This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/ui12U8ehqDuyNEV4dxeMmGkBpyU.roa File: ui12U8ehqDuyNEV4dxeMmGkBpyU.roa (raw, json) Hash identifier: yINc/cfZuw+HDq9yk/ySvw+zjfDYf1qaipCTcvu1wXg= Subject key identifier: BA:2D:76:53:C7:A1:A8:3B:B2:34:45:78:77:17:8C:98:69:01:A7:25 Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624 Certificate serial: 019B7C128E81412D67CE273FC64FDB750FA9 Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/ui12U8ehqDuyNEV4dxeMmGkBpyU.roa Signing time: Fri 02 Jan 2026 00:19:09 +0000 ROA not before: Fri 02 Jan 2026 00:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 138968 IP address blocks: 45.81.32.0/23 maxlen: 24 45.81.33.0/24 maxlen: 24 45.150.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:8e:81:41:2d:67:ce:27:3f:c6:4f:db:75:0f:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624 Validity Not Before: Jan 2 00:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba2d7653c7a1a83bb234457877178c986901a725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1d:cb:71:ae:89:fe:d2:11:4d:22:8a:d6:eb: 3a:db:f1:15:af:38:5b:ec:97:9b:83:3f:58:6c:3a: 95:0b:4a:dd:f2:e3:81:d8:88:65:6d:8e:a0:87:cc: ec:dc:ac:42:36:10:fd:09:78:9f:a5:f0:16:d7:4b: 55:10:d0:3b:95:b2:20:2e:eb:13:78:fe:a3:f3:ff: 96:9d:eb:f7:a6:1f:0a:2d:a4:df:bc:e8:ce:29:78: 73:cc:b6:f3:32:14:d9:68:85:2c:9b:a8:75:b2:79: cd:46:07:ce:be:18:9e:83:b1:cc:25:c4:b6:c8:bb: 9d:f6:08:50:a2:2d:86:af:db:41:86:8b:8c:44:33: 04:e6:f3:53:94:98:1c:78:df:32:23:e7:30:72:33: 42:ba:94:1d:a9:0e:c7:75:77:06:80:39:e4:32:15: 86:20:da:7f:6c:4d:76:6d:a3:a5:2b:70:b1:ab:70: d2:5d:f4:38:69:e2:f3:21:13:4b:36:ef:8f:de:39: 00:b4:78:a9:1c:47:38:e3:74:3b:76:45:f2:25:fa: db:6d:43:8f:40:44:86:f9:fb:f6:44:76:b6:15:57: 64:0b:78:55:0e:b0:b9:e7:92:0d:27:27:59:80:f0: d1:3d:5f:b0:b9:de:2b:b8:1b:9c:94:3e:07:04:fe: 9e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:2D:76:53:C7:A1:A8:3B:B2:34:45:78:77:17:8C:98:69:01:A7:25 X509v3 Authority Key Identifier: keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/ui12U8ehqDuyNEV4dxeMmGkBpyU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.32.0/23 45.150.236.0/22 Signature Algorithm: sha256WithRSAEncryption 78:b8:60:46:b4:f9:50:f0:9f:af:5a:6b:c2:e9:dd:24:d8:cd: 97:03:41:9d:11:8c:bc:40:3d:4f:57:50:bf:97:04:72:28:59: 7c:11:f5:76:d1:9d:b4:7a:34:5c:6e:fe:0c:ec:fb:94:00:2f: 05:d7:4b:5a:33:75:b2:81:8c:50:e4:04:02:54:d1:32:24:27: 34:98:6d:af:ea:35:b9:ee:56:77:b4:e2:8a:9d:51:23:1c:71: 88:94:75:01:30:c6:f9:1a:91:b6:79:df:94:63:be:2e:7a:44: 5e:3a:93:86:69:5f:f3:40:6b:3f:a6:50:98:64:ba:7d:ab:b0: d2:94:44:47:94:a6:e8:73:4d:ae:8c:f7:55:41:d1:5c:dc:e3: 66:96:52:fd:d3:e6:87:6d:4b:49:05:ef:f0:07:2e:6a:5d:f1: 28:ab:57:f1:7b:76:b5:c1:8b:73:3f:69:d4:83:82:7c:3f:48: 62:38:c1:e8:f9:43:02:a9:8a:f4:66:d7:1e:b8:1c:9e:a7:0e: 92:0e:4c:e6:20:23:21:7d:77:dd:08:33:01:da:62:91:39:d5: cb:72:20:53:40:47:6f:2f:d8:9e:4a:38:c4:f8:71:a2:69:7a: 82:d4:12:bf:50:d5:22:30:b8:2a:93:a1:50:bb:88:22:43:e3: 95:f5:af:7f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8Eo6BQS1nzic/xk/bdQ+pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz OGE2MjQwHhcNMjYwMTAyMDAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTJkNzY1M2M3YTFhODNiYjIzNDQ1Nzg3NzE3OGM5ODY5MDFhNzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR3Lca6J/tIRTSKK1us62/EVrzhb 7Jebgz9YbDqVC0rd8uOB2IhlbY6gh8zs3KxCNhD9CXifpfAW10tVENA7lbIgLusT eP6j8/+Wnev3ph8KLaTfvOjOKXhzzLbzMhTZaIUsm6h1snnNRgfOvhieg7HMJcS2 yLud9ghQoi2Gr9tBhouMRDME5vNTlJgceN8yI+cwcjNCupQdqQ7HdXcGgDnkMhWG INp/bE12baOlK3Cxq3DSXfQ4aeLzIRNLNu+P3jkAtHipHEc443Q7dkXyJfrbbUOP QESG+fv2RHa2FVdkC3hVDrC555INJydZgPDRPV+wud4ruBuclD4HBP6ekQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLotdlPHoag7sjRFeHcXjJhpAaclMB8GA1UdIwQY MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt MTZhZmM0ZGZmZGQ0LzEvdWkxMlU4ZWhxRHV5TkVWNGR4ZU1tR2tCcHlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0 LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLVEgAwQC LZbsMA0GCSqGSIb3DQEBCwUAA4IBAQB4uGBGtPlQ8J+vWmvC6d0k2M2XA0GdEYy8 QD1PV1C/lwRyKFl8EfV20Z20ejRcbv4M7PuUAC8F10taM3WygYxQ5AQCVNEyJCc0 mG2v6jW57lZ3tOKKnVEjHHGIlHUBMMb5GpG2ed+UY74uekReOpOGaV/zQGs/plCY ZLp9q7DSlERHlKboc02ujPdVQdFc3ONmllL90+aHbUtJBe/wBy5qXfEoq1fxe3a1 wYtzP2nUg4J8P0hiOMHo+UMCqYr0ZtceuByepw6SDkzmICMhfXfdCDMB2mKROdXL ciBTQEdvL9ieSjjE+HGiaXqC1BK/UNUiMLgqk6FQu4giQ+OV9a9/ -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:11 2026 by rpki-client