This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/UlPl38q8oJe2kj-zFsGi4HdUdCM.roa File: UlPl38q8oJe2kj-zFsGi4HdUdCM.roa (raw, json) Hash identifier: AsJWX6sS2EDgZaWg3GFfZZGkdI3HdlUil4DBtLUMLXE= Subject key identifier: 52:53:E5:DF:CA:BC:A0:97:B6:92:3F:B3:16:C1:A2:E0:77:54:74:23 Certificate issuer: /CN=0bebcee4d23379aed81aecffc7a742b35acdddb3 Certificate serial: 019BE5C1F49657C56386E9AA5DC49463F9A5 Authority key identifier: 0B:EB:CE:E4:D2:33:79:AE:D8:1A:EC:FF:C7:A7:42:B3:5A:CD:DD:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/UlPl38q8oJe2kj-zFsGi4HdUdCM.roa Signing time: Thu 22 Jan 2026 12:50:52 +0000 ROA not before: Thu 22 Jan 2026 12:50:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9318 IP address blocks: 45.14.234.0/24 maxlen: 24 45.14.235.0/24 maxlen: 24 185.50.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.crl rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.mft rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:c1:f4:96:57:c5:63:86:e9:aa:5d:c4:94:63:f9:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bebcee4d23379aed81aecffc7a742b35acdddb3 Validity Not Before: Jan 22 12:50:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5253e5dfcabca097b6923fb316c1a2e077547423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9e:93:8b:2a:3a:b2:dd:7f:cf:1a:2e:aa:3d: 77:2f:96:87:57:53:3c:06:c9:f3:19:e4:1d:15:5c: 0f:a2:0e:0d:b0:78:44:e6:37:ec:00:b2:05:f2:88: 91:36:64:ac:2b:8e:f8:5d:c1:a6:a3:8f:56:02:dc: 5b:81:95:2e:be:1f:7b:6b:ed:8b:4e:ff:d6:37:09: 9d:42:6c:76:3d:ce:e2:3f:96:5d:1f:0c:ea:4f:35: 3f:64:ec:58:3c:e9:ee:d8:63:0c:a5:13:46:ed:3d: c9:8c:66:ce:f5:91:04:d6:71:47:7e:1f:fe:32:7d: dd:63:fb:27:61:b2:d0:ed:fd:82:ef:b8:32:30:2a: c3:57:55:a9:4f:92:60:3f:fc:47:31:eb:57:0b:50: e9:ee:d3:36:4d:b6:0d:37:41:d8:07:f9:40:c4:52: 69:4c:53:ad:1d:a9:86:7a:5b:33:30:39:3f:6d:8a: 8f:09:da:d0:f8:d2:dc:7d:3c:ca:4c:9f:91:39:f6: ab:94:74:10:37:41:78:10:cd:f1:03:9e:3f:40:a7: 12:dc:8c:72:98:93:eb:cc:8c:4b:8f:2a:6a:10:75: 6b:83:cb:90:72:0c:0f:e5:91:86:b2:8d:ec:c6:43: b4:44:2b:55:2d:c9:ff:8d:9e:2b:75:59:f2:e8:cf: 6b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:53:E5:DF:CA:BC:A0:97:B6:92:3F:B3:16:C1:A2:E0:77:54:74:23 X509v3 Authority Key Identifier: keyid:0B:EB:CE:E4:D2:33:79:AE:D8:1A:EC:FF:C7:A7:42:B3:5A:CD:DD:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-vO5NIzea7YGuz_x6dCs1rN3bM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/UlPl38q8oJe2kj-zFsGi4HdUdCM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1f3322-6af7-47ab-8dc5-99a11f6385ab/1/C-vO5NIzea7YGuz_x6dCs1rN3bM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.234.0/23 