This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/UfJ6AxYOEJtxI46RUgB_JRZn6nQ.roa File: UfJ6AxYOEJtxI46RUgB_JRZn6nQ.roa (raw, json) Hash identifier: rOIy1z7FtnaZ+9GeHGRqJDSANhnZS+Z28eyGXUnG9zk= Subject key identifier: 51:F2:7A:03:16:0E:10:9B:71:23:8E:91:52:00:7F:25:16:67:EA:74 Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83 Certificate serial: 019B7BA339D3CEEC15B731C12BA91EEE2865 Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/UfJ6AxYOEJtxI46RUgB_JRZn6nQ.roa Signing time: Thu 01 Jan 2026 22:17:33 +0000 ROA not before: Thu 01 Jan 2026 22:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48716 IP address blocks: 45.82.14.0/24 maxlen: 24 91.200.148.0/24 maxlen: 24 91.200.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.mft rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:39:d3:ce:ec:15:b7:31:c1:2b:a9:1e:ee:28:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83 Validity Not Before: Jan 1 22:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51f27a03160e109b71238e9152007f251667ea74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fe:56:ee:3c:3d:d9:5f:24:54:75:75:f9:31: b1:5b:20:80:35:c1:27:89:8a:eb:9b:b7:3b:65:22: 43:ab:5e:34:a5:0a:b7:99:90:08:16:04:aa:6d:08: 47:13:97:11:77:14:37:02:f4:48:07:66:d0:b6:d3: 3b:d8:9e:d4:89:6e:57:af:aa:8f:ba:6d:d6:2d:d3: ec:90:38:af:16:5c:9e:6f:ed:f3:7c:e3:88:07:67: d7:05:37:7f:9c:bb:b5:7f:ab:14:a4:bd:1b:fc:3a: 39:f6:8d:20:c2:73:60:7b:ae:6b:39:15:10:cd:24: 9e:b5:1e:e2:d6:f9:84:5d:46:c9:d0:cb:83:d8:53: 82:43:bf:c5:e9:56:bf:7a:2d:60:ab:95:96:a4:ee: c7:01:56:6d:aa:cd:03:c7:31:27:69:3b:99:00:de: 8d:0a:bc:af:f8:47:1d:51:34:c9:86:21:74:29:d7: 28:65:b1:e8:36:0f:bc:03:8f:86:9d:4d:b4:b7:2e: bf:ef:d0:43:52:23:85:6a:16:4c:12:ed:fd:90:7a: c9:f0:b9:f6:dd:03:66:6a:3d:3a:70:c8:64:18:57: 99:df:58:78:12:18:9e:81:9c:0a:f0:c7:ac:24:0d: d5:01:cd:bf:a9:d9:91:ea:bb:d2:dc:1f:85:ca:16: 69:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F2:7A:03:16:0E:10:9B:71:23:8E:91:52:00:7F:25:16:67:EA:74 X509v3 Authority Key Identifier: keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/UfJ6AxYOEJtxI46RUgB_JRZn6nQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.14.0/24 91.200.148.0/24 91.200.151.0/24 Signature Algorithm: sha256WithRSAEncryption a5:34:f7:ae:52:5d:dd:51:39:69:bd:c2:d9:15:f8:78:27:4f: 87:5c:0b:8d:21:d0:29:40:55:f2:b7:be:7c:8e:64:48:d6:ec: b8:2c:b8:c9:e8:16:9e:3d:2f:df:49:00:91:4e:24:9f:84:38: 7e:f5:93:4f:c7:de:6e:26:88:8b:65:f1:be:54:a5:f7:a7:85: 91:3d:74:17:d5:9f:4f:9e:c9:2b:fb:21:7a:72:b6:52:48:f2: a1:b0:3b:c9:1c:91:7b:c7:7b:eb:51:c8:b1:b7:bd:39:5e:6c: b9:7b:41:8c:58:d9:a1:ed:76:10:f8:2c:f8:e8:a3:5b:d2:85: 4c:46:2d:fa:d9:d3:32:e0:a9:9f:73:f7:cf:de:11:19:17:6c: 56:cd:f3:e8:c2:cc:23:20:60:51:74:5c:1a:4b:2b:36:91:86: 5d:fa:61:50:b9:7f:de:8b:98:ce:ba:1d:3a:d8:c5:df:55:7c: df:a7:8a:ed:08:fd:d8:e6:9e:b3:44:aa:88:96:d3:79:d1:05: 58:d9:b4:5e:42:7f:1a:30:26:1e:a8:7b:f2:8b:76:4d:23:fa: 84:39:8a:db:47:34:2e:19:89:77:ce:82:d2:46:70:c2:c8:5b: 79:fc:0b:4d:e1:e3:18:b5:bb:46:fc:f8:8b:7c:e7:e0:f6:77: ec:8b:a1:e2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7oznTzuwVtzHBK6ke7ihlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NWViYTVjMWE4MGY4NmE0NTg5Mjc4ZWRkOTMwNGIzZjUx NjlmODMwHhcNMjYwMTAxMjIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWYyN2EwMzE2MGUxMDliNzEyMzhlOTE1MjAwN2YyNTE2NjdlYTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP5W7jw92V8kVHV1+TGxWyCANcEn iYrrm7c7ZSJDq140pQq3mZAIFgSqbQhHE5cRdxQ3AvRIB2bQttM72J7UiW5Xr6qP um3WLdPskDivFlyeb+3zfOOIB2fXBTd/nLu1f6sUpL0b/Do59o0gwnNge65rORUQ zSSetR7i1vmEXUbJ0MuD2FOCQ7/F6Va/ei1gq5WWpO7HAVZtqs0DxzEnaTuZAN6N Cryv+EcdUTTJhiF0KdcoZbHoNg+8A4+GnU20ty6/79BDUiOFahZMEu39kHrJ8Ln2 3QNmaj06cMhkGFeZ31h4EhiegZwK8MesJA3VAc2/qdmR6rvS3B+FyhZp1QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFHyegMWDhCbcSOOkVIAfyUWZ+p0MB8GA1UdIwQY MBaAFEZeulwagPhqRYknjt2TBLP1Fp+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmw2NlhCcUEtR3BGaVNlTzNaTUVzX1VXbjRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9jMTJhN2ItNWNhZi00ZTdjLTk3MGQt NWM0NzZlMzMyNWY1LzEvVWZKNkF4WU9FSnR4STQ2UlVnQl9KUlpuNm5RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9jMTJhN2ItNWNhZi00ZTdjLTk3MGQtNWM0NzZlMzMyNWY1 LzEvUmw2NlhCcUEtR3BGaVNlTzNaTUVzX1VXbjRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVIOAwQA W8iUAwQAW8iXMA0GCSqGSIb3DQEBCwUAA4IBAQClNPeuUl3dUTlpvcLZFfh4J0+H XAuNIdApQFXyt758jmRI1uy4LLjJ6BaePS/fSQCRTiSfhDh+9ZNPx95uJoiLZfG+ VKX3p4WRPXQX1Z9Pnskr+yF6crZSSPKhsDvJHJF7x3vrUcixt705Xmy5e0GMWNmh 7XYQ+Cz46KNb0oVMRi362dMy4Kmfc/fP3hEZF2xWzfPowswjIGBRdFwaSys2kYZd +mFQuX/ei5jOuh062MXfVXzfp4rtCP3Y5p6zRKqIltN50QVY2bReQn8aMCYeqHvy i3ZNI/qEOYrbRzQuGYl3zoLSRnDCyFt5/AtN4eMYtbtG/PiLfOfg9nfsi6Hi -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:21 2026 by rpki-client