This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/UX6g7KL9WRWy9Rrda_z2jmHwIg0.roa File: UX6g7KL9WRWy9Rrda_z2jmHwIg0.roa (raw, json) Hash identifier: NgIQIWjEkGD0w0vEE9BTQb05Jn1iZvBqKIdoPQLt1R0= Subject key identifier: 51:7E:A0:EC:A2:FD:59:15:B2:F5:1A:DD:6B:FC:F6:8E:61:F0:22:0D Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea Certificate serial: 019B7C129EA196735DCA0FFBF6F5145F7B72 Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/UX6g7KL9WRWy9Rrda_z2jmHwIg0.roa Signing time: Fri 02 Jan 2026 00:19:13 +0000 ROA not before: Fri 02 Jan 2026 00:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43811 IP address blocks: 31.193.192.0/24 maxlen: 24 31.193.193.0/24 maxlen: 24 31.193.194.0/24 maxlen: 24 31.193.195.0/24 maxlen: 24 31.193.196.0/24 maxlen: 24 31.193.197.0/24 maxlen: 24 31.193.198.0/24 maxlen: 24 31.193.199.0/24 maxlen: 24 81.7.105.0/24 maxlen: 24 81.7.106.0/24 maxlen: 24 81.7.107.0/24 maxlen: 24 81.7.114.0/24 maxlen: 24 81.7.115.0/24 maxlen: 24 82.135.132.0/24 maxlen: 24 82.135.133.0/24 maxlen: 24 82.135.217.0/24 maxlen: 24 82.135.218.0/24 maxlen: 24 85.206.140.0/24 maxlen: 24 85.206.141.0/24 maxlen: 24 85.206.142.0/24 maxlen: 24 85.206.143.0/24 maxlen: 24 85.206.148.0/22 maxlen: 22 88.118.143.0/24 maxlen: 24 88.119.180.0/24 maxlen: 24 88.119.181.0/24 maxlen: 24 88.119.220.0/24 maxlen: 24 88.119.221.0/24 maxlen: 24 88.119.222.0/24 maxlen: 24 88.119.246.0/24 maxlen: 24 92.61.32.0/20 maxlen: 32 185.3.228.0/24 maxlen: 24 185.3.229.0/24 maxlen: 24 185.3.230.0/24 maxlen: 24 185.3.231.0/24 maxlen: 24 193.105.146.0/24 maxlen: 24 193.200.124.0/24 maxlen: 24 193.200.125.0/24 maxlen: 24 194.176.32.0/24 maxlen: 24 194.176.33.0/24 maxlen: 24 194.176.35.0/24 maxlen: 24 194.176.36.0/24 maxlen: 24 194.176.54.0/23 maxlen: 23 195.12.180.0/24 maxlen: 24 212.47.123.0/24 maxlen: 24 2a00:1eb8:c004::/48 maxlen: 48 2a02:118:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:9e:a1:96:73:5d:ca:0f:fb:f6:f5:14:5f:7b:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea Validity Not Before: Jan 2 00:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=517ea0eca2fd5915b2f51add6bfcf68e61f0220d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:38:fc:6b:8e:9c:d4:68:b6:40:ac:d3:31:82: 6d:16:fd:57:f9:82:d7:9f:0a:29:4b:8e:5c:e8:6f: dc:de:2b:6c:81:17:98:ad:ae:ef:32:75:c7:1b:7e: 7b:b8:28:03:8d:c8:36:9a:00:e6:24:89:d2:0c:c1: cf:bb:df:ee:b5:51:40:7a:3d:56:9f:b5:98:18:5d: 60:03:22:c3:b7:96:33:ac:80:d8:c4:6f:b8:98:26: 29:2a:82:2b:43:a6:99:b3:34:74:13:f7:5f:0a:3e: f0:76:ef:3c:d0:5c:7a:01:ae:b5:d3:74:bf:9b:11: d2:5b:42:8e:79:9d:59:6a:20:3e:bb:5b:ac:44:74: a4:70:c4:f0:a9:9b:02:ce:b1:97:09:2a:9b:e8:96: 96:f8:91:c2:d1:e2:55:81:52:ac:61:24:07:9e:93: d8:b3:26:b3:2a:f0:a6:a7:97:8c:0a:be:8d:43:c6: 81:81:df:01:04:80:67:ab:3c:43:a2:dc:04:a3:61: 4e:f8:1d:0d:4a:f2:bd:be:54:d8:6c:d3:52:79:d4: 0a:fb:1c:54:18:af:f1:88:64:12:25:1d:4f:9f:8d: 0f:79:c1:58:ae:6d:6f:c9:93:0b:9b:73:dd:1b:4a: 1b:f9:7a:ac:0e:3a:dc:98:eb:4d:b4:60:2e:d7:67: 21:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:7E:A0:EC:A2:FD:59:15:B2:F5:1A:DD:6B:FC:F6:8E:61:F0:22:0D X509v3 Authority Key Identifier: keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/UX6g7KL9WRWy9Rrda_z2jmHwIg0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.193.192.0/21 