This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/U5KRJaLW-C1j2ySoKDiQhcIiS7w.roa File: U5KRJaLW-C1j2ySoKDiQhcIiS7w.roa (raw, json) Hash identifier: 47exCNrT+wdct4CXwd3gADeOVCMD5bpFixf7fXR3XIk= Subject key identifier: 53:92:91:25:A2:D6:F8:2D:63:DB:24:A8:28:38:90:85:C2:22:4B:BC Certificate issuer: /CN=6ddd42ffdb7e8277023f1019b554feb19f5c3f23 Certificate serial: 019B797EBD6B901E5C2A2B6BE5CCD79B4A1F Authority key identifier: 6D:DD:42:FF:DB:7E:82:77:02:3F:10:19:B5:54:FE:B1:9F:5C:3F:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/U5KRJaLW-C1j2ySoKDiQhcIiS7w.roa Signing time: Thu 01 Jan 2026 12:18:27 +0000 ROA not before: Thu 01 Jan 2026 12:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213301 IP address blocks: 46.245.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:bd:6b:90:1e:5c:2a:2b:6b:e5:cc:d7:9b:4a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddd42ffdb7e8277023f1019b554feb19f5c3f23 Validity Not Before: Jan 1 12:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53929125a2d6f82d63db24a828389085c2224bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e3:39:83:11:e6:c4:4b:98:a9:51:72:75:76: 2b:34:e1:3a:b3:55:e3:95:94:84:f9:e6:ce:b2:df: f9:39:dc:81:fd:71:c9:4b:c4:c7:50:8e:6c:b1:73: a9:a6:30:a9:ca:5a:35:8f:50:fb:25:a3:9f:2b:61: 4f:c5:33:f7:02:e7:cd:f7:dc:c4:9f:50:41:84:91: ef:10:57:c5:bf:5f:a6:13:d2:88:81:c1:f3:8f:25: 54:93:f5:7c:f4:03:19:87:91:c7:c6:4f:6a:71:4b: c0:24:4f:f6:35:32:15:e6:ef:c3:8b:62:50:65:00: 03:7f:3d:e1:ee:9c:4b:a8:bb:5b:b5:13:c6:f6:60: 90:68:d4:76:8d:29:4f:e0:5e:5d:ca:3c:f2:58:7e: 5d:1e:12:2c:97:c1:81:f1:47:f3:4f:ab:82:ec:da: 10:a7:17:6d:37:2a:d9:82:b1:d8:75:81:36:5b:0f: 61:fe:f5:f5:ee:e0:fa:99:09:c9:98:63:12:45:81: 2a:01:a3:fa:56:b4:30:e4:2e:0c:c3:9b:cb:88:36: 63:30:07:0c:1a:b1:84:f9:29:90:7b:bd:cd:d0:d6: 3f:3a:7d:22:4d:79:4f:1d:db:b6:24:1f:b2:3e:e4: 1e:62:04:ec:7a:a3:7f:cd:26:02:af:93:8a:2b:81: 75:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:92:91:25:A2:D6:F8:2D:63:DB:24:A8:28:38:90:85:C2:22:4B:BC X509v3 Authority Key Identifier: keyid:6D:DD:42:FF:DB:7E:82:77:02:3F:10:19:B5:54:FE:B1:9F:5C:3F:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/U5KRJaLW-C1j2ySoKDiQhcIiS7w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.245.239.