This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/uxoBX2tmeZVjQ29keitWoq9xUoQ.roa File: uxoBX2tmeZVjQ29keitWoq9xUoQ.roa (raw, json) Hash identifier: 1gcoMG0xFgjZ/0XZ2WNsJIV6br76evfUP3Uy2y4mCNg= Subject key identifier: BB:1A:01:5F:6B:66:79:95:63:43:6F:64:7A:2B:56:A2:AF:71:52:84 Certificate issuer: /CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b Certificate serial: 019B7CEE295341A752CCD08AFDC414421E77 Authority key identifier: 0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/uxoBX2tmeZVjQ29keitWoq9xUoQ.roa Signing time: Fri 02 Jan 2026 04:19:01 +0000 ROA not before: Fri 02 Jan 2026 04:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34841 IP address blocks: 46.55.208.0/21 maxlen: 24 46.55.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.mft rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:29:53:41:a7:52:cc:d0:8a:fd:c4:14:42:1e:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b Validity Not Before: Jan 2 04:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb1a015f6b66799563436f647a2b56a2af715284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:af:d0:b5:1b:31:78:89:7b:6d:5c:eb:70:87: bb:6c:cd:d3:21:dc:90:36:a4:40:04:95:d5:b7:65: be:9c:2d:28:f7:9f:79:6b:9d:b4:2b:f2:f9:c8:21: 99:09:37:61:de:1f:7d:92:c3:bb:ba:db:db:a8:8e: 17:a2:d6:07:0a:4c:62:96:9c:e5:0d:14:e4:39:04: 4b:d9:6c:58:10:8b:e7:d0:b6:04:9a:a7:cd:66:a9: 74:35:69:80:7d:e7:23:c5:79:36:4b:0b:39:2a:f3: 38:9a:f9:4a:2e:7f:48:ff:f5:09:30:d4:48:56:72: 65:1f:dd:b8:69:14:d0:63:62:9c:44:86:c1:cf:a5: e0:5b:1d:0a:49:07:db:26:48:bf:dd:d5:c5:0d:cb: f8:18:11:75:96:52:74:b6:da:66:f4:fd:14:e6:41: ab:8d:d5:39:be:0e:a4:f2:86:eb:16:8b:79:af:7b: 87:99:39:35:40:bc:d1:cb:fc:70:fa:55:a6:16:b1: 3a:7c:b2:d3:d5:ef:21:2e:3e:e1:49:44:6a:bb:a0: 1f:6b:99:09:80:99:b8:47:35:45:59:33:c6:2d:38: 45:09:86:08:5c:58:b5:15:58:d8:6f:ff:e3:d9:94: c4:64:1c:24:57:4f:fd:98:99:5b:19:7d:8c:12:fa: 43:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1A:01:5F:6B:66:79:95:63:43:6F:64:7A:2B:56:A2:AF:71:52:84 X509v3 Authority Key Identifier: keyid:0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/uxoBX2tmeZVjQ29keitWoq9xUoQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.55.208.0/21 46.55.240.0/24 Signature Algorithm: sha256WithRSAEncryption b1:71:b1:13:93:1d:5c:cf:d0:c8:c3:6e:f2:0e:90:8b:62:8a: 44:b7:b1:78:23:19:a7:a0:f4:97:30:1e:48:0f:19:54:fe:47: 55:69:69:a1:ec:d1:49:f3:61:e7:e0:94:8f:bf:ab:4d:43:6e: 3b:0c:73:d3:6f:78:51:4b:3c:42:4a:68:17:fc:77:32:f0:b4: ab:f0:17:00:cf:d3:77:0d:c3:93:a1:fe:89:1b:97:15:b3:cd: 30:cf:c8:58:f6:9a:12:35:22:69:52:13:af:67:9a:73:7e:4c: 8a:6a:69:ab:0b:81:0f:53:c7:2a:74:9a:b5:07:8e:38:66:2b: d7:35:32:52:a2:cd:48:be:57:30:8a:34:80:c6:d7:25:2d:29: b9:71:de:eb:be:cc:13:a6:be:2e:f4:17:97:71:3d:e8:2e:53: fe:1b:7c:7f:a3:2f:ff:bc:f7:df:3a:4f:13:68:6e:ee:8c:9f: 25:b5:65:de:c8:1b:50:a4:a8:53:34:7a:d4:2c:fc:98:c0:e8: de:39:49:c7:c1:30:71:78:88:c8:89:67:09:a2:45:d4:ea:9c: f2:c4:ce:6a:90:c9:44:ef:60:0f:2d:c4:2a:5f:b3:79:e7:03: 2f:0c:23:18:20:56:1b:35:bc:0c:7a:13:54:5f:87:04:1a:f4: 57:3b:1e:37 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87ilTQadSzNCK/cQUQh53MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjA4N2IwZjY3MTZkMjNjOGQyM2ViM2QwMzkyYjZiZjY0 MmFkNGIwHhcNMjYwMTAyMDQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjFhMDE1ZjZiNjY3OTk1NjM0MzZmNjQ3YTJiNTZhMmFmNzE1Mjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6/QtRsxeIl7bVzrcIe7bM3TIdyQ NqRABJXVt2W+nC0o9595a520K/L5yCGZCTdh3h99ksO7utvbqI4XotYHCkxilpzl DRTkOQRL2WxYEIvn0LYEmqfNZql0NWmAfecjxXk2Sws5KvM4mvlKLn9I//UJMNRI VnJlH924aRTQY2KcRIbBz6XgWx0KSQfbJki/3dXFDcv4GBF1llJ0ttpm9P0U5kGr jdU5vg6k8obrFot5r3uHmTk1QLzRy/xw+lWmFrE6fLLT1e8hLj7hSURqu6Afa5kJ gJm4RzVFWTPGLThFCYYIXFi1FVjYb//j2ZTEZBwkV0/9mJlbGX2MEvpDIQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLsaAV9rZnmVY0NvZHorVqKvcVKEMB8GA1UdIwQY MBaAFA0gh7D2cW0jyNI+s9A5K2v2Qq1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNDSHNQWnhiU1BJMGo2ejBEa3JhX1pDclVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mY2I3MjktYzI4OC00ZTE1LTkzODQt YTIwZDJkNzUxZWI1LzEvdXhvQlgydG1lWlZqUTI5a2VpdFdvcTl4VW9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9mY2I3MjktYzI4OC00ZTE1LTkzODQtYTIwZDJkNzUxZWI1 LzEvRFNDSHNQWnhiU1BJMGo2ejBEa3JhX1pDclVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLjfQAwQA LjfwMA0GCSqGSIb3DQEBCwUAA4IBAQCxcbETkx1cz9DIw27yDpCLYopEt7F4Ixmn oPSXMB5IDxlU/kdVaWmh7NFJ82Hn4JSPv6tNQ247DHPTb3hRSzxCSmgX/Hcy8LSr 8BcAz9N3DcOTof6JG5cVs80wz8hY9poSNSJpUhOvZ5pzfkyKammrC4EPU8cqdJq1 B444ZivXNTJSos1IvlcwijSAxtclLSm5cd7rvswTpr4u9BeXcT3oLlP+G3x/oy// vPffOk8TaG7ujJ8ltWXeyBtQpKhTNHrULPyYwOjeOUnHwTBxeIjIiWcJokXU6pzy xM5qkMlE72APLcQqX7N55wMvDCMYIFYbNbwMehNUX4cEGvRXOx43 -----END CERTIFICATE-----Generated at Mon Jan 26 13:13:32 2026 by rpki-client