This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/0UnyCR-s9iVj-44nCnj3n-e4xtA.roa File: 0UnyCR-s9iVj-44nCnj3n-e4xtA.roa (raw, json) Hash identifier: qIADwbji8igygxrgQjLDhHXbAfWGtCs+G3X3x04AbP0= Subject key identifier: D1:49:F2:09:1F:AC:F6:25:63:FB:8E:27:0A:78:F7:9F:E7:B8:C6:D0 Certificate issuer: /CN=b9b0d33432eca77c054e8fa8707248da4e47db0b Certificate serial: 019B7AC7C3D16641E64EF90FC2231FA2D74F Authority key identifier: B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/0UnyCR-s9iVj-44nCnj3n-e4xtA.roa Signing time: Thu 01 Jan 2026 18:17:50 +0000 ROA not before: Thu 01 Jan 2026 18:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199058 IP address blocks: 45.85.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:c3:d1:66:41:e6:4e:f9:0f:c2:23:1f:a2:d7:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b0d33432eca77c054e8fa8707248da4e47db0b Validity Not Before: Jan 1 18:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d149f2091facf62563fb8e270a78f79fe7b8c6d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:74:a4:11:4b:9a:c4:3e:76:7b:db:78:29:0c: f7:0d:dc:11:af:5c:74:6b:70:41:9e:be:72:f9:2a: fc:00:71:14:f0:b3:e7:7b:68:8e:5a:c5:e3:37:1e: 48:dc:ff:13:3f:32:e6:33:01:a9:2b:9d:2b:40:b2: 5d:82:c4:d4:72:16:40:16:6e:96:63:0b:f0:7c:b6: c3:93:ec:0c:fa:8e:46:46:ca:6c:55:6b:96:f5:48: dd:1f:d7:e3:8f:bd:89:f2:2f:0d:4a:1d:0d:25:ec: a0:56:36:f0:08:48:75:93:16:28:c2:f1:96:16:9b: 45:bf:d5:30:4b:48:bd:f1:48:77:c4:3d:48:30:eb: b7:55:8c:4c:fe:34:fc:e4:9d:d1:a3:80:b9:c1:df: 1f:62:16:0f:af:32:c3:39:ac:71:30:5c:46:33:78: e0:96:6c:37:7e:d8:15:bb:09:be:51:64:dc:0c:bb: b0:c0:06:a5:fd:c8:4d:f6:47:7e:97:34:17:c8:03: e6:1c:d2:5b:3e:d5:71:ad:42:66:5d:42:33:0f:de: 75:08:c9:ad:bf:e7:a3:e6:2d:fb:21:0e:ca:8d:aa: 67:78:24:4a:a7:c6:8b:c7:41:e7:05:00:9d:5f:60: 12:cb:89:98:06:bf:c5:c0:c3:57:42:0f:43:fe:8c: 8f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:49:F2:09:1F:AC:F6:25:63:FB:8E:27:0A:78:F7:9F:E7:B8:C6:D0 X509v3 Authority Key Identifier: keyid:B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/0UnyCR-s9iVj-44nCnj3n-e4xtA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.93.0/24 Signature Algorithm: sha256WithRSAEncryption 62:5d:77:f5:3e:8e:5c:3e:fd:14:8a:fe:5a:ce:a3:df:b5:4c: a6:10:e7:eb:71:bf:2e:8b:75:a4:1c:38:a0:db:2b:11:43:33: dd:ab:10:43:db:46:ad:1c:00:7f:d5:da:4d:ea:a5:35:20:33: 87:a2:d2:89:40:93:61:25:8d:53:b7:d4:47:82:0c:ce:3d:8a: 9e:5d:eb:27:2f:ab:d1:30:91:ed:08:31:7c:b5:ca:73:1c:0f: 37:40:5e:11:3e:81:65:4f:b2:75:08:cc:49:d9:e7:89:73:02: 82:5b:76:36:04:8a:fa:a3:96:34:11:18:47:dc:32:fe:a3:3d: a6:3e:44:7f:e5:c2:81:79:c2:9c:3b:5d:27:04:b6:4b:7e:fd: 24:77:5d:e2:4d:bb:3d:67:36:4a:f0:ab:92:5c:da:1e:8e:45: 49:78:70:0e:07:69:a4:ed:ea:3a:f3:a6:31:87:60:f0:11:43: 2f:96:70:b6:59:b2:b7:0e:c8:6a:70:50:7e:f0:3d:e7:a5:29: 9f:ee:49:8b:59:b9:82:f5:f5:0f:5e:35:20:d1:b7:20:0d:b3: 51:9f:e3:cd:f2:00:4d:d9:08:16:09:ef:11:91:a8:16:41:42: f8:5f:91:da:c7:ab:35:5d:d5:d2:d7:50:de:3d:45:d7:ad:7a: 2c:19:f5:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x8PRZkHmTvkPwiMfotdPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YjBkMzM0MzJlY2E3N2MwNTRlOGZhODcwNzI0OGRhNGU0 N2RiMGIwHhcNMjYwMTAxMTgxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTQ5ZjIwOTFmYWNmNjI1NjNmYjhlMjcwYTc4Zjc5ZmU3YjhjNmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3SkEUuaxD52e9t4KQz3DdwRr1x0 a3BBnr5y+Sr8AHEU8LPne2iOWsXjNx5I3P8TPzLmMwGpK50rQLJdgsTUchZAFm6W YwvwfLbDk+wM+o5GRspsVWuW9UjdH9fjj72J8i8NSh0NJeygVjbwCEh1kxYowvGW FptFv9UwS0i98Uh3xD1IMOu3VYxM/jT85J3Ro4C5wd8fYhYPrzLDOaxxMFxGM3jg lmw3ftgVuwm+UWTcDLuwwAal/chN9kd+lzQXyAPmHNJbPtVxrUJmXUIzD951CMmt v+ej5i37IQ7KjapneCRKp8aLx0HnBQCdX2ASy4mYBr/FwMNXQg9D/oyPWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNFJ8gkfrPYlY/uOJwp495/nuMbQMB8GA1UdIwQY MBaAFLmw0zQy7Kd8BU6PqHBySNpOR9sLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWJEVE5ETHNwM3dGVG8tb2NISkkyazVIMndzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iNDMxY2EtNTI3NS00MmI1LThkNTQt ZDE5NmY5MjkxNzMyLzEvMFVueUNSLXM5aVZqLTQ0bkNuajNuLWU0eHRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9iNDMxY2EtNTI3NS00MmI1LThkNTQtZDE5NmY5MjkxNzMy LzEvdWJEVE5ETHNwM3dGVG8tb2NISkkyazVIMndzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVVdMA0G CSqGSIb3DQEBCwUAA4IBAQBiXXf1Po5cPv0Uiv5azqPftUymEOfrcb8ui3WkHDig 2ysRQzPdqxBD20atHAB/1dpN6qU1IDOHotKJQJNhJY1Tt9RHggzOPYqeXesnL6vR MJHtCDF8tcpzHA83QF4RPoFlT7J1CMxJ2eeJcwKCW3Y2BIr6o5Y0ERhH3DL+oz2m PkR/5cKBecKcO10nBLZLfv0kd13iTbs9ZzZK8KuSXNoejkVJeHAOB2mk7eo686Yx h2DwEUMvlnC2WbK3DshqcFB+8D3npSmf7kmLWbmC9fUPXjUg0bcgDbNRn+PN8gBN 2QgWCe8RkagWQUL4X5Hax6s1XdXS11DePUXXrXosGfXo -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:06 2026 by rpki-client