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:2e:3b:48:ad:e9:cc:98:bc:49:f3:56:2b:ec:6b:c3:1c:24: 57:83:23:d3:ea:8c:5a:fd:05:22:c8:81:e7:c0:b5:2e:73:db: 13:00:1e:f4:3e:e3:74:24:d3:da:5c:11:2d:93:2f:32:d5:1d: 0b:82:63:77:ba:3c:ba:75:2e:35:8f:04:f7:c1:94:01:08:c2: ee:a7:45:dd:61:af:a5:5e:28:02:08:ae:a0:51:16:f0:51:e4: 8a:6e:8d:0b:8d:cd:ba:6a:c1:2f:32:36:65:ed:5f:c7:06:64: 1c:86:c3:bd:d0:86:21:cd:ec:c3:a0:13:11:1c:da:e8:07:05: aa:20:1c:b0:05:1b:6b:bd:dd:fd:f9:23:5f:26:8f:bd:7d:97: 5f:d9:4b:1f:f6:dd:71:2d:10:9e:73:26:03:66:89:6a:74:50: 2e:10:71:95:39:52:9c:74:2d:02:36:fa:75:c6:9d:b4:90:c5: 10:ed:a0:ec:19:2e:f1:f3:57:5e:59:6f:fc:53:8b:ab:14:1a: ea:44:7c:cd:ad:99:6a:7d:5a:2b:fa:8c:6a:4d:18:18:09:15: 18:bf:f8:b3:1a:2f:e7:07:d0:cd:4d:ec:b1:ad:b5:cb:b5:a5: 59:4f:67:3a:d7:41:33:bf:99:97:47:a3:a1:ae:dc:86:cf:29: 57:b4:05:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fr1rkB5cKitr5czXm0ofMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGQ0MmZmZGI3ZTgyNzcwMjNmMTAxOWI1NTRmZWIxOWY1 YzNmMjMwHhcNMjYwMTAxMTIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzkyOTEyNWEyZDZmODJkNjNkYjI0YTgyODM4OTA4NWMyMjI0YmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruM5gxHmxEuYqVFydXYrNOE6s1Xj lZSE+ebOst/5OdyB/XHJS8THUI5ssXOppjCpylo1j1D7JaOfK2FPxTP3AufN99zE n1BBhJHvEFfFv1+mE9KIgcHzjyVUk/V89AMZh5HHxk9qcUvAJE/2NTIV5u/Di2JQ ZQADfz3h7pxLqLtbtRPG9mCQaNR2jSlP4F5dyjzyWH5dHhIsl8GB8UfzT6uC7NoQ pxdtNyrZgrHYdYE2Ww9h/vX17uD6mQnJmGMSRYEqAaP6VrQw5C4Mw5vLiDZjMAcM GrGE+SmQe73N0NY/On0iTXlPHdu2JB+yPuQeYgTseqN/zSYCr5OKK4F1HwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFOSkSWi1vgtY9skqCg4kIXCIku8MB8GA1UdIwQY MBaAFG3dQv/bfoJ3Aj8QGbVU/rGfXD8jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmQxQ185dC1nbmNDUHhBWnRWVC1zWjljUHlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9mMWMzNzUtNDFkYS00ZWE2LWFjZDEt MDliYzkyZDRlZDk2LzEvVTVLUkphTFctQzFqMnlTb0tEaVFoY0lpUzd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9mMWMzNzUtNDFkYS00ZWE2LWFjZDEtMDliYzkyZDRlZDk2 LzEvYmQxQ185dC1nbmNDUHhBWnRWVC1zWjljUHlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALvXvMA0G CSqGSIb3DQEBCwUAA4IBAQBNLjtIrenMmLxJ81Yr7GvDHCRXgyPT6oxa/QUiyIHn wLUuc9sTAB70PuN0JNPaXBEtky8y1R0LgmN3ujy6dS41jwT3wZQBCMLup0XdYa+l XigCCK6gURbwUeSKbo0Ljc26asEvMjZl7V/HBmQchsO90IYhzezDoBMRHNroBwWq IBywBRtrvd39+SNfJo+9fZdf2Usf9t1xLRCecyYDZolqdFAuEHGVOVKcdC0CNvp1 xp20kMUQ7aDsGS7x81deWW/8U4urFBrqRHzNrZlqfVor+oxqTRgYCRUYv/izGi/n B9DNTeyxrbXLtaVZT2c610Ezv5mXR6OhrtyGzylXtAUu -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:44 2026 by rpki-client