This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/uKkVWLDRYXWhA8sUpH0phWL72us.roa File: uKkVWLDRYXWhA8sUpH0phWL72us.roa (raw, json) Hash identifier: v5Do4C/r5p09LluvO5T2+dRXbWmKv56RqUrsJhNmJL0= Subject key identifier: B8:A9:15:58:B0:D1:61:75:A1:03:CB:14:A4:7D:29:85:62:FB:DA:EB Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Certificate serial: 019B7E38E0981FEDD8EE223F0E136F254A52 Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/uKkVWLDRYXWhA8sUpH0phWL72us.roa Signing time: Fri 02 Jan 2026 10:20:15 +0000 ROA not before: Fri 02 Jan 2026 10:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397236 IP address blocks: 37.209.192.0/24 maxlen: 24 37.209.194.0/24 maxlen: 24 37.209.196.0/24 maxlen: 24 37.209.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e0:98:1f:ed:d8:ee:22:3f:0e:13:6f:25:4a:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Validity Not Before: Jan 2 10:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8a91558b0d16175a103cb14a47d298562fbdaeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4b:a7:30:28:15:bb:9e:06:24:9c:e6:8e:d5: c9:c9:46:e7:55:db:0b:75:b3:5c:3c:ca:a3:7b:98: d4:0a:84:4a:71:59:33:34:92:02:66:95:4f:31:b7: 8c:4c:29:6a:71:19:2d:bd:9b:55:27:16:3e:b0:f1: 80:d7:ce:4a:9d:8c:fd:c9:1d:f5:ed:04:c5:b9:9c: ba:27:91:64:7c:30:39:47:6b:49:44:45:5f:06:5b: 6f:0d:1d:64:37:e4:c3:00:68:48:58:dd:86:bf:97: 8d:0c:ce:86:5a:40:8e:1c:80:cb:5d:32:14:b5:43: ab:71:7b:f7:0d:f7:d3:c7:19:d8:4c:d5:37:77:3d: b0:70:fd:b5:9f:70:4f:5f:50:07:9d:2e:32:7b:ca: 53:98:ee:9f:22:e3:3e:bb:6c:bf:ee:5a:04:96:b7: a6:ad:00:e9:ef:06:39:16:66:ad:9d:a6:15:19:5d: be:7a:aa:2c:e2:34:1e:db:31:45:47:c9:fd:fd:0d: b9:66:9d:3c:ec:df:79:2e:20:3e:ad:02:6f:6f:3b: ca:84:c4:5d:01:20:65:a5:72:90:b7:e4:5c:d8:22: 3a:00:b4:8a:c9:1f:07:aa:61:f8:1a:19:f5:31:99: fd:1f:2f:d8:0c:b7:e5:54:81:28:d6:82:78:93:61: bc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A9:15:58:B0:D1:61:75:A1:03:CB:14:A4:7D:29:85:62:FB:DA:EB X509v3 Authority Key Identifier: keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/uKkVWLDRYXWhA8sUpH0phWL72us.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.209.192.0/24 37.209.194.0/24 37.209.196.0/24 37.209.198.0/24 Signature Algorithm: sha256WithRSAEncryption 70:8e:17:2e:d7:8d:db:38:d7:3c:3d:9a:e8:c2:54:89:00:da: e0:cf:9f:d6:0f:64:f2:97:c5:a1:41:fc:54:10:19:58:e3:90: ba:25:3e:03:b2:aa:f4:26:19:96:7a:61:cb:79:23:61:1f:2e: 0d:e9:7e:b4:b0:83:d3:50:60:4e:ef:54:97:f4:7f:29:48:cc: d0:c7:09:d8:73:41:73:a5:67:5c:a2:81:e8:61:c3:be:d8:a5: 95:69:ba:4a:7e:4e:5e:f5:14:08:df:0f:1e:78:45:b1:ed:af: db:7b:6c:c5:3f:f3:55:bf:45:83:49:e0:b3:d4:3f:25:bd:e3: d9:60:8c:21:e5:a3:77:dc:4e:f8:00:d6:21:0a:e6:07:f7:63: c2:21:22:1c:2f:89:d6:ff:cc:6d:15:b0:69:f3:17:d5:22:84: a1:99:e2:e9:72:80:64:9b:56:a2:a3:c7:5d:8e:3a:30:8a:d6: f0:d1:d9:99:af:39:59:32:7a:c9:ad:e4:69:29:37:be:ea:52: 96:5e:b6:18:dd:b5:b4:5b:d7:21:bf:5c:0e:eb:30:75:13:67: 75:77:86:8e:54:92:e5:c2:e5:28:26:80:b8:7d:d2:b0:4d:af: ac:59:d1:5f:8e:91:9d:db:2d:39:59:86:1d:61:8d:4c:13:6c: cc:16:c6:be -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+OOCYH+3Y7iI/DhNvJUpSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj OGJmMmMwHhcNMjYwMTAyMTAyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGE5MTU1OGIwZDE2MTc1YTEwM2NiMTRhNDdkMjk4NTYyZmJkYWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EunMCgVu54GJJzmjtXJyUbnVdsL dbNcPMqje5jUCoRKcVkzNJICZpVPMbeMTClqcRktvZtVJxY+sPGA185KnYz9yR31 7QTFuZy6J5FkfDA5R2tJREVfBltvDR1kN+TDAGhIWN2Gv5eNDM6GWkCOHIDLXTIU tUOrcXv3DffTxxnYTNU3dz2wcP21n3BPX1AHnS4ye8pTmO6fIuM+u2y/7loElrem rQDp7wY5FmatnaYVGV2+eqos4jQe2zFFR8n9/Q25Zp087N95LiA+rQJvbzvKhMRd ASBlpXKQt+Rc2CI6ALSKyR8HqmH4Ghn1MZn9Hy/YDLflVIEo1oJ4k2G8awIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLipFViw0WF1oQPLFKR9KYVi+9rrMB8GA1UdIwQY MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt NDE2Zjg1ZWUyMzdiLzEvdUtrVldMRFJZWFdoQThzVXBIMHBoV0w3MnVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJdHAAwQA JdHCAwQAJdHEAwQAJdHGMA0GCSqGSIb3DQEBCwUAA4IBAQBwjhcu143bONc8PZro wlSJANrgz5/WD2Tyl8WhQfxUEBlY45C6JT4Dsqr0JhmWemHLeSNhHy4N6X60sIPT UGBO71SX9H8pSMzQxwnYc0FzpWdcooHoYcO+2KWVabpKfk5e9RQI3w8eeEWx7a/b e2zFP/NVv0WDSeCz1D8lvePZYIwh5aN33E74ANYhCuYH92PCISIcL4nW/8xtFbBp 8xfVIoShmeLpcoBkm1aio8ddjjowitbw0dmZrzlZMnrJreRpKTe+6lKWXrYY3bW0 W9chv1wO6zB1E2d1d4aOVJLlwuUoJoC4fdKwTa+sWdFfjpGd2y05WYYdYY1ME2zM Fsa+ -----END CERTIFICATE-----Generated at Sun Jan 25 15:07:27 2026 by rpki-client