This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/ualECGFgELK8Ub0WIu1zKOrzdLw.roa File: ualECGFgELK8Ub0WIu1zKOrzdLw.roa (raw, json) Hash identifier: m+NzeDbR9O7unWoYNRmh2DUqdEvHCo2FWMfMNRs15bs= Subject key identifier: B9:A9:44:08:61:60:10:B2:BC:51:BD:16:22:ED:73:28:EA:F3:74:BC Certificate issuer: /CN=c34094e3236dcd1c835113791a3824da2973df9b Certificate serial: 019B78A379015EE3B30108FF91CF9C49CC1B Authority key identifier: C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/ualECGFgELK8Ub0WIu1zKOrzdLw.roa Signing time: Thu 01 Jan 2026 08:18:57 +0000 ROA not before: Thu 01 Jan 2026 08:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24812 IP address blocks: 91.196.96.0/22 maxlen: 22 91.196.96.0/24 maxlen: 24 91.196.98.0/24 maxlen: 24 91.198.249.0/24 maxlen: 24 91.206.252.0/23 maxlen: 23 176.105.192.0/22 maxlen: 22 176.105.193.0/24 maxlen: 24 176.105.194.0/23 maxlen: 23 176.105.194.0/24 maxlen: 24 176.105.196.0/24 maxlen: 24 176.105.197.0/24 maxlen: 24 176.105.198.0/24 maxlen: 24 176.105.199.0/24 maxlen: 24 176.105.200.0/22 maxlen: 22 176.105.200.0/23 maxlen: 23 176.105.204.0/23 maxlen: 23 176.105.204.0/24 maxlen: 24 176.105.206.0/23 maxlen: 23 176.105.208.0/22 maxlen: 22 176.105.208.0/24 maxlen: 24 176.105.209.0/24 maxlen: 24 176.105.210.0/23 maxlen: 23 176.105.212.0/22 maxlen: 22 176.105.212.0/23 maxlen: 23 176.105.216.0/23 maxlen: 23 176.105.218.0/23 maxlen: 23 176.105.218.0/24 maxlen: 24 176.105.220.0/24 maxlen: 24 176.105.221.0/24 maxlen: 24 176.105.222.0/24 maxlen: 24 176.105.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:79:01:5e:e3:b3:01:08:ff:91:cf:9c:49:cc:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c34094e3236dcd1c835113791a3824da2973df9b Validity Not Before: Jan 1 08:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9a94408616010b2bc51bd1622ed7328eaf374bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4d:1b:8f:37:1a:fd:2b:16:78:e3:4d:00:3e: 99:c5:d3:3f:3d:ec:8c:f2:7e:34:a1:e2:f0:25:83: 8e:72:19:05:80:6d:01:20:81:f0:04:2f:a3:88:11: bb:c4:6e:aa:cd:52:e6:5c:92:41:ea:b8:a9:d5:8b: 62:f0:4a:4f:cc:b4:96:45:12:49:74:3a:59:44:44: d5:75:25:e8:47:60:76:2e:37:1d:94:e7:25:e6:6a: 41:89:c1:18:59:12:e2:55:06:a7:35:67:e0:fd:c3: 8e:79:05:b2:f0:84:48:59:67:af:23:24:20:85:1b: 95:70:7f:46:3e:94:e9:b6:f0:3b:fd:37:1f:51:7f: bc:3a:b0:bf:d9:d1:08:92:a1:9e:a9:6b:38:76:c4: 88:03:09:5e:4a:75:20:60:08:60:b1:35:fd:e5:35: fc:0f:e9:8f:86:41:d5:bb:dd:67:10:9e:9c:8d:54: 48:cd:a6:70:76:92:08:24:74:cb:d7:07:d9:6a:42: 0a:ef:15:88:36:0e:30:e4:07:39:39:7d:58:90:8d: d2:3e:a4:40:a7:fd:f2:37:4c:40:6d:2a:bd:c9:3e: c4:fa:9a:6e:1f:46:c2:ee:f5:3a:3c:bf:29:a6:b7: 3c:b9:f0:2b:88:89:c9:2c:ad:aa:68:83:cb:b3:a8: 9a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A9:44:08:61:60:10:B2:BC:51:BD:16:22:ED:73:28:EA:F3:74:BC X509v3 