This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/_UE15j8dt-0E4MNHI1SJ6VAbDdo.roa File: _UE15j8dt-0E4MNHI1SJ6VAbDdo.roa (raw, json) Hash identifier: RpMmPkih2MaIwwmI1CZ2YI65k33Pkn9LWYdRz9m4yPM= Subject key identifier: FD:41:35:E6:3F:1D:B7:ED:04:E0:C3:47:23:54:89:E9:50:1B:0D:DA Certificate issuer: /CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d Certificate serial: 019B7D5C9EC40B8C2A51E9454FDDCA9D47BB Authority key identifier: 45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/_UE15j8dt-0E4MNHI1SJ6VAbDdo.roa Signing time: Fri 02 Jan 2026 06:19:40 +0000 ROA not before: Fri 02 Jan 2026 06:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3215 IP address blocks: 185.217.244.0/24 maxlen: 24 185.217.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:9e:c4:0b:8c:2a:51:e9:45:4f:dd:ca:9d:47:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d Validity Not Before: Jan 2 06:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd4135e63f1db7ed04e0c347235489e9501b0dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:87:9c:de:c9:af:1e:f3:eb:97:47:c1:fc:65: 56:a1:a9:2b:83:2e:04:ac:89:d5:46:61:f6:0f:6a: 65:30:4c:45:45:d0:3b:35:19:26:49:db:3a:98:31: 69:8d:45:7a:5d:20:80:c9:f7:8b:93:d1:79:73:dd: 5d:c5:86:3c:ae:70:2b:e5:f4:f4:35:17:e7:c6:59: 8f:3b:87:aa:66:db:35:a7:78:33:07:81:a1:29:8e: 8d:aa:c5:98:fb:eb:41:4c:c5:63:a5:f3:5a:38:81: 39:66:6c:00:76:a6:a6:e6:60:99:a9:93:48:fb:fd: 5c:12:b2:1b:a1:47:56:d7:cd:24:55:8e:a6:a3:a1: 1f:02:92:49:53:25:db:ee:c6:8e:b8:e2:8c:9d:53: 8b:36:fa:01:bf:97:57:0a:5c:f9:24:1e:7c:26:69: a5:ea:3e:02:11:fb:54:cf:33:0b:0b:8c:7e:07:9c: 6f:d2:8a:e8:0f:99:d6:e1:c3:53:8b:72:f3:35:9d: 19:26:1a:7a:4e:c8:6a:5b:ae:de:25:15:ca:7a:f9: 9a:fc:5d:ad:99:83:c8:c1:55:54:2e:68:36:f2:48: 38:52:21:5d:b7:a0:e5:9f:34:57:f6:67:b4:99:5d: 5e:bc:dc:45:29:58:b2:09:7c:49:21:19:fc:de:ba: 3b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:41:35:E6:3F:1D:B7:ED:04:E0:C3:47:23:54:89:E9:50:1B:0D:DA X509v3 Authority Key Identifier: keyid:45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/_UE15j8dt-0E4MNHI1SJ6VAbDdo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.217.244.0/23 Signature Algorithm: sha256WithRSAEncryption 65:cb:d0:38:33:fe:fa:08:8d:ae:69:14:ba:ad:06:f4:f0:2c: fb:f0:55:c8:36:77:b7:bc:a5:1a:24:09:7a:43:f5:78:3c:52: 92:6f:58:79:81:75:57:b3:ec:f2:2b:81:c3:e5:3f:e5:c9:a1: cf:07:c0:aa:d6:a5:bc:83:07:13:58:03:12:54:87:55:fb:c0: 0b:4a:56:22:6d:5b:39:55:b5:81:a6:8b:05:f0:bc:71:2a:2e: fe:c7:2b:a5:b6:cd:33:b8:72:94:7c:d2:2b:02:3e:43:f5:ef: 92:18:c6:4e:fc:eb:7d:47:15:72:1e:5b:e9:8b:b5:19:0b:d4: f7:b7:6b:3c:83:94:63:60:24:18:5f:a2:9d:e6:1d:fe:d2:a0: 77:d3:71:b6:05:6d:49:84:71:98:cc:0e:71:58:54:d3:f2:7d: 7b:ec:b3:a0:d4:1d:50:15:e8:ba:dd:cb:5c:3c:5f:88:87:13: 5a:b5:47:69:8a:c8:04:ea:c6:7e:e8:ad:ad:67:a8:d3:06:e8: 9b:b8:5f:ea:9a:58:d9:b6:dd:ef:31:16:31:de:d9:0a:50:af: df:30:00:72:b7:a1:cb:42:5b:e2:52:a9:3b:4c:4c:c5:84:60: 29:9b:b7:13:3b:68:b7:8e:3c:c7:89:a3:4b:d2:ce:fa:f9:b4: c5:55:f7:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XJ7EC4wqUelFT93KnUe7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MTBjNjliZWQwMzQ2NWJmZjhhZjlkNzFhNmFlOWIxODNi N2MyNGQwHhcNMjYwMTAyMDYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDQxMzVlNjNmMWRiN2VkMDRlMGMzNDcyMzU0ODllOTUwMWIwZGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIec3smvHvPrl0fB/GVWoakrgy4E rInVRmH2D2plMExFRdA7NRkmSds6mDFpjUV6XSCAyfeLk9F5c91dxYY8rnAr5fT0 NRfnxlmPO4eqZts1p3gzB4GhKY6NqsWY++tBTMVjpfNaOIE5ZmwAdqam5mCZqZNI +/1cErIboUdW180kVY6mo6EfApJJUyXb7saOuOKMnVOLNvoBv5dXClz5JB58Jmml 6j4CEftUzzMLC4x+B5xv0oroD5nW4cNTi3LzNZ0ZJhp6TshqW67eJRXKevma/F2t mYPIwVVULmg28kg4UiFdt6DlnzRX9me0mV1evNxFKViyCXxJIRn83ro79wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP1BNeY/HbftBODDRyNUielQGw3aMB8GA1UdIwQY MBaAFEUQxpvtA0Zb/4r51xpq6bGDt8JNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlJER20tMERSbHZfaXZuWEdtcnBzWU8zd2swLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wOWM4NjUtYWM5Yy00OTEzLTljY2Ut ZTFmZDBiMWYwZWZkLzEvX1VFMTVqOGR0LTBFNE1OSEkxU0o2VkFiRGRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8wOWM4NjUtYWM5Yy00OTEzLTljY2UtZTFmZDBiMWYwZWZk LzEvUlJER20tMERSbHZfaXZuWEdtcnBzWU8zd2swLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBudn0MA0G CSqGSIb3DQEBCwUAA4IBAQBly9A4M/76CI2uaRS6rQb08Cz78FXINne3vKUaJAl6 Q/V4PFKSb1h5gXVXs+zyK4HD5T/lyaHPB8Cq1qW8gwcTWAMSVIdV+8ALSlYibVs5 VbWBposF8LxxKi7+xyults0zuHKUfNIrAj5D9e+SGMZO/Ot9RxVyHlvpi7UZC9T3 t2s8g5RjYCQYX6Kd5h3+0qB303G2BW1JhHGYzA5xWFTT8n177LOg1B1QFei63ctc PF+IhxNatUdpisgE6sZ+6K2tZ6jTBuibuF/qmljZtt3vMRYx3tkKUK/fMAByt6HL QlviUqk7TEzFhGApm7cTO2i3jjzHiaNL0s76+bTFVfeu -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:18 2026 by rpki-client