This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/UuWRn46MvNJXFTJ-RnJkgurOGVM.roa File: UuWRn46MvNJXFTJ-RnJkgurOGVM.roa (raw, json) Hash identifier: eEkLnHk0Njo0Q0StbkcpTu+aS62BjLKIvwib9SKKCcs= Subject key identifier: 52:E5:91:9F:8E:8C:BC:D2:57:15:32:7E:46:72:64:82:EA:CE:19:53 Certificate issuer: /CN=5791bb1150beac5ea0c724f39d2ce7fccfc1546a Certificate serial: 019B7B35A8A1B99E512BC58DDFAE838DDDDF Authority key identifier: 57:91:BB:11:50:BE:AC:5E:A0:C7:24:F3:9D:2C:E7:FC:CF:C1:54:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5G7EVC-rF6gxyTznSzn_M_BVGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/UuWRn46MvNJXFTJ-RnJkgurOGVM.roa Signing time: Thu 01 Jan 2026 20:17:52 +0000 ROA not before: Thu 01 Jan 2026 20:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44735 IP address blocks: 185.45.76.0/24 maxlen: 24 185.45.78.0/24 maxlen: 24 185.45.79.0/24 maxlen: 24 2a01:49a0:12e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.mft rsync://rpki.ripe.net/repository/DEFAULT/V5G7EVC-rF6gxyTznSzn_M_BVGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:a8:a1:b9:9e:51:2b:c5:8d:df:ae:83:8d:dd:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5791bb1150beac5ea0c724f39d2ce7fccfc1546a Validity Not Before: Jan 1 20:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52e5919f8e8cbcd25715327e46726482eace1953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0f:3d:fc:67:56:19:04:ff:d6:5a:70:35:03: 0f:27:50:fe:7e:ec:60:08:41:45:5f:30:26:65:0a: b1:44:49:50:3c:f1:46:15:52:ef:84:97:18:37:55: b2:6e:8a:06:74:4f:db:d9:7a:3e:7a:34:6c:27:3b: c9:e9:4f:79:2e:33:b8:a9:3b:82:ea:6d:01:da:8d: 29:47:70:d3:7d:d7:e6:0a:7b:3d:a9:39:c4:a9:d8: 6f:fb:a1:ff:7f:d4:36:b3:64:0b:8a:7d:aa:b3:fe: 8d:89:b1:58:30:bc:77:51:aa:a1:4f:c6:69:af:67: cb:68:63:38:2c:cf:75:32:4b:51:91:f4:42:f0:68: ad:e7:8d:0b:bd:7f:9a:c8:17:43:1d:7b:6c:56:21: 22:47:f4:8d:25:cc:40:af:10:6c:cb:b1:c7:95:9c: 1b:eb:5e:9c:fe:a6:6a:51:cd:0a:c7:54:bc:4c:6c: 52:9e:16:53:22:b4:4e:29:6f:c4:ce:45:af:8d:54: ba:05:8d:b1:98:0f:7e:eb:a9:6f:9d:bd:8c:bb:7e: 21:68:d1:df:df:49:9c:8b:d2:8a:d2:ac:ce:26:62: 91:a5:6a:4f:5e:2f:12:3a:65:3b:7e:97:c0:ec:2d: 76:03:48:57:84:81:d8:1a:0d:3f:c9:e1:ce:6d:e7: 0e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E5:91:9F:8E:8C:BC:D2:57:15:32:7E:46:72:64:82:EA:CE:19:53 X509v3 Authority Key Identifier: keyid:57:91:BB:11:50:BE:AC:5E:A0:C7:24:F3:9D:2C:E7:FC:CF:C1:54:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5G7EVC-rF6gxyTznSzn_M_BVGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/UuWRn46MvNJXFTJ-RnJkgurOGVM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5c8941-5a28-44e1-9395-bd31c5aceb59/1/V5G7EVC-rF6gxyTznSzn_M_BVGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.45.76.0/24 