This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/UQfa-j4WEyyr4Tqn408a6pJMbHc.roa File: UQfa-j4WEyyr4Tqn408a6pJMbHc.roa (raw, json) Hash identifier: EJyCOkuGunERLH3RxVLohocub+Eh42R4y/uoWugcYsM= Subject key identifier: 51:07:DA:FA:3E:16:13:2C:AB:E1:3A:A7:E3:4F:1A:EA:92:4C:6C:77 Certificate issuer: /CN=dac71030fe081e02bab4823d0568ffb2a33265e1 Certificate serial: 019B7BA327A71A9AD13DE88880349A70A313 Authority key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/UQfa-j4WEyyr4Tqn408a6pJMbHc.roa Signing time: Thu 01 Jan 2026 22:17:28 +0000 ROA not before: Thu 01 Jan 2026 22:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44029 IP address blocks: 45.81.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:27:a7:1a:9a:d1:3d:e8:88:80:34:9a:70:a3:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac71030fe081e02bab4823d0568ffb2a33265e1 Validity Not Before: Jan 1 22:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5107dafa3e16132cabe13aa7e34f1aea924c6c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:af:ca:7d:18:b1:d9:40:61:4a:fc:c1:86:71: 0e:95:74:4f:bc:e1:8c:75:89:c5:30:0e:d9:a8:43: 59:ea:b1:31:42:59:c0:93:8c:27:e2:be:cf:91:f1: 32:24:c9:89:e0:cf:1d:18:8e:94:a3:20:3b:24:db: c4:d8:f3:59:37:ef:4b:07:d9:7b:a5:a9:45:10:ee: 76:19:f4:2c:fe:38:75:74:ea:7e:6d:b8:27:1a:e6: 98:b0:a9:e3:7d:b8:b2:bb:f6:ec:5b:36:d3:82:93: 94:22:b8:75:ea:e4:24:dc:76:17:2b:6a:57:09:c6: 5b:61:ec:06:f8:d7:71:ae:4f:28:c1:a6:4e:12:db: b6:69:e4:7d:aa:32:c1:a8:96:0d:13:c4:a3:b5:1d: 6c:f7:aa:a7:34:ad:5b:33:e5:9f:33:be:ff:86:ec: c7:da:94:9a:83:53:0c:70:c8:d1:ff:29:fa:e0:e3: 58:b7:cc:f3:c6:b7:be:2d:51:0d:a1:a7:8b:a1:fb: cd:ef:a0:db:48:3f:cc:bb:96:73:51:8c:2d:23:e8: cf:ca:b9:33:5b:40:bd:f9:a3:18:25:07:a6:50:b7: c3:4d:4e:f7:94:a5:86:ec:74:fe:dc:e9:2c:f2:51: 24:99:d5:00:45:bf:91:a2:61:d9:94:66:5a:ce:d6: 67:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:07:DA:FA:3E:16:13:2C:AB:E1:3A:A7:E3:4F:1A:EA:92:4C:6C:77 X509v3 Authority Key Identifier: keyid:DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/UQfa-j4WEyyr4Tqn408a6pJMbHc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.108.0/22 Signature Algorithm: sha256WithRSAEncryption 14:66:ae:51:ff:a0:48:0f:8c:e0:39:61:4c:b2:65:54:1a:c3: 3b:6d:27:60:7f:d2:99:ff:a9:a1:cd:d6:40:d2:40:3e:9b:fa: 2c:5b:b7:24:ca:c0:6a:bf:e4:b8:cc:3f:c1:d0:12:d8:75:f0: 11:3a:b7:1e:20:2c:f7:d2:ca:64:91:74:51:e8:c8:63:58:0e: 2a:ca:8e:9d:a5:6d:05:62:2f:36:13:9e:82:9a:3b:5a:64:b2: 9c:ad:07:dd:e1:20:55:a0:cb:7f:11:de:12:a8:55:f4:c9:65: 5d:ae:42:1f:83:f5:dd:0f:a0:bb:b0:e0:13:fb:88:ac:f7:3a: 11:c0:90:09:70:c0:c8:a0:3f:1b:3d:b1:b3:a3:7f:fb:15:69: 6e:4f:fb:55:61:25:f4:ad:c6:c9:3b:6a:9f:e5:98:c1:58:30: f2:16:0f:42:96:fd:df:12:a2:a2:da:63:3a:5e:d8:89:02:d2: d4:45:7c:2f:35:95:59:b0:3e:c3:48:7f:e7:04:cf:82:b6:02: 5a:58:49:98:d7:f9:35:06:2a:58:88:4f:c3:8b:9c:94:74:ad: d3:05:d8:a3:67:5f:90:69:84:03:8b:1f:a8:da:e7:4b:58:8e: 48:57:71:ab:91:33:19:8c:58:a7:5e:0c:32:ad:44:6d:95:a0: c8:3c:d8:68 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7oyenGprRPeiIgDSacKMTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYzcxMDMwZmUwODFlMDJiYWI0ODIzZDA1NjhmZmIyYTMz MjY1ZTEwHhcNMjYwMTAxMjIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTA3ZGFmYTNlMTYxMzJjYWJlMTNhYTdlMzRmMWFlYTkyNGM2Yzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq/KfRix2UBhSvzBhnEOlXRPvOGM dYnFMA7ZqENZ6rExQlnAk4wn4r7PkfEyJMmJ4M8dGI6UoyA7JNvE2PNZN+9LB9l7 palFEO52GfQs/jh1dOp+bbgnGuaYsKnjfbiyu/bsWzbTgpOUIrh16uQk3HYXK2pX CcZbYewG+Ndxrk8owaZOEtu2aeR9qjLBqJYNE8SjtR1s96qnNK1bM+WfM77/huzH 2pSag1MMcMjR/yn64ONYt8zzxre+LVENoaeLofvN76DbSD/Mu5ZzUYwtI+jPyrkz W0C9+aMYJQemULfDTU73lKWG7HT+3Oks8lEkmdUARb+RomHZlGZaztZnCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFEH2vo+FhMsq+E6p+NPGuqSTGx3MB8GA1UdIwQY MBaAFNrHEDD+CB4CurSCPQVo/7KjMmXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnNjUU1QNElIZ0s2dElJOUJXal9zcU15WmVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yNWU2ZDgtNGU3Mi00YWMyLWI2ZTUt YzgyMDFiOTFhZWMzLzEvVVFmYS1qNFdFeXlyNFRxbjQwOGE2cEpNYkhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yNWU2ZDgtNGU3Mi00YWMyLWI2ZTUtYzgyMDFiOTFhZWMz LzEvMnNjUU1QNElIZ0s2dElJOUJXal9zcU15WmVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVFsMA0G CSqGSIb3DQEBCwUAA4IBAQAUZq5R/6BID4zgOWFMsmVUGsM7bSdgf9KZ/6mhzdZA 0kA+m/osW7ckysBqv+S4zD/B0BLYdfAROrceICz30spkkXRR6MhjWA4qyo6dpW0F Yi82E56CmjtaZLKcrQfd4SBVoMt/Ed4SqFX0yWVdrkIfg/XdD6C7sOAT+4is9zoR wJAJcMDIoD8bPbGzo3/7FWluT/tVYSX0rcbJO2qf5ZjBWDDyFg9Clv3fEqKi2mM6 XtiJAtLURXwvNZVZsD7DSH/nBM+CtgJaWEmY1/k1BipYiE/Di5yUdK3TBdijZ1+Q aYQDix+o2udLWI5IV3GrkTMZjFinXgwyrURtlaDIPNho -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:14 2026 by rpki-client