This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/UsTxvmAagtZ-wwFDj7BZJm4FiXc.roa File: UsTxvmAagtZ-wwFDj7BZJm4FiXc.roa (raw, json) Hash identifier: uDRbcsOP09FIblsAiQtZha8/joMGxI3GOfHSVWS40fc= Subject key identifier: 52:C4:F1:BE:60:1A:82:D6:7E:C3:01:43:8F:B0:59:26:6E:05:89:77 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAB7C0CBC64144747321355B947D13 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/UsTxvmAagtZ-wwFDj7BZJm4FiXc.roa Signing time: Thu 01 Jan 2026 00:17:32 +0000 ROA not before: Thu 01 Jan 2026 00:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 45.8.185.0/24 maxlen: 24 85.209.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b7:c0:cb:c6:41:44:74:73:21:35:5b:94:7d:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52c4f1be601a82d67ec301438fb059266e058977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:65:24:9b:0b:3d:91:94:11:33:d0:9c:a9:43: 50:b7:8d:c5:93:0d:b5:8a:bd:31:2f:da:ec:fb:1c: f5:05:da:e5:99:60:26:34:e4:3e:75:1b:17:e7:b4: 9d:c8:90:86:63:41:f0:29:3c:2d:07:30:19:7a:19: 04:cc:9b:02:5c:31:68:64:fd:45:cb:06:f2:40:b1: 23:0b:01:70:69:d1:f1:90:ae:22:e1:9a:ed:e4:e4: 4d:cf:a7:70:fe:91:12:89:d1:d3:43:18:7d:c8:fa: da:88:4d:30:97:0e:e7:89:ea:3b:57:1b:4f:ff:28: 09:f4:6f:21:f1:25:b5:41:68:f9:cb:ac:41:2e:ee: 59:c7:10:4a:de:9e:d5:77:d5:50:a0:f7:c2:db:f8: db:23:ae:9a:64:44:a5:1a:1a:a8:00:45:b5:ec:20: b2:0f:d2:a7:b7:dd:3d:14:f5:0c:ee:53:df:0f:98: cb:61:d5:9b:fa:c1:27:14:b4:cc:c7:83:a9:bf:73: 11:11:93:51:eb:d7:2a:dd:5c:a8:d2:19:97:93:0a: 9e:42:f4:91:bd:b6:aa:7e:6e:41:e0:4d:58:29:05: 7a:3e:9a:8b:fd:84:b9:b2:1a:f1:d7:0b:19:f6:66: 6b:f1:3b:9b:71:81:3b:15:85:01:c1:07:91:35:f2: 73:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C4:F1:BE:60:1A:82:D6:7E:C3:01:43:8F:B0:59:26:6E:05:89:77 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/UsTxvmAagtZ-wwFDj7BZJm4FiXc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.185.0/24 85.209.162.0/24 Signature Algorithm: sha256WithRSAEncryption 49:a4:1e:0b:66:30:8c:78:ce:02:6c:89:cc:8d:16:28:ff:3e: 70:ec:fb:0c:db:4c:84:5f:d9:5d:d9:e1:7b:8a:5a:22:37:cb: 0e:dc:2a:d6:51:ca:62:56:d2:41:a9:45:c5:03:4a:8a:99:e3: cb:71:d6:5a:d3:79:b2:85:10:ad:87:97:9c:5c:2f:b1:ab:2d: 9f:89:9d:7e:2a:4a:7d:ee:8d:9c:98:d7:80:42:62:e0:79:3b: 4a:ef:7f:c5:be:66:e0:62:a3:af:ce:63:a8:a7:1c:69:f8:e4: bb:32:b2:4b:f3:a0:ed:33:73:20:f7:fa:a7:9f:67:f9:26:14: 2c:88:16:84:7d:16:1b:25:66:cc:f3:99:ac:d3:99:8c:8c:8c: c1:85:74:6d:e5:93:0e:e7:ce:5e:77:62:a9:1c:c5:cd:e9:02: 06:aa:b9:4b:89:26:89:b9:31:a1:71:37:54:c1:4a:7d:7d:c9: 62:34:4f:6b:a0:af:6a:ed:6f:04:4a:5e:87:79:f0:3c:ff:39: 85:7e:1d:17:9a:a8:05:2f:e8:9a:72:c7:21:36:e5:4e:00:1c: d8:cb:0e:b2:39:19:68:61:04:f3:13:31:e6:79:24:06:b4:75: c1:7d:d6:1a:03:64:00:51:0b:31:20:b5:9c:a6:23:fc:4f:02: e2:0f:90:b7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26rfAy8ZBRHRzITVblH0TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmM0ZjFiZTYwMWE4MmQ2N2VjMzAxNDM4ZmIwNTkyNjZlMDU4OTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmUkmws9kZQRM9CcqUNQt43Fkw21 ir0xL9rs+xz1BdrlmWAmNOQ+dRsX57SdyJCGY0HwKTwtBzAZehkEzJsCXDFoZP1F ywbyQLEjCwFwadHxkK4i4Zrt5ORNz6dw/pESidHTQxh9yPraiE0wlw7nieo7VxtP /ygJ9G8h8SW1QWj5y6xBLu5ZxxBK3p7Vd9VQoPfC2/jbI66aZESlGhqoAEW17CCy D9Knt909FPUM7lPfD5jLYdWb+sEnFLTMx4Opv3MREZNR69cq3Vyo0hmXkwqeQvSR vbaqfm5B4E1YKQV6PpqL/YS5shrx1wsZ9mZr8TubcYE7FYUBwQeRNfJzywIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFLE8b5gGoLWfsMBQ4+wWSZuBYl3MB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvVXNUeHZtQWFndFotd3dGRGo3QlpKbTRGaVhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQi5AwQA VdGiMA0GCSqGSIb3DQEBCwUAA4IBAQBJpB4LZjCMeM4CbInMjRYo/z5w7PsM20yE X9ld2eF7iloiN8sO3CrWUcpiVtJBqUXFA0qKmePLcdZa03myhRCth5ecXC+xqy2f iZ1+Kkp97o2cmNeAQmLgeTtK73/FvmbgYqOvzmOopxxp+OS7MrJL86DtM3Mg9/qn n2f5JhQsiBaEfRYbJWbM85ms05mMjIzBhXRt5ZMO585ed2KpHMXN6QIGqrlLiSaJ uTGhcTdUwUp9fcliNE9roK9q7W8ESl6HefA8/zmFfh0XmqgFL+iacschNuVOABzY yw6yORloYQTzEzHmeSQGtHXBfdYaA2QAUQsxILWcpiP8TwLiD5C3 -----END CERTIFICATE-----Generated at Sun Jan 25 08:48:41 2026 by rpki-client