This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/UHhYBwfJii3naOaGRuZDntzyEGc.roa File: UHhYBwfJii3naOaGRuZDntzyEGc.roa (raw, json) Hash identifier: v1Wwj+whEEtDL3RaA1XzQqeJUUXbVn0Gf3wev1XGAMo= Subject key identifier: 50:78:58:07:07:C9:8A:2D:E7:68:E6:86:46:E6:43:9E:DC:F2:10:67 Certificate issuer: /CN=22c5a0c2ac3b1679499a96be31e43be85cf09953 Certificate serial: 019B79EC1A356D70D58615D940BBC61EADAD Authority key identifier: 22:C5:A0:C2:AC:3B:16:79:49:9A:96:BE:31:E4:3B:E8:5C:F0:99:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/UHhYBwfJii3naOaGRuZDntzyEGc.roa Signing time: Thu 01 Jan 2026 14:17:54 +0000 ROA not before: Thu 01 Jan 2026 14:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20546 IP address blocks: 193.25.224.0/24 maxlen: 24 193.25.225.0/24 maxlen: 24 193.25.226.0/24 maxlen: 24 193.25.227.0/24 maxlen: 24 193.25.228.0/24 maxlen: 24 193.25.229.0/24 maxlen: 24 193.25.230.0/24 maxlen: 24 193.25.231.0/24 maxlen: 24 193.25.232.0/24 maxlen: 24 193.25.233.0/24 maxlen: 24 193.25.234.0/24 maxlen: 24 193.25.235.0/24 maxlen: 24 193.25.236.0/24 maxlen: 24 193.25.237.0/24 maxlen: 24 193.25.238.0/24 maxlen: 24 193.25.239.0/24 maxlen: 24 2001:678:9fc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.crl rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:1a:35:6d:70:d5:86:15:d9:40:bb:c6:1e:ad:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c5a0c2ac3b1679499a96be31e43be85cf09953 Validity Not Before: Jan 1 14:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5078580707c98a2de768e68646e6439edcf21067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d2:41:66:92:fb:3b:bc:c7:3d:f2:f2:0e:35: a0:cd:3c:c0:06:e9:f7:1a:d3:71:a5:51:ce:c0:bb: 88:b5:7b:83:68:62:bc:89:92:e2:28:d5:40:4d:14: 84:f9:e0:8d:df:c3:d4:e7:1a:c0:95:e0:01:a9:8f: f4:37:ad:5e:bb:d0:f5:be:96:f7:d7:e2:7d:45:28: 97:18:78:0b:44:77:da:ff:e9:3f:ea:9a:f1:f1:4b: 86:25:cc:58:09:56:97:3d:4c:45:b6:a1:ce:3f:fe: 60:5a:45:9d:eb:a9:c3:fb:8c:e1:cb:0d:83:63:ad: 96:36:a6:41:be:e5:f2:fb:54:95:84:4a:51:f4:3f: 47:2d:92:e8:32:c7:50:f6:c7:ec:6f:0b:d6:11:8d: af:d5:cc:7f:b7:f0:ec:81:04:0b:86:d3:af:73:77: 92:e9:4d:3d:d7:4e:96:7f:c7:8f:d0:ac:db:66:a8: 47:f5:4a:58:f1:cd:bb:dd:a4:66:3c:aa:76:e1:fc: d4:03:80:58:33:37:87:70:18:99:cd:2a:7d:04:5e: ab:af:2c:3e:6d:50:64:e1:35:dd:76:c1:57:13:c0: 1f:36:c2:84:57:76:fa:61:be:b6:34:a1:fc:15:59: 0d:44:88:ff:94:21:31:b2:f4:39:ea:41:f9:7d:42: a9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:78:58:07:07:C9:8A:2D:E7:68:E6:86:46:E6:43:9E:DC:F2:10:67 X509v3 Authority Key Identifier: keyid:22:C5:A0:C2:AC:3B:16:79:49:9A:96:BE:31:E4:3B:E8:5C:F0:99:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/UHhYBwfJii3naOaGRuZDntzyEGc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.25.224.0/20 