This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/UgGCU0bNSuQOEElr01rlVK8sU_Q.roa File: UgGCU0bNSuQOEElr01rlVK8sU_Q.roa (raw, json) Hash identifier: AacHgDrHZ+OvhSoYCRcjSoSerNRKqDKHnF8VQ9u1BE8= Subject key identifier: 52:01:82:53:46:CD:4A:E4:0E:10:49:6B:D3:5A:E5:54:AF:2C:53:F4 Certificate issuer: /CN=f970049cba7f39aeed31d65313c7b953f3fda135 Certificate serial: 019B7E374C06A79CA56D70319FC1890FB84F Authority key identifier: F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/UgGCU0bNSuQOEElr01rlVK8sU_Q.roa Signing time: Fri 02 Jan 2026 10:18:31 +0000 ROA not before: Fri 02 Jan 2026 10:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50757 IP address blocks: 2.110.21.0/24 maxlen: 24 212.70.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:4c:06:a7:9c:a5:6d:70:31:9f:c1:89:0f:b8:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f970049cba7f39aeed31d65313c7b953f3fda135 Validity Not Before: Jan 2 10:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5201825346cd4ae40e10496bd35ae554af2c53f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ac:4f:ac:17:fa:0c:ad:3e:3d:af:29:c6:3d: d0:54:ea:1c:9a:6f:70:57:dc:66:4d:52:62:55:aa: 01:e3:58:de:ce:e4:1a:4b:09:f1:f0:ec:4e:21:22: e0:75:61:44:bd:23:6b:bf:39:17:82:80:dc:27:ee: 26:04:f3:0d:2c:88:a4:d3:a2:ca:1b:23:99:0e:a3: 4a:e8:10:c3:77:7e:7b:48:b5:96:e8:15:95:1f:26: 17:83:49:76:c7:01:6f:4d:b3:cf:46:f1:25:bf:1d: 97:3a:9b:c1:7e:1a:ee:13:30:d3:ca:0d:b8:29:45: ef:94:53:48:2c:a1:0c:c7:7b:b9:38:d1:7a:e5:5e: 65:08:c7:8c:f4:cf:d5:be:2a:22:5b:f1:29:f8:c0: 10:e9:96:22:b5:e1:c4:6a:02:35:34:ff:d2:c6:82: 46:b5:1c:39:a3:66:e2:89:61:4e:e2:3f:d2:50:07: 6c:63:b9:33:4b:02:e0:28:d0:80:1d:94:2f:6c:90: 01:28:10:86:bf:b8:66:33:87:5b:12:78:69:b0:b2: 8e:cb:e7:21:eb:24:84:0c:fe:97:48:23:fb:99:e7: b1:02:8f:a9:4f:ea:40:6d:e6:6f:96:52:8d:21:74: eb:64:22:a6:20:7b:7d:4e:20:d0:6e:28:32:f6:8e: 90:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:01:82:53:46:CD:4A:E4:0E:10:49:6B:D3:5A:E5:54:AF:2C:53:F4 X509v3 Authority Key Identifier: keyid:F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/UgGCU0bNSuQOEElr01rlVK8sU_Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.110.21.0/24 212.70.2.0/24 Signature Algorithm: sha256WithRSAEncryption 45:24:d2:0f:5d:3c:a8:0b:a6:38:3c:8c:6f:6a:ec:f3:f0:39: c0:59:f8:21:43:10:2e:8b:27:69:59:ab:b4:56:3c:e8:db:6b: d0:3e:c7:23:1b:93:eb:a8:2c:a6:51:ad:50:8e:e4:60:2b:ff: 