This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/UuhuRG3t0beQeM3SanzcH2at_G8.roa File: UuhuRG3t0beQeM3SanzcH2at_G8.roa (raw, json) Hash identifier: HIZxPCxcxlB3mmTmmJ/O+TBr9iHmgf1VMS9ElimxSg0= Subject key identifier: 52:E8:6E:44:6D:ED:D1:B7:90:78:CD:D2:6A:7C:DC:1F:66:AD:FC:6F Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 019B7F8429E4340F8C2CB7F24BDA0E162BA1 Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/UuhuRG3t0beQeM3SanzcH2at_G8.roa Signing time: Fri 02 Jan 2026 16:22:06 +0000 ROA not before: Fri 02 Jan 2026 16:22:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215029 IP address blocks: 46.27.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:29:e4:34:0f:8c:2c:b7:f2:4b:da:0e:16:2b:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Jan 2 16:22:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52e86e446dedd1b79078cdd26a7cdc1f66adfc6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:63:03:24:21:39:6e:1c:97:35:23:17:55:3c: 01:7f:d6:9b:3b:ea:fa:27:c9:ca:51:7c:8e:c5:32: cf:b7:48:be:8e:5b:20:42:08:40:b2:36:6d:ec:a8: 26:8b:f6:df:3d:08:60:a7:c1:ad:05:f8:87:9d:c7: 95:3b:7a:f3:41:7f:52:5b:2a:4c:08:a9:bd:ce:60: cb:67:95:01:b4:98:0c:81:31:09:04:d4:fd:91:09: f4:c4:ff:c2:7b:1e:7e:cf:4d:b0:9d:d6:cf:e9:ee: 21:c4:6f:b6:66:45:7d:d3:45:33:f3:2f:a5:2f:fa: b2:58:a7:c7:66:dd:82:69:d2:ab:8a:f7:4c:58:54: 12:48:17:48:f7:a2:b2:21:74:9d:3e:26:99:fe:1c: 64:92:ce:c7:31:02:aa:8e:34:1b:8c:93:f2:16:40: 31:17:0b:7a:dd:02:30:b1:0d:91:b7:3f:16:85:19: 2f:6d:5c:5a:55:86:2e:e0:86:9e:41:65:d0:2b:0b: 05:fc:ef:30:15:82:15:c7:8c:44:3a:8d:2b:67:fe: 9c:0f:04:5d:d5:3a:44:24:03:4b:b9:4d:fe:a0:e6: a8:20:f6:24:52:40:60:fb:e8:80:35:2e:30:d5:c3: 2d:88:b5:8a:e7:72:25:e2:a3:9b:aa:f3:65:7d:72: e8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E8:6E:44:6D:ED:D1:B7:90:78:CD:D2:6A:7C:DC:1F:66:AD:FC:6F X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/UuhuRG3t0beQeM3SanzcH2at_G8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.27.195.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:47:31:01:35:37:ae:bd:1a:29:f6:41:4d:ef:04:cd:8c:42: 4c:fc:68:ad:47:73:c4:f0:53:01:f8:ba:3d:72:8e:1b:fb:6d: 42:e9:29:7b:9d:ea:58:e9:3f:b3:14:b5:64:07:0c:e6:3e:ca: 91:2b:4e:1d:ff:71:56:09:6e:81:2c:bf:b3:70:20:89:d7:26: c8:aa:df:6d:e6:18:ad:93:36:e2:6a:04:37:63:de:34:31:06: 8d:b5:ea:50:49:d0:42:c5:de:0a:21:77:10:ea:12:50:7b:37: 8b:fd:0c:8e:d8:16:75:94:8a:8a:b0:56:eb:24:e6:f3:f8:28: d7:f2:8a:83:bb:b6:c4:bc:bb:9d:ed:d3:a8:b8:fb:7f:0e:b9: 41:8b:4e:c5:e6:86:b5:24:8b:26:45:c8:9a:ae:68:91:3c:ed: 9f:c4:8f:11:6b:67:fe:7a:98:bd:6b:f9:70:94:ed:b8:97:23: 54:a6:df:3c:eb:26:cf:ae:92:a2:ce:48:e0:ad:7a:25:b0:f0: bf:48:96:a3:0a:c3:9c:48:d1:c1:3d:06:f0:6a:d1:8d:3f:fc: 7e:8e:01:07:25:78:b6:e5:f4:83:1a:03:7d:36:9b:59:3e:d3: 07:7d:02:c8:cd:d1:2b:bb:cf:6f:7e:ad:6c:fb:01:ea:03:c4: f9:8c:f9:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hCnkNA+MLLfyS9oOFiuhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjYwMTAyMTYyMjA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmU4NmU0NDZkZWRkMWI3OTA3OGNkZDI2YTdjZGMxZjY2YWRmYzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWMDJCE5bhyXNSMXVTwBf9abO+r6 J8nKUXyOxTLPt0i+jlsgQghAsjZt7Kgmi/bfPQhgp8GtBfiHnceVO3rzQX9SWypM CKm9zmDLZ5UBtJgMgTEJBNT9kQn0xP/Cex5+z02wndbP6e4hxG+2ZkV900Uz8y+l L/qyWKfHZt2CadKrivdMWFQSSBdI96KyIXSdPiaZ/hxkks7HMQKqjjQbjJPyFkAx Fwt63QIwsQ2Rtz8WhRkvbVxaVYYu4IaeQWXQKwsF/O8wFYIVx4xEOo0rZ/6cDwRd 1TpEJANLuU3+oOaoIPYkUkBg++iANS4w1cMtiLWK53Il4qObqvNlfXLoRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFLobkRt7dG3kHjN0mp83B9mrfxvMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvVXVodVJHM3QwYmVRZU0zU2FuemNIMmF0X0c4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhvDMA0G CSqGSIb3DQEBCwUAA4IBAQCMRzEBNTeuvRop9kFN7wTNjEJM/GitR3PE8FMB+Lo9 co4b+21C6Sl7nepY6T+zFLVkBwzmPsqRK04d/3FWCW6BLL+zcCCJ1ybIqt9t5hit kzbiagQ3Y940MQaNtepQSdBCxd4KIXcQ6hJQezeL/QyO2BZ1lIqKsFbrJObz+CjX 8oqDu7bEvLud7dOouPt/DrlBi07F5oa1JIsmRciarmiRPO2fxI8Ra2f+epi9a/lw lO24lyNUpt886ybPrpKizkjgrXolsPC/SJajCsOcSNHBPQbwatGNP/x+jgEHJXi2 5fSDGgN9NptZPtMHfQLIzdEru89vfq1s+wHqA8T5jPk7 -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:25 2026 by rpki-client