This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/5UYip_xBbzn2CNjLpZ_CoIpPzFE.roa File: 5UYip_xBbzn2CNjLpZ_CoIpPzFE.roa (raw, json) Hash identifier: 3j/AqF0wCGzG1PH65aCoZmdbg6/ubr1uvvDyr43tFG8= Subject key identifier: E5:46:22:A7:FC:41:6F:39:F6:08:D8:CB:A5:9F:C2:A0:8A:4F:CC:51 Certificate issuer: /CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6 Certificate serial: 019B7F13324176FB52F99C482DB5FE104DF3 Authority key identifier: B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/5UYip_xBbzn2CNjLpZ_CoIpPzFE.roa Signing time: Fri 02 Jan 2026 14:18:43 +0000 ROA not before: Fri 02 Jan 2026 14:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50607 IP address blocks: 185.48.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:32:41:76:fb:52:f9:9c:48:2d:b5:fe:10:4d:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6 Validity Not Before: Jan 2 14:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e54622a7fc416f39f608d8cba59fc2a08a4fcc51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:91:95:84:f3:9d:85:05:a8:f6:f0:f1:ab:18: 15:f4:88:23:82:54:83:1e:e9:da:e8:d6:41:28:2b: ab:b9:5f:61:01:ce:35:cd:a5:61:d5:d0:05:42:aa: 98:aa:07:1b:fc:1c:7e:6f:3b:c3:a1:74:df:ba:4a: 33:34:bf:9a:3a:f1:0e:a6:53:dc:e6:db:1c:00:bc: 4c:ce:fe:cf:3b:ea:be:d8:f0:ae:04:70:8d:c2:6a: 1b:46:9a:ad:2c:3f:0b:54:6e:ff:34:f9:94:91:7c: b3:e4:00:0e:75:4e:7c:fe:9c:d2:24:03:f6:72:76: 40:68:e8:ac:f2:a7:fd:6c:4c:3b:22:2a:de:6a:62: e9:c4:54:7d:4d:ed:27:7d:3f:26:3d:fc:02:d4:54: f2:db:92:2a:08:7e:9a:7d:35:a0:8f:84:19:ff:79: 88:90:e9:36:7f:5e:7c:df:be:a3:86:cd:2a:8c:43: 29:86:0e:0a:e3:d7:4c:00:65:b9:e6:a5:36:d5:f0: 9e:02:0a:5a:ab:dd:76:c4:1d:ee:15:48:c1:27:c2: 3d:c6:f0:39:22:5b:53:ca:0c:08:6f:3f:ac:dc:d2: db:49:a6:a1:45:98:15:eb:59:e8:16:79:e9:a3:19: 6a:0c:90:23:76:f7:94:57:32:a8:cf:3d:fd:62:40: 3f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:46:22:A7:FC:41:6F:39:F6:08:D8:CB:A5:9F:C2:A0:8A:4F:CC:51 X509v3 Authority Key Identifier: keyid:B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/5UYip_xBbzn2CNjLpZ_CoIpPzFE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.48.9.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:b7:40:40:4c:34:c5:ab:e7:4f:be:ff:3e:f8:4a:f7:5e:e9: de:51:e9:5f:40:41:b1:0a:e6:7b:55:36:a1:40:c7:8d:d9:03: 42:88:49:14:4b:c5:a0:94:f5:dd:0b:f4:d4:58:de:0d:13:35: 23:96:08:95:86:a5:c4:8f:9e:fb:b1:4d:2e:87:51:ee:b0:4f: fa:dc:12:9d:6d:aa:58:21:e8:b2:a5:c3:7b:dd:a0:29:9b:8d: 1e:8a:ce:1c:6a:f9:49:82:05:cb:de:02:33:71:6c:ad:10:b0: a4:83:5e:42:61:96:0f:d4:c8:d0:af:c1:f4:ab:65:3c:35:e1: ef:3e:23:2d:ff:88:36:10:f8:bd:5a:82:c1:0f:4a:62:81:21: 48:36:a6:63:7e:ac:b4:ac:7d:05:5c:64:5a:81:74:94:00:5f: c7:6c:2b:34:36:6a:fc:77:ef:e1:f8:ed:53:f6:59:c1:0f:38: 3d:59:6a:dd:77:5d:45:f0:a1:5e:c7:c6:2a:a1:03:49:0c:fb: a3:71:e0:ac:d6:5f:38:4d:a0:e7:e6:47:f2:87:0d:d0:4d:33: 12:50:7c:45:69:38:ec:cb:19:77:40:08:5c:ea:85:32:5a:4e: af:43:01:89:0e:c4:c6:42:19:35:67:89:d6:1f:91:15:23:c4: 27:de:ca:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/EzJBdvtS+ZxILbX+EE3zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5Yjg3YjNiMDljY2I2OWE2ZGUyMDQ2OGU5MGVjYmIxOGY1 ZWNiYjYwHhcNMjYwMTAyMTQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTQ2MjJhN2ZjNDE2ZjM5ZjYwOGQ4Y2JhNTlmYzJhMDhhNGZjYzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZGVhPOdhQWo9vDxqxgV9IgjglSD Huna6NZBKCuruV9hAc41zaVh1dAFQqqYqgcb/Bx+bzvDoXTfukozNL+aOvEOplPc 5tscALxMzv7PO+q+2PCuBHCNwmobRpqtLD8LVG7/NPmUkXyz5AAOdU58/pzSJAP2 cnZAaOis8qf9bEw7IireamLpxFR9Te0nfT8mPfwC1FTy25IqCH6afTWgj4QZ/3mI kOk2f158376jhs0qjEMphg4K49dMAGW55qU21fCeAgpaq912xB3uFUjBJ8I9xvA5 IltTygwIbz+s3NLbSaahRZgV61noFnnpoxlqDJAjdveUVzKozz39YkA/ywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOVGIqf8QW859gjYy6WfwqCKT8xRMB8GA1UdIwQY MBaAFLm4ezsJzLaabeIEaOkOy7GPXsu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWJoN093bk10cHB0NGdSbzZRN0xzWTlleTdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wMGRkYWYtM2JlNS00MjBkLTkxOWYt M2I0Y2I5NzVhOWJjLzEvNVVZaXBfeEJiem4yQ05qTHBaX0NvSXBQekZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8wMGRkYWYtM2JlNS00MjBkLTkxOWYtM2I0Y2I5NzVhOWJj LzEvdWJoN093bk10cHB0NGdSbzZRN0xzWTlleTdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTAJMA0G CSqGSIb3DQEBCwUAA4IBAQAct0BATDTFq+dPvv8++Er3XuneUelfQEGxCuZ7VTah QMeN2QNCiEkUS8WglPXdC/TUWN4NEzUjlgiVhqXEj577sU0uh1HusE/63BKdbapY IeiypcN73aApm40eis4cavlJggXL3gIzcWytELCkg15CYZYP1MjQr8H0q2U8NeHv PiMt/4g2EPi9WoLBD0pigSFINqZjfqy0rH0FXGRagXSUAF/HbCs0Nmr8d+/h+O1T 9lnBDzg9WWrdd11F8KFex8YqoQNJDPujceCs1l84TaDn5kfyhw3QTTMSUHxFaTjs yxl3QAhc6oUyWk6vQwGJDsTGQhk1Z4nWH5EVI8Qn3srT -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:37 2026 by rpki-client