This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/tUpQ2lhcFNUNQFFZQemsZZqW0ro.roa File: tUpQ2lhcFNUNQFFZQemsZZqW0ro.roa (raw, json) Hash identifier: va1fblEnn3el5S1n83VncvFPz3toG5gDp0J8zilJ/yQ= Subject key identifier: B5:4A:50:DA:58:5C:14:D5:0D:40:51:59:41:E9:AC:65:9A:96:D2:BA Certificate issuer: /CN=2ee74296fce8d20befa18799dae6ec7831d61c5a Certificate serial: 019B78A32D0E8F2FDEF061D57B0037A8371B Authority key identifier: 2E:E7:42:96:FC:E8:D2:0B:EF:A1:87:99:DA:E6:EC:78:31:D6:1C:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/tUpQ2lhcFNUNQFFZQemsZZqW0ro.roa Signing time: Thu 01 Jan 2026 08:18:38 +0000 ROA not before: Thu 01 Jan 2026 08:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25164 IP address blocks: 45.142.224.0/22 maxlen: 22 194.146.212.0/22 maxlen: 22 195.177.234.0/23 maxlen: 23 2a01:200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.crl rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.mft rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2d:0e:8f:2f:de:f0:61:d5:7b:00:37:a8:37:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ee74296fce8d20befa18799dae6ec7831d61c5a Validity Not Before: Jan 1 08:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b54a50da585c14d50d40515941e9ac659a96d2ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:da:c6:80:37:ce:ac:22:ec:a4:b2:4f:a0:13: 30:5e:b4:38:03:3b:3d:6e:3f:d5:5a:6e:c6:3e:55: 98:ec:e8:31:8d:eb:6e:ab:47:3d:62:3d:2f:50:25: 82:e9:4c:ba:fa:6a:ad:e7:e7:44:dc:5e:85:d3:aa: 81:05:66:cf:66:94:6e:52:c6:22:b5:5b:c1:c4:5f: bb:a5:4c:bc:e7:e3:9c:d3:12:0e:de:72:c6:01:f9: 7e:67:d4:ae:29:f6:58:f8:04:21:83:ab:29:2e:74: 57:b5:b2:e9:d0:f4:ee:38:38:ee:e0:74:01:35:70: 6a:36:33:c8:68:e7:e3:ca:b3:30:5b:68:70:91:f9: 5b:5f:b6:bb:aa:c7:4f:e1:84:31:84:40:06:72:cd: a3:1c:ef:a6:87:e8:fb:52:6b:b0:2f:58:80:b1:7e: ed:a9:db:d6:c5:65:62:b3:f2:23:da:2c:8d:a4:d7: 0e:a9:e1:ed:ad:0b:ae:68:24:2a:ad:e5:12:9f:86: 6a:30:6a:00:2f:04:de:f9:c7:12:5d:a3:3a:67:97: 50:30:e1:93:d6:93:f0:07:d8:4c:17:54:5a:cb:6f: d1:38:d8:21:f5:90:45:19:b6:ae:eb:ce:aa:4e:b5: c3:23:52:4f:8d:67:85:cc:76:2e:bd:10:e7:96:3c: ac:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:4A:50:DA:58:5C:14:D5:0D:40:51:59:41:E9:AC:65:9A:96:D2:BA X509v3 Authority Key Identifier: keyid:2E:E7:42:96:FC:E8:D2:0B:EF:A1:87:99:DA:E6:EC:78:31:D6:1C:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LudClvzo0gvvoYeZ2ubseDHWHFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/tUpQ2lhcFNUNQFFZQemsZZqW0ro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c73b3b-5b5c-4a77-8b80-d2b697aefa02/1/LudClvzo0gvvoYeZ2ubseDHWHFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.224.0/22 