Authority Key Identifier: keyid:C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/ualECGFgELK8Ub0WIu1zKOrzdLw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.196.96.0/22 91.198.249.0/24 91.206.252.0/23 176.105.192.0/19 Signature Algorithm: sha256WithRSAEncryption ba:5b:1e:be:eb:19:bd:35:f9:3f:80:d4:15:0a:be:66:d0:52: 57:c9:bd:50:02:b7:02:8f:88:9d:35:86:90:3f:ff:0a:18:5b: 2c:c7:5d:c4:a7:88:f7:30:17:9d:9c:91:d1:4f:81:7b:5e:e9: 63:b4:81:82:1d:9b:d8:72:a8:59:8d:70:1a:dd:ac:12:b0:e5: 38:cc:86:5a:87:5d:b5:0c:d6:33:77:ff:51:74:57:f3:2b:82: ff:59:7b:b1:c8:47:ef:8d:6b:5a:28:3e:a8:36:02:dc:cd:ac: 37:5c:35:3a:02:b0:fa:70:9a:54:f5:6d:3a:98:72:1d:bd:06: 7b:64:c1:b1:d3:96:9f:0d:8c:e9:16:f3:42:79:76:7b:88:78: 12:07:8e:cb:9f:57:a3:b1:32:0a:3b:8a:5a:bd:06:5c:8e:30: fd:83:98:cd:ca:49:05:17:18:a0:4a:fa:ac:f6:70:1a:fa:80: ed:21:f6:f4:36:e7:52:1b:94:cb:3f:19:fb:4c:08:37:9e:dd: 37:84:9c:fb:47:9b:2f:10:3a:9d:51:57:72:7d:08:ed:a7:00: d3:14:92:a8:3f:c0:1d:c1:75:5c:c5:9c:ec:23:c3:b9:e1:d8: ff:04:8d:89:47:82:13:0c:8a:78:a9:44:1b:3d:0e:a5:43:46: d8:0d:25:4f -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt4o3kBXuOzAQj/kc+cScwbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNDA5NGUzMjM2ZGNkMWM4MzUxMTM3OTFhMzgyNGRhMjk3 M2RmOWIwHhcNMjYwMTAxMDgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWE5NDQwODYxNjAxMGIyYmM1MWJkMTYyMmVkNzMyOGVhZjM3NGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt00bjzca/SsWeONNAD6ZxdM/PeyM 8n40oeLwJYOOchkFgG0BIIHwBC+jiBG7xG6qzVLmXJJB6rip1Yti8EpPzLSWRRJJ dDpZRETVdSXoR2B2LjcdlOcl5mpBicEYWRLiVQanNWfg/cOOeQWy8IRIWWevIyQg hRuVcH9GPpTptvA7/TcfUX+8OrC/2dEIkqGeqWs4dsSIAwleSnUgYAhgsTX95TX8 D+mPhkHVu91nEJ6cjVRIzaZwdpIIJHTL1wfZakIK7xWINg4w5Ac5OX1YkI3SPqRA p/3yN0xAbSq9yT7E+ppuH0bC7vU6PL8pprc8ufAriInJLK2qaIPLs6iayQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLmpRAhhYBCyvFG9FiLtcyjq83S8MB8GA1UdIwQY MBaAFMNAlOMjbc0cg1ETeRo4JNopc9+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzBDVTR5TnR6UnlEVVJONUdqZ2syaWx6MzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jZmIyNTEtOTIzZi00MGMxLTk4MzIt ZThhMzlkZDYwODY0LzEvdWFsRUNHRmdFTEs4VWIwV0l1MXpLT3J6ZEx3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9jZmIyNTEtOTIzZi00MGMxLTk4MzItZThhMzlkZDYwODY0 LzEvdzBDVTR5TnR6UnlEVVJONUdqZ2syaWx6MzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCW8RgAwQA W8b5AwQBW878AwQFsGnAMA0GCSqGSIb3DQEBCwUAA4IBAQC6Wx6+6xm9Nfk/gNQV Cr5m0FJXyb1QArcCj4idNYaQP/8KGFssx13Ep4j3MBednJHRT4F7XuljtIGCHZvY cqhZjXAa3awSsOU4zIZah121DNYzd/9RdFfzK4L/WXuxyEfvjWtaKD6oNgLczaw3 XDU6ArD6cJpU9W06mHIdvQZ7ZMGx05afDYzpFvNCeXZ7iHgSB47Ln1ejsTIKO4pa vQZcjjD9g5jNykkFFxigSvqs9nAa+oDtIfb0NudSG5TLPxn7TAg3nt03hJz7R5sv EDqdUVdyfQjtpwDTFJKoP8AdwXVcxZzsI8O54dj/BI2JR4ITDIp4qUQbPQ6lQ0bY DSVP -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:57 2026 by rpki-client