This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/u4cgh7Nj-_luUR3bdBkEgf5SpHQ.roa File: u4cgh7Nj-_luUR3bdBkEgf5SpHQ.roa (raw, json) Hash identifier: Af7PsAxhlGeBEitHo4c+wU7iGd5LHt68jODuQoQrn3Y= Subject key identifier: BB:87:20:87:B3:63:FB:F9:6E:51:1D:DB:74:19:04:81:FE:52:A4:74 Certificate issuer: /CN=3cb1cc975c218f16686b0841edfc309cca746a7b Certificate serial: 019B7A5B9783C0B0FAD3B1A130E2BDD49591 Authority key identifier: 3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/u4cgh7Nj-_luUR3bdBkEgf5SpHQ.roa Signing time: Thu 01 Jan 2026 16:19:41 +0000 ROA not before: Thu 01 Jan 2026 16:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198984 IP address blocks: 45.155.148.0/22 maxlen: 22 91.239.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:97:83:c0:b0:fa:d3:b1:a1:30:e2:bd:d4:95:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cb1cc975c218f16686b0841edfc309cca746a7b Validity Not Before: Jan 1 16:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb872087b363fbf96e511ddb74190481fe52a474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d4:83:68:75:40:e1:64:25:dd:9e:93:fa:38: 5a:dd:d0:89:0c:72:89:d7:35:0f:db:f7:f5:8a:da: 4c:aa:90:bf:18:7f:4f:5d:f0:ba:5e:6d:9a:6f:2b: 84:a4:85:92:8f:64:24:79:ae:44:d3:d8:d0:77:b1: b0:eb:9b:51:55:21:a1:1a:47:cf:d3:b2:09:3a:7c: e8:15:ec:cc:86:9a:7e:f0:5d:6e:c3:17:5c:fd:b6: 45:5c:21:cd:20:4b:20:6c:96:d3:95:1e:be:fe:65: 1a:3c:7c:9b:de:79:0e:f7:30:89:63:5a:30:c8:46: 08:4d:e7:5f:56:b5:93:ed:fa:65:db:9b:0b:65:a6: f7:29:57:a0:cc:53:3d:d4:9a:91:7a:5b:e1:79:7c: da:bb:7e:4b:cb:52:a7:d9:cd:11:15:13:84:9c:f1: 5a:06:9b:d3:06:ca:be:b1:a5:1a:7c:48:f0:eb:1f: a1:8b:96:e4:e9:3d:43:1c:c5:21:db:4a:ca:24:06: b0:39:a2:d0:de:e3:35:30:b8:09:04:76:54:9c:be: 0a:cc:24:c3:9d:dc:d2:d3:84:c8:96:de:87:5d:68: 25:84:ce:52:2b:7c:e1:a7:e9:6f:7a:b1:58:81:50: 65:89:88:3e:82:9d:75:35:f3:3e:a5:05:e5:78:84: dd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:87:20:87:B3:63:FB:F9:6E:51:1D:DB:74:19:04:81:FE:52:A4:74 X509v3 Authority Key Identifier: keyid:3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/u4cgh7Nj-_luUR3bdBkEgf5SpHQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.148.0/22 91.239.152.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:0e:2e:bb:6e:d0:2f:43:f3:3b:57:d0:50:de:c5:4d:18:72: 0a:3c:13:67:32:ce:9d:d1:61:ad:53:43:64:f8:1b:0d:b0:a7: 04:9e:7c:37:6f:28:2a:fb:9a:80:d5:ea:ee:15:4c:84:dc:74: 41:81:9e:ae:3d:75:57:9c:8f:aa:ba:cc:cf:c6:e0:8f:ac:15: e2:a9:c6:dc:ca:fe:23:fc:82:15:8e:06:74:69:16:94:a7:7a: d2:62:8b:4b:14:78:ae:0b:19:f4:6f:22:cf:09:26:e7:0d:82: bc:e2:5a:c4:45:dc:0f:4b:29:ca:5e:83:89:c9:bf:c6:47:d4: cc:b0:cd:bc:a6:c5:a9:d5:d4:2c:4c:ee:e7:54:c5:6b:da:66: 17:4d:21:b9:ee:a7:d8:4f:a7:36:1d:0d:15:77:ab:b7:01:10: 1e:90:43:c2:87:70:ce:5f:12:87:d6:c9:bb:c3:ef:06:9e:3d: 97:5c:14:e7:d5:59:af:ed:9d:29:94:53:0a:d7:2c:17:af:23: 61:4c:7c:db:51:d5:a5:6e:fa:ab:7e:83:7c:71:dd:2c:81:44: 1d:7c:0e:50:3d:41:5a:ad:65:b3:f7:ca:5b:f2:f4:64:ea:04: 53:d8:73:c4:57:51:50:1b:8d:ad:69:5f:a3:99:40:93:5f:7c: 32:78:c4:63 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6W5eDwLD607GhMOK91JWRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYjFjYzk3NWMyMThmMTY2ODZiMDg0MWVkZmMzMDljY2E3 NDZhN2IwHhcNMjYwMTAxMTYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjg3MjA4N2IzNjNmYmY5NmU1MTFkZGI3NDE5MDQ4MWZlNTJhNDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69SDaHVA4WQl3Z6T+jha3dCJDHKJ 1zUP2/f1itpMqpC/GH9PXfC6Xm2abyuEpIWSj2Qkea5E09jQd7Gw65tRVSGhGkfP 07IJOnzoFezMhpp+8F1uwxdc/bZFXCHNIEsgbJbTlR6+/mUaPHyb3nkO9zCJY1ow yEYITedfVrWT7fpl25sLZab3KVegzFM91JqRelvheXzau35Ly1Kn2c0RFROEnPFa BpvTBsq+saUafEjw6x+hi5bk6T1DHMUh20rKJAawOaLQ3uM1MLgJBHZUnL4KzCTD ndzS04TIlt6HXWglhM5SK3zhp+lverFYgVBliYg+gp11NfM+pQXleITdpwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLuHIIezY/v5blEd23QZBIH+UqR0MB8GA1UdIwQY MBaAFDyxzJdcIY8WaGsIQe38MJzKdGp7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUExITWwxd2hqeFpvYXdoQjdmd3duTXAwYW5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yMzlhOGUtOTBkOC00M2JkLTkwZWQt M2UzNGQwMDczMmEzLzEvdTRjZ2g3TmotX2x1VVIzYmRCa0VnZjVTcEhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8yMzlhOGUtOTBkOC00M2JkLTkwZWQtM2UzNGQwMDczMmEz LzEvUExITWwxd2hqeFpvYXdoQjdmd3duTXAwYW5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLZuUAwQC W++YMA0GCSqGSIb3DQEBCwUAA4IBAQA8Di67btAvQ/M7V9BQ3sVNGHIKPBNnMs6d 0WGtU0Nk+BsNsKcEnnw3bygq+5qA1eruFUyE3HRBgZ6uPXVXnI+quszPxuCPrBXi qcbcyv4j/IIVjgZ0aRaUp3rSYotLFHiuCxn0byLPCSbnDYK84lrERdwPSynKXoOJ yb/GR9TMsM28psWp1dQsTO7nVMVr2mYXTSG57qfYT6c2HQ0Vd6u3ARAekEPCh3DO XxKH1sm7w+8Gnj2XXBTn1Vmv7Z0plFMK1ywXryNhTHzbUdWlbvqrfoN8cd0sgUQd fA5QPUFarWWz98pb8vRk6gRT2HPEV1FQG42taV+jmUCTX3wyeMRj -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:31 2026 by rpki-client