This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/uYt3LwvbCynztKYkWZlfCwbeA9U.roa File: uYt3LwvbCynztKYkWZlfCwbeA9U.roa (raw, json) Hash identifier: lkVlyA3OypIzfME9Kh6ROBp1XjLEdpw7ZJP7xjy2Vqw= Subject key identifier: B9:8B:77:2F:0B:DB:0B:29:F3:B4:A6:24:59:99:5F:0B:06:DE:03:D5 Certificate issuer: /CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f Certificate serial: 019B7758D4425D3572FFAE98CEA1035CD529 Authority key identifier: CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/uYt3LwvbCynztKYkWZlfCwbeA9U.roa Signing time: Thu 01 Jan 2026 02:17:48 +0000 ROA not before: Thu 01 Jan 2026 02:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 51.149.8.0/24 maxlen: 24 51.149.14.0/24 maxlen: 24 51.149.250.0/24 maxlen: 24 51.149.251.0/24 maxlen: 24 51.149.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d4:42:5d:35:72:ff:ae:98:ce:a1:03:5c:d5:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f Validity Not Before: Jan 1 02:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b98b772f0bdb0b29f3b4a62459995f0b06de03d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fd:ec:8b:2b:5f:33:a8:ec:f8:b1:04:57:17: cc:71:99:e5:46:12:a1:05:f2:b5:69:90:00:c3:90: a5:7e:3e:96:12:a5:81:9e:bf:4c:31:47:56:de:01: 84:b7:b9:0a:23:51:56:b0:58:95:02:19:cf:f1:da: 89:d6:ba:f8:26:b0:06:43:36:fb:4e:bc:2c:1f:13: 00:e8:71:22:19:f1:13:2d:bf:76:02:0d:c5:3e:ee: 37:81:ec:83:6d:97:f2:1a:43:bf:8b:97:1a:64:ec: 34:e4:36:bd:69:70:f9:eb:70:2a:29:45:46:dd:41: d7:88:3e:00:8b:07:d0:b0:c7:3d:69:af:62:75:43: b2:97:45:29:43:4d:40:78:c2:a6:34:99:14:bb:bc: 98:52:43:07:ec:45:17:ca:26:54:c8:0a:79:a0:20: 5c:c3:69:dc:35:d7:cf:3a:3d:59:03:ea:8e:91:3f: 67:f9:36:1c:cb:9a:54:1b:48:0c:53:6d:d2:be:c9: b6:ec:34:56:51:9f:8e:dd:38:66:1f:74:89:7b:e6: 00:a8:6f:5b:ff:77:ae:e1:c4:b4:db:1b:d7:72:09: 73:52:ab:b4:7a:07:33:47:1f:7c:c3:a1:ad:e3:ec: bb:02:f5:5c:90:47:9c:fe:bb:2f:4b:0f:ea:3e:59: 6f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8B:77:2F:0B:DB:0B:29:F3:B4:A6:24:59:99:5F:0B:06:DE:03:D5 X509v3 Authority Key Identifier: keyid:CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/uYt3LwvbCynztKYkWZlfCwbeA9U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.149.8.0/24 51.149.14.0/24 51.149.250.0-51.149.252.255 Signature Algorithm: sha256WithRSAEncryption 96:94:76:da:3d:89:05:72:53:21:d9:f2:82:83:f4:9b:37:e0: 3e:82:37:3c:d3:93:3f:94:b5:f2:f7:ff:d5:50:60:7a:d0:7a: af:86:fa:c0:af:81:3e:ac:15:19:bc:e7:da:4d:dc:7b:b0:72: 3a:55:40:8b:bd:26:1e:fd:93:7c:0e:d5:26:94:e2:fc:7c:28: 6b:66:f7:f2:44:a5:46:8a:9b:b1:36:5d:64:97:73:78:2d:a7: 9e:7a:0c:b3:c0:c6:f7:47:65:10:b8:82:ae:16:14:91:0c:c5: 22:3a:29:ae:e4:94:0f:09:eb:ed:bf:f3:3e:23:b0:0e:ca:31: 77:9a:9b:88:1b:cd:79:6c:43:64:65:3b:9e:97:cc:a0:b0:66: 9f:c9:21:d3:10:f3:28:68:f6:99:0d:97:9a:14:e4:d3:ae:86: 8e:d9:c4:44:9b:d1:7c:9b:3f:e1:04:3e:3b:1b:b4:e4:ed:dc: 77:5a:bb:05:a7:97:87:d3:77:9b:4d:ed:db:6f:9d:12:69:d3: b3:a4:b7:61:b8:8a:67:a9:3a:14:fd:3f:9f:14:df:68:27:dc: e2:c3:52:77:b7:5d:7c:f0:91:61:56:89:e0:e7:6c:9b:d5:01: 24:ac:f4:66:44:c2:23:56:9b:87:0e:a9:e6:8a:32:b6:a3:2d: 82:65:62:50 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt3WNRCXTVy/66YzqEDXNUpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZDJkODAwZGM2YzMzYjY5ZmE0NzI5MWUyZjE1YjMzNWVh MzYwMGYwHhcNMjYwMTAxMDIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOThiNzcyZjBiZGIwYjI5ZjNiNGE2MjQ1OTk5NWYwYjA2ZGUwM2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv3siytfM6js+LEEVxfMcZnlRhKh BfK1aZAAw5Clfj6WEqWBnr9MMUdW3gGEt7kKI1FWsFiVAhnP8dqJ1rr4JrAGQzb7 TrwsHxMA6HEiGfETLb92Ag3FPu43geyDbZfyGkO/i5caZOw05Da9aXD563AqKUVG 3UHXiD4AiwfQsMc9aa9idUOyl0UpQ01AeMKmNJkUu7yYUkMH7EUXyiZUyAp5oCBc w2ncNdfPOj1ZA+qOkT9n+TYcy5pUG0gMU23Svsm27DRWUZ+O3ThmH3SJe+YAqG9b /3eu4cS02xvXcglzUqu0egczRx98w6Gt4+y7AvVckEec/rsvSw/qPllvAQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFLmLdy8L2wsp87SmJFmZXwsG3gPVMB8GA1UdIwQY MBaAFM7S2ADcbDO2n6RykeLxWzNeo2APMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenRMWUFOeHNNN2FmcEhLUjR2RmJNMTZqWUE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mODg4NTctY2MwNS00YmRiLTkxZTYt ZWQ0ZjA2NDNiZjI1LzEvdVl0M0x3dmJDeW56dEtZa1dabGZDd2JlQTlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9mODg4NTctY2MwNS00YmRiLTkxZTYtZWQ0ZjA2NDNiZjI1 LzEvenRMWUFOeHNNN2FmcEhLUjR2RmJNMTZqWUE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAM5UIAwQA M5UOMAwDBAEzlfoDBAAzlfwwDQYJKoZIhvcNAQELBQADggEBAJaUdto9iQVyUyHZ 8oKD9Js34D6CNzzTkz+UtfL3/9VQYHrQeq+G+sCvgT6sFRm859pN3HuwcjpVQIu9 Jh79k3wO1SaU4vx8KGtm9/JEpUaKm7E2XWSXc3gtp556DLPAxvdHZRC4gq4WFJEM xSI6Ka7klA8J6+2/8z4jsA7KMXeam4gbzXlsQ2RlO56XzKCwZp/JIdMQ8yho9pkN l5oU5NOuho7ZxESb0XybP+EEPjsbtOTt3HdauwWnl4fTd5tN7dtvnRJp07Okt2G4 imepOhT9P58U32gn3OLDUne3XXzwkWFWieDnbJvVASSs9GZEwiNWm4cOqeaKMraj LYJlYlA= -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:26 2026 by rpki-client