194.146.212.0/22 195.177.234.0/23 IPv6: 2a01:200::/32 Signature Algorithm: sha256WithRSAEncryption b1:3e:e6:8f:75:d0:1b:fd:8b:30:86:79:57:53:5b:a1:77:f2: 93:09:dc:40:91:b9:ed:b0:d9:6a:f6:b6:29:55:20:1f:33:43: 28:d3:7d:f1:2a:30:a4:f2:f9:31:b9:9c:f8:61:a9:bd:7a:d4: 18:11:7b:50:99:93:6b:0c:e7:19:f6:3a:ab:93:86:1a:06:37: 34:f3:4c:a7:de:c5:77:4a:b4:35:9b:82:7b:c7:50:8c:a0:dc: 04:b9:09:bb:21:48:97:77:bc:f3:cf:95:14:ce:de:f1:80:9e: da:97:e1:de:a5:d6:6d:ba:8e:ac:a1:52:6d:d7:5e:23:d5:34: 6b:a0:6e:81:0d:89:42:8d:04:d0:ff:82:e0:db:8f:e0:b1:41: 2c:e9:42:58:7c:b3:4f:31:13:fa:5b:d0:1d:17:11:25:62:f2: 14:07:dc:5a:8f:52:d4:33:35:68:de:8b:c5:61:99:62:36:5f: d4:47:44:0c:b1:1e:0f:3c:2f:77:89:46:3c:c7:66:6c:b7:3e: c8:61:57:b8:2c:36:49:fe:10:cb:30:cf:b8:cb:9a:90:09:41: 59:71:3e:b8:1e:15:b2:9d:a7:8f:05:81:e4:14:64:82:45:d8: 3e:9d:85:51:63:4e:81:58:11:63:d0:94:e3:91:41:b6:92:ee: c5:66:c9:ff -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt4oy0Ojy/e8GHVewA3qDcbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZTc0Mjk2ZmNlOGQyMGJlZmExODc5OWRhZTZlYzc4MzFk NjFjNWEwHhcNMjYwMTAxMDgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTRhNTBkYTU4NWMxNGQ1MGQ0MDUxNTk0MWU5YWM2NTlhOTZkMmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19rGgDfOrCLspLJPoBMwXrQ4Azs9 bj/VWm7GPlWY7Ogxjetuq0c9Yj0vUCWC6Uy6+mqt5+dE3F6F06qBBWbPZpRuUsYi tVvBxF+7pUy85+Oc0xIO3nLGAfl+Z9SuKfZY+AQhg6spLnRXtbLp0PTuODju4HQB NXBqNjPIaOfjyrMwW2hwkflbX7a7qsdP4YQxhEAGcs2jHO+mh+j7UmuwL1iAsX7t qdvWxWVis/Ij2iyNpNcOqeHtrQuuaCQqreUSn4ZqMGoALwTe+ccSXaM6Z5dQMOGT 1pPwB9hMF1Ray2/RONgh9ZBFGbau686qTrXDI1JPjWeFzHYuvRDnljysYQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFLVKUNpYXBTVDUBRWUHprGWaltK6MB8GA1UdIwQY MBaAFC7nQpb86NIL76GHmdrm7Hgx1hxaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHVkQ2x2em8wZ3Z2b1llWjJ1YnNlREhXSEZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9jNzNiM2ItNWI1Yy00YTc3LThiODAt ZDJiNjk3YWVmYTAyLzEvdFVwUTJsaGNGTlVOUUZGWlFlbXNaWnFXMHJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9jNzNiM2ItNWI1Yy00YTc3LThiODAtZDJiNjk3YWVmYTAy LzEvTHVkQ2x2em8wZ3Z2b1llWjJ1YnNlREhXSEZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLY7gAwQC wpLUAwQBw7HqMA0EAgACMAcDBQAqAQIAMA0GCSqGSIb3DQEBCwUAA4IBAQCxPuaP ddAb/YswhnlXU1uhd/KTCdxAkbntsNlq9rYpVSAfM0Mo033xKjCk8vkxuZz4Yam9 etQYEXtQmZNrDOcZ9jqrk4YaBjc080yn3sV3SrQ1m4J7x1CMoNwEuQm7IUiXd7zz z5UUzt7xgJ7al+HepdZtuo6soVJt114j1TRroG6BDYlCjQTQ/4Lg24/gsUEs6UJY fLNPMRP6W9AdFxElYvIUB9xaj1LUMzVo3ovFYZliNl/UR0QMsR4PPC93iUY8x2Zs tz7IYVe4LDZJ/hDLMM+4y5qQCUFZcT64HhWynaePBYHkFGSCRdg+nYVRY06BWBFj 0JTjkUG2ku7FZsn/ -----END CERTIFICATE-----Generated at Mon Jan 26 08:20:41 2026 by rpki-client