This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/uXxyOPGVnASS7u5ky0_kq_0zUmQ.roa File: uXxyOPGVnASS7u5ky0_kq_0zUmQ.roa (raw, json) Hash identifier: 83RawsrluXe18GC2cGOGUx568BZVRaon+KIyn+++hqw= Subject key identifier: B9:7C:72:38:F1:95:9C:04:92:EE:EE:64:CB:4F:E4:AB:FD:33:52:64 Certificate issuer: /CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6 Certificate serial: 019B7C11A75138B12A5125A68850609DDAA0 Authority key identifier: D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/uXxyOPGVnASS7u5ky0_kq_0zUmQ.roa Signing time: Fri 02 Jan 2026 00:18:10 +0000 ROA not before: Fri 02 Jan 2026 00:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49524 IP address blocks: 46.141.0.0/17 maxlen: 17 46.141.128.0/17 maxlen: 17 109.237.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:a7:51:38:b1:2a:51:25:a6:88:50:60:9d:da:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6 Validity Not Before: Jan 2 00:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b97c7238f1959c0492eeee64cb4fe4abfd335264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:bb:43:b1:fc:89:dd:8e:da:fd:b1:98:17:da: bb:93:ae:a2:bf:3c:a1:ee:2a:57:1f:3b:bb:1a:2d: 22:38:2a:5c:f5:ad:21:3f:5c:40:98:bf:84:1d:22: fb:30:ec:bb:33:69:5d:db:15:85:76:3d:3e:47:a3: 77:9f:17:45:ca:29:cf:84:a3:a5:a4:b3:80:7c:c4: 7c:88:a5:2d:2d:b4:3e:f3:06:5d:53:cc:33:fc:24: 5c:8f:b6:eb:27:43:0c:52:e6:3c:11:b0:6f:67:80: 6a:de:5c:44:47:df:9b:c0:ff:d4:b0:39:a1:2a:b3: 9b:f2:a9:65:99:3e:d4:e2:29:63:17:4a:35:43:da: cf:c1:10:1c:1e:1a:0c:8e:af:74:97:9b:6d:65:c8: 62:8c:62:db:e3:67:b6:a4:8f:9b:93:1c:70:56:88: d3:17:44:46:81:c9:6d:41:a4:39:5a:4f:07:68:e2: 32:cb:7a:0f:53:28:a2:41:d4:d1:51:71:23:b4:7f: 1b:2f:e5:58:f2:61:f0:04:7c:92:10:da:66:2c:e3: f7:fc:52:fa:46:ad:1b:26:82:e3:e0:3a:fc:c0:48: af:34:a2:58:ff:e1:f4:a6:b8:91:93:c7:bc:02:e3: 39:db:79:53:58:36:ce:41:c3:c3:08:7c:95:9d:6e: 1e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7C:72:38:F1:95:9C:04:92:EE:EE:64:CB:4F:E4:AB:FD:33:52:64 X509v3 Authority Key Identifier: keyid:D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/uXxyOPGVnASS7u5ky0_kq_0zUmQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.141.0.0/16 109.237.160.0/20 Signature Algorithm: sha256WithRSAEncryption 8a:57:89:a6:f6:83:d6:94:c4:fe:16:57:48:09:9f:f5:8b:df: 97:77:08:32:32:7c:12:6d:c3:88:46:bd:63:a3:e1:f0:fd:f2: 51:94:80:c7:29:5e:00:fe:34:e5:b1:15:62:35:09:23:fd:18: 01:e6:13:b9:98:5f:b3:6c:e9:ac:fc:28:f6:48:e7:0e:7c:d5: ea:e6:bd:8f:ae:18:12:17:58:06:13:a8:3a:bd:de:ef:29:4d: fc:88:35:f0:73:ef:eb:35:05:a7:cb:7f:a1:e5:8c:1f:d4:24: ce:93:6e:31:4d:ba:71:ca:1c:b1:f2:8b:60:33:da:d1:37:c4: e5:4c:15:dc:95:c5:4f:26:12:b6:49:17:81:72:e1:68:19:be: 02:01:b7:fc:61:f3:b8:15:98:88:be:40:00:83:37:6c:91:5e: 59:7c:6e:d3:5c:e8:70:bb:e3:e0:fb:3f:9a:7b:c0:25:2b:d5: 7a:21:5a:7b:48:78:a0:39:2c:db:42:df:23:a4:a2:1c:4a:1c: 2a:ad:3e:9c:1e:9e:47:75:03:94:ef:99:73:bb:ad:e1:c7:93: 7d:dc:0f:2c:b7:fa:2d:3b:c9:70:26:7b:b5:d4:87:ff:d2:8f: c8:83:1f:c9:20:8a:5e:e2:98:2f:eb:79:4e:33:66:49:20:39: d5:04:3a:5e -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt8EadROLEqUSWmiFBgndqgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNTQwYjUxOGQ3NWZiZWZkNjE2YmZkOTRjZjA1ZmQyNWJh NDg4YjYwHhcNMjYwMTAyMDAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTdjNzIzOGYxOTU5YzA0OTJlZWVlNjRjYjRmZTRhYmZkMzM1MjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3btDsfyJ3Y7a/bGYF9q7k66ivzyh 7ipXHzu7Gi0iOCpc9a0hP1xAmL+EHSL7MOy7M2ld2xWFdj0+R6N3nxdFyinPhKOl pLOAfMR8iKUtLbQ+8wZdU8wz/CRcj7brJ0MMUuY8EbBvZ4Bq3lxER9+bwP/UsDmh KrOb8qllmT7U4iljF0o1Q9rPwRAcHhoMjq90l5ttZchijGLb42e2pI+bkxxwVojT F0RGgcltQaQ5Wk8HaOIyy3oPUyiiQdTRUXEjtH8bL+VY8mHwBHySENpmLOP3/FL6 Rq0bJoLj4Dr8wEivNKJY/+H0priRk8e8AuM523lTWDbOQcPDCHyVnW4eWwIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFLl8cjjxlZwEku7uZMtP5Kv9M1JkMB8GA1UdIwQY MBaAFNNUC1GNdfvv1ha/2UzwX9JbpIi2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDFRTFVZMTEtLV9XRnJfWlRQQmYwbHVraUxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hY2VlOGUtNzc2MS00MTlmLWI0ODMt YjMwMTYyZTNjY2MwLzEvdVh4eU9QR1ZuQVNTN3U1a3kwX2txXzB6VW1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9hY2VlOGUtNzc2MS00MTlmLWI0ODMtYjMwMTYyZTNjY2Mw LzEvMDFRTFVZMTEtLV9XRnJfWlRQQmYwbHVraUxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMALo0DBARt 7aAwDQYJKoZIhvcNAQELBQADggEBAIpXiab2g9aUxP4WV0gJn/WL35d3CDIyfBJt w4hGvWOj4fD98lGUgMcpXgD+NOWxFWI1CSP9GAHmE7mYX7Ns6az8KPZI5w581erm vY+uGBIXWAYTqDq93u8pTfyINfBz7+s1BafLf6HljB/UJM6TbjFNunHKHLHyi2Az 2tE3xOVMFdyVxU8mErZJF4Fy4WgZvgIBt/xh87gVmIi+QACDN2yRXll8btNc6HC7 4+D7P5p7wCUr1XohWntIeKA5LNtC3yOkohxKHCqtPpwenkd1A5TvmXO7reHHk33c Dyy3+i07yXAme7XUh//Sj8iDH8kgil7imC/reU4zZkkgOdUEOl4= -----END CERTIFICATE-----Generated at Mon Jan 26 00:15:21 2026 by rpki-client