This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/1cBPHp07EJ-UJNHMiRbTHD2251k.roa File: 1cBPHp07EJ-UJNHMiRbTHD2251k.roa (raw, json) Hash identifier: NcGpm88oPiijUJeByynWEeZDrBUROTCD4N4d0hBuT0w= Subject key identifier: D5:C0:4F:1E:9D:3B:10:9F:94:24:D1:CC:89:16:D3:1C:3D:B6:E7:59 Certificate issuer: /CN=50a06a453fcd5f26faf4822c4b459098dcaff039 Certificate serial: 019B7EA63132145226E1FC4C53B47D213541 Authority key identifier: 50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/1cBPHp07EJ-UJNHMiRbTHD2251k.roa Signing time: Fri 02 Jan 2026 12:19:39 +0000 ROA not before: Fri 02 Jan 2026 12:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43958 IP address blocks: 91.195.246.0/23 maxlen: 24 193.143.8.0/21 maxlen: 24 193.143.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.mft rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:31:32:14:52:26:e1:fc:4c:53:b4:7d:21:35:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50a06a453fcd5f26faf4822c4b459098dcaff039 Validity Not Before: Jan 2 12:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5c04f1e9d3b109f9424d1cc8916d31c3db6e759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6c:ad:d0:db:ba:f1:25:52:6a:1f:77:ad:49: bb:37:82:3b:cf:a9:52:79:01:35:95:d2:a3:23:86: 53:e7:e2:9c:0d:6a:1d:e6:69:57:ea:fc:9b:39:1d: df:86:d4:4a:c7:5c:7c:90:37:64:52:ec:75:1f:d6: 93:91:e8:70:d1:92:60:30:7f:d6:d0:48:f2:94:06: 5c:ad:4e:ae:13:e0:69:81:4f:e4:a5:8c:d8:5e:79: 7a:37:6f:71:33:34:d2:3f:d6:bb:c6:df:c7:ce:c8: 6b:7a:e8:86:3e:e9:58:9e:eb:93:35:7a:51:87:32: a3:71:35:95:82:58:48:0c:d3:68:73:21:5d:a1:6b: c4:63:5e:bb:b4:a2:42:44:aa:b7:d5:d3:80:ed:d7: 5e:68:99:31:2f:ae:07:78:28:dd:ea:9e:70:0e:6a: 27:50:2c:4c:8c:2e:f4:36:fe:d7:93:8e:fc:87:ed: 16:70:98:38:60:3d:b9:d6:dc:3a:56:01:3b:90:3a: 1d:07:6f:bb:4d:1d:ea:0a:66:5b:a6:69:a5:9d:c3: 8f:c5:29:43:fe:90:ad:8a:94:f3:e4:cb:e3:e9:e8: d9:3e:26:8e:b0:67:14:62:3d:d1:98:59:c6:7a:bc: a5:23:d8:04:85:35:80:94:db:a3:6f:93:8d:3b:35: 31:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C0:4F:1E:9D:3B:10:9F:94:24:D1:CC:89:16:D3:1C:3D:B6:E7:59 X509v3 Authority Key Identifier: keyid:50:A0:6A:45:3F:CD:5F:26:FA:F4:82:2C:4B:45:90:98:DC:AF:F0:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKBqRT_NXyb69IIsS0WQmNyv8Dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/1cBPHp07EJ-UJNHMiRbTHD2251k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d348b5-151c-4aa5-bd09-ef5d5011ca77/1/UKBqRT_NXyb69IIsS0WQmNyv8Dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.246.0/23 193.143.8.0/21 193.143.240.0/21 Signature