This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/UKW6ggBaCeq2EWzJWVDTUUG5C5M.roa File: UKW6ggBaCeq2EWzJWVDTUUG5C5M.roa (raw, json) Hash identifier: RrnGAk5DcSVwnr4K/OnsZ4KSQkqSg7XT17ThtWs4Qzc= Subject key identifier: 50:A5:BA:82:00:5A:09:EA:B6:11:6C:C9:59:50:D3:51:41:B9:0B:93 Certificate issuer: /CN=494d7873416510a2fb2346ef342280155522713b Certificate serial: 019B7EA56A9FF7F64F674B05C178E766CE34 Authority key identifier: 49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/UKW6ggBaCeq2EWzJWVDTUUG5C5M.roa Signing time: Fri 02 Jan 2026 12:18:48 +0000 ROA not before: Fri 02 Jan 2026 12:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29141 IP address blocks: 5.45.176.0/21 maxlen: 21 31.14.46.0/23 maxlen: 23 31.170.104.0/21 maxlen: 21 31.170.111.0/24 maxlen: 24 80.83.112.0/20 maxlen: 20 80.83.116.0/24 maxlen: 24 130.255.72.0/21 maxlen: 21 130.255.184.0/21 maxlen: 21 185.13.148.0/22 maxlen: 22 185.45.112.0/22 maxlen: 22 195.68.246.0/23 maxlen: 23 195.128.160.0/23 maxlen: 23 2a02:e00::/32 maxlen: 32 2a02:e00:fff0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:6a:9f:f7:f6:4f:67:4b:05:c1:78:e7:66:ce:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=494d7873416510a2fb2346ef342280155522713b Validity Not Before: Jan 2 12:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50a5ba82005a09eab6116cc95950d35141b90b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e6:18:f4:e2:8a:2f:39:45:5b:74:ee:6e:36: 46:75:db:3a:86:80:13:37:16:a2:ce:fe:0b:48:a4: 8d:46:91:0f:33:95:c4:12:2c:f8:dc:f1:ee:06:42: 0b:68:55:97:e7:1b:33:d3:2b:41:3f:9d:00:df:d0: a0:06:99:5b:f6:61:e7:ab:a4:45:90:60:92:48:8e: 5b:2c:dd:aa:89:a2:51:63:71:5d:56:bf:d2:18:6d: 0b:19:ed:fb:ee:eb:4c:29:7e:5a:46:2c:17:8c:2d: cf:13:69:65:1d:f4:1b:ab:00:de:57:70:ac:ca:ec: 0f:7b:af:69:60:34:cd:d1:a7:5d:ff:09:5b:a6:e4: 66:a0:b9:63:9b:09:65:96:24:99:ad:a9:a9:ce:42: 98:9a:46:ee:53:e0:38:b9:89:58:32:34:f6:b2:4c: 92:ee:6a:34:52:8c:f5:39:18:15:2d:f4:e2:4a:f5: 09:cc:bc:f3:83:14:3d:64:38:bd:e9:1e:fd:3b:00: 55:58:13:5d:eb:60:02:33:15:cb:3c:04:e0:83:b8: 76:9d:73:44:35:4c:e5:91:e7:59:b9:9f:bc:3b:ff: 94:e1:7b:f3:41:e9:c1:10:54:f4:37:a1:f9:c5:a0: 1e:5a:92:d8:c0:60:53:98:70:91:67:12:14:7a:2c: 03:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A5:BA:82:00:5A:09:EA:B6:11:6C:C9:59:50:D3:51:41:B9:0B:93 X509v3 Authority Key Identifier: keyid:49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/UKW6ggBaCeq2EWzJWVDTUUG5C5M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.45.176.0/21 31.14.46.0/23 31.170.104.0/21 80.83.112.0/20 130.255.72.0/21 130.255.184.0/21 185.13.148.0/22 185.45.112.0/22 195.68.246.0/23 195.128.160.0/23 IPv6: 