This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/UCCvpf2A0w3TS01Mgi-mxKvg6Y4.roa File: UCCvpf2A0w3TS01Mgi-mxKvg6Y4.roa (raw, json) Hash identifier: wMobn9EgqRdgXS7vAj6osPvNRe/uCjfH5YvFicmgWAM= Subject key identifier: 50:20:AF:A5:FD:80:D3:0D:D3:4B:4D:4C:82:2F:A6:C4:AB:E0:E9:8E Certificate issuer: /CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f Certificate serial: 019B791000C0D845BFFC8F79DC7A31231E47 Authority key identifier: 8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/UCCvpf2A0w3TS01Mgi-mxKvg6Y4.roa Signing time: Thu 01 Jan 2026 10:17:30 +0000 ROA not before: Thu 01 Jan 2026 10:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33915 IP address blocks: 46.29.240.0/24 maxlen: 24 46.29.241.0/24 maxlen: 24 46.29.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:00:c0:d8:45:bf:fc:8f:79:dc:7a:31:23:1e:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f Validity Not Before: Jan 1 10:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5020afa5fd80d30dd34b4d4c822fa6c4abe0e98e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f3:ab:3a:71:6e:cd:61:8f:81:18:f5:85:85: 55:9c:12:df:d1:a5:58:18:07:c3:3b:5b:94:23:43: 91:25:4f:36:d5:1b:58:25:40:e5:b7:14:15:cb:81: c4:bf:52:4c:b7:5c:ed:cf:66:50:6b:8b:ee:bb:35: 7c:61:de:f3:0c:9b:0d:b8:6d:61:69:bd:7b:de:6c: 9c:8b:02:c5:61:b1:24:f1:e7:79:48:a6:4f:f9:e1: d0:5e:2d:a4:25:23:ae:bc:1a:aa:9f:37:49:c3:1f: 6c:df:66:f0:2e:c4:4d:c0:34:cf:6f:3a:4d:db:c2: 4f:dc:69:2a:7f:6d:6c:9e:92:f5:81:b6:5e:f8:61: ec:1d:e8:27:f0:ee:f0:09:02:6a:f9:6a:e4:6a:57: fa:f9:89:87:3f:14:af:91:80:50:ed:7e:97:dc:eb: 66:20:a2:fc:08:82:a9:68:33:e0:64:d8:96:fd:c2: ce:85:4d:86:9e:0e:7d:70:2c:62:06:e9:8d:0b:7d: 0e:b8:d6:e6:00:88:59:67:3f:f7:05:c3:17:3e:40: 1e:5a:83:24:a7:49:25:9e:bb:af:81:af:0b:c8:53: 95:30:a7:25:ab:c5:bc:ab:64:92:fd:a3:cc:bd:39: cf:f5:ac:82:e5:93:55:ec:1b:73:e1:b5:24:bb:aa: 80:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:20:AF:A5:FD:80:D3:0D:D3:4B:4D:4C:82:2F:A6:C4:AB:E0:E9:8E X509v3 Authority Key Identifier: keyid:8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/UCCvpf2A0w3TS01Mgi-mxKvg6Y4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.29.240.0/23 46.29.247.0/24 Signature Algorithm: sha256WithRSAEncryption 08:62:6f:4f:7f:bf:af:f8:31:23:a4:d6:06:6f:4e:98:0d:bc: 31:e2:e9:45:02:88:b5:f5:20:97:19:0a:b8:a9:67:33:21:1e: 3a:89:e3:78:7c:a8:23:ff:4b:66:06:5b:b5:99:64:c8:af:71: c6:9d:72:a9:ad:8c:56:53:c5:43:26:4f:77:fe:5f:3e:85:d5: ec:b3:b4:65:67:ad:03:a3:8e:a9:11:69:90:7f:60:d7:74:14: be:d0:36:e9:ae:b2:da:94:85:87:12:ac:2f:9f:28:f8:d2:1c: 60:20:99:e7:77:1f:6f:9c:c7:f2:fc:3a:8e:df:05:68:7f:4f: fc:c1:84:4a:43:55:47:b4:3c:df:96:ec:b6:07:0d:17:e7:4e: 5b:73:c1:00:71:43:1a:c9:24:1b:df:5b:69:1d:e3:79:70:83: e4:44:6c:52:01:e8:cf:03:b0:7e:ab:a8:a7:00:32:6f:89:ce: 84:30:f4:71:c2:c4:24:d0:63:bf:95:19:fc:b5:e8:34:42:0e: a7:97:b2:ff:ab:75:3b:6b:ad:6e:21:52:1a:46:3b:c7:07:fb: d8:4f:34:06:32:cf:40:15:bd:86:3d:06:54:fe:6a:71:4d:e3: 98:56:f1:28:21:fd:f7:55:56:fc:b9:a8:6c:72:b2:7f:9d:fe: 82:dc:2e:92 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EADA2EW//I953HoxIx5HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjYThhNGQ0MmEwMTk2ZGY3Y2MwZTE0ZjU5N2NmNTY2MGQ2 M2MwOWYwHhcNMjYwMTAxMTAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDIwYWZhNWZkODBkMzBkZDM0YjRkNGM4MjJmYTZjNGFiZTBlOThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvOrOnFuzWGPgRj1hYVVnBLf0aVY GAfDO1uUI0ORJU821RtYJUDltxQVy4HEv1JMt1ztz2ZQa4vuuzV8Yd7zDJsNuG1h ab173myciwLFYbEk8ed5SKZP+eHQXi2kJSOuvBqqnzdJwx9s32bwLsRNwDTPbzpN 28JP3Gkqf21snpL1gbZe+GHsHegn8O7wCQJq+Wrkalf6+YmHPxSvkYBQ7X6X3Otm IKL8CIKpaDPgZNiW/cLOhU2Gng59cCxiBumNC30OuNbmAIhZZz/3BcMXPkAeWoMk p0klnruvga8LyFOVMKclq8W8q2SS/aPMvTnP9ayC5ZNV7Btz4bUku6qAdwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFAgr6X9gNMN00tNTIIvpsSr4OmOMB8GA1UdIwQY MBaAFIyopNQqAZbffMDhT1l89WYNY8CfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaktpazFDb0JsdDk4d09GUFdYejFaZzFqd0o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9iYjA0ODAtNjZhZC00Mjg4LWI4ZDMt MTAwNGMxZTUwZGZlLzEvVUNDdnBmMkEwdzNUUzAxTWdpLW14S3ZnNlk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC9iYjA0ODAtNjZhZC00Mjg4LWI4ZDMtMTAwNGMxZTUwZGZl LzEvaktpazFDb0JsdDk4d09GUFdYejFaZzFqd0o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLh3wAwQA Lh33MA0GCSqGSIb3DQEBCwUAA4IBAQAIYm9Pf7+v+DEjpNYGb06YDbwx4ulFAoi1 9SCXGQq4qWczIR46ieN4fKgj/0tmBlu1mWTIr3HGnXKprYxWU8VDJk93/l8+hdXs s7RlZ60Do46pEWmQf2DXdBS+0DbprrLalIWHEqwvnyj40hxgIJnndx9vnMfy/DqO 3wVof0/8wYRKQ1VHtDzfluy2Bw0X505bc8EAcUMaySQb31tpHeN5cIPkRGxSAejP A7B+q6inADJvic6EMPRxwsQk0GO/lRn8teg0Qg6nl7L/q3U7a61uIVIaRjvHB/vY TzQGMs9AFb2GPQZU/mpxTeOYVvEoIf33VVb8uahscrJ/nf6C3C6S -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:39 2026 by rpki-client