This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/UWgtqXah3liJx-awsYUK3XIS54c.roa File: UWgtqXah3liJx-awsYUK3XIS54c.roa (raw, json) Hash identifier: nisX/PCjG49hPGc2ySAUn3J0MxV+pv8+T78d4GdNMSs= Subject key identifier: 51:68:2D:A9:76:A1:DE:58:89:C7:E6:B0:B1:85:0A:DD:72:12:E7:87 Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Certificate serial: 019B7D5C32A94F17FA7EDBB940C567C9BAD8 Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/UWgtqXah3liJx-awsYUK3XIS54c.roa Signing time: Fri 02 Jan 2026 06:19:12 +0000 ROA not before: Fri 02 Jan 2026 06:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47252 IP address blocks: 155.133.36.0/23 maxlen: 24 155.133.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:32:a9:4f:17:fa:7e:db:b9:40:c5:67:c9:ba:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Validity Not Before: Jan 2 06:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51682da976a1de5889c7e6b0b1850add7212e787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a1:27:2a:03:5c:13:58:99:d7:e7:40:1b:ad: f2:cd:4f:d0:c1:56:19:1c:5f:91:03:70:c1:39:75: 38:66:6e:9b:bb:64:68:37:e5:44:d3:05:8b:b0:f0: 93:87:a6:47:e4:46:52:fa:8b:92:a7:38:ce:96:a2: 8a:09:24:78:84:69:c4:41:13:f1:60:bb:38:05:fd: 95:a3:c0:c7:ef:72:85:0c:98:fd:d5:9a:de:5d:7a: cd:f3:9f:a7:ca:f8:36:1c:2d:26:11:a6:53:91:8d: ba:06:f5:3e:18:42:cb:82:35:dd:f8:85:ce:4e:07: d9:e8:15:68:7a:8b:a2:dd:f9:d2:f8:47:9e:de:6b: bd:12:7d:4b:e8:6e:96:9c:dc:9d:b7:b8:b4:1a:f9: 6c:3a:5f:57:00:67:a0:36:2f:f9:2a:03:66:e4:0f: a0:f3:ef:15:fb:a6:3b:af:20:74:ae:55:18:85:50: 1e:c9:87:1c:c7:50:47:11:c6:25:0c:39:62:8f:e9: 92:d4:76:e5:11:34:14:80:16:2d:0b:34:b5:11:67: da:18:7a:14:7e:2d:52:d6:4f:c8:9f:2e:a0:32:fd: 51:d2:6b:5f:95:5b:3a:05:5f:29:19:15:8a:6a:f1: 48:63:52:9e:5f:36:d1:8c:6a:d4:e6:75:b3:bd:8e: 3c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:68:2D:A9:76:A1:DE:58:89:C7:E6:B0:B1:85:0A:DD:72:12:E7:87 X509v3 Authority Key Identifier: keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/UWgtqXah3liJx-awsYUK3XIS54c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.133.36.0/23 155.133.39.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:97:8c:fd:b8:fa:f3:cf:42:ff:db:0a:f9:c9:a9:88:78:c6: 09:ae:d8:bf:d7:b2:dd:25:c4:79:12:75:70:53:92:b3:f0:30: 1e:85:6d:0c:00:d1:30:9c:fb:93:fe:ad:8f:9a:e5:07:0b:6e: 1c:33:ba:c8:1f:79:42:37:c3:fb:27:1a:92:0e:ef:98:74:42: a3:8b:fa:cd:f8:a2:a3:2c:61:6a:90:35:b3:ff:57:31:a1:a9: bb:c4:41:7d:b5:75:62:f1:53:42:0d:d8:e1:27:b5:04:97:96: 50:bf:4b:ac:87:6e:0e:ab:3f:9b:bb:17:e4:b3:e5:c9:f3:48: f2:2d:5a:69:87:76:3e:c1:f0:4c:3e:cc:49:05:4f:d6:b0:07: 6a:62:c4:ae:7c:d8:6a:06:bd:b9:b7:ae:3b:d7:90:b2:52:3d: 0e:63:e8:93:31:91:2a:b4:f4:17:3f:75:e7:6a:cc:7f:90:6e: a5:d8:65:17:4d:d9:3c:8f:8a:ef:8a:eb:a5:77:5e:10:15:8c: 96:96:3c:7d:58:68:45:a8:d1:16:6b:2c:91:b3:ef:e8:3d:35: ae:46:97:a7:8a:e7:42:79:66:80:fd:15:1d:82:8f:e6:4e:f8: 14:70:d6:ef:a0:4d:5b:ab:74:02:2c:69:e3:f3:0f:88:ed:2b: 1c:6c:3d:d1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XDKpTxf6ftu5QMVnybrYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWQ2ODE0Mzc1MjcxZDFhM2NiZDEyMTU1ZGIxMWQyYmQ0 MWE4ZDMwHhcNMjYwMTAyMDYxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTY4MmRhOTc2YTFkZTU4ODljN2U2YjBiMTg1MGFkZDcyMTJlNzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaEnKgNcE1iZ1+dAG63yzU/QwVYZ HF+RA3DBOXU4Zm6bu2RoN+VE0wWLsPCTh6ZH5EZS+ouSpzjOlqKKCSR4hGnEQRPx YLs4Bf2Vo8DH73KFDJj91ZreXXrN85+nyvg2HC0mEaZTkY26BvU+GELLgjXd+IXO TgfZ6BVoeoui3fnS+Eee3mu9En1L6G6WnNydt7i0GvlsOl9XAGegNi/5KgNm5A+g 8+8V+6Y7ryB0rlUYhVAeyYccx1BHEcYlDDlij+mS1HblETQUgBYtCzS1EWfaGHoU fi1S1k/Iny6gMv1R0mtflVs6BV8pGRWKavFIY1KeXzbRjGrU5nWzvY48cwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFFoLal2od5YicfmsLGFCt1yEueHMB8GA1UdIwQY MBaAFBEdaBQ3UnHRo8vRIVXbEdK9QajTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQt MjcxZDI1ZTIwNTc0LzEvVVdndHFYYWgzbGlKeC1hd3NZVUszWElTNTRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQtMjcxZDI1ZTIwNTc0 LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBm4UkAwQA m4UnMA0GCSqGSIb3DQEBCwUAA4IBAQA/l4z9uPrzz0L/2wr5yamIeMYJrti/17Ld JcR5EnVwU5Kz8DAehW0MANEwnPuT/q2PmuUHC24cM7rIH3lCN8P7JxqSDu+YdEKj i/rN+KKjLGFqkDWz/1cxoam7xEF9tXVi8VNCDdjhJ7UEl5ZQv0ush24Oqz+buxfk s+XJ80jyLVpph3Y+wfBMPsxJBU/WsAdqYsSufNhqBr25t64715CyUj0OY+iTMZEq tPQXP3Xnasx/kG6l2GUXTdk8j4rviuuld14QFYyWljx9WGhFqNEWayyRs+/oPTWu RpeniudCeWaA/RUdgo/mTvgUcNbvoE1bq3QCLGnj8w+I7SscbD3R -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:45 2026 by rpki-client