This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/u-TU9G3PdLn2qXtYJqzV7mCbrOE.roa File: u-TU9G3PdLn2qXtYJqzV7mCbrOE.roa (raw, json) Hash identifier: aE5QPdx1k0+mZxz3uvB3CV2aBguWuJ+V39vAnK3fkyM= Subject key identifier: BB:E4:D4:F4:6D:CF:74:B9:F6:A9:7B:58:26:AC:D5:EE:60:9B:AC:E1 Certificate issuer: /CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8 Certificate serial: 019B7EA43F661AA5C9DB14D21FFE006BA504 Authority key identifier: 42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/u-TU9G3PdLn2qXtYJqzV7mCbrOE.roa Signing time: Fri 02 Jan 2026 12:17:31 +0000 ROA not before: Fri 02 Jan 2026 12:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 45.91.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 03:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:3f:66:1a:a5:c9:db:14:d2:1f:fe:00:6b:a5:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8 Validity Not Before: Jan 2 12:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbe4d4f46dcf74b9f6a97b5826acd5ee609bace1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:68:ae:84:53:90:ed:14:c1:a3:7d:86:8a:17: d5:51:89:e7:f5:aa:65:7b:d7:e6:7e:09:4a:df:58: 71:ca:ac:ec:c8:b4:d2:4d:d9:5d:73:e6:4f:06:82: e1:ec:a5:6f:4d:b3:d7:70:7d:0c:fb:16:7a:b3:8f: 97:ea:90:53:ff:2f:a9:ca:c5:25:1d:b0:bb:79:9b: 24:4f:12:be:63:9a:a2:2c:20:a3:00:f9:3d:d1:85: a6:fb:a4:10:b2:b5:6d:ae:3e:88:d9:0c:16:83:6c: ef:ab:de:1b:6c:5a:4b:ea:17:ae:0a:25:21:d8:52: 60:13:fe:55:4a:27:29:93:42:ed:ba:99:09:74:7a: 5a:22:c4:d3:bd:00:c0:60:45:49:48:f4:9a:70:11: 57:ec:9d:69:8a:b5:3a:9d:52:e0:4e:85:39:cc:09: dd:76:29:54:d6:2e:01:ce:0c:c2:21:37:dd:47:70: b1:ce:9b:29:fa:d1:47:cd:71:81:d9:61:01:ec:61: 0b:ab:af:04:6a:ad:c9:9d:03:2a:05:aa:bd:91:a7: 91:df:06:13:11:a4:27:4b:bb:5d:d2:9a:b2:d2:17: aa:a8:1e:4b:94:1a:28:ba:8d:ff:db:9f:fb:ec:80: b3:18:d8:fb:7c:cb:9e:ff:1b:ff:95:dc:91:1f:52: b7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E4:D4:F4:6D:CF:74:B9:F6:A9:7B:58:26:AC:D5:EE:60:9B:AC:E1 X509v3 Authority Key Identifier: keyid:42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/u-TU9G3PdLn2qXtYJqzV7mCbrOE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.78.0/24 Signature Algorithm: sha256WithRSAEncryption 05:c5:a5:ad:bb:6f:38:5b:bd:66:4d:fd:35:df:c8:96:df:82: 85:1a:ae:ad:bb:66:1b:7d:00:b5:43:c6:64:2e:ba:f7:98:63: 4d:d8:59:57:dc:1e:2b:e6:4a:9b:9c:6b:40:07:32:a6:6d:ff: 70:fe:52:cd:dc:fd:50:76:02:a0:51:21:82:76:c3:74:dc:b1: d9:65:77:de:0f:12:b4:ac:79:77:f9:75:b2:20:24:d9:87:22: 4c:98:83:1a:a3:bc:64:13:1a:02:b0:a4:ab:bd:76:86:77:56: ef:5b:ba:10:00:29:3b:28:df:6e:c1:ce:a9:de:cf:de:a4:cc: 56:25:b5:7c:7e:f3:fc:46:fe:71:1d:17:e5:99:c2:89:6a:17: 15:49:24:62:cb:70:2b:a3:51:cf:9d:dd:0b:c0:90:c0:91:9d: 90:d1:88:fc:ea:b5:b0:75:f8:ee:a7:af:37:bd:8e:9f:a4:c3: cc:8a:40:14:06:2b:cb:0a:05:f6:ee:0d:a8:10:d6:23:02:21: 18:ed:af:5c:c2:6b:f6:6b:15:bd:2b:a9:11:a7:04:41:a5:0f: dd:aa:dc:8b:3e:28:64:9c:f5:3c:ed:f0:78:fa:01:79:ff:2e: 2e:07:73:4e:e9:0c:50:8d:6b:e1:d7:e9:a5:85:ff:b1:85:6a: 77:06:43:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pD9mGqXJ2xTSH/4Aa6UEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOWM1NGJlMWRhN2U3MzhlM2M5NmZmYjQxZjFlYTM5MDBh NjdiZTgwHhcNMjYwMTAyMTIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmU0ZDRmNDZkY2Y3NGI5ZjZhOTdiNTgyNmFjZDVlZTYwOWJhY2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2iuhFOQ7RTBo32GihfVUYnn9apl e9fmfglK31hxyqzsyLTSTdldc+ZPBoLh7KVvTbPXcH0M+xZ6s4+X6pBT/y+pysUl HbC7eZskTxK+Y5qiLCCjAPk90YWm+6QQsrVtrj6I2QwWg2zvq94bbFpL6heuCiUh 2FJgE/5VSicpk0LtupkJdHpaIsTTvQDAYEVJSPSacBFX7J1pirU6nVLgToU5zAnd dilU1i4BzgzCITfdR3Cxzpsp+tFHzXGB2WEB7GELq68Eaq3JnQMqBaq9kaeR3wYT EaQnS7td0pqy0heqqB5LlBoouo3/25/77ICzGNj7fMue/xv/ldyRH1K3VQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLvk1PRtz3S59ql7WCas1e5gm6zhMB8GA1UdIwQY MBaAFEKcVL4dp+c448lv+0Hx6jkApnvoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXB4VXZoMm41empqeVdfN1FmSHFPUUNtZS1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mNmY1YzMtNjE0Ni00OGNhLWFmZmEt M2Q4NTg0Y2Y1M2ZlLzEvdS1UVTlHM1BkTG4ycVh0WUpxelY3bUNick9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mNmY1YzMtNjE0Ni00OGNhLWFmZmEtM2Q4NTg0Y2Y1M2Zl LzEvUXB4VXZoMm41empqeVdfN1FmSHFPUUNtZS1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVtOMA0G CSqGSIb3DQEBCwUAA4IBAQAFxaWtu284W71mTf0138iW34KFGq6tu2YbfQC1Q8Zk Lrr3mGNN2FlX3B4r5kqbnGtABzKmbf9w/lLN3P1QdgKgUSGCdsN03LHZZXfeDxK0 rHl3+XWyICTZhyJMmIMao7xkExoCsKSrvXaGd1bvW7oQACk7KN9uwc6p3s/epMxW JbV8fvP8Rv5xHRflmcKJahcVSSRiy3Aro1HPnd0LwJDAkZ2Q0Yj86rWwdfjup683 vY6fpMPMikAUBivLCgX27g2oENYjAiEY7a9cwmv2axW9K6kRpwRBpQ/dqtyLPihk nPU87fB4+gF5/y4uB3NO6QxQjWvh1+mlhf+xhWp3BkM5 -----END CERTIFICATE-----Generated at Thu Jan 8 12:55:36 2026 by rpki-client