This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/ujxhGCIYEFST9j-DRoKisCQQu7c.roa File: ujxhGCIYEFST9j-DRoKisCQQu7c.roa (raw, json) Hash identifier: AnXG8guwVLItbuN1JjYAFkgz+rL1QHqF7D8yDPRN/BY= Subject key identifier: BA:3C:61:18:22:18:10:54:93:F6:3F:83:46:82:A2:B0:24:10:BB:B7 Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Certificate serial: 019B7F15756089BFCF8ABA33BB76DF111EF6 Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/ujxhGCIYEFST9j-DRoKisCQQu7c.roa Signing time: Fri 02 Jan 2026 14:21:11 +0000 ROA not before: Fri 02 Jan 2026 14:21:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41745 IP address blocks: 45.112.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 06:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:75:60:89:bf:cf:8a:ba:33:bb:76:df:11:1e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4 Validity Not Before: Jan 2 14:21:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba3c61182218105493f63f834682a2b02410bbb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b0:e2:28:16:fa:c9:29:2b:84:32:b0:2f:ef: e3:40:93:c1:11:4c:6d:f9:56:7a:06:3f:63:1b:b3: 62:dd:34:27:f0:31:65:37:ae:44:cc:f1:6e:0d:cc: a7:40:87:2a:c4:ca:ab:9c:65:f3:f0:96:16:2c:26: 11:e0:fb:df:7d:cb:43:90:e9:63:1a:38:6e:ec:97: bd:be:cb:a4:7d:5b:1d:c3:15:d1:3a:ba:5c:59:6f: b0:b1:33:cf:46:df:fc:55:61:de:d7:07:e9:4c:f7: 99:3f:08:fa:49:c4:19:f8:fc:f6:e5:40:f7:c5:90: 68:39:6f:11:83:ae:1a:5c:38:d4:ff:45:fe:99:9a: 87:43:79:c6:83:5c:6b:01:b1:56:bd:5d:c8:b0:d7: 01:5b:8d:e2:20:d1:09:06:87:75:87:2f:a9:58:a2: 2c:84:a5:ec:7c:ca:6d:c4:2b:0d:0a:04:f0:cd:d4: e1:c7:3e:51:b2:c1:cf:73:ae:7c:44:37:96:fc:67: c5:f5:71:52:2a:8f:5f:98:82:89:87:c5:f2:09:8d: b4:48:74:e2:03:52:a9:25:88:80:ea:3b:18:ab:d1: 09:c6:3e:6f:f1:0a:6d:f7:d9:37:06:48:1a:5d:f9: 77:0a:dc:fa:b9:39:65:23:3e:1b:5c:86:a5:e0:3d: ea:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:3C:61:18:22:18:10:54:93:F6:3F:83:46:82:A2:B0:24:10:BB:B7 X509v3 Authority Key Identifier: keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/ujxhGCIYEFST9j-DRoKisCQQu7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.112.194.0/24 Signature Algorithm: sha256WithRSAEncryption 30:ce:51:18:60:9e:9b:60:31:d8:b1:35:e0:81:e4:5d:e1:d2: 25:44:c7:10:86:26:b3:be:a1:67:7d:fc:b6:37:5b:c5:a4:8f: a9:5c:1a:b3:6f:cf:2a:5d:36:5c:8f:92:c3:b2:24:ed:01:6f: 10:37:46:3d:a4:86:e1:e3:a3:21:6a:fb:4a:c0:d0:0a:49:37: b7:19:40:e1:44:9e:de:2d:88:8e:f1:2a:50:ed:ec:5d:e1:83: 4b:26:6b:00:9a:f4:44:56:12:6b:f6:6e:a8:07:dd:b4:cd:5e: 71:d1:93:ce:18:7b:de:8d:ac:af:f0:15:31:47:20:ab:43:89: b2:22:32:db:d8:2e:d7:0e:04:6a:57:51:13:d5:1e:c0:1c:bd: 15:7a:5c:bf:26:0e:df:34:fd:34:3f:61:be:aa:20:8c:4d:5b: 5d:31:e6:78:64:55:7c:b8:52:bf:04:13:0c:d7:52:b6:52:53: a0:89:f5:7a:16:cf:8a:3e:c4:a2:bd:d1:6b:ff:a7:24:f9:b3: 2d:66:55:76:c7:0c:14:ff:5d:78:07:ae:17:36:15:7e:a1:fd: 5b:f0:49:73:61:ff:ff:80:f8:99:31:34:b0:d3:90:20:23:07: 90:07:bb:32:e4:4a:52:a5:9e:e0:a4:4f:0b:c7:50:2c:10:f2: b3:1c:2f:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FXVgib/Pirozu3bfER72MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh ZjZkYzQwHhcNMjYwMTAyMTQyMTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTNjNjExODIyMTgxMDU0OTNmNjNmODM0NjgyYTJiMDI0MTBiYmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLDiKBb6ySkrhDKwL+/jQJPBEUxt +VZ6Bj9jG7Ni3TQn8DFlN65EzPFuDcynQIcqxMqrnGXz8JYWLCYR4PvffctDkOlj Gjhu7Je9vsukfVsdwxXROrpcWW+wsTPPRt/8VWHe1wfpTPeZPwj6ScQZ+Pz25UD3 xZBoOW8Rg64aXDjU/0X+mZqHQ3nGg1xrAbFWvV3IsNcBW43iINEJBod1hy+pWKIs hKXsfMptxCsNCgTwzdThxz5RssHPc658RDeW/GfF9XFSKo9fmIKJh8XyCY20SHTi A1KpJYiA6jsYq9EJxj5v8Qpt99k3BkgaXfl3Ctz6uTllIz4bXIal4D3qlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLo8YRgiGBBUk/Y/g0aCorAkELu3MB8GA1UdIwQY MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt ZTUyNmE5NDA5ZmI4LzEvdWp4aEdDSVlFRlNUOWotRFJvS2lzQ1FRdTdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4 LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALXDCMA0G CSqGSIb3DQEBCwUAA4IBAQAwzlEYYJ6bYDHYsTXggeRd4dIlRMcQhiazvqFnffy2 N1vFpI+pXBqzb88qXTZcj5LDsiTtAW8QN0Y9pIbh46MhavtKwNAKSTe3GUDhRJ7e LYiO8SpQ7exd4YNLJmsAmvREVhJr9m6oB920zV5x0ZPOGHvejayv8BUxRyCrQ4my IjLb2C7XDgRqV1ET1R7AHL0Vely/Jg7fNP00P2G+qiCMTVtdMeZ4ZFV8uFK/BBMM 11K2UlOgifV6Fs+KPsSivdFr/6ck+bMtZlV2xwwU/114B64XNhV+of1b8ElzYf// gPiZMTSw05AgIweQB7sy5EpSpZ7gpE8Lx1AsEPKzHC9b -----END CERTIFICATE-----Generated at Tue Jan 20 14:13:51 2026 by rpki-client