This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/RUznmWpVOwsn60ESxl49L9Pmya8.roa File: RUznmWpVOwsn60ESxl49L9Pmya8.roa (raw, json) Hash identifier: w+iuAkKhACBI8hLL8gbBTdoCy2pV3p1PyD5BbJLahUI= Subject key identifier: 45:4C:E7:99:6A:55:3B:0B:27:EB:41:12:C6:5E:3D:2F:D3:E6:C9:AF Certificate issuer: /CN=bf107e07952c069358cd3f82aaeceb4c69483ca9 Certificate serial: 019B7AC93CBC844B83FC4F04C9723C471D5C Authority key identifier: BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/RUznmWpVOwsn60ESxl49L9Pmya8.roa Signing time: Thu 01 Jan 2026 18:19:27 +0000 ROA not before: Thu 01 Jan 2026 18:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209835 IP address blocks: 45.149.182.0/23 maxlen: 24 151.248.20.0/22 maxlen: 24 185.185.94.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:3c:bc:84:4b:83:fc:4f:04:c9:72:3c:47:1d:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf107e07952c069358cd3f82aaeceb4c69483ca9 Validity Not Before: Jan 1 18:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=454ce7996a553b0b27eb4112c65e3d2fd3e6c9af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:54:87:f9:bb:bd:57:d4:33:05:22:7c:34:a1: 86:fa:7d:95:0f:4c:03:09:eb:c0:87:f2:21:a0:7f: c1:ad:7f:25:b4:ff:4f:8b:05:c5:ad:f5:4b:fc:f8: 33:f6:3e:06:93:4f:c2:2a:ce:7e:5a:b9:01:9f:f6: a2:38:ff:15:50:87:72:70:74:e9:83:8f:e5:2f:26: c1:bb:72:c5:1f:d2:13:cb:b5:c9:6f:f6:25:d3:e1: e7:fa:97:5b:5a:b7:57:32:1d:f1:4b:a4:58:09:ec: b5:e3:80:97:24:a8:6e:d4:6f:83:2d:90:f1:3d:4e: f2:4b:34:b6:27:c5:7a:28:bc:c9:e1:26:b3:de:d7: b2:af:e1:ef:1e:41:3a:c0:50:8b:e4:cd:3e:22:09: 52:01:a9:fc:d6:53:10:30:72:88:11:69:cd:2c:d3: 02:16:2f:3d:cf:1e:46:8a:df:d6:13:10:eb:81:84: a1:75:be:05:d4:f4:08:ef:91:00:eb:e9:33:c1:d8: 1b:ec:3f:e0:51:1a:bc:9d:4f:6e:89:68:b2:c0:fa: 35:aa:32:e2:b5:5c:4c:7d:62:74:21:f8:00:80:dc: 91:9d:79:10:29:e5:8a:11:e5:b2:3d:3b:ac:9c:6c: 98:0c:45:0f:b3:a2:3b:53:40:4a:f9:07:56:81:1f: 89:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:4C:E7:99:6A:55:3B:0B:27:EB:41:12:C6:5E:3D:2F:D3:E6:C9:AF X509v3 Authority Key Identifier: keyid:BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/RUznmWpVOwsn60ESxl49L9Pmya8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.182.0/23 151.248.20.0/22 185.185.94.0/23 Signature Algorithm: sha256WithRSAEncryption ad:f2:a6:d8:58:7b:dd:f5:cb:45:0e:fc:e8:1d:53:d8:fc:64: a6:bb:c6:1a:3d:06:ed:fa:e1:6f:82:1f:2b:78:98:a5:7d:22: a6:a2:70:35:93:b2:2d:84:a3:ce:4f:f4:7e:b0:7b:10:c2:95: 3e:71:b9:cc:ad:33:56:14:e7:4c:29:dd:03:b6:a3:c0:67:49: 94:a0:db:a9:0a:ea:74:46:56:51:9f:a9:c8:bd:76:76:5c:3d: a8:e2:af:bd:0a:be:88:31:f6:55:df:b5:cc:2a:74:5e:a5:7a: d6:80:cb:03:8d:17:98:9f:78:e3:69:86:cb:59:78:1e:0c:f8: 67:57:e6:6c:27:86:c9:f4:6b:dd:67:46:8b:df:81:f2:0c:80: 9d:97:86:ee:0a:e4:41:5b:72:cf:37:19:38:37:89:be:48:a2: c4:dd:74:21:e2:89:f0:03:08:c9:46:42:07:64:e3:56:43:73: 83:3b:97:2a:2f:a0:c4:b0:68:1c:d2:14:8c:06:71:53:2f:09: 8d:ca:81:aa:03:b0:00:d9:d9:9c:3c:a5:d8:ad:71:6f:96:dd: 92:0c:c9:6b:8f:b0:c0:47:36:ce:ce:2c:0f:76:bd:70:3a:4a: df:7a:7c:72:05:2e:9b:6a:37:d8:7e:c4:db:40:a1:d3:cf:fe: eb:40:2f:40 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6yTy8hEuD/E8EyXI8Rx1cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMTA3ZTA3OTUyYzA2OTM1OGNkM2Y4MmFhZWNlYjRjNjk0 ODNjYTkwHhcNMjYwMTAxMTgxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTRjZTc5OTZhNTUzYjBiMjdlYjQxMTJjNjVlM2QyZmQzZTZjOWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVSH+bu9V9QzBSJ8NKGG+n2VD0wD CevAh/IhoH/BrX8ltP9PiwXFrfVL/Pgz9j4Gk0/CKs5+WrkBn/aiOP8VUIdycHTp g4/lLybBu3LFH9ITy7XJb/Yl0+Hn+pdbWrdXMh3xS6RYCey144CXJKhu1G+DLZDx PU7ySzS2J8V6KLzJ4Saz3teyr+HvHkE6wFCL5M0+IglSAan81lMQMHKIEWnNLNMC Fi89zx5Git/WExDrgYShdb4F1PQI75EA6+kzwdgb7D/gURq8nU9uiWiywPo1qjLi tVxMfWJ0IfgAgNyRnXkQKeWKEeWyPTusnGyYDEUPs6I7U0BK+QdWgR+JvwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEVM55lqVTsLJ+tBEsZePS/T5smvMB8GA1UdIwQY MBaAFL8QfgeVLAaTWM0/gqrs60xpSDypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnhCLUI1VXNCcE5ZelQtQ3F1enJUR2xJUEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi83ZTI4ZWUtYzY1ZC00NTI5LWE0N2It NDg2MzNkNzE4NTkwLzEvUlV6bm1XcFZPd3NuNjBFU3hsNDlMOVBteWE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi83ZTI4ZWUtYzY1ZC00NTI5LWE0N2ItNDg2MzNkNzE4NTkw LzEvdnhCLUI1VXNCcE5ZelQtQ3F1enJUR2xJUEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLZW2AwQC l/gUAwQBubleMA0GCSqGSIb3DQEBCwUAA4IBAQCt8qbYWHvd9ctFDvzoHVPY/GSm u8YaPQbt+uFvgh8reJilfSKmonA1k7IthKPOT/R+sHsQwpU+cbnMrTNWFOdMKd0D tqPAZ0mUoNupCup0RlZRn6nIvXZ2XD2o4q+9Cr6IMfZV37XMKnRepXrWgMsDjReY n3jjaYbLWXgeDPhnV+ZsJ4bJ9GvdZ0aL34HyDICdl4buCuRBW3LPNxk4N4m+SKLE 3XQh4onwAwjJRkIHZONWQ3ODO5cqL6DEsGgc0hSMBnFTLwmNyoGqA7AA2dmcPKXY rXFvlt2SDMlrj7DARzbOziwPdr1wOkrfenxyBS6bajfYfsTbQKHTz/7rQC9A -----END CERTIFICATE-----Generated at Sun Jan 25 18:09:30 2026 by rpki-client