This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/UGbEkxCpgIgbGLxk27Wm3SPCyJ4.roa File: UGbEkxCpgIgbGLxk27Wm3SPCyJ4.roa (raw, json) Hash identifier: 9BAJwC8dHNf7o1oGSFxTfLRm+0EXXChq88i9t5OvHD8= Subject key identifier: 50:66:C4:93:10:A9:80:88:1B:18:BC:64:DB:B5:A6:DD:23:C2:C8:9E Certificate issuer: /CN=056470d81b28dc528e5f28db0bb5f6d294611a65 Certificate serial: 019B7E375B440A81641ABEDFECE90DF7C96E Authority key identifier: 05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/UGbEkxCpgIgbGLxk27Wm3SPCyJ4.roa Signing time: Fri 02 Jan 2026 10:18:35 +0000 ROA not before: Fri 02 Jan 2026 10:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51764 IP address blocks: 46.235.48.0/24 maxlen: 24 46.235.49.0/24 maxlen: 24 46.235.50.0/24 maxlen: 24 46.235.51.0/24 maxlen: 24 46.235.54.0/24 maxlen: 24 46.235.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:5b:44:0a:81:64:1a:be:df:ec:e9:0d:f7:c9:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=056470d81b28dc528e5f28db0bb5f6d294611a65 Validity Not Before: Jan 2 10:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5066c49310a980881b18bc64dbb5a6dd23c2c89e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:30:ed:75:c9:db:2d:d1:80:ad:4c:0b:7d:46: 91:bf:b1:e5:6d:5e:64:c7:6b:12:ac:d2:af:28:43: ba:db:ce:f3:d0:89:fc:44:1a:dc:0e:fd:4d:8f:1c: 21:ae:b7:f4:51:23:b4:13:25:20:7f:44:84:34:40: 7a:76:f5:6a:03:c7:6e:18:9e:48:ad:03:74:ce:0b: ea:ef:f9:42:66:c6:0b:be:db:0b:b9:56:21:85:ca: 83:4c:24:b2:69:85:c2:57:15:fc:f6:e7:a8:89:ea: de:fa:4b:8a:f8:d7:fe:c5:83:c9:61:b2:68:32:9d: 31:d8:54:6b:6a:f5:31:58:9b:bf:f6:0b:b6:88:29: 37:45:57:74:1c:d9:30:b8:40:a2:07:29:13:da:7f: 09:ea:f1:f3:13:aa:a9:58:06:23:06:e7:5a:d4:7f: 47:dc:c6:e8:64:cd:06:32:2d:44:87:1c:d9:2d:7d: 11:d0:f6:12:91:2b:87:56:be:95:72:74:30:6f:b8: 7d:79:fc:29:34:9b:ff:96:fe:75:03:e7:26:50:34: 72:c1:f5:c5:83:7c:bb:b0:c9:25:1d:21:3e:b1:80: eb:45:b0:4b:0c:fb:0d:2c:a6:d3:6c:d9:cd:33:58: 9e:4c:96:2d:d1:63:81:f1:46:71:2f:14:fa:d8:47: a4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:66:C4:93:10:A9:80:88:1B:18:BC:64:DB:B5:A6:DD:23:C2:C8:9E X509v3 Authority Key Identifier: keyid:05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/UGbEkxCpgIgbGLxk27Wm3SPCyJ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.235.48.0/22 46.235.54.