This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/u-R-koqCp8nRkuD0Y5r1BH5-lsw.roa File: u-R-koqCp8nRkuD0Y5r1BH5-lsw.roa (raw, json) Hash identifier: 8g2tRV4JH7xDIu/08ND0MTZQHMbLS8qbUqp1ZK+nfA4= Subject key identifier: BB:E4:7E:92:8A:82:A7:C9:D1:92:E0:F4:63:9A:F5:04:7E:7E:96:CC Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Certificate serial: 019BE0D05D9A50CA805C873271AA22AF2D6C Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/u-R-koqCp8nRkuD0Y5r1BH5-lsw.roa Signing time: Wed 21 Jan 2026 13:48:30 +0000 ROA not before: Wed 21 Jan 2026 13:48:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26548 IP address blocks: 45.136.24.0/22 maxlen: 24 45.147.232.0/22 maxlen: 24 88.218.46.0/24 maxlen: 24 89.19.34.0/24 maxlen: 24 91.132.124.0/23 maxlen: 24 93.177.94.0/23 maxlen: 24 146.19.39.0/24 maxlen: 24 193.56.20.0/24 maxlen: 24 193.202.16.0/24 maxlen: 24 194.99.25.0/24 maxlen: 24 194.110.150.0/24 maxlen: 24 194.180.232.0/23 maxlen: 24 194.180.236.0/23 maxlen: 24 212.87.216.0/24 maxlen: 24 212.87.218.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:d0:5d:9a:50:ca:80:5c:87:32:71:aa:22:af:2d:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Validity Not Before: Jan 21 13:48:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbe47e928a82a7c9d192e0f4639af5047e7e96cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:50:d2:b8:d2:89:31:9f:7b:01:38:e9:00:21: b9:c1:cc:7c:a3:eb:50:b2:37:39:50:d1:bc:e5:5b: 8a:a9:1e:e9:db:8a:61:af:d3:fc:bc:09:5f:d5:55: 1f:6a:1f:4b:3b:89:8a:9f:ef:b5:fc:ee:a9:d6:19: a6:ec:3a:a9:d1:19:07:eb:a8:e1:f4:1f:c2:b1:a0: 1f:26:dc:69:8c:17:9d:a5:6b:8c:d3:96:f4:7e:3e: 40:e1:a1:61:7c:3e:70:a4:a0:ca:a7:4a:73:87:5d: a2:00:55:d6:0f:19:d1:77:c0:b2:ac:01:a3:c9:00: 66:73:fc:64:4e:0b:81:fc:b7:31:7c:71:12:4d:b5: 18:34:7f:79:d8:b9:bc:4f:9d:f5:7d:f0:1a:79:07: d9:11:90:73:4f:00:fa:e0:fc:3e:7e:eb:27:ea:7d: 1d:bb:87:32:e5:63:a8:3f:c7:50:a4:ca:cd:95:1e: 24:50:fd:95:47:72:d5:66:be:6d:21:a0:b9:97:50: 70:92:bf:f5:44:f8:97:e2:70:5b:3e:35:60:19:f7: 7f:77:8f:c2:55:e3:31:2e:4c:76:9c:37:c4:a0:b9: fe:c8:f8:b3:e9:ff:f4:05:34:ca:46:d7:e4:46:55: 50:53:08:eb:6c:9b:0b:8f:0f:a7:f8:e1:65:b9:8c: a9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E4:7E:92:8A:82:A7:C9:D1:92:E0:F4:63:9A:F5:04:7E:7E:96:CC X509v3 Authority Key Identifier: keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/u-R-koqCp8nRkuD0Y5r1BH5-lsw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.24.0/22 45.147.232.0/22 88.218.46.0/24 89.19.34.0/24 91.132.124.0/23 