This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/UT5KF9vV1JL4qQULVX8xBydW-Ws.roa File: UT5KF9vV1JL4qQULVX8xBydW-Ws.roa (raw, json) Hash identifier: CZXMjETLne5/ANsavo0h/DI6L9lViMMTJK0r4r9Tp+I= Subject key identifier: 51:3E:4A:17:DB:D5:D4:92:F8:A9:05:0B:55:7F:31:07:27:56:F9:6B Certificate issuer: /CN=24ba4f52ac1be0755d34bc5483c061bdf293447e Certificate serial: 019B7D5CF01EED314FBEE50B84BE803BE0FD Authority key identifier: 24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/UT5KF9vV1JL4qQULVX8xBydW-Ws.roa Signing time: Fri 02 Jan 2026 06:20:01 +0000 ROA not before: Fri 02 Jan 2026 06:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8781 IP address blocks: 37.208.128.0/17 maxlen: 24 37.210.0.0/15 maxlen: 24 37.211.96.0/22 maxlen: 24 37.211.100.0/22 maxlen: 24 37.211.104.0/22 maxlen: 24 37.211.108.0/22 maxlen: 24 37.211.112.0/22 maxlen: 24 37.211.116.0/22 maxlen: 24 37.211.120.0/22 maxlen: 24 37.211.124.0/22 maxlen: 24 37.211.192.0/20 maxlen: 24 37.211.208.0/22 maxlen: 24 37.211.212.0/22 maxlen: 24 37.211.216.0/22 maxlen: 24 37.211.224.0/22 maxlen: 24 37.211.228.0/22 maxlen: 24 37.211.232.0/22 maxlen: 24 37.211.236.0/22 maxlen: 24 37.211.240.0/20 maxlen: 24 78.100.0.0/15 maxlen: 24 78.100.2.0/24 maxlen: 24 78.100.3.0/24 maxlen: 24 78.100.6.0/24 maxlen: 24 78.100.16.0/20 maxlen: 20 78.100.28.0/24 maxlen: 24 78.100.29.0/24 maxlen: 24 78.100.32.0/20 maxlen: 24 78.100.32.0/24 maxlen: 24 78.100.48.0/20 maxlen: 24 78.100.48.0/24 maxlen: 24 78.100.53.0/24 maxlen: 24 78.100.59.0/24 maxlen: 24 78.100.64.0/20 maxlen: 24 78.100.80.0/20 maxlen: 24 78.100.94.0/24 maxlen: 24 78.100.112.0/20 maxlen: 24 78.100.128.0/19 maxlen: 24 78.100.155.0/24 maxlen: 24 78.101.0.0/22 maxlen: 24 78.101.4.0/22 maxlen: 22 78.101.8.0/22 maxlen: 22 78.101.12.0/22 maxlen: 22 78.101.32.0/22 maxlen: 22 78.101.36.0/22 maxlen: 22 78.101.40.0/22 maxlen: 22 78.101.44.0/22 maxlen: 22 78.101.48.0/22 maxlen: 22 78.101.52.0/22 maxlen: 22 78.101.56.0/22 maxlen: 22 78.101.60.0/22 maxlen: 22 82.148.96.0/19 maxlen: 24 82.148.96.0/24 maxlen: 24 82.148.97.0/24 maxlen: 24 82.148.98.0/24 maxlen: 24 82.148.99.0/24 maxlen: 24 82.148.101.0/24 maxlen: 24 82.148.102.0/24 maxlen: 24 82.148.105.0/24 maxlen: 24 82.148.106.0/24 maxlen: 24 82.148.109.0/24 maxlen: 24 82.148.110.0/24 maxlen: 24 82.148.113.0/24 maxlen: 24 