2a02:e00::/32 Signature Algorithm: sha256WithRSAEncryption ba:f9:08:af:86:6d:bc:dc:76:86:64:5c:0f:dc:1e:d3:91:e3: 12:f0:8e:30:da:2c:85:3a:29:73:d7:d2:cf:65:f8:41:4f:8d: 0a:65:89:a2:f0:ff:d3:82:28:d6:91:7e:c4:7c:0c:02:b0:27: 2d:6c:b3:2a:28:55:6c:46:69:88:50:cf:14:90:55:bf:64:3a: 10:c9:93:4b:fe:a4:38:67:75:c2:02:fb:1c:06:1c:74:bb:1e: b4:12:56:f0:93:5a:ee:32:01:bc:3a:0d:dc:8d:12:3e:8c:4e: e3:17:91:8f:44:77:e5:e9:c3:24:22:82:f3:a6:77:8d:3d:d7: ce:c7:00:e3:1d:e6:df:b2:02:4f:1e:5d:fe:f4:1f:af:0a:a4: 33:40:68:73:0d:79:13:97:4a:8a:cf:c7:b1:8f:8f:9f:b9:b3: 0d:81:8a:ad:4f:3b:dd:e8:b7:3b:65:8e:d8:d9:49:23:f7:bf: b4:2e:2b:e6:38:a7:46:71:c4:90:f9:2a:fb:99:b1:17:b9:22: 33:3f:25:28:09:96:5c:24:9a:c0:50:2b:a8:04:80:20:2f:01: 4e:64:7f:69:f3:83:35:fc:d4:c6:12:92:be:ba:75:46:3b:6b: c8:51:e4:a1:72:c1:5a:05:31:6b:9a:06:d8:b1:1c:35:a7:96: 82:a6:54:c1 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZt+pWqf9/ZPZ0sFwXjnZs40MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NGQ3ODczNDE2NTEwYTJmYjIzNDZlZjM0MjI4MDE1NTUy MjcxM2IwHhcNMjYwMTAyMTIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGE1YmE4MjAwNWEwOWVhYjYxMTZjYzk1OTUwZDM1MTQxYjkwYjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveYY9OKKLzlFW3TubjZGdds6hoAT Nxaizv4LSKSNRpEPM5XEEiz43PHuBkILaFWX5xsz0ytBP50A39CgBplb9mHnq6RF kGCSSI5bLN2qiaJRY3FdVr/SGG0LGe377utMKX5aRiwXjC3PE2llHfQbqwDeV3Cs yuwPe69pYDTN0add/wlbpuRmoLljmwllliSZrampzkKYmkbuU+A4uYlYMjT2skyS 7mo0Uoz1ORgVLfTiSvUJzLzzgxQ9ZDi96R79OwBVWBNd62ACMxXLPATgg7h2nXNE NUzlkedZuZ+8O/+U4XvzQenBEFT0N6H5xaAeWpLYwGBTmHCRZxIUeiwDIQIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFFCluoIAWgnqthFsyVlQ01FBuQuTMB8GA1UdIwQY MBaAFElNeHNBZRCi+yNG7zQigBVVInE7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1UxNGMwRmxFS0w3STBidk5DS0FGVlVpY1RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yOGY3YTYtZTFiYS00OTc4LTkxMjIt ZTE4ZTdiMmFjNTM2LzEvVUtXNmdnQmFDZXEyRVd6SldWRFRVVUc1QzVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8yOGY3YTYtZTFiYS00OTc4LTkxMjItZTE4ZTdiMmFjNTM2 LzEvU1UxNGMwRmxFS0w3STBidk5DS0FGVlVpY1RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQDBS2wAwQB Hw4uAwQDH6poAwQEUFNwAwQDgv9IAwQDgv+4AwQCuQ2UAwQCuS1wAwQBw0T2AwQB w4CgMA0EAgACMAcDBQAqAg4AMA0GCSqGSIb3DQEBCwUAA4IBAQC6+Qivhm283HaG ZFwP3B7TkeMS8I4w2iyFOilz19LPZfhBT40KZYmi8P/TgijWkX7EfAwCsCctbLMq KFVsRmmIUM8UkFW/ZDoQyZNL/qQ4Z3XCAvscBhx0ux60Elbwk1ruMgG8Og3cjRI+ jE7jF5GPRHfl6cMkIoLzpneNPdfOxwDjHebfsgJPHl3+9B+vCqQzQGhzDXkTl0qK z8exj4+fubMNgYqtTzvd6Lc7ZY7Y2Ukj97+0LivmOKdGccSQ+Sr7mbEXuSIzPyUo CZZcJJrAUCuoBIAgLwFOZH9p84M1/NTGEpK+unVGO2vIUeShcsFaBTFrmgbYsRw1 p5aCplTB -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:52 2026 by rpki-client