93.177.94.0/23 146.19.39.0/24 193.56.20.0/24 193.202.16.0/24 194.99.25.0/24 194.110.150.0/24 194.180.232.0/23 194.180.236.0/23 212.87.216.0/24 212.87.218.0/23 Signature Algorithm: sha256WithRSAEncryption 42:f7:06:c2:5b:43:ce:e0:87:f8:2c:f0:d4:07:86:5a:dd:59: 26:af:b7:e1:7a:cd:38:99:65:5f:cc:1b:22:4a:2a:19:d3:89: 76:21:87:45:98:2e:6b:c8:30:e8:22:d6:6d:32:0b:b9:1f:00: e3:2d:d6:43:49:66:0c:bf:8e:00:02:5d:1b:66:12:44:03:af: 3c:66:c4:b2:3a:ee:b5:88:9b:0f:69:10:62:e1:a5:80:6f:75: 26:a3:7f:4b:a8:0f:07:d3:c0:d2:d1:d0:6c:a0:94:d6:32:40: a8:00:b7:dd:2e:22:56:cf:ed:8d:87:fc:84:69:91:62:36:79: 55:3d:5f:0a:1c:b4:f9:91:05:dc:8a:a2:a2:27:5d:74:19:d8: b3:cb:a2:60:aa:1d:2a:f9:94:46:f0:fe:3a:12:71:4d:b8:dd: 53:2e:83:61:9b:13:80:d6:ab:5a:e8:e1:91:0e:ff:96:8a:56: 87:f7:50:dc:77:2b:e1:b5:34:bf:d1:b5:04:77:18:1e:a9:0d: 91:2c:4a:ba:80:2d:84:57:7f:b1:69:07:e5:4d:c6:25:7f:f4: 79:4c:e6:44:e9:64:5f:23:56:54:de:9d:bd:76:e0:32:f0:2f: bc:ac:66:3a:a1:71:fb:7d:e6:6a:cd:a6:79:65:91:ca:96:3f: 16:7a:64:90 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZvg0F2aUMqAXIcycaoiry1sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2 OWExZmQwHhcNMjYwMTIxMTM0ODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmU0N2U5MjhhODJhN2M5ZDE5MmUwZjQ2MzlhZjUwNDdlN2U5NmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1DSuNKJMZ97ATjpACG5wcx8o+tQ sjc5UNG85VuKqR7p24phr9P8vAlf1VUfah9LO4mKn++1/O6p1hmm7Dqp0RkH66jh 9B/CsaAfJtxpjBedpWuM05b0fj5A4aFhfD5wpKDKp0pzh12iAFXWDxnRd8CyrAGj yQBmc/xkTguB/LcxfHESTbUYNH952Lm8T531ffAaeQfZEZBzTwD64Pw+fusn6n0d u4cy5WOoP8dQpMrNlR4kUP2VR3LVZr5tIaC5l1Bwkr/1RPiX4nBbPjVgGfd/d4/C VeMxLkx2nDfEoLn+yPiz6f/0BTTKRtfkRlVQUwjrbJsLjw+n+OFluYypIQIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFLvkfpKKgqfJ0ZLg9GOa9QR+fpbMMB8GA1UdIwQY MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et OTk0ODA2ZjA4MWYwLzEvdS1SLWtvcUNwOG5Sa3VEMFk1cjFCSDUtbHN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQCLYgYAwQC LZPoAwQAWNouAwQAWRMiAwQBW4R8AwQBXbFeAwQAkhMnAwQAwTgUAwQAwcoQAwQA wmMZAwQAwm6WAwQBwrToAwQBwrTsAwQA1FfYAwQB1FfaMA0GCSqGSIb3DQEBCwUA A4IBAQBC9wbCW0PO4If4LPDUB4Za3Vkmr7fhes04mWVfzBsiSioZ04l2IYdFmC5r yDDoItZtMgu5HwDjLdZDSWYMv44AAl0bZhJEA688ZsSyOu61iJsPaRBi4aWAb3Um o39LqA8H08DS0dBsoJTWMkCoALfdLiJWz+2Nh/yEaZFiNnlVPV8KHLT5kQXciqKi J110Gdizy6Jgqh0q+ZRG8P46EnFNuN1TLoNhmxOA1qta6OGRDv+WilaH91Dcdyvh tTS/0bUEdxgeqQ2RLEq6gC2EV3+xaQflTcYlf/R5TOZE6WRfI1ZU3p29duAy8C+8 rGY6oXH7feZqzaZ5ZZHKlj8WemSQ -----END CERTIFICATE-----Generated at Sun Jan 25 08:49:30 2026 by rpki-client