82.148.117.0/24 maxlen: 24 82.148.120.0/24 maxlen: 24 82.148.124.0/24 maxlen: 24 86.62.192.0/18 maxlen: 24 86.62.192.0/22 maxlen: 22 86.62.196.0/22 maxlen: 22 86.62.200.0/22 maxlen: 22 86.62.204.0/22 maxlen: 22 86.62.241.0/24 maxlen: 24 89.211.0.0/16 maxlen: 24 89.211.3.0/24 maxlen: 24 89.211.4.0/24 maxlen: 24 89.211.5.0/24 maxlen: 24 89.211.6.0/24 maxlen: 24 89.211.7.0/24 maxlen: 24 89.211.12.0/24 maxlen: 24 89.211.13.0/24 maxlen: 24 89.211.16.0/21 maxlen: 24 89.211.24.0/21 maxlen: 24 89.211.32.0/20 maxlen: 24 89.211.34.0/24 maxlen: 24 89.211.48.0/20 maxlen: 24 176.202.0.0/15 maxlen: 24 176.202.240.0/20 maxlen: 24 176.203.0.0/20 maxlen: 20 176.203.16.0/20 maxlen: 20 176.203.32.0/20 maxlen: 20 176.203.48.0/20 maxlen: 20 176.203.64.0/20 maxlen: 20 176.203.80.0/20 maxlen: 20 176.203.96.0/20 maxlen: 20 176.203.112.0/20 maxlen: 20 176.203.128.0/20 maxlen: 20 176.203.144.0/20 maxlen: 20 176.203.160.0/20 maxlen: 20 176.203.176.0/20 maxlen: 20 176.203.192.0/20 maxlen: 20 176.203.208.0/20 maxlen: 20 176.203.224.0/20 maxlen: 20 176.203.240.0/20 maxlen: 20 178.152.0.0/15 maxlen: 24 178.152.32.0/20 maxlen: 20 178.152.64.0/20 maxlen: 20 178.152.128.0/22 maxlen: 22 178.152.132.0/22 maxlen: 22 178.152.136.0/22 maxlen: 22 178.152.140.0/22 maxlen: 22 178.152.144.0/20 maxlen: 20 178.152.160.0/22 maxlen: 22 178.152.164.0/22 maxlen: 22 178.152.168.0/22 maxlen: 22 178.152.172.0/22 maxlen: 22 178.152.176.0/20 maxlen: 20 178.152.192.0/22 maxlen: 22 178.152.196.0/22 maxlen: 22 178.152.200.0/22 maxlen: 22 178.152.204.0/22 maxlen: 22 178.152.208.0/20 maxlen: 20 178.152.224.0/22 maxlen: 22 178.152.228.0/22 maxlen: 22 178.152.232.0/22 maxlen: 22 178.152.236.0/22 maxlen: 22 178.152.240.0/20 maxlen: 20 178.153.64.0/20 maxlen: 20 178.153.128.0/20 maxlen: 20 178.153.144.0/22 maxlen: 22 178.153.148.0/22 maxlen: 22 178.153.152.0/22 maxlen: 22 178.153.156.0/22 maxlen: 22 185.96.224.0/22 maxlen: 24 212.77.192.0/19 maxlen: 24 212.77.192.0/24 maxlen: 24 212.77.199.0/24 maxlen: 24 212.77.202.0/24 maxlen: 24 212.77.204.0/24 maxlen: 24 212.77.207.0/24 maxlen: 24 212.77.209.0/24 maxlen: 24 212.77.210.0/24 maxlen: 24 212.77.211.0/24 maxlen: 24 212.77.217.0/24 maxlen: 24 212.77.218.0/24 maxlen: 24 212.77.220.0/24 maxlen: 24 212.77.221.0/24 maxlen: 24 213.130.96.0/19 maxlen: 24 213.130.112.0/24 maxlen: 24 