This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/pUUovyR_3zQtaWqDGAW7Ac9HvB4.roa File: pUUovyR_3zQtaWqDGAW7Ac9HvB4.roa (raw, json) Hash identifier: Fe3L3094CE69Fi+Zh6n4NgsG3bWV3oT1EQEavw3p2f4= Subject key identifier: A5:45:28:BF:24:7F:DF:34:2D:69:6A:83:18:05:BB:01:CF:47:BC:1E Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Certificate serial: 019B79ECB71B4C3ED7CF5EF77F95416204AB Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/pUUovyR_3zQtaWqDGAW7Ac9HvB4.roa Signing time: Thu 01 Jan 2026 14:18:35 +0000 ROA not before: Thu 01 Jan 2026 14:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49849 IP address blocks: 212.70.152.0/22 maxlen: 22 212.70.152.0/24 maxlen: 24 212.70.153.0/24 maxlen: 24 212.70.154.0/24 maxlen: 24 212.70.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:b7:1b:4c:3e:d7:cf:5e:f7:7f:95:41:62:04:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485 Validity Not Before: Jan 1 14:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a54528bf247fdf342d696a831805bb01cf47bc1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5c:e7:ec:37:a1:d7:97:6e:84:d0:68:77:49: 63:cb:33:09:9d:61:15:22:eb:2e:ae:d1:e2:b5:1f: e8:7b:f1:af:f2:34:13:cb:02:d1:85:26:49:bc:2c: 52:0f:21:95:98:97:19:10:04:3c:fb:50:1b:ef:70: 7c:a3:84:d3:e0:ae:e9:78:b7:73:1c:0d:a9:92:9e: b2:f8:5f:01:fb:67:bb:5c:2c:8c:c2:f8:e6:ce:24: 3b:3f:9a:ee:ba:ba:2e:17:93:ee:63:67:b3:b9:2f: 30:87:bd:18:a4:a9:fb:85:58:ec:49:08:e7:24:60: 51:d0:b0:d7:87:fa:d9:5b:d5:fd:01:e2:b7:4b:2c: 87:aa:18:cc:8a:ea:8f:4a:4c:34:10:50:4a:a2:bd: e0:10:af:c3:e5:24:c9:92:4c:98:ba:2e:6f:39:17: cf:11:42:44:d6:db:a4:c6:36:1f:c4:d6:6a:2b:5e: a1:c2:d8:9c:b1:ea:01:fa:55:5c:f8:37:05:bf:52: 8e:6d:b1:59:a8:3a:cf:33:92:e7:38:c0:8c:4d:c7: fd:6a:e0:eb:b7:fe:e5:c3:52:52:f1:39:40:99:62: 7e:73:a7:1d:bf:62:3e:03:88:89:47:28:1e:c4:17: fd:b9:f6:c6:db:33:cc:46:f7:42:c3:7d:2a:6e:92: d0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:45:28:BF:24:7F:DF:34:2D:69:6A:83:18:05:BB:01:CF:47:BC:1E X509v3 Authority Key Identifier: keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/pUUovyR_3zQtaWqDGAW7Ac9HvB4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.70.152.0/22 Signature Algorithm: sha256WithRSAEncryption 33:e0:1c:f1:b9:96:95:3c:ad:2c:fd:f7:d1:99:db:7f:60:c4: 91:fa:83:63:81:1a:42:67:dd:27:e7:41:2e:db:8f:11:6e:13: 58:04:11:df:89:b5:ad:5f:c8:0b:13:8a:8f:3e:9a:1f:a4:19: 8f:4d:e6:75:f0:e2:19:a2:b1:fa:20:fe:d3:23:2e:d0:39:c5: 7e:24:58:c2:fd:32:21:d2:b2:11:b5:3e:b0:41:80:4c:21:5e: 74:f1:b5:bd:9a:36:15:15:a8:f7:2d:53:dd:ed:a1:ee:8f:3b: 68:b1:7f:f7:94:71:42:03:35:a9:55:b0:3a:3b:f4:fe:1d:13: 58:8b:8f:db:2e:66:e8:ca:b8:c9:c9:95:0b:39:14:14:2c:08: bf:21:33:53:71:cf:de:c2:b7:65:43:8c:b0:c4:a1:88:26:14: 39:73:22:45:3f:79:51:02:c7:d4:fd:b9:6c:4d:36:c1:9d:f7: 3b:01:84:21:c7:9c:10:91:38:f9:88:a4:c4:1f:99:97:06:8e: bb:d8:c0:b1:3e:3d:08:49:99:1d:0d:ee:78:8b:29:b3:0f:75: d3:20:c0:a4:fb:57:c1:23:a1:2b:8a:dc:07:bd:b8:96:51:3b: fd:f4:51:85:e7:eb:b6:29:02:db:f5:bc:60:ca:c5:55:17:8f: fc:81:bb:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57LcbTD7Xz173f5VBYgSrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1 ZmY0ODUwHhcNMjYwMTAxMTQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTQ1MjhiZjI0N2ZkZjM0MmQ2OTZhODMxODA1YmIwMWNmNDdiYzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Vzn7Deh15duhNBod0ljyzMJnWEV IusurtHitR/oe/Gv8jQTywLRhSZJvCxSDyGVmJcZEAQ8+1Ab73B8o4TT4K7peLdz HA2pkp6y+F8B+2e7XCyMwvjmziQ7P5ruurouF5PuY2ezuS8wh70YpKn7hVjsSQjn JGBR0LDXh/rZW9X9AeK3SyyHqhjMiuqPSkw0EFBKor3gEK/D5STJkkyYui5vORfP EUJE1tukxjYfxNZqK16hwticseoB+lVc+DcFv1KObbFZqDrPM5LnOMCMTcf9auDr t/7lw1JS8TlAmWJ+c6cdv2I+A4iJRygexBf9ufbG2zPMRvdCw30qbpLQiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKVFKL8kf980LWlqgxgFuwHPR7weMB8GA1UdIwQY MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt NTdlMWQ1YjcyYjJkLzEvcFVVb3Z5Ul8zelF0YVdxREdBVzdBYzlIdkI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1EaYMA0G CSqGSIb3DQEBCwUAA4IBAQAz4BzxuZaVPK0s/ffRmdt/YMSR+oNjgRpCZ90n50Eu 248RbhNYBBHfibWtX8gLE4qPPpofpBmPTeZ18OIZorH6IP7TIy7QOcV+JFjC/TIh 0rIRtT6wQYBMIV508bW9mjYVFaj3LVPd7aHujztosX/3lHFCAzWpVbA6O/T+HRNY i4/bLmboyrjJyZULORQULAi/ITNTcc/ewrdlQ4ywxKGIJhQ5cyJFP3lRAsfU/bls TTbBnfc7AYQhx5wQkTj5iKTEH5mXBo672MCxPj0ISZkdDe54iymzD3XTIMCk+1fB I6EritwHvbiWUTv99FGF5+u2KQLb9bxgysVVF4/8gbuS -----END CERTIFICATE-----Generated at Sun Jan 25 21:05:17 2026 by rpki-client