This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/uNoepfaXDI1VoCnimpxHCf9Ihpc.roa File: uNoepfaXDI1VoCnimpxHCf9Ihpc.roa (raw, json) Hash identifier: Y1lvrGMwjV5DGLBf//Ugh3tArJ+z6zA+0q1mFnD1D78= Subject key identifier: B8:DA:1E:A5:F6:97:0C:8D:55:A0:29:E2:9A:9C:47:09:FF:48:86:97 Certificate issuer: /CN=f6e7d811954993a953b7948dd06765cbc090dcf7 Certificate serial: 019B7AC899C64C625956D6379B6BCD879C5C Authority key identifier: F6:E7:D8:11:95:49:93:A9:53:B7:94:8D:D0:67:65:CB:C0:90:DC:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/uNoepfaXDI1VoCnimpxHCf9Ihpc.roa Signing time: Thu 01 Jan 2026 18:18:45 +0000 ROA not before: Thu 01 Jan 2026 18:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208372 IP address blocks: 45.142.56.0/22 maxlen: 22 2a0e:d640::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 14:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:99:c6:4c:62:59:56:d6:37:9b:6b:cd:87:9c:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6e7d811954993a953b7948dd06765cbc090dcf7 Validity Not Before: Jan 1 18:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8da1ea5f6970c8d55a029e29a9c4709ff488697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:4e:84:96:83:3a:02:71:b9:c8:ee:49:8c:97: a0:d0:4a:5c:8e:86:09:e5:69:aa:53:1c:2b:cc:5f: 46:4a:a6:43:b7:6b:8a:9e:27:5b:12:a3:18:f0:86: 09:a3:d9:a0:71:f3:fa:84:0d:28:3f:51:50:2f:b0: 00:69:0e:a7:92:77:24:4e:9b:f5:9f:68:9c:a5:59: 7c:5c:fa:68:9a:23:13:c1:fd:6c:37:88:3d:f3:91: 5f:d8:ae:5e:c1:f0:18:84:4c:80:f9:87:5d:58:ac: 7b:b7:e2:6f:79:ca:de:b8:07:6c:7a:11:c2:bc:95: 01:c8:9d:cf:76:e4:01:39:0b:82:0b:7c:d2:b1:0f: b4:4a:f1:98:ac:0b:38:1a:a8:50:28:4a:a9:89:c1: 85:c8:b5:0f:2b:66:1a:60:81:26:f5:04:54:50:d6: dd:e0:b6:01:c1:b7:eb:29:01:e0:52:1c:28:c3:56: 58:e8:54:af:1d:f2:7d:b0:2e:91:92:5b:c9:8d:69: 9d:c6:55:b9:0f:be:20:13:2a:fc:0c:90:b7:8a:22: 81:6f:c0:c1:f7:cc:83:01:ad:6d:ca:3c:3e:39:e7: 93:64:25:f1:b4:44:3f:89:50:8d:b4:d3:bb:22:ad: 41:11:03:f8:f6:d7:5e:6f:97:1c:93:f7:14:ff:c6: 12:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DA:1E:A5:F6:97:0C:8D:55:A0:29:E2:9A:9C:47:09:FF:48:86:97 X509v3 Authority Key Identifier: keyid:F6:E7:D8:11:95:49:93:A9:53:B7:94:8D:D0:67:65:CB:C0:90:DC:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/uNoepfaXDI1VoCnimpxHCf9Ihpc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.56.0/22 IPv6: 2a0e:d640::/29 Signature Algorithm: sha256WithRSAEncryption 7c:4d:7f:dc:e4:d6:08:51:62:39:f9:99:08:57:65:a7:5c:df: a5:2c:48:a1:8e:71:22:b6:19:c0:18:0a:c2:b7:7b:cc:1a:0f: 50:63:e9:5f:18:10:30:6e:ba:de:20:cf:ca:ae:a0:ff:cd:f9: 7a:f5:3f:8c:d1:ec:b0:af:80:cd:bf:0c:81:05:5d:7a:e0:a8: 76:c9:7d:ec:57:2a:d2:6f:6c:13:cd:04:56:87:af:b6:41:f4: e7:0b:c0:fa:dd:c8:7e:b4:b3:31:31:c0:99:87:76:56:74:6c: e1:8c:41:f2:bc:cc:83:14:74:99:28:e3:32:28:e4:2f:65:77: 84:94:46:60:b9:5a:40:aa:f8:88:9a:a4:cd:66:81:d1:94:c4: 53:3a:40:54:93:87:33:c5:0a:55:15:5e:09:df:4c:70:e5:d7: 18:12:ca:0b:7c:b8:b6:8b:f2:f7:ac:65:2a:29:03:a7:cc:eb: 24:4a:34:0d:ad:17:f1:24:53:76:5c:d6:24:f0:0c:15:3c:3d: d9:78:f9:74:99:20:ad:3f:f4:00:3f:fa:a5:61:f0:8a:db:59: 26:17:9e:b9:b1:aa:bf:df:44:ee:e2:a2:40:1e:b3:f5:d2:bc: 0d:ee:61:e6:f0:db:27:86:97:84:29:8a:ad:f1:bc:1e:a2:6d: 5f:d5:34:27 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yJnGTGJZVtY3m2vNh5xcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ZTdkODExOTU0OTkzYTk1M2I3OTQ4ZGQwNjc2NWNiYzA5 MGRjZjcwHhcNMjYwMTAxMTgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGRhMWVhNWY2OTcwYzhkNTVhMDI5ZTI5YTljNDcwOWZmNDg4Njk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8E6EloM6AnG5yO5JjJeg0EpcjoYJ 5WmqUxwrzF9GSqZDt2uKnidbEqMY8IYJo9mgcfP6hA0oP1FQL7AAaQ6nknckTpv1 n2icpVl8XPpomiMTwf1sN4g985Ff2K5ewfAYhEyA+YddWKx7t+JvecreuAdsehHC vJUByJ3PduQBOQuCC3zSsQ+0SvGYrAs4GqhQKEqpicGFyLUPK2YaYIEm9QRUUNbd 4LYBwbfrKQHgUhwow1ZY6FSvHfJ9sC6RklvJjWmdxlW5D74gEyr8DJC3iiKBb8DB 98yDAa1tyjw+OeeTZCXxtEQ/iVCNtNO7Iq1BEQP49tdeb5cck/cU/8YS4wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLjaHqX2lwyNVaAp4pqcRwn/SIaXMB8GA1UdIwQY MBaAFPbn2BGVSZOpU7eUjdBnZcvAkNz3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXVmWUVaVkprNmxUdDVTTjBHZGx5OENRM1BjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85NjI5N2QtYzYyNy00NjZkLTllYmEt MTA3ODkwODAxMjEzLzEvdU5vZXBmYVhESTFWb0NuaW1weEhDZjlJaHBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi85NjI5N2QtYzYyNy00NjZkLTllYmEtMTA3ODkwODAxMjEz LzEvOXVmWUVaVkprNmxUdDVTTjBHZGx5OENRM1BjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLY44MA0E AgACMAcDBQMqDtZAMA0GCSqGSIb3DQEBCwUAA4IBAQB8TX/c5NYIUWI5+ZkIV2Wn XN+lLEihjnEithnAGArCt3vMGg9QY+lfGBAwbrreIM/KrqD/zfl69T+M0eywr4DN vwyBBV164Kh2yX3sVyrSb2wTzQRWh6+2QfTnC8D63ch+tLMxMcCZh3ZWdGzhjEHy vMyDFHSZKOMyKOQvZXeElEZguVpAqviImqTNZoHRlMRTOkBUk4czxQpVFV4J30xw 5dcYEsoLfLi2i/L3rGUqKQOnzOskSjQNrRfxJFN2XNYk8AwVPD3ZePl0mSCtP/QA P/qlYfCK21kmF565saq/30Tu4qJAHrP10rwN7mHm8NsnhpeEKYqt8bweom1f1TQn -----END CERTIFICATE-----Generated at Fri Jan 9 23:42:08 2026 by rpki-client