213.130.113.0/24 maxlen: 24 213.130.119.0/24 maxlen: 24 213.130.121.0/24 maxlen: 24 2001:1a10::/29 maxlen: 48 2001:1a10::/32 maxlen: 64 2001:1a10::/40 maxlen: 48 2001:1a10:1::/48 maxlen: 48 2001:1a10:c1::/48 maxlen: 48 2001:1a10:cd::/48 maxlen: 64 2001:1a10:100::/40 maxlen: 40 2001:1a10:c00::/40 maxlen: 40 2001:1a10:f00::/40 maxlen: 40 2001:1a10:4000::/36 maxlen: 36 2001:1a11::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f0:1e:ed:31:4f:be:e5:0b:84:be:80:3b:e0:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24ba4f52ac1be0755d34bc5483c061bdf293447e Validity Not Before: Jan 2 06:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=513e4a17dbd5d492f8a9050b557f31072756f96b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:67:a1:e3:45:81:bc:bd:f3:e8:6e:77:5d:7f: cd:16:9a:ba:46:fb:53:b1:34:94:b7:d1:e7:f5:e5: 67:3d:8c:fe:d0:78:79:4f:61:38:c1:72:07:44:6b: 0d:13:d9:bf:03:3f:45:ff:7b:05:6c:cd:da:a9:1b: b2:17:c6:13:f3:3c:ce:6b:7b:a2:81:b4:cc:17:91: 75:58:cf:ce:b2:26:e6:12:c9:46:8e:eb:cf:cf:5d: f7:8e:3d:90:8d:e1:81:b0:45:c5:ea:16:a8:79:40: e8:f3:a8:5f:bf:b8:c2:8c:e8:46:9f:38:e0:64:1f: ea:95:e6:1f:d6:d6:8c:e4:05:f7:d7:c5:fc:a1:1a: e7:a4:81:58:8c:4f:7d:22:d8:8c:0a:9c:dd:22:7c: 37:d1:72:0b:c8:12:8e:5d:4e:2e:8d:79:92:b7:49: 00:ab:e6:5f:4b:5f:44:65:d5:75:60:af:40:98:19: 23:09:54:e2:fc:45:b2:c2:e6:e2:9e:45:2b:af:a1: c9:5b:39:bd:56:27:62:7e:4b:57:19:d2:9e:99:29: 40:8f:e6:01:6a:b8:62:56:6a:e1:90:df:0e:9c:94: 98:9c:3f:db:1a:d8:55:37:cb:66:b1:e1:37:6f:47: 5b:27:8b:9a:1b:73:93:c7:0a:aa:26:d3:0b:63:d0: b1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:3E:4A:17:DB:D5:D4:92:F8:A9:05:0B:55:7F:31:07:27:56:F9:6B X509v3 Authority Key Identifier: keyid:24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/UT5KF9vV1JL4qQULVX8xBydW-Ws.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.208.128.0/17 37.210.0.0/15 78.100.0.0/15 82.148.96.0/19 86.62.192.0/18 89.211.0.0/16 176.202.0.0/15 178.152.0.0/15 185.96.224.0/22 212.77.192.0/19 213.130.96.0/19 IPv6: 2001:1a10::/29 Signature Algorithm: sha256WithRSAEncryption 5b:ee:e0:27:b1:79:4c:23:ac:c6:82:05:94:f9:61:be:4e:47: 18:20:a6:8f:84:02:1c:00:55:ed:97:db:6e:26:c0:e6:ec:72: eb:64:4b:13:06:68:b5:c8:4a:70:c6:1a:28:0b:10:9b:f4:e2: 87:54:ba:04:87:bd:27:51:53:5b:99:26:3c:ce:e5:b0:09:8c: 81:18:ce:dd:63:b5:d3:e4:50:f0:a4:0c:62:04:11:21:9d:a1: 