81.7.105.0-81.7.107.255 81.7.114.0/23 82.135.132.0/23 82.135.217.0-82.135.218.255 85.206.140.0/22 85.206.148.0/22 88.118.143.0/24 88.119.180.0/23 88.119.220.0-88.119.222.255 88.119.246.0/24 92.61.32.0/20 185.3.228.0/22 193.105.146.0/24 193.200.124.0/23 194.176.32.0/23 194.176.35.0-194.176.36.255 194.176.54.0/23 195.12.180.0/24 212.47.123.0/24 IPv6: 2a00:1eb8:c004::/48 2a02:118:2::/48 Signature Algorithm: sha256WithRSAEncryption 02:70:6f:7e:13:7a:0a:b6:8d:ff:a7:69:51:b7:a5:c1:25:d1: 77:2d:f3:54:4c:11:e8:9b:91:ff:9e:57:a6:ca:17:71:e0:40: 1b:28:bf:6c:cd:7c:e7:4a:da:a3:ed:1d:fa:1e:ab:c0:88:0e: e6:17:ee:4e:61:d1:05:9b:77:cb:1d:42:3f:9b:ed:f1:c9:bc: 29:94:85:c1:6a:8e:44:8b:2f:fa:2c:2f:4f:56:9a:c7:f4:9e: e1:88:7f:f5:31:f7:3e:42:7a:fb:9b:21:11:fa:7d:68:73:a5: 85:d6:e7:4f:34:f6:94:6d:37:e4:cd:d3:30:08:51:e0:9c:6f: b9:f7:63:c3:cb:b6:36:03:9a:40:de:ec:00:a7:27:80:b8:bf: 00:07:cb:c2:21:07:74:cf:20:8d:17:6a:41:5c:31:17:2f:0e: aa:45:b4:13:46:fc:06:24:d9:a0:0d:04:7f:fa:a1:a6:30:8a: 80:f2:f2:f8:9c:b7:1e:6c:89:fc:f1:9b:6e:2d:fd:03:f4:d7: 68:0e:8e:2d:7e:31:f6:f3:bd:b6:69:f5:9f:fd:f0:85:ae:d7: 64:12:06:8d:ed:c4:bf:f9:a1:4e:ef:67:11:75:9f:5d:e0:33: cd:a0:d4:6d:b6:5e:6e:66:d1:22:81:39:40:8e:32:d3:a1:1c: 55:21:8b:f6 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt8Ep6hlnNdyg/79vUUX3tyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiOTg3MjQ0NjExYjUyMzA1MzY3NDRiNmE4OWYwNDRmMzJm NDYyZWEwHhcNMjYwMTAyMDAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTdlYTBlY2EyZmQ1OTE1YjJmNTFhZGQ2YmZjZjY4ZTYxZjAyMjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzj8a46c1Gi2QKzTMYJtFv1X+YLX nwopS45c6G/c3itsgReYra7vMnXHG357uCgDjcg2mgDmJInSDMHPu9/utVFAej1W n7WYGF1gAyLDt5YzrIDYxG+4mCYpKoIrQ6aZszR0E/dfCj7wdu880Fx6Aa6103S/ mxHSW0KOeZ1ZaiA+u1usRHSkcMTwqZsCzrGXCSqb6JaW+JHC0eJVgVKsYSQHnpPY syazKvCmp5eMCr6NQ8aBgd8BBIBnqzxDotwEo2FO+B0NSvK9vlTYbNNSedQK+xxU GK/xiGQSJR1Pn40PecFYrm1vyZMLm3PdG0ob+XqsDjrcmOtNtGAu12chswIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFFF+oOyi/VkVsvUa3Wv89o5h8CINMB8GA1UdIwQY MBaAFPuYckRhG1IwU2dEtqifBE8y9GLqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS01aHlSR0ViVWpCVFowUzJxSjhFVHpMMFl1by5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAw LWJlNTgzMmQ1ZjdhYS8xL1VYNmc3S0w5V1JXeTlScmRhX3oyam1Id0lnMC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAwLWJlNTgzMmQ1Zjdh YS8xLzEtNWh5UkdFYlVqQlRaMFMycUo4RVR6TDBZdW8uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwgc8GCCsGAQUFBwEHAQH/BIG/MIG8MIGfBAIAATCBmAME Ax/BwDAMAwQAUQdpAwQCUQdoAwQBUQdyAwQBUoeEMAwDBABSh9kDBABSh9oDBAJV zowDBAJVzpQDBABYdo8DBAFYd7QwDAMEAlh33AMEAFh33gMEAFh39gMEBFw9IAME ArkD5AMEAMFpkgMEAcHIfAMEAcKwIDAMAwQAwrAjAwQAwrAkAwQBwrA2AwQAwwy0 AwQA1C97MBgEAgACMBIDBwAqAB64wAQDBwAqAgEYAAIwDQYJKoZIhvcNAQELBQAD ggEBAAJwb34Tegq2jf+naVG3pcEl0Xct81RMEeibkf+eV6bKF3HgQBsov2zNfOdK 2qPtHfoeq8CIDuYX7k5h0QWbd8sdQj+b7fHJvCmUhcFqjkSLL/osL09Wmsf0nuGI f/Ux9z5CevubIRH6fWhzpYXW50809pRtN+TN0zAIUeCcb7n3Y8PLtjYDmkDe7ACn J4C4vwAHy8IhB3TPII0XakFcMRcvDqpFtBNG/AYk2aANBH/6oaYwioDy8victx5s ifzxm24t/QP012gOji1+MfbzvbZp9Z/98IWu12QSBo3txL/5oU7vZxF1n13gM82g 1G22Xm5m0SKBOUCOMtOhHFUhi/Y= -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:05 2026 by rpki-client