This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/pU_XrlPF8BXSflHv1k6RicQ4hQQ.roa File: pU_XrlPF8BXSflHv1k6RicQ4hQQ.roa (raw, json) Hash identifier: Zwjahs4SIZZ7mXWd1Naf3bCGTp7nVeEdZf7T1NQzjwE= Subject key identifier: A5:4F:D7:AE:53:C5:F0:15:D2:7E:51:EF:D6:4E:91:89:C4:38:85:04 Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 019B7AC7CD070E53AF445645150BD190776A Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/pU_XrlPF8BXSflHv1k6RicQ4hQQ.roa Signing time: Thu 01 Jan 2026 18:17:52 +0000 ROA not before: Thu 01 Jan 2026 18:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 139659 IP address blocks: 45.136.12.0/22 maxlen: 24 45.144.136.0/24 maxlen: 24 45.144.137.0/24 maxlen: 24 45.144.138.0/24 maxlen: 24 45.145.228.0/24 maxlen: 24 45.145.229.0/24 maxlen: 24 45.152.64.0/24 maxlen: 24 45.152.65.0/24 maxlen: 24 45.152.66.0/24 maxlen: 24 45.152.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:cd:07:0e:53:af:44:56:45:15:0b:d1:90:77:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: Jan 1 18:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a54fd7ae53c5f015d27e51efd64e9189c4388504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:96:03:f0:d2:50:e3:7a:1d:76:21:87:1d:19: 6c:2f:75:9d:0d:1a:e9:0c:db:69:c4:f1:11:41:f0: ba:c3:f5:ed:0d:fa:3b:26:34:62:a7:76:50:62:13: f6:f5:6e:30:2c:85:84:03:d7:b3:87:e4:49:66:9e: d5:f6:18:05:40:96:67:55:56:91:93:8e:da:87:73: f2:7c:9d:c5:c1:09:f5:9d:ce:18:d4:db:d7:f8:1a: 58:3a:41:e3:58:ef:23:b1:f6:6b:e0:d8:13:09:e4: 9d:4f:fd:f0:f8:28:04:b1:55:3b:63:65:d3:96:73: 00:d0:5b:5c:d8:60:69:c3:31:13:0e:7b:ff:cb:a3: 3c:4f:b0:7d:88:94:09:ed:05:dc:3d:37:07:25:6b: 04:ba:96:88:43:35:72:18:41:32:7d:43:58:8d:25: 42:38:75:30:e4:0a:6f:cc:63:36:41:ed:d6:e7:fd: 59:e4:52:52:c8:e2:90:04:7a:7b:e5:1c:5c:a5:be: 62:9a:1b:3e:53:bf:eb:e8:1e:18:49:e4:db:89:83: 92:a7:af:2d:b2:f0:67:af:b2:02:ae:0c:c6:50:21: ab:b4:1c:94:76:9e:b8:31:e6:aa:53:0a:1c:54:7f: a4:20:d3:95:bf:87:b9:b5:3e:0f:34:32:96:c1:d3: 06:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:4F:D7:AE:53:C5:F0:15:D2:7E:51:EF:D6:4E:91:89:C4:38:85:04 X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/pU_XrlPF8BXSflHv1k6RicQ4hQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.12.0/22 45.144.136.0-45.144.138.255 45.145.228.0/23 45.152.64.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:28:f5:3a:68:76:73:b5:46:a2:42:7c:6c:99:62:f7:6a:92: 3b:85:af:21:30:94:fb:f0:3d:70:50:8a:54:b6:11:e6:69:78: 28:3a:24:5e:c7:0f:ed:33:a3:3e:cc:c1:bd:ca:79:16:f7:84: 38:fb:cb:83:80:d9:ae:e7:0b:4e:f8:3c:02:f3:39:7c:27:56: 71:60:33:d5:c9:a0:6a:4b:61:85:4c:c4:3a:0b:24:78:3c:11: de:18:0b:f6:13:ed:32:97:ef:ef:34:79:18:ff:ab:86:34:04: 78:2e:aa:8e:83:b9:d6:6b:0e:07:be:ab:fd:d3:86:d3:03:68: 5c:2e:ba:d0:0d:1b:cb:d6:cf:cb:6a:0b:8d:78:e3:ac:28:83: 2b:67:7d:9a:41:56:c4:d1:05:09:da:23:9e:01:f9:ca:64:92: db:a2:9f:fa:5a:c4:15:1d:2b:f7:8f:02:09:1e:c5:f9:ce:60: 1b:40:8e:ae:f1:19:fb:cd:e0:bf:ce:9b:2d:43:7e:1a:a5:ac: b1:06:13:8d:a7:e4:43:b4:a7:1e:58:a8:2a:d8:03:99:9b:11: 3e:06:96:fe:8c:14:e5:6c:da:e8:15:b6:c0:7b:38:ef:27:5a: 1c:44:2e:a8:a8:25:4d:25:dd:58:4f:e6:7c:b8:68:1b:08:7b: e8:59:4b:64 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt6x80HDlOvRFZFFQvRkHdqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjYwMTAxMTgxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTRmZDdhZTUzYzVmMDE1ZDI3ZTUxZWZkNjRlOTE4OWM0Mzg4NTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZYD8NJQ43oddiGHHRlsL3WdDRrp DNtpxPERQfC6w/XtDfo7JjRip3ZQYhP29W4wLIWEA9ezh+RJZp7V9hgFQJZnVVaR k47ah3PyfJ3FwQn1nc4Y1NvX+BpYOkHjWO8jsfZr4NgTCeSdT/3w+CgEsVU7Y2XT lnMA0Ftc2GBpwzETDnv/y6M8T7B9iJQJ7QXcPTcHJWsEupaIQzVyGEEyfUNYjSVC OHUw5ApvzGM2Qe3W5/1Z5FJSyOKQBHp75Rxcpb5imhs+U7/r6B4YSeTbiYOSp68t svBnr7ICrgzGUCGrtByUdp64MeaqUwocVH+kINOVv4e5tT4PNDKWwdMGGQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFKVP165TxfAV0n5R79ZOkYnEOIUEMB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEvcFVfWHJsUEY4QlhTZmxIdjFrNlJpY1E0aFFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQCLYgMMAwD BAMtkIgDBAAtkIoDBAEtkeQDBAItmEAwDQYJKoZIhvcNAQELBQADggEBAF8o9Tpo dnO1RqJCfGyZYvdqkjuFryEwlPvwPXBQilS2EeZpeCg6JF7HD+0zoz7Mwb3KeRb3 hDj7y4OA2a7nC074PALzOXwnVnFgM9XJoGpLYYVMxDoLJHg8Ed4YC/YT7TKX7+80 eRj/q4Y0BHguqo6DudZrDge+q/3ThtMDaFwuutANG8vWz8tqC41446wogytnfZpB VsTRBQnaI54B+cpkktuin/paxBUdK/ePAgkexfnOYBtAjq7xGfvN4L/Omy1Dfhql rLEGE42n5EO0px5YqCrYA5mbET4Glv6MFOVs2ugVtsB7OO8nWhxELqioJU0l3VhP 5ny4aBsIe+hZS2Q= -----END CERTIFICATE-----Generated at Sun Jan 25 18:07:58 2026 by rpki-client