4b:e0:8a:c6:fd:73:1e:ae:f0:c9:32:eb:ad:9d:f0:72:aa:1c: 3a:50:44:d2:7f:0d:74:8c:09:a5:55:c2:6d:86:b3:96:c3:ac: fe:5a:3f:65:75:66:5d:00:4f:91:a6:4f:f0:b9:e0:cf:fe:43: b3:04:25:7e:57:be:2e:00:c8:fd:3a:1e:95:f3:94:d6:3b:a2: f6:8b:90:76:af:60:46:48:d8:4b:c0:f5:02:f7:a6:c2:e1:57: e6:51:ca:5a:52:ae:19:60:5d:d8:37:22:3b:2c:af:b7:d3:66: 62:bd:b4:ce:a9:51:69:89:c1:52:ab:89:57:88:95:c4:fc:37: 00:fe:a4:d3:ba:8a:86:84:16:b0:ab:0b:cb:c4:6b:f4:67:91: ec:57:a0:28:e8:76:d5:f4:74:57:5f:ea:87:64:c2:0f:c4:d7: 4d:d3:35:11 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZt9XPAe7TFPvuULhL6AO+D9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YmE0ZjUyYWMxYmUwNzU1ZDM0YmM1NDgzYzA2MWJkZjI5 MzQ0N2UwHhcNMjYwMTAyMDYyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTNlNGExN2RiZDVkNDkyZjhhOTA1MGI1NTdmMzEwNzI3NTZmOTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2meh40WBvL3z6G53XX/NFpq6RvtT sTSUt9Hn9eVnPYz+0Hh5T2E4wXIHRGsNE9m/Az9F/3sFbM3aqRuyF8YT8zzOa3ui gbTMF5F1WM/OsibmEslGjuvPz133jj2QjeGBsEXF6haoeUDo86hfv7jCjOhGnzjg ZB/qleYf1taM5AX318X8oRrnpIFYjE99ItiMCpzdInw30XILyBKOXU4ujXmSt0kA q+ZfS19EZdV1YK9AmBkjCVTi/EWywubinkUrr6HJWzm9VidifktXGdKemSlAj+YB arhiVmrhkN8OnJSYnD/bGthVN8tmseE3b0dbJ4uaG3OTxwqqJtMLY9CxnQIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFFE+Shfb1dSS+KkFC1V/MQcnVvlrMB8GA1UdIwQY MBaAFCS6T1KsG+B1XTS8VIPAYb3yk0R+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkxwUFVxd2I0SFZkTkx4VWc4Qmh2ZktUUkg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zOTc1NDYtZGM3Yi00NjYwLThhNTEt YmY1OWZjMWNiMjZkLzEvVVQ1S0Y5dlYxSkw0cVFVTFZYOHhCeWRXLVdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8zOTc1NDYtZGM3Yi00NjYwLThhNTEtYmY1OWZjMWNiMjZk LzEvSkxwUFVxd2I0SFZkTkx4VWc4Qmh2ZktUUkg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBDBAIAATA9AwQHJdCAAwMB JdIDAwFOZAMEBVKUYAMEBlY+wAMDAFnTAwMBsMoDAwGymAMEArlg4AMEBdRNwAME BdWCYDANBAIAAjAHAwUDIAEaEDANBgkqhkiG9w0BAQsFAAOCAQEAW+7gJ7F5TCOs xoIFlPlhvk5HGCCmj4QCHABV7ZfbbibA5uxy62RLEwZotchKcMYaKAsQm/Tih1S6 BIe9J1FTW5kmPM7lsAmMgRjO3WO10+RQ8KQMYgQRIZ2hS+CKxv1zHq7wyTLrrZ3w cqocOlBE0n8NdIwJpVXCbYazlsOs/lo/ZXVmXQBPkaZP8Lngz/5DswQlfle+LgDI /ToelfOU1jui9ouQdq9gRkjYS8D1AvemwuFX5lHKWlKuGWBd2DciOyyvt9NmYr20 zqlRaYnBUquJV4iVxPw3AP6k07qKhoQWsKsLy8Rr9GeR7FegKOh21fR0V1/qh2TC D8TXTdM1EQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:44 2026 by rpki-client