This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/UyjG7mUKw_csY7SyBZFvUhkSaPc.roa
File: UyjG7mUKw_csY7SyBZFvUhkSaPc.roa (raw, json)
Hash identifier: n9HYRjqT7Yx/CpHx7zXXC15FE0G/joD1gI9dynyvC54=
Subject key identifier: 53:28:C6:EE:65:0A:C3:F7:2C:63:B4:B2:05:91:6F:52:19:12:68:F7
Certificate issuer: /CN=9cd67d1033ca472b5bb80fd596bb836d12e22261
Certificate serial: 019B78A236E65EDA34D68D2B12782203777B
Authority key identifier: 9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/UyjG7mUKw_csY7SyBZFvUhkSaPc.roa
Signing time: Thu 01 Jan 2026 08:17:35 +0000
ROA not before: Thu 01 Jan 2026 08:17:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208710
IP address blocks: 45.66.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:36:e6:5e:da:34:d6:8d:2b:12:78:22:03:77:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd67d1033ca472b5bb80fd596bb836d12e22261
Validity
Not Before: Jan 1 08:17:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5328c6ee650ac3f72c63b4b205916f52191268f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:16:7c:8a:8b:5a:e6:69:c2:b9:1e:6f:58:f4:
81:46:3c:46:fa:f3:64:ed:06:bb:f7:ac:e0:06:78:
c8:0f:e6:6f:d0:a4:b7:a2:8c:d8:93:bb:b1:b5:3d:
34:7f:55:b6:3f:d1:d2:fe:be:a5:8b:8a:97:56:9e:
c5:f5:7d:93:bc:95:92:bf:13:26:fd:6b:91:db:e2:
11:f4:16:9e:4a:47:22:f8:6b:19:4b:8f:e0:a8:3f:
85:d2:c3:e9:6c:fa:9f:09:b4:a6:ae:01:21:a9:60:
82:59:74:02:f0:df:56:dc:2b:c1:01:e4:08:d5:1e:
18:52:ee:25:3f:90:48:32:64:51:15:4c:92:a1:38:
6e:60:7f:04:c2:fe:38:90:c6:50:14:d7:b9:53:3d:
8e:b1:c7:e6:e9:63:63:5e:d1:b0:d8:06:64:19:9d:
10:91:40:14:4c:fc:ff:0d:6c:f6:9a:37:e4:7f:59:
98:4d:e3:62:01:c6:fb:d4:dd:2b:b5:82:85:93:1a:
39:11:57:c2:52:c5:13:17:d9:5c:52:b9:46:f1:5a:
41:59:93:f8:dc:5d:dc:ad:46:ff:fd:ba:c7:c0:a7:
c4:6a:09:52:4e:f7:c9:98:1b:fc:a1:20:85:63:a4:
fb:6b:cf:6f:c5:66:a6:47:10:fd:e7:88:76:1e:a0:
9a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:28:C6:EE:65:0A:C3:F7:2C:63:B4:B2:05:91:6F:52:19:12:68:F7
X509v3 Authority Key Identifier:
keyid:9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/UyjG7mUKw_csY7SyBZFvUhkSaPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.0.0/22
Signature Algorithm: sha256WithRSAEncryption
87:6c:81:6e:b0:0b:78:7d:03:5d:7d:10:51:ee:4e:df:4d:07:
14:17:a7:15:b3:8c:60:7a:c8:8b:d4:3a:18:ba:1b:fd:ae:90:
da:e7:a6:1d:7e:66:52:4c:88:76:16:c9:35:1a:bc:08:4d:92:
36:88:dd:6a:0a:7c:d4:09:cc:4a:1e:31:ac:e5:37:3b:e9:f3:
09:3d:5d:3e:ab:c2:ab:34:42:7b:9e:cd:14:80:d3:c1:09:5b:
02:96:95:9b:6a:7e:e5:43:bb:22:c1:1e:9b:d0:f1:fd:3e:91:
cb:7a:d7:57:3a:da:da:29:81:08:96:26:34:bf:67:1f:aa:b1:
82:38:97:9e:63:36:86:25:0e:a0:ae:f5:ec:d9:85:24:29:71:
5c:a6:6a:11:75:f7:5b:ab:6a:d8:b6:c6:56:ec:bf:43:53:f8:
58:70:0c:df:73:76:4e:58:d8:71:9f:e0:92:c5:9c:f8:97:f6:
5e:ff:f8:1b:e5:d8:81:04:0f:bf:a5:ea:30:5e:e1:fc:e0:01:
f1:96:34:9d:0c:30:85:a5:bf:1a:ae:1e:a9:6a:f6:89:8b:15:
3a:64:51:5b:14:2c:b2:1e:46:bb:3f:e0:80:70:42:8d:ae:35:
ac:e9:8e:d0:7b:14:d7:e1:d8:91:cf:ea:28:01:bf:f3:ef:53:
0f:e0:a8:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4ojbmXto01o0rEngiA3d7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZDY3ZDEwMzNjYTQ3MmI1YmI4MGZkNTk2YmI4MzZkMTJl
MjIyNjEwHhcNMjYwMTAxMDgxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzI4YzZlZTY1MGFjM2Y3MmM2M2I0YjIwNTkxNmY1MjE5MTI2OGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxZ8iota5mnCuR5vWPSBRjxG+vNk
7Qa796zgBnjID+Zv0KS3oozYk7uxtT00f1W2P9HS/r6li4qXVp7F9X2TvJWSvxMm
/WuR2+IR9BaeSkci+GsZS4/gqD+F0sPpbPqfCbSmrgEhqWCCWXQC8N9W3CvBAeQI
1R4YUu4lP5BIMmRRFUySoThuYH8Ewv44kMZQFNe5Uz2Oscfm6WNjXtGw2AZkGZ0Q
kUAUTPz/DWz2mjfkf1mYTeNiAcb71N0rtYKFkxo5EVfCUsUTF9lcUrlG8VpBWZP4
3F3crUb//brHwKfEaglSTvfJmBv8oSCFY6T7a89vxWamRxD954h2HqCabQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFMoxu5lCsP3LGO0sgWRb1IZEmj3MB8GA1UdIwQY
MBaAFJzWfRAzykcrW7gP1Za7g20S4iJhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk5aOUVEUEtSeXRidUFfVmxydURiUkxpSW1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mMTc3MjItZTU4Yi00NDUyLTgxMzUt
ZWFhNWFjZjM1ZmQxLzEvVXlqRzdtVUt3X2NzWTdTeUJaRnZVaGtTYVBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mMTc3MjItZTU4Yi00NDUyLTgxMzUtZWFhNWFjZjM1ZmQx
LzEvbk5aOUVEUEtSeXRidUFfVmxydURiUkxpSW1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLUIAMA0G
CSqGSIb3DQEBCwUAA4IBAQCHbIFusAt4fQNdfRBR7k7fTQcUF6cVs4xgesiL1DoY
uhv9rpDa56YdfmZSTIh2Fsk1GrwITZI2iN1qCnzUCcxKHjGs5Tc76fMJPV0+q8Kr
NEJ7ns0UgNPBCVsClpWban7lQ7siwR6b0PH9PpHLetdXOtraKYEIliY0v2cfqrGC
OJeeYzaGJQ6grvXs2YUkKXFcpmoRdfdbq2rYtsZW7L9DU/hYcAzfc3ZOWNhxn+CS
xZz4l/Ze//gb5diBBA+/peowXuH84AHxljSdDDCFpb8arh6pavaJixU6ZFFbFCyy
Hka7P+CAcEKNrjWs6Y7QexTX4diRz+ooAb/z71MP4KiW
-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:22 2026 by rpki-client