This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/UFF8sc1cAlxiuca1UYpBZJuyruI.roa File: UFF8sc1cAlxiuca1UYpBZJuyruI.roa (raw, json) Hash identifier: VvoB5niTEUFcEUXrlM/+U17VoiABVzzIIDopu2PtroE= Subject key identifier: 50:51:7C:B1:CD:5C:02:5C:62:B9:C6:B5:51:8A:41:64:9B:B2:AE:E2 Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 019B7BA3AC864787234D084968FED7991EF8 Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/UFF8sc1cAlxiuca1UYpBZJuyruI.roa Signing time: Thu 01 Jan 2026 22:18:02 +0000 ROA not before: Thu 01 Jan 2026 22:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9465 IP address blocks: 45.142.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:ac:86:47:87:23:4d:08:49:68:fe:d7:99:1e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Jan 1 22:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50517cb1cd5c025c62b9c6b5518a41649bb2aee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:3a:53:fc:8d:7a:ff:1c:a7:37:1f:10:b3:ff: b4:f2:65:52:f8:58:4e:fd:bc:23:87:58:41:94:ff: d1:7e:c2:22:a8:5f:b3:da:67:27:2d:07:42:13:e9: 27:da:84:87:4e:36:9e:ee:95:8a:80:6e:25:46:9b: c1:2c:84:a8:94:29:6a:83:c6:0a:d7:ad:c5:e8:7f: eb:a2:da:df:46:dc:9e:a9:cb:8b:b2:dc:60:bd:73: 10:7a:97:56:45:93:93:5a:27:a7:2c:12:b9:72:fc: ca:4c:6d:08:a3:79:f2:0c:9b:86:ba:10:cc:3b:4d: 98:a7:fc:db:c5:a2:04:bf:f7:87:98:16:03:76:59: 2e:00:97:67:22:a1:fd:15:9b:41:1e:53:8a:8c:08: c2:36:44:5e:8c:1e:ac:04:68:5b:38:b8:1d:9c:94: e0:48:89:42:07:e0:9a:b5:dc:ac:66:2d:2f:83:e3: e7:99:20:fc:96:98:3e:19:65:10:e1:09:cf:04:67: 3f:1e:7a:88:d8:cb:64:c3:55:be:50:f7:2e:15:33: ca:70:5e:a9:7b:66:e8:d0:11:d6:3b:c9:fa:a5:ab: 81:65:11:1e:e8:91:4f:3d:6c:0d:d5:42:f1:e1:8e: 9d:aa:3a:7e:c9:f3:9e:03:31:35:13:4b:04:13:8e: 31:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:51:7C:B1:CD:5C:02:5C:62:B9:C6:B5:51:8A:41:64:9B:B2:AE:E2 X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/UFF8sc1cAlxiuca1UYpBZJuyruI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.154.0/24 Signature Algorithm: sha256WithRSAEncryption 74:4a:29:35:74:a6:10:44:78:e3:13:a0:91:a1:fd:0a:a1:41: 69:cb:1b:78:2d:c4:6d:b1:9e:8a:91:00:23:7d:f8:a9:1d:65: 1e:01:a8:21:54:77:9c:54:95:f9:c2:1a:92:f6:9c:60:0c:8d: 55:12:f7:37:78:f2:f6:01:2c:d7:63:57:7e:c0:d2:a6:91:9c: d4:45:1c:2d:52:7f:76:59:9c:57:e2:ee:2b:21:1e:22:52:ad: c7:e1:6e:47:c2:d3:de:8c:28:f5:fd:53:ba:ba:df:45:b3:62: 72:69:ac:04:48:8a:b4:bd:a1:97:46:1b:37:f3:4c:92:03:b0: f0:52:29:88:53:46:48:2d:a1:3b:9c:d7:12:50:dc:78:d1:e7: a2:d4:c3:8b:81:da:ef:e3:6a:c0:a8:ab:70:9f:03:45:24:06: 69:00:9d:77:25:d1:87:9f:a8:ad:9d:a2:fa:51:52:7f:2f:f3: 52:de:fb:b7:fa:8e:17:65:d2:5c:76:2e:a5:5b:a6:85:95:c8: 4b:25:df:f9:b1:c1:e2:aa:67:42:52:68:a4:18:29:87:46:12: b7:ac:7b:75:cc:35:84:82:6d:97:c1:df:09:9c:57:e3:9d:b2: 2e:27:9c:f3:c6:10:22:af:44:22:7f:be:e4:f4:cc:a1:1e:e9: 6a:03:d9:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o6yGR4cjTQhJaP7XmR74MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjYwMTAxMjIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDUxN2NiMWNkNWMwMjVjNjJiOWM2YjU1MThhNDE2NDliYjJhZWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9TpT/I16/xynNx8Qs/+08mVS+FhO /bwjh1hBlP/RfsIiqF+z2mcnLQdCE+kn2oSHTjae7pWKgG4lRpvBLISolClqg8YK 163F6H/rotrfRtyeqcuLstxgvXMQepdWRZOTWienLBK5cvzKTG0Io3nyDJuGuhDM O02Yp/zbxaIEv/eHmBYDdlkuAJdnIqH9FZtBHlOKjAjCNkRejB6sBGhbOLgdnJTg SIlCB+CatdysZi0vg+PnmSD8lpg+GWUQ4QnPBGc/HnqI2Mtkw1W+UPcuFTPKcF6p e2bo0BHWO8n6pauBZREe6JFPPWwN1ULx4Y6dqjp+yfOeAzE1E0sEE44x+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFBRfLHNXAJcYrnGtVGKQWSbsq7iMB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvVUZGOHNjMWNBbHhpdWNhMVVZcEJaSnV5cnVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY6aMA0G CSqGSIb3DQEBCwUAA4IBAQB0Sik1dKYQRHjjE6CRof0KoUFpyxt4LcRtsZ6KkQAj ffipHWUeAaghVHecVJX5whqS9pxgDI1VEvc3ePL2ASzXY1d+wNKmkZzURRwtUn92 WZxX4u4rIR4iUq3H4W5HwtPejCj1/VO6ut9Fs2JyaawESIq0vaGXRhs380ySA7Dw UimIU0ZILaE7nNcSUNx40eei1MOLgdrv42rAqKtwnwNFJAZpAJ13JdGHn6itnaL6 UVJ/L/NS3vu3+o4XZdJcdi6lW6aFlchLJd/5scHiqmdCUmikGCmHRhK3rHt1zDWE gm2Xwd8JnFfjnbIuJ5zzxhAir0Qif77k9MyhHulqA9lm -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:53 2026 by rpki-client