This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/uNtHRxaxwBw6gSyUZCs4yT-j2xk.roa File: uNtHRxaxwBw6gSyUZCs4yT-j2xk.roa (raw, json) Hash identifier: A7D9AWZnklXMj/BsUu0p3Vm6yBi0gldhQ+2LodCAbRg= Subject key identifier: B8:DB:47:47:16:B1:C0:1C:3A:81:2C:94:64:2B:38:C9:3F:A3:DB:19 Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 019B7F15CE986A429CE797B79D6322164649 Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/uNtHRxaxwBw6gSyUZCs4yT-j2xk.roa Signing time: Fri 02 Jan 2026 14:21:34 +0000 ROA not before: Fri 02 Jan 2026 14:21:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214208 IP address blocks: 45.9.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ce:98:6a:42:9c:e7:97:b7:9d:63:22:16:46:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: Jan 2 14:21:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8db474716b1c01c3a812c94642b38c93fa3db19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:18:5a:78:2b:c2:1e:d8:26:2f:4f:d8:93:36: 46:ee:5f:f7:bc:6e:8e:78:6a:ac:80:49:e6:27:af: 8e:d6:1a:4c:0a:83:88:ae:0d:b9:4c:9d:eb:f7:ec: 6d:36:24:cd:67:f4:ec:48:5e:f4:07:98:64:67:24: 45:66:96:a9:2c:1f:f3:96:26:2f:c5:41:c2:6d:51: 6f:4a:0b:3f:59:e8:df:b2:16:e9:cb:7e:60:b6:97: 58:b1:b6:90:83:b9:69:67:7b:25:44:6d:ae:5b:6a: 55:48:52:e5:cf:0c:72:67:71:f8:67:96:37:8c:86: 9f:61:90:df:78:9e:0b:7d:89:eb:5e:21:6a:a3:35: 04:f6:3f:28:45:a8:ba:13:62:bd:84:b5:56:94:d4: ed:bb:5e:44:5c:30:64:44:02:11:24:bf:90:90:b0: 96:7b:45:6a:6e:2f:d7:86:00:ba:b9:b2:ee:ff:57: b9:03:b1:07:0c:34:1a:3a:56:84:3a:c6:48:14:9b: be:5f:38:16:cf:13:08:11:7d:24:c7:e9:0a:09:6c: 43:8f:4f:62:6a:3e:cf:94:2e:4b:41:66:92:13:ec: cb:37:7a:b1:10:8e:c2:0a:08:31:6c:de:71:9a:98: 94:a0:5f:a2:b3:8c:0a:c9:f7:26:f2:84:c7:a4:a6: 55:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DB:47:47:16:B1:C0:1C:3A:81:2C:94:64:2B:38:C9:3F:A3:DB:19 X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/uNtHRxaxwBw6gSyUZCs4yT-j2xk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.152.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:06:22:ed:a8:40:5a:fc:c9:c3:bf:1c:e4:11:16:3f:a9:a2: b9:20:f0:4e:2d:13:1c:30:b8:e1:12:e6:75:ac:bb:73:3a:84: 52:1f:2d:86:bf:a2:95:c7:ba:ce:8e:c2:10:d8:2e:85:44:d5: 33:fc:88:a9:4a:a6:2d:67:f8:34:ce:df:88:d0:ac:25:8d:dc: cb:7a:3d:ec:16:77:fd:01:06:4a:85:61:bd:e2:3c:fb:67:88: e3:7a:5b:58:7a:c9:11:72:82:d0:23:82:79:27:94:b0:1c:42: e0:41:a4:db:80:e6:fc:56:38:b9:2b:e0:a4:0b:6a:d0:69:56: ad:7e:a0:5d:19:c9:e3:84:91:74:ea:f7:d7:b9:d9:cb:63:46: 3e:29:4f:fa:41:12:5c:78:c9:1c:73:ea:a6:47:79:03:63:ac: 19:bb:0d:02:c7:5f:f4:6d:d7:01:a3:13:30:2e:c6:c3:a3:8a: e4:e1:df:3b:37:11:88:3b:9f:81:f2:18:1d:74:53:89:e9:95: 1a:0f:ed:35:9e:b9:19:c0:43:bf:4d:aa:e8:a0:9f:17:7b:56: d2:90:ae:3c:97:56:2d:c0:6b:a3:45:e0:46:8f:cb:1d:41:a3: 47:a2:e7:ab:d8:e7:c6:da:45:e7:8b:ba:1e:7f:63:fa:4d:ac: 66:e5:e3:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fc6YakKc55e3nWMiFkZJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjYwMTAyMTQyMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGRiNDc0NzE2YjFjMDFjM2E4MTJjOTQ2NDJiMzhjOTNmYTNkYjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRhaeCvCHtgmL0/YkzZG7l/3vG6O eGqsgEnmJ6+O1hpMCoOIrg25TJ3r9+xtNiTNZ/TsSF70B5hkZyRFZpapLB/zliYv xUHCbVFvSgs/Wejfshbpy35gtpdYsbaQg7lpZ3slRG2uW2pVSFLlzwxyZ3H4Z5Y3 jIafYZDfeJ4LfYnrXiFqozUE9j8oRai6E2K9hLVWlNTtu15EXDBkRAIRJL+QkLCW e0Vqbi/XhgC6ubLu/1e5A7EHDDQaOlaEOsZIFJu+XzgWzxMIEX0kx+kKCWxDj09i aj7PlC5LQWaSE+zLN3qxEI7CCggxbN5xmpiUoF+is4wKyfcm8oTHpKZVoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLjbR0cWscAcOoEslGQrOMk/o9sZMB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEvdU50SFJ4YXh3Qnc2Z1N5VVpDczR5VC1qMnhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0 LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLQmYMA0G CSqGSIb3DQEBCwUAA4IBAQA9BiLtqEBa/MnDvxzkERY/qaK5IPBOLRMcMLjhEuZ1 rLtzOoRSHy2Gv6KVx7rOjsIQ2C6FRNUz/IipSqYtZ/g0zt+I0KwljdzLej3sFnf9 AQZKhWG94jz7Z4jjeltYeskRcoLQI4J5J5SwHELgQaTbgOb8Vji5K+CkC2rQaVat fqBdGcnjhJF06vfXudnLY0Y+KU/6QRJceMkcc+qmR3kDY6wZuw0Cx1/0bdcBoxMw LsbDo4rk4d87NxGIO5+B8hgddFOJ6ZUaD+01nrkZwEO/TarooJ8Xe1bSkK48l1Yt wGujReBGj8sdQaNHouer2OfG2kXni7oef2P6Taxm5eMT -----END CERTIFICATE-----Generated at Sun Jan 25 10:21:02 2026 by rpki-client