04:2e:e2:98:2b:d6:f9:be:2a:45:68:f4:39:14:78:3d:1a:9b: bb:5d:b4:d8:5b:21:f9:1b:fe:28:e5:54:d8:bb:01:06:40:ea: cd:d7:ed:c6:09:6f:97:c6:78:f7:6b:fe:96:1f:f0:a0:11:f4: 26:18:4b:5a:be:3d:77:d5:b2:32:54:f2:49:46:a4:2c:a9:92: 5a:c5:dd:5f:74:c3:91:97:69:05:60:c8:14:9a:70:b6:38:67: 3f:5c:f7:76:75:e6:f4:04:0f:a9:de:ba:6b:d7:8f:bf:9e:62: bb:2e:21:92:f4:77:0a:62:65:30:6c:ec:0d:db:09:a9:da:f9: 65:de:a0:85:63:9e:fd:02:1a:7d:a3:07:89:85:35:c6:1b:cc: 91:18:fb:17:61:2b:81:43:26:15:8d:85:52:57:12:99:e3:59: a3:40:e3:8d:40:4a:e3:29:73:43:88:c1:4b:3c:03:6b:4b:2b: c8:5b:ca:19:ba:11:51:64:d6:10:01:3d:23:0a:f0:bc:73:89: 71:ea:40:16 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+N0wGp5ylbXAxn8GJD7hPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NzAwNDljYmE3ZjM5YWVlZDMxZDY1MzEzYzdiOTUzZjNm ZGExMzUwHhcNMjYwMTAyMTAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjAxODI1MzQ2Y2Q0YWU0MGUxMDQ5NmJkMzVhZTU1NGFmMmM1M2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6axPrBf6DK0+Pa8pxj3QVOocmm9w V9xmTVJiVaoB41jezuQaSwnx8OxOISLgdWFEvSNrvzkXgoDcJ+4mBPMNLIik06LK GyOZDqNK6BDDd357SLWW6BWVHyYXg0l2xwFvTbPPRvElvx2XOpvBfhruEzDTyg24 KUXvlFNILKEMx3u5ONF65V5lCMeM9M/VvioiW/Ep+MAQ6ZYiteHEagI1NP/SxoJG tRw5o2biiWFO4j/SUAdsY7kzSwLgKNCAHZQvbJABKBCGv7hmM4dbEnhpsLKOy+ch 6ySEDP6XSCP7meexAo+pT+pAbeZvllKNIXTrZCKmIHt9TiDQbigy9o6QWQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFFIBglNGzUrkDhBJa9Na5VSvLFP0MB8GA1UdIwQY MBaAFPlwBJy6fzmu7THWUxPHuVPz/aE1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1YQUVuTHBfT2E3dE1kWlRFOGU1VV9QOW9UVS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvMTNmNWYxLTQ1YjYtNGJjMS1iNWE1 LTUyMWZhNDFkZmM5Ni8xL1VnR0NVMGJOU3VRT0VFbHIwMXJsVks4c1VfUS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTIvMTNmNWYxLTQ1YjYtNGJjMS1iNWE1LTUyMWZhNDFkZmM5 Ni8xLzEtWEFFbkxwX09hN3RNZFpURThlNVVfUDlvVFUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAACbhUD BADURgIwDQYJKoZIhvcNAQELBQADggEBAEUk0g9dPKgLpjg8jG9q7PPwOcBZ+CFD EC6LJ2lZq7RWPOjba9A+xyMbk+uoLKZRrVCO5GAr/wQu4pgr1vm+KkVo9DkUeD0a m7tdtNhbIfkb/ijlVNi7AQZA6s3X7cYJb5fGePdr/pYf8KAR9CYYS1q+PXfVsjJU 8klGpCypklrF3V90w5GXaQVgyBSacLY4Zz9c93Z15vQED6neumvXj7+eYrsuIZL0 dwpiZTBs7A3bCana+WXeoIVjnv0CGn2jB4mFNcYbzJEY+xdhK4FDJhWNhVJXEpnj WaNA441ASuMpc0OIwUs8A2tLK8hbyhm6EVFk1hABPSMK8LxziXHqQBY= -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:18 2026 by rpki-client