UHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yMDhjMTUtYmYwZC00ZmJjLWEwZTYt YTM5M2RjN2RlYzU4LzEvVU9yTC1mV2ZocDYzaHdtUFRteW9wZTlYNzFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8yMDhjMTUtYmYwZC00ZmJjLWEwZTYtYTM5M2RjN2RlYzU4 LzEva1ZJYjFpeEc2WlEteUF5M2RCSnRIYWc1UHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwzYsMA0G CSqGSIb3DQEBCwUAA4IBAQAZECGr9HeQ7bczjIcAx5xMdydRCksYWJQshbjIIcB3 fY0ucC2VSf7wGa7uyfAdDDJQsuhr5N0hACaoqVVBB62XaANWodDg+O1vBKb9et2q LJ+zdgyVXU2jlDVsDzzPqkeqrA4hh2aFIc4xiqM39Vfy16o3SVsaoluLnbm9Z11t P9cU/3CaNGkkJcJOIgCEkBZAR/Iqfrz5kp8KdsCuHd1o91eamr489aXDDi4hlQqI 60TqgGQWFGPlDkPYcnI+s2dbI4oXODpwv060JWgJX6oE0iV1EUS3pPh6lxvUeR0E t6KZPHLsR2TAVDGQhwXW6zS0FRkQU+W4kkgJQIbsZ7mP -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:32 2026 by rpki-client