Algorithm: sha256WithRSAEncryption 1b:dc:8a:01:24:e4:a4:f1:0f:dc:67:d8:d4:41:2e:3d:2d:75: 64:05:06:60:9d:67:01:df:2f:d3:5b:41:78:6c:bb:37:ca:cd: 0d:12:e3:8c:0e:d4:7a:07:0b:f7:de:fe:17:1c:4a:82:80:07: 0c:b9:8d:be:8b:96:57:f7:e3:29:7b:66:32:8f:76:60:41:7f: 04:f4:de:b5:d8:18:9b:22:7a:9b:f9:1a:6d:67:ad:24:42:b8: 64:f5:63:c9:56:ea:1b:fd:c0:d0:df:08:80:38:64:f7:47:e2: 62:5a:06:4f:a1:3f:21:07:9b:20:86:7b:d4:81:7f:a3:5f:c4: 8f:cb:58:71:fd:25:4d:28:63:9a:b5:d6:21:f1:97:c1:79:56: 02:a3:7a:f6:0c:66:96:76:57:f0:f1:c7:c8:27:01:b6:04:f0: 00:46:76:c6:84:ed:10:e0:1b:af:61:42:f5:1a:43:25:59:33: bf:05:d4:f4:c5:eb:a6:02:85:06:3c:61:1f:80:67:56:1b:e0: a8:13:71:27:3e:da:04:d0:5f:50:51:f6:0a:ef:e7:61:b5:4c: c8:c0:2d:09:8e:59:a1:a2:03:b3:9d:4f:eb:2f:6d:2e:b9:fc: c0:d2:2a:25:da:87:86:ff:a0:f6:57:3c:cc:75:7d:f5:e2:2b: 6f:65:3c:d2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+pjEyFFIm4fxMU7R9ITVBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwYTA2YTQ1M2ZjZDVmMjZmYWY0ODIyYzRiNDU5MDk4ZGNh ZmYwMzkwHhcNMjYwMTAyMTIxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWMwNGYxZTlkM2IxMDlmOTQyNGQxY2M4OTE2ZDMxYzNkYjZlNzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumyt0Nu68SVSah93rUm7N4I7z6lS eQE1ldKjI4ZT5+KcDWod5mlX6vybOR3fhtRKx1x8kDdkUux1H9aTkehw0ZJgMH/W 0EjylAZcrU6uE+BpgU/kpYzYXnl6N29xMzTSP9a7xt/HzshreuiGPulYnuuTNXpR hzKjcTWVglhIDNNocyFdoWvEY167tKJCRKq31dOA7ddeaJkxL64HeCjd6p5wDmon UCxMjC70Nv7Xk478h+0WcJg4YD251tw6VgE7kDodB2+7TR3qCmZbpmmlncOPxSlD /pCtipTz5Mvj6ejZPiaOsGcUYj3RmFnGerylI9gEhTWAlNujb5ONOzUxYwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNXATx6dOxCflCTRzIkW0xw9tudZMB8GA1UdIwQY MBaAFFCgakU/zV8m+vSCLEtFkJjcr/A5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUtCcVJUX05YeWI2OUlJc1MwV1FtTnl2OERrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kMzQ4YjUtMTUxYy00YWE1LWJkMDkt ZWY1ZDUwMTFjYTc3LzEvMWNCUEhwMDdFSi1VSk5ITWlSYlRIRDIyNTFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kMzQ4YjUtMTUxYy00YWE1LWJkMDktZWY1ZDUwMTFjYTc3 LzEvVUtCcVJUX05YeWI2OUlJc1MwV1FtTnl2OERrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW8P2AwQD wY8IAwQDwY/wMA0GCSqGSIb3DQEBCwUAA4IBAQAb3IoBJOSk8Q/cZ9jUQS49LXVk BQZgnWcB3y/TW0F4bLs3ys0NEuOMDtR6Bwv33v4XHEqCgAcMuY2+i5ZX9+Mpe2Yy j3ZgQX8E9N612BibInqb+RptZ60kQrhk9WPJVuob/cDQ3wiAOGT3R+JiWgZPoT8h B5sghnvUgX+jX8SPy1hx/SVNKGOatdYh8ZfBeVYCo3r2DGaWdlfw8cfIJwG2BPAA RnbGhO0Q4BuvYUL1GkMlWTO/BdT0xeumAoUGPGEfgGdWG+CoE3EnPtoE0F9QUfYK 7+dhtUzIwC0JjlmhogOznU/rL20uufzA0iol2oeG/6D2VzzMdX314itvZTzS -----END CERTIFICATE-----Generated at Mon Jan 26 04:38:50 2026 by rpki-client