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:72:59:f4:88:a7:36:67:80:6b:08:9f:aa:69:8c:d0:9b:0a: b8:5e:80:aa:57:51:25:31:10:a2:a6:9b:ae:44:d0:2d:a3:53: ac:42:80:ff:1c:85:b7:62:1e:57:be:60:8a:3e:1d:90:ac:46: a3:5d:b2:72:a3:16:67:21:f7:2d:b7:7d:e1:97:69:78:85:ff: 42:bf:83:f6:7c:65:33:e3:1d:39:30:ee:2c:78:b9:9d:c9:96: 4f:67:c2:f2:30:1d:da:8f:26:35:34:e4:dc:0e:7e:d6:49:d9: d2:85:6f:d4:3c:d3:df:f6:4c:ae:b6:0e:8f:fb:e3:a5:4c:29: fb:cc:4d:8b:a0:f2:29:51:ec:5f:4a:79:60:85:34:87:9c:f6: b5:b0:4c:1c:de:29:5c:fb:29:1c:3a:70:f7:1e:a9:ac:99:ad: d0:14:92:4a:74:53:cd:78:5d:de:5b:56:ce:8f:07:2e:62:ad: bc:71:34:df:dd:fc:44:d9:cc:0f:10:2e:cf:a7:09:cb:32:e1: b5:4e:97:e1:08:5a:7e:2b:5c:19:65:3e:ab:8a:9f:2b:2f:02: 7c:54:74:9e:0f:82:89:58:9f:3d:97:e9:32:6c:4c:0e:49:89: 56:a7:e9:6c:97:11:bf:b0:f1:d0:f4:d5:d6:16:f5:91:83:c3: 44:cb:bf:e5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N1tECoFkGr7f7OkN98luMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NjQ3MGQ4MWIyOGRjNTI4ZTVmMjhkYjBiYjVmNmQyOTQ2 MTFhNjUwHhcNMjYwMTAyMTAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDY2YzQ5MzEwYTk4MDg4MWIxOGJjNjRkYmI1YTZkZDIzYzJjODllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzDtdcnbLdGArUwLfUaRv7HlbV5k x2sSrNKvKEO6287z0In8RBrcDv1Njxwhrrf0USO0EyUgf0SENEB6dvVqA8duGJ5I rQN0zgvq7/lCZsYLvtsLuVYhhcqDTCSyaYXCVxX89ueoiere+kuK+Nf+xYPJYbJo Mp0x2FRravUxWJu/9gu2iCk3RVd0HNkwuECiBykT2n8J6vHzE6qpWAYjBuda1H9H 3MboZM0GMi1EhxzZLX0R0PYSkSuHVr6VcnQwb7h9efwpNJv/lv51A+cmUDRywfXF g3y7sMklHSE+sYDrRbBLDPsNLKbTbNnNM1ieTJYt0WOB8UZxLxT62EekYwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFBmxJMQqYCIGxi8ZNu1pt0jwsieMB8GA1UdIwQY MBaAFAVkcNgbKNxSjl8o2wu19tKUYRplMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQldSdzJCc28zRktPWHlqYkM3WDIwcFJoR21VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xOTE2ZTEtYWQ5Yy00YjQwLWE5YjAt OTNhODgyMjFkZWYyLzEvVUdiRWt4Q3BnSWdiR0x4azI3V20zU1BDeUo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xOTE2ZTEtYWQ5Yy00YjQwLWE5YjAtOTNhODgyMjFkZWYy LzEvQldSdzJCc28zRktPWHlqYkM3WDIwcFJoR21VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLuswAwQB Lus2MA0GCSqGSIb3DQEBCwUAA4IBAQAqcln0iKc2Z4BrCJ+qaYzQmwq4XoCqV1El MRCippuuRNAto1OsQoD/HIW3Yh5XvmCKPh2QrEajXbJyoxZnIfctt33hl2l4hf9C v4P2fGUz4x05MO4seLmdyZZPZ8LyMB3ajyY1NOTcDn7WSdnShW/UPNPf9kyutg6P ++OlTCn7zE2LoPIpUexfSnlghTSHnPa1sEwc3ilc+ykcOnD3Hqmsma3QFJJKdFPN eF3eW1bOjwcuYq28cTTf3fxE2cwPEC7PpwnLMuG1TpfhCFp+K1wZZT6rip8rLwJ8 VHSeD4KJWJ89l+kybEwOSYlWp+lslxG/sPHQ9NXWFvWRg8NEy7/l -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:33 2026 by rpki-client