IPv6: 2001:678:9fc::/48 Signature Algorithm: sha256WithRSAEncryption 5f:a2:34:e1:c6:24:35:ca:ba:1a:c0:30:a7:3a:cf:46:35:44: 16:2d:6d:57:55:35:3f:65:0d:86:28:31:90:5d:7c:7d:62:35: 9b:e2:91:d8:55:1d:bb:de:97:3d:94:f1:ae:18:f3:33:45:b9: ab:dc:e8:5b:a5:76:4e:75:4c:1e:f7:ec:7a:dd:4a:0c:5c:25: ff:50:e2:16:3c:e4:3c:dd:f9:ca:7a:be:9f:77:b2:c5:bf:98: 2f:75:9f:17:0d:e2:ac:f1:cf:36:b2:f5:8c:87:7f:f3:d0:1e: 88:48:f7:b7:59:0e:b7:dc:b4:d3:e6:19:8b:5c:ef:43:d2:73: 52:d5:f1:44:16:07:59:f1:0e:68:50:43:2e:b0:18:01:b9:ee: 07:b2:03:d2:3e:ae:6f:5b:16:a2:2a:7c:f9:eb:9f:89:a9:b7: 52:f2:f6:be:ac:a0:a2:be:df:18:72:3d:09:14:64:00:78:79: f7:08:ff:08:1e:44:ae:62:24:d9:26:b0:cf:43:70:8c:35:43: 64:48:fe:11:e9:5d:d7:28:70:86:9e:70:e3:09:df:1e:6a:98: c2:56:52:ec:59:b9:d0:d7:32:06:30:ec:94:a9:2d:8a:f9:ad: 96:61:d4:be:54:96:92:2c:73:ab:69:88:9f:8a:8b:91:91:be: f3:2b:9e:86 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt57Bo1bXDVhhXZQLvGHq2tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzVhMGMyYWMzYjE2Nzk0OTlhOTZiZTMxZTQzYmU4NWNm MDk5NTMwHhcNMjYwMTAxMTQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDc4NTgwNzA3Yzk4YTJkZTc2OGU2ODY0NmU2NDM5ZWRjZjIxMDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotJBZpL7O7zHPfLyDjWgzTzABun3 GtNxpVHOwLuItXuDaGK8iZLiKNVATRSE+eCN38PU5xrAleABqY/0N61eu9D1vpb3 1+J9RSiXGHgLRHfa/+k/6prx8UuGJcxYCVaXPUxFtqHOP/5gWkWd66nD+4zhyw2D Y62WNqZBvuXy+1SVhEpR9D9HLZLoMsdQ9sfsbwvWEY2v1cx/t/DsgQQLhtOvc3eS 6U09106Wf8eP0KzbZqhH9UpY8c273aRmPKp24fzUA4BYMzeHcBiZzSp9BF6rryw+ bVBk4TXddsFXE8AfNsKEV3b6Yb62NKH8FVkNRIj/lCExsvQ56kH5fUKpywIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFB4WAcHyYot52jmhkbmQ57c8hBnMB8GA1UdIwQY MBaAFCLFoMKsOxZ5SZqWvjHkO+hc8JlTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNXZ3dxdzdGbmxKbXBhLU1lUTc2Rnp3bVZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lZWVkZjYtNTJjMS00YTAxLTkwOTct YTZjZjE2Yzg1Y2U0LzEvVUhoWUJ3ZkppaTNuYU9hR1J1WkRudHp5RUdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lZWVkZjYtNTJjMS00YTAxLTkwOTctYTZjZjE2Yzg1Y2U0 LzEvSXNXZ3dxdzdGbmxKbXBhLU1lUTc2Rnp3bVZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQEwRngMA8E AgACMAkDBwAgAQZ4CfwwDQYJKoZIhvcNAQELBQADggEBAF+iNOHGJDXKuhrAMKc6 z0Y1RBYtbVdVNT9lDYYoMZBdfH1iNZvikdhVHbvelz2U8a4Y8zNFuavc6Fuldk51 TB737HrdSgxcJf9Q4hY85Dzd+cp6vp93ssW/mC91nxcN4qzxzzay9YyHf/PQHohI 97dZDrfctNPmGYtc70PSc1LV8UQWB1nxDmhQQy6wGAG57geyA9I+rm9bFqIqfPnr n4mpt1Ly9r6soKK+3xhyPQkUZAB4efcI/wgeRK5iJNkmsM9DcIw1Q2RI/hHpXdco cIaecOMJ3x5qmMJWUuxZudDXMgYw7JSpLYr5rZZh1L5UlpIsc6tpiJ+Ki5GRvvMr noY= -----END CERTIFICATE-----Generated at Sun Jan 25 10:32:45 2026 by rpki-client