185.45.78.0/23 IPv6: 2a01:49a0:12e::/48 Signature Algorithm: sha256WithRSAEncryption be:00:b4:55:55:cc:1f:6e:a1:9d:bd:37:a4:56:a8:ce:91:d9: 09:df:cb:e0:2d:88:90:4d:08:ba:7c:85:ac:0c:1e:c2:0c:20: 40:f1:20:b1:24:bd:5d:17:c3:1b:08:c8:b6:1f:7e:ba:86:36: f2:70:e9:1c:b5:96:cc:ae:86:05:5f:f1:e7:a4:f5:5d:b3:9b: ec:72:78:17:57:aa:a5:64:5c:6b:a8:28:71:3a:c0:69:2c:85: 8d:26:a9:8f:d7:f0:42:48:36:ba:c0:9f:da:40:98:9e:13:2e: 65:ed:fa:6a:5d:2c:7e:88:72:17:61:da:ca:e8:53:a4:b9:6c: b1:2d:2f:73:20:60:b8:b7:02:57:c7:e8:e5:dc:1f:c0:f1:82: 7d:d6:b0:f5:ab:e0:d4:c4:ff:cc:2c:dd:dc:b9:e5:d6:4f:51: a2:e2:e1:91:a8:3d:2c:5d:c8:dc:2d:4b:f1:cf:42:67:db:72: b1:cc:14:60:6f:ec:67:18:81:5f:fa:cb:f9:97:60:9a:04:5a: 24:ca:ea:6a:be:17:1c:3e:b3:01:77:61:e5:c7:29:dc:9f:19: 50:64:4e:62:7b:f1:d2:45:5a:4e:bd:99:a0:74:46:5b:20:51: 24:79:27:50:d8:90:36:61:94:8b:5e:4d:cc:01:64:c6:52:db: 14:a8:81:a2 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt7NaihuZ5RK8WN366Djd3fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3OTFiYjExNTBiZWFjNWVhMGM3MjRmMzlkMmNlN2ZjY2Zj MTU0NmEwHhcNMjYwMTAxMjAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmU1OTE5ZjhlOGNiY2QyNTcxNTMyN2U0NjcyNjQ4MmVhY2UxOTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ89/GdWGQT/1lpwNQMPJ1D+fuxg CEFFXzAmZQqxRElQPPFGFVLvhJcYN1WybooGdE/b2Xo+ejRsJzvJ6U95LjO4qTuC 6m0B2o0pR3DTfdfmCns9qTnEqdhv+6H/f9Q2s2QLin2qs/6NibFYMLx3UaqhT8Zp r2fLaGM4LM91MktRkfRC8Git540LvX+ayBdDHXtsViEiR/SNJcxArxBsy7HHlZwb 616c/qZqUc0Kx1S8TGxSnhZTIrROKW/EzkWvjVS6BY2xmA9+66lvnb2Mu34haNHf 30mci9KK0qzOJmKRpWpPXi8SOmU7fpfA7C12A0hXhIHYGg0/yeHObecObwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFFLlkZ+OjLzSVxUyfkZyZILqzhlTMB8GA1UdIwQY MBaAFFeRuxFQvqxeoMck850s5/zPwVRqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjVHN0VWQy1yRjZneHlUem5Tem5fTV9CVkdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81Yzg5NDEtNWEyOC00NGUxLTkzOTUt YmQzMWM1YWNlYjU5LzEvVXVXUm40Nk12TkpYRlRKLVJuSmtndXJPR1ZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy81Yzg5NDEtNWEyOC00NGUxLTkzOTUtYmQzMWM1YWNlYjU5 LzEvVjVHN0VWQy1yRjZneHlUem5Tem5fTV9CVkdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAuS1MAwQB uS1OMA8EAgACMAkDBwAqAUmgAS4wDQYJKoZIhvcNAQELBQADggEBAL4AtFVVzB9u oZ29N6RWqM6R2Qnfy+AtiJBNCLp8hawMHsIMIEDxILEkvV0XwxsIyLYffrqGNvJw 6Ry1lsyuhgVf8eek9V2zm+xyeBdXqqVkXGuoKHE6wGkshY0mqY/X8EJINrrAn9pA mJ4TLmXt+mpdLH6Ichdh2sroU6S5bLEtL3MgYLi3AlfH6OXcH8Dxgn3WsPWr4NTE /8ws3dy55dZPUaLi4ZGoPSxdyNwtS/HPQmfbcrHMFGBv7GcYgV/6y/mXYJoEWiTK 6mq+Fxw+swF3YeXHKdyfGVBkTmJ78dJFWk69maB0RlsgUSR5J1DYkDZhlIteTcwB ZMZS2xSogaI= -----END CERTIFICATE-----Generated at Mon Jan 26 12:55:40 2026 by rpki-client