This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/UUtPEXMk0hGowhFUM2oFX6Myc_k.roa File: UUtPEXMk0hGowhFUM2oFX6Myc_k.roa (raw, json) Hash identifier: m5amu6SfNj0r5BgGVb9s+vJGnsT3MFaddceswbb1NBI= Subject key identifier: 51:4B:4F:11:73:24:D2:11:A8:C2:11:54:33:6A:05:5F:A3:32:73:F9 Certificate issuer: /CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2 Certificate serial: 019B7AC941C39A7E7C74C6777E860F430BEE Authority key identifier: 68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/UUtPEXMk0hGowhFUM2oFX6Myc_k.roa Signing time: Thu 01 Jan 2026 18:19:28 +0000 ROA not before: Thu 01 Jan 2026 18:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200555 IP address blocks: 2.58.188.0/22 maxlen: 24 31.14.60.0/22 maxlen: 24 89.39.216.0/21 maxlen: 24 89.42.120.0/21 maxlen: 24 185.58.208.0/22 maxlen: 24 185.58.208.0/24 maxlen: 24 185.58.209.0/24 maxlen: 24 185.58.210.0/24 maxlen: 24 185.58.211.0/24 maxlen: 24 194.146.55.0/24 maxlen: 24 194.146.63.0/24 maxlen: 24 194.146.70.0/24 maxlen: 24 194.146.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:41:c3:9a:7e:7c:74:c6:77:7e:86:0f:43:0b:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2 Validity Not Before: Jan 1 18:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=514b4f117324d211a8c21154336a055fa33273f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:89:0a:25:11:29:6a:f4:77:44:55:9f:74:ab: 9a:7a:57:b6:7b:a3:d9:be:0e:e3:c8:81:8d:d1:fa: 8d:2e:2a:b6:c4:04:51:a5:88:63:5b:7c:9e:47:50: 86:ca:52:9a:78:b4:d6:f4:b3:cc:28:15:b7:57:04: 77:56:ab:60:c0:55:c7:fe:98:c6:67:d7:67:05:c3: bd:eb:89:98:ee:2e:ed:24:0d:b8:30:4a:c2:39:82: 96:98:4c:5e:d9:d8:12:d2:6f:fd:25:9d:3a:b2:4a: 0b:29:8a:91:35:bb:60:3b:fd:a3:14:e8:8e:e6:67: 27:06:94:5e:5c:eb:d2:8c:17:e2:a4:3e:f0:12:33: c3:8e:b0:b5:37:23:b9:fb:0e:ca:7d:64:32:08:7e: 10:a2:eb:b9:7b:68:95:2e:39:88:a5:92:47:ad:ac: 18:92:28:2c:b5:df:a3:15:80:f9:cb:dc:1a:52:d5: 73:d8:6e:58:22:85:fa:d3:85:ba:cf:71:78:22:a5: d3:59:ff:12:20:e4:92:66:cb:33:cc:10:5e:a8:9f: 11:07:8c:0b:ab:4f:af:e8:f4:df:c9:46:17:c2:04: e1:a1:e3:c2:8a:54:24:e7:dd:35:5c:3d:ce:f0:af: 37:5c:af:22:9c:e9:36:b5:c9:38:0c:a6:99:f2:eb: ab:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4B:4F:11:73:24:D2:11:A8:C2:11:54:33:6A:05:5F:A3:32:73:F9 X509v3 Authority Key Identifier: keyid:68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/UUtPEXMk0hGowhFUM2oFX6Myc_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.188.0/22 31.14.60.0/22 89.39.216.0/21 89.42.120.0/21 185.58.208.0/22 194.146.55.0/24 194.146.63.0/24 