This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/UeKejWBuRMBTzBVkphHiwU6F1G4.roa File: UeKejWBuRMBTzBVkphHiwU6F1G4.roa (raw, json) Hash identifier: 4Va/WDHUaUbqMZBtGC/uemvvWN5D2KRgvotniu/r8z8= Subject key identifier: 51:E2:9E:8D:60:6E:44:C0:53:CC:15:64:A6:11:E2:C1:4E:85:D4:6E Certificate issuer: /CN=4b529a4d22faef23135d6eff8912266623c49255 Certificate serial: 019B7EA6BE211848F616EA5B7201082662BC Authority key identifier: 4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/UeKejWBuRMBTzBVkphHiwU6F1G4.roa Signing time: Fri 02 Jan 2026 12:20:15 +0000 ROA not before: Fri 02 Jan 2026 12:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21277 IP address blocks: 5.11.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:be:21:18:48:f6:16:ea:5b:72:01:08:26:62:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b529a4d22faef23135d6eff8912266623c49255 Validity Not Before: Jan 2 12:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51e29e8d606e44c053cc1564a611e2c14e85d46e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d1:35:9f:eb:2c:8c:3e:91:ba:70:e8:e8:73: 63:0d:a6:76:1d:ec:54:03:5b:a6:4a:47:cf:7b:7b: f7:11:44:c3:5f:12:6b:d9:7a:d2:65:b7:19:2b:40: 2a:29:fe:e0:87:b8:e6:6f:82:e7:cd:ff:31:10:e5: 74:b5:16:76:02:5d:5a:05:fc:7f:b3:ad:2f:ef:88: fc:57:47:20:1e:09:23:ec:24:af:6f:9d:f4:23:41: f5:25:32:c4:1c:bf:2b:4c:99:28:d4:90:e4:05:b7: e6:21:66:cd:c2:ff:b5:54:09:e0:c1:6f:44:f2:67: 3c:7a:c5:83:94:41:f9:0c:2b:3e:02:5d:2d:0f:e5: cd:54:b8:32:53:72:6a:85:33:6e:d2:d5:3f:1b:e1: 75:47:69:10:c6:a6:e3:1e:8d:79:ba:cf:02:6a:a9: 0a:03:32:ca:7a:cb:5f:ba:66:55:72:ba:48:5b:67: f8:e9:7d:5c:c4:18:9e:c1:41:c8:c4:a4:e1:3d:a6: 01:50:43:8e:08:d7:2e:ab:cd:7a:14:33:e9:ad:24: 42:3e:f0:b1:79:c0:a7:2b:91:bb:88:72:d5:89:33: e4:30:3a:56:4c:13:a1:db:79:5b:62:31:93:33:ff: c9:ea:02:f4:a3:84:c9:4b:5f:f8:78:cd:67:2f:b1: 98:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E2:9E:8D:60:6E:44:C0:53:CC:15:64:A6:11:E2:C1:4E:85:D4:6E X509v3 Authority Key Identifier: keyid:4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/UeKejWBuRMBTzBVkphHiwU6F1G4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.11.19.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:57:f6:ea:99:4c:f4:be:42:b4:34:d1:46:4b:dc:e8:a3:d2: f2:aa:ea:3d:29:84:ab:20:0e:e4:7b:b9:83:e0:8f:42:4e:da: b5:32:d5:b0:1d:59:92:45:13:ca:e4:3f:d2:d3:45:a1:2b:0a: b8:f5:5b:ec:6b:58:1d:88:4c:47:bf:aa:1d:ea:7c:93:96:2b: 23:2c:76:39:db:59:ab:bd:00:69:da:eb:af:63:79:6c:d7:86: 7e:eb:4c:c1:73:ea:24:1e:84:e1:12:04:bd:76:01:96:24:4b: 82:65:33:cd:f3:a3:3e:76:15:81:39:34:70:78:30:a3:fe:22: 77:da:28:1d:3e:96:95:52:1a:78:57:83:46:61:25:2b:28:d9: 62:3c:d5:50:5c:a0:25:ea:1e:9d:fd:98:6f:50:0c:1e:a6:15: 8b:a7:1b:15:a4:0e:41:29:86:6b:07:1b:25:2d:fd:33:77:0f: 98:fe:20:9e:bb:fa:6a:cb:8a:bf:5d:a5:4e:23:6a:7b:dc:27: 34:13:62:e0:0d:f4:74:a5:8c:58:fc:fd:73:d6:b8:f3:27:bc: f1:1c:18:60:a6:34:d7:d2:21:4a:a8:82:20:58:d9:c7:32:36: df:da:ad:65:29:9e:d7:f0:f8:94:8d:a3:8a:f4:b2:67:96:88: 46:90:ad:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pr4hGEj2FupbcgEIJmK8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNTI5YTRkMjJmYWVmMjMxMzVkNmVmZjg5MTIyNjY2MjNj NDkyNTUwHhcNMjYwMTAyMTIyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWUyOWU4ZDYwNmU0NGMwNTNjYzE1NjRhNjExZTJjMTRlODVkNDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNE1n+ssjD6RunDo6HNjDaZ2HexU A1umSkfPe3v3EUTDXxJr2XrSZbcZK0AqKf7gh7jmb4Lnzf8xEOV0tRZ2Al1aBfx/ s60v74j8V0cgHgkj7CSvb530I0H1JTLEHL8rTJko1JDkBbfmIWbNwv+1VAngwW9E 8mc8esWDlEH5DCs+Al0tD+XNVLgyU3JqhTNu0tU/G+F1R2kQxqbjHo15us8CaqkK AzLKestfumZVcrpIW2f46X1cxBiewUHIxKThPaYBUEOOCNcuq816FDPprSRCPvCx ecCnK5G7iHLViTPkMDpWTBOh23lbYjGTM//J6gL0o4TJS1/4eM1nL7GYrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFHino1gbkTAU8wVZKYR4sFOhdRuMB8GA1UdIwQY MBaAFEtSmk0i+u8jE11u/4kSJmYjxJJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzFLYVRTTDY3eU1UWFc3X2lSSW1aaVBFa2xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xZDliMDUtZWM2MS00YzMzLWEwOTct MzZhZTc2ZWU5ODNlLzEvVWVLZWpXQnVSTUJUekJWa3BoSGl3VTZGMUc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xZDliMDUtZWM2MS00YzMzLWEwOTctMzZhZTc2ZWU5ODNl LzEvUzFLYVRTTDY3eU1UWFc3X2lSSW1aaVBFa2xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQsTMA0G CSqGSIb3DQEBCwUAA4IBAQAaV/bqmUz0vkK0NNFGS9zoo9Lyquo9KYSrIA7ke7mD 4I9CTtq1MtWwHVmSRRPK5D/S00WhKwq49Vvsa1gdiExHv6od6nyTlisjLHY521mr vQBp2uuvY3ls14Z+60zBc+okHoThEgS9dgGWJEuCZTPN86M+dhWBOTRweDCj/iJ3 2igdPpaVUhp4V4NGYSUrKNliPNVQXKAl6h6d/ZhvUAwephWLpxsVpA5BKYZrBxsl Lf0zdw+Y/iCeu/pqy4q/XaVOI2p73Cc0E2LgDfR0pYxY/P1z1rjzJ7zxHBhgpjTX 0iFKqIIgWNnHMjbf2q1lKZ7X8PiUjaOK9LJnlohGkK10 -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:57 2026 by rpki-client