185.50.255.0/24 Signature Algorithm: sha256WithRSAEncryption 78:90:e3:ed:7f:38:6d:61:b8:af:8e:a3:3c:b3:e1:57:17:d9: 8e:d9:ca:5f:93:b8:ff:38:00:1a:57:d6:ef:9f:17:e6:5d:28: c1:96:f5:4a:7a:b2:30:91:00:c1:0c:72:a6:71:b6:81:1f:73: 69:6c:e5:34:e3:a2:c7:81:73:da:8b:0b:49:eb:5d:46:b0:b3: 2f:4b:38:66:9e:cb:22:2d:8d:82:0e:cf:42:d9:65:05:a5:2b: af:b2:e9:d6:93:bf:1b:b6:75:7f:18:1c:f4:f9:f5:fb:63:05: 5f:14:a1:4e:c3:96:bc:c8:bd:35:8b:11:2e:a3:00:99:9a:a5: 24:c1:cb:7d:27:f4:45:0f:e5:0f:ad:98:f3:32:65:3f:59:1b: a6:fa:b3:ea:d7:fa:32:dc:cb:49:32:62:31:a8:8e:20:d1:09: bd:3f:e5:10:c9:83:64:75:8b:3a:a0:bf:d3:3a:7b:48:31:48: a1:55:58:95:b2:fc:dc:32:bd:b6:40:c7:6d:b3:11:3c:0e:9a: f3:7b:8e:73:8d:35:88:59:e3:93:bf:92:3b:b7:45:13:46:d2: ed:40:17:97:0d:68:c4:8b:e2:dd:5f:a4:9b:aa:b3:da:7c:95: c6:8b:d7:bf:3e:6e:27:bb:eb:68:97:c1:6b:f7:8e:a4:da:52: 74:38:18:27 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvlwfSWV8VjhumqXcSUY/mlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZWJjZWU0ZDIzMzc5YWVkODFhZWNmZmM3YTc0MmIzNWFj ZGRkYjMwHhcNMjYwMTIyMTI1MDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjUzZTVkZmNhYmNhMDk3YjY5MjNmYjMxNmMxYTJlMDc3NTQ3NDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ6Tiyo6st1/zxouqj13L5aHV1M8 BsnzGeQdFVwPog4NsHhE5jfsALIF8oiRNmSsK474XcGmo49WAtxbgZUuvh97a+2L Tv/WNwmdQmx2Pc7iP5ZdHwzqTzU/ZOxYPOnu2GMMpRNG7T3JjGbO9ZEE1nFHfh/+ Mn3dY/snYbLQ7f2C77gyMCrDV1WpT5JgP/xHMetXC1Dp7tM2TbYNN0HYB/lAxFJp TFOtHamGelszMDk/bYqPCdrQ+NLcfTzKTJ+ROfarlHQQN0F4EM3xA54/QKcS3Ixy mJPrzIxLjypqEHVrg8uQcgwP5ZGGso3sxkO0RCtVLcn/jZ4rdVny6M9rIwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFJT5d/KvKCXtpI/sxbBouB3VHQjMB8GA1UdIwQY MBaAFAvrzuTSM3mu2Brs/8enQrNazd2zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQy12TzVOSXplYTdZR3V6X3g2ZENzMXJOM2JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xZjMzMjItNmFmNy00N2FiLThkYzUt OTlhMTFmNjM4NWFiLzEvVWxQbDM4cThvSmUya2otekZzR2k0SGRVZENNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8xZjMzMjItNmFmNy00N2FiLThkYzUtOTlhMTFmNjM4NWFi LzEvQy12TzVOSXplYTdZR3V6X3g2ZENzMXJOM2JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLQ7qAwQA uTL/MA0GCSqGSIb3DQEBCwUAA4IBAQB4kOPtfzhtYbivjqM8s+FXF9mO2cpfk7j/ OAAaV9bvnxfmXSjBlvVKerIwkQDBDHKmcbaBH3NpbOU046LHgXPaiwtJ611GsLMv SzhmnssiLY2CDs9C2WUFpSuvsunWk78btnV/GBz0+fX7YwVfFKFOw5a8yL01ixEu owCZmqUkwct9J/RFD+UPrZjzMmU/WRum+rPq1/oy3MtJMmIxqI4g0Qm9P+UQyYNk dYs6oL/TOntIMUihVViVsvzcMr22QMdtsxE8Dprze45zjTWIWeOTv5I7t0UTRtLt QBeXDWjEi+LdX6SbqrPafJXGi9e/Pm4nu+tol8Fr946k2lJ0OBgn -----END CERTIFICATE-----Generated at Sun Jan 25 11:45:27 2026 by rpki-client