This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/_UUS3q5BecQsPN01euTz6ZXEA3I.roa File: _UUS3q5BecQsPN01euTz6ZXEA3I.roa (raw, json) Hash identifier: /n6cdrP+/xfyaY1mRVl4Rp3lZj1gk+c55nEDkiLkTlI= Subject key identifier: FD:45:12:DE:AE:41:79:C4:2C:3C:DD:35:7A:E4:F3:E9:95:C4:03:72 Certificate issuer: /CN=a566d8337776c98746bd231e69e185db2a9a5be2 Certificate serial: 019B7BA34AE86B73502992E2299317E5FCC4 Authority key identifier: A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/_UUS3q5BecQsPN01euTz6ZXEA3I.roa Signing time: Thu 01 Jan 2026 22:17:37 +0000 ROA not before: Thu 01 Jan 2026 22:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208608 IP address blocks: 45.91.204.0/22 maxlen: 24 45.128.16.0/22 maxlen: 24 45.128.17.0/24 maxlen: 24 2a0e:1540::/29 maxlen: 48 2a0e:3bc0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:4a:e8:6b:73:50:29:92:e2:29:93:17:e5:fc:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a566d8337776c98746bd231e69e185db2a9a5be2 Validity Not Before: Jan 1 22:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd4512deae4179c42c3cdd357ae4f3e995c40372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b7:5b:25:e8:e4:b3:6b:92:0d:22:b6:de:aa: eb:29:78:bb:bc:83:38:98:24:6d:59:9e:e0:ba:60: f6:c1:c5:72:84:30:a1:89:01:5d:77:68:bd:6c:b4: d4:29:9d:6d:dc:0d:62:fa:e1:4f:b6:f9:9f:72:0c: 29:a5:b7:4d:92:0d:19:38:2a:38:14:12:fe:13:3e: a8:29:d3:14:b6:68:34:bd:c5:89:de:2d:9e:1e:aa: 23:d6:f5:d7:30:8d:f1:10:34:16:fd:01:b3:26:d7: 05:f3:1c:b4:44:21:20:b0:8c:f2:0d:63:f3:23:c1: 83:23:48:f3:cb:33:95:46:2e:93:15:d1:24:08:d7: 3e:87:a3:df:5d:cd:84:bd:75:8d:07:d1:dd:11:bb: d5:86:39:b6:ef:2b:c5:94:68:bf:a7:74:36:dd:3e: 11:00:43:c9:b9:48:a7:4f:bd:41:ab:b6:9f:0d:51: cd:c4:3a:c7:03:ef:67:3d:56:36:c6:6a:19:b3:f9: 03:32:88:32:16:e3:dc:82:7c:98:5b:a6:06:26:d9: f6:51:3c:b3:23:6f:19:93:22:96:97:5b:1a:81:9f: 99:dd:fe:8a:84:4b:b6:cb:2f:e5:2f:df:18:7b:3d: 80:32:4c:99:6f:45:7f:0d:b6:ab:e7:12:b4:9f:fe: ea:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:45:12:DE:AE:41:79:C4:2C:3C:DD:35:7A:E4:F3:E9:95:C4:03:72 X509v3 Authority Key Identifier: keyid:A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/_UUS3q5BecQsPN01euTz6ZXEA3I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.204.0/22 45.128.16.0/22 IPv6: 2a0e:1540::/29 2a0e:3bc0::/29 Signature Algorithm: sha256WithRSAEncryption 5a:c7:55:cf:67:34:9f:df:81:65:61:18:12:20:82:7e:b8:87: 9b:59:78:af:4f:26:45:b1:ad:cf:f3:56:24:9d:0d:9d:cf:83: f0:76:b3:0d:69:85:cc:a2:f0:d7:2d:91:a5:a2:2b:0a:3e:78: 65:03:c7:32:95:9e:f5:74:9c:7b:24:04:13:f6:9c:c6:64:6f: 2e:67:6a:4a:8f:5c:15:d7:aa:57:0e:a6:77:a2:06:76:33:23: 38:e5:49:d4:3d:65:d6:73:39:6d:a6:c1:cb:d4:e6:07:66:11: 46:92:d0:04:3b:92:c3:72:db:63:b0:c2:19:df:34:6e:e0:29: bf:16:89:ee:06:d7:3e:6e:f8:b8:d1:cd:48:62:a0:92:a2:d5: fe:f6:b8:0f:24:b9:2c:96:42:a0:05:6b:06:50:ce:5f:34:25: 7a:6f:ba:b2:9d:fa:dc:ff:b9:20:ea:e3:4f:84:48:e7:f3:14: f8:53:6d:9d:16:81:b9:52:35:a8:19:05:4f:39:41:fa:a2:fd: 34:0c:88:7e:a5:41:98:b9:11:41:8a:6d:6e:a7:97:cd:30:4d: 16:13:7a:47:30:82:72:0f:0e:62:d5:df:3c:ca:c9:39:67:39: 8c:3d:5b:ad:f6:8e:a2:47:13:15:dc:6c:ee:c7:10:99:34:3c: 3d:46:80:c2 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt7o0roa3NQKZLiKZMX5fzEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NjZkODMzNzc3NmM5ODc0NmJkMjMxZTY5ZTE4NWRiMmE5 YTViZTIwHhcNMjYwMTAxMjIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDQ1MTJkZWFlNDE3OWM0MmMzY2RkMzU3YWU0ZjNlOTk1YzQwMzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLdbJejks2uSDSK23qrrKXi7vIM4 mCRtWZ7gumD2wcVyhDChiQFdd2i9bLTUKZ1t3A1i+uFPtvmfcgwppbdNkg0ZOCo4 FBL+Ez6oKdMUtmg0vcWJ3i2eHqoj1vXXMI3xEDQW/QGzJtcF8xy0RCEgsIzyDWPz I8GDI0jzyzOVRi6TFdEkCNc+h6PfXc2EvXWNB9HdEbvVhjm27yvFlGi/p3Q23T4R AEPJuUinT71Bq7afDVHNxDrHA+9nPVY2xmoZs/kDMogyFuPcgnyYW6YGJtn2UTyz I28ZkyKWl1sagZ+Z3f6KhEu2yy/lL98Yez2AMkyZb0V/Dbar5xK0n/7qaQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFP1FEt6uQXnELDzdNXrk8+mVxANyMB8GA1UdIwQY MBaAFKVm2DN3dsmHRr0jHmnhhdsqmlviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFdiWU0zZDJ5WWRHdlNNZWFlR0YyeXFhVy1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wMTY4YWMtMzQyYy00ZGQwLTkxYTgt MWI3NTg2N2U4ZGZmLzEvX1VVUzNxNUJlY1FzUE4wMWV1VHo2WlhFQTNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8wMTY4YWMtMzQyYy00ZGQwLTkxYTgtMWI3NTg2N2U4ZGZm LzEvcFdiWU0zZDJ5WWRHdlNNZWFlR0YyeXFhVy1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCLVvMAwQC LYAQMBQEAgACMA4DBQMqDhVAAwUDKg47wDANBgkqhkiG9w0BAQsFAAOCAQEAWsdV z2c0n9+BZWEYEiCCfriHm1l4r08mRbGtz/NWJJ0Nnc+D8HazDWmFzKLw1y2RpaIr Cj54ZQPHMpWe9XSceyQEE/acxmRvLmdqSo9cFdeqVw6md6IGdjMjOOVJ1D1l1nM5 babBy9TmB2YRRpLQBDuSw3LbY7DCGd80buApvxaJ7gbXPm74uNHNSGKgkqLV/va4 DyS5LJZCoAVrBlDOXzQlem+6sp363P+5IOrjT4RI5/MU+FNtnRaBuVI1qBkFTzlB +qL9NAyIfqVBmLkRQYptbqeXzTBNFhN6RzCCcg8OYtXfPMrJOWc5jD1brfaOokcT Fdxs7scQmTQ8PUaAwg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:28:53 2026 by rpki-client