194.146.70.0/24 194.146.99.0/24 Signature Algorithm: sha256WithRSAEncryption 50:bd:b5:d3:39:73:5f:3a:0a:ed:54:f5:e6:8e:9d:cb:07:26: 5e:f5:f0:f3:c5:82:3f:f5:d3:5a:c5:2c:db:93:31:a3:8f:6a: fe:bf:33:c1:d4:1e:cb:04:03:0c:36:f7:67:50:b5:7a:09:ac: f6:f7:de:ff:63:7b:2d:e8:55:da:34:83:8e:e0:8a:b5:db:e1: 37:ee:56:47:f1:91:19:5e:9b:49:d2:0d:c4:e2:a1:6c:ae:5c: 02:bf:83:58:9e:a7:30:47:4a:a5:fa:a2:b2:21:a6:06:ba:f1: 6e:58:57:18:95:84:68:47:1e:6c:23:70:2c:89:dc:68:fe:1d: 81:f3:8d:91:d5:c7:49:49:ea:fe:e0:b8:9c:5b:b0:31:2f:41: 8e:a5:6f:a4:47:db:63:07:2e:0c:d6:14:65:62:f2:24:ee:e2: d9:96:6f:1a:b8:66:67:1d:d9:5f:c3:6d:52:9a:31:0c:5f:34: e6:c0:a7:d2:b5:d8:b0:b4:d6:00:95:a3:63:1f:45:35:be:47: 43:44:39:a0:38:e5:66:92:9c:42:43:a6:6d:af:88:98:19:98: 89:ae:a4:20:11:8c:25:9f:fb:1e:cb:b6:18:77:92:6c:6f:91: fe:fb:fd:9e:2d:ed:09:7c:c0:ac:64:ea:50:fc:09:43:37:3c: a3:ac:50:e3 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt6yUHDmn58dMZ3foYPQwvuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZGRiZWY3ZjFjZGQ4YWQxMjcxNjBmMjBlYTBhM2Y2Yjcz ZmE0YTIwHhcNMjYwMTAxMTgxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTRiNGYxMTczMjRkMjExYThjMjExNTQzMzZhMDU1ZmEzMzI3M2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApokKJREpavR3RFWfdKuaele2e6PZ vg7jyIGN0fqNLiq2xARRpYhjW3yeR1CGylKaeLTW9LPMKBW3VwR3VqtgwFXH/pjG Z9dnBcO964mY7i7tJA24MErCOYKWmExe2dgS0m/9JZ06skoLKYqRNbtgO/2jFOiO 5mcnBpReXOvSjBfipD7wEjPDjrC1NyO5+w7KfWQyCH4Qouu5e2iVLjmIpZJHrawY kigstd+jFYD5y9waUtVz2G5YIoX604W6z3F4IqXTWf8SIOSSZsszzBBeqJ8RB4wL q0+v6PTfyUYXwgThoePCilQk5901XD3O8K83XK8inOk2tck4DKaZ8uuryQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFFFLTxFzJNIRqMIRVDNqBV+jMnP5MB8GA1UdIwQY MBaAFGjdvvfxzditEnFg8g6go/a3P6SiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mMDMzZjEtMmY1ZC00NmQxLTkxOTQt NjNmMzAxODg5NDg2LzEvVVV0UEVYTWswaEdvd2hGVU0yb0ZYNk15Y19rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9mMDMzZjEtMmY1ZC00NmQxLTkxOTQtNjNmMzAxODg5NDg2 LzEvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQCAjq8AwQC Hw48AwQDWSfYAwQDWSp4AwQCuTrQAwQAwpI3AwQAwpI/AwQAwpJGAwQAwpJjMA0G CSqGSIb3DQEBCwUAA4IBAQBQvbXTOXNfOgrtVPXmjp3LByZe9fDzxYI/9dNaxSzb kzGjj2r+vzPB1B7LBAMMNvdnULV6Caz2997/Y3st6FXaNIOO4Iq12+E37lZH8ZEZ XptJ0g3E4qFsrlwCv4NYnqcwR0ql+qKyIaYGuvFuWFcYlYRoRx5sI3Asidxo/h2B 842R1cdJSer+4LicW7AxL0GOpW+kR9tjBy4M1hRlYvIk7uLZlm8auGZnHdlfw21S mjEMXzTmwKfStdiwtNYAlaNjH0U1vkdDRDmgOOVmkpxCQ6Ztr4iYGZiJrqQgEYwl n/sey7YYd5Jsb5H++/2eLe0JfMCsZOpQ/AlDNzyjrFDj -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:31 2026 by rpki-client