This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/UHmvQQUwZ_7wZ81XNf5pNZZZxWY.roa File: UHmvQQUwZ_7wZ81XNf5pNZZZxWY.roa (raw, json) Hash identifier: HYwI8Es6qaDvbLWGoybNvvtN04TE4QCWnT3UgDe1WLM= Subject key identifier: 50:79:AF:41:05:30:67:FE:F0:67:CD:57:35:FE:69:35:96:59:C5:66 Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019B76EB182157FF916B2367E1179567BEAD Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/UHmvQQUwZ_7wZ81XNf5pNZZZxWY.roa Signing time: Thu 01 Jan 2026 00:17:57 +0000 ROA not before: Thu 01 Jan 2026 00:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205775 IP address blocks: 45.93.56.0/22 maxlen: 22 185.36.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:18:21:57:ff:91:6b:23:67:e1:17:95:67:be:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Jan 1 00:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5079af41053067fef067cd5735fe69359659c566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:53:1e:1f:a2:ec:a3:68:99:cf:5d:00:29:aa: 58:90:2a:8d:cf:b3:99:0d:a4:09:57:07:cb:1d:c6: ff:c2:ea:02:8a:43:f3:06:54:4c:b0:01:fa:50:2f: bd:5a:f0:d0:c3:50:92:5f:33:ae:d7:35:4e:8b:ac: 87:ca:a4:e1:5d:bc:d3:6e:e7:de:ea:8c:08:fd:1c: a8:91:49:8b:25:ee:5f:db:70:a3:fa:ec:07:45:7e: 31:71:92:4a:33:c1:b5:84:45:cc:a9:d1:7b:8b:c6: e3:68:04:9c:f5:fa:20:8f:b7:83:2c:88:3a:44:91: fa:55:0a:5a:74:01:02:9a:b8:e1:1e:57:38:b5:d4: 59:e5:56:cc:73:a8:32:ee:8d:b0:9b:34:d2:d2:71: 0e:a3:da:60:75:83:7f:65:ea:ef:1d:19:2c:30:ae: f7:c8:57:08:33:b2:68:73:92:0c:a0:61:2d:45:48: 2c:1a:91:4b:b9:46:71:6c:28:cd:59:1b:15:c8:6c: 1d:a8:88:b7:20:b4:e5:5f:50:61:03:f1:cd:2d:e3: 7f:df:22:68:00:65:79:1a:7c:70:3e:1e:68:88:fe: 7d:68:99:b8:95:08:ac:64:fa:05:2b:f9:b1:8b:9e: 2d:61:df:b6:de:86:4e:39:3a:5b:22:68:69:a9:ad: cc:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:79:AF:41:05:30:67:FE:F0:67:CD:57:35:FE:69:35:96:59:C5:66 X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/UHmvQQUwZ_7wZ81XNf5pNZZZxWY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.56.0/22 185.36.0.0/22 Signature Algorithm: sha256WithRSAEncryption b3:3f:d2:b6:1c:82:a6:ab:a6:9c:dc:b0:79:98:28:dc:5c:75: 8d:13:7d:1d:0d:00:95:43:ef:53:3b:20:b1:c2:24:39:00:5e: 41:cb:df:2c:d2:6f:8a:ba:07:1c:84:f7:74:9f:84:e8:8c:bc: 79:39:4c:38:df:b1:2b:80:31:03:ce:73:fe:b6:68:8d:43:6e: f6:68:7a:e6:c6:e7:6b:94:d1:09:a6:a5:07:86:4c:70:ee:76: 02:b4:4d:f0:35:03:13:3d:23:e5:87:33:a2:dc:e8:0d:37:9c: c2:e9:e0:c5:81:40:77:4b:c7:73:9b:49:fb:4d:1c:e9:e9:c5: 86:34:37:af:03:58:f6:0d:72:c9:68:b1:5d:3a:f5:c8:93:8f: 1b:78:cd:8c:4f:15:99:45:2f:70:5c:0b:2e:7e:93:d8:52:1c: cc:0f:a1:c1:39:d3:31:30:4f:03:55:a5:87:cd:c5:13:f9:93: b7:9f:06:96:0b:84:d8:5c:bd:ef:60:ca:0c:a1:d0:e8:10:78: 6f:a3:bd:99:ef:ef:0f:73:15:d8:1c:1c:58:3d:ea:fb:14:18: ca:eb:ee:a7:05:72:c1:49:be:0c:a8:b5:b2:14:5a:d2:d8:31: e9:68:b9:37:03:5e:c2:ed:01:6e:27:0e:c6:66:24:25:cd:9b: 5a:66:ee:75 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26xghV/+RayNn4ReVZ76tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwMTAxMDAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDc5YWY0MTA1MzA2N2ZlZjA2N2NkNTczNWZlNjkzNTk2NTljNTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVMeH6Lso2iZz10AKapYkCqNz7OZ DaQJVwfLHcb/wuoCikPzBlRMsAH6UC+9WvDQw1CSXzOu1zVOi6yHyqThXbzTbufe 6owI/RyokUmLJe5f23Cj+uwHRX4xcZJKM8G1hEXMqdF7i8bjaASc9fogj7eDLIg6 RJH6VQpadAECmrjhHlc4tdRZ5VbMc6gy7o2wmzTS0nEOo9pgdYN/ZervHRksMK73 yFcIM7Joc5IMoGEtRUgsGpFLuUZxbCjNWRsVyGwdqIi3ILTlX1BhA/HNLeN/3yJo AGV5GnxwPh5oiP59aJm4lQisZPoFK/mxi54tYd+23oZOOTpbImhpqa3MWwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFB5r0EFMGf+8GfNVzX+aTWWWcVmMB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvVUhtdlFRVXdaXzd3WjgxWE5mNXBOWlpaeFdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLV04AwQC uSQAMA0GCSqGSIb3DQEBCwUAA4IBAQCzP9K2HIKmq6ac3LB5mCjcXHWNE30dDQCV Q+9TOyCxwiQ5AF5By98s0m+KugcchPd0n4TojLx5OUw437ErgDEDznP+tmiNQ272 aHrmxudrlNEJpqUHhkxw7nYCtE3wNQMTPSPlhzOi3OgNN5zC6eDFgUB3S8dzm0n7 TRzp6cWGNDevA1j2DXLJaLFdOvXIk48beM2MTxWZRS9wXAsufpPYUhzMD6HBOdMx ME8DVaWHzcUT+ZO3nwaWC4TYXL3vYMoModDoEHhvo72Z7+8PcxXYHBxYPer7FBjK 6+6nBXLBSb4MqLWyFFrS2DHpaLk3A17C7QFuJw7GZiQlzZtaZu51 -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:18 2026 by rpki-client