This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/UReyeEdRYk-K5jTcIl8Ooq7M3tc.roa File: UReyeEdRYk-K5jTcIl8Ooq7M3tc.roa (raw, json) Hash identifier: RUl0rxhnXo8q1lbp04pAM7Ge7Yr5f6OK0CqmmmjACe4= Subject key identifier: 51:17:B2:78:47:51:62:4F:8A:E6:34:DC:22:5F:0E:A2:AE:CC:DE:D7 Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16 Certificate serial: 019B7BA36ABE07E38602F17792CD4FE61637 Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/UReyeEdRYk-K5jTcIl8Ooq7M3tc.roa Signing time: Thu 01 Jan 2026 22:17:45 +0000 ROA not before: Thu 01 Jan 2026 22:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3261 IP address blocks: 2.57.112.0/22 maxlen: 24 5.153.128.0/19 maxlen: 24 5.153.160.0/22 maxlen: 22 5.153.160.0/24 maxlen: 24 5.153.161.0/24 maxlen: 24 5.153.162.0/24 maxlen: 24 5.153.163.0/24 maxlen: 24 5.153.164.0/24 maxlen: 24 5.153.165.0/24 maxlen: 24 5.153.166.0/24 maxlen: 24 5.153.167.0/24 maxlen: 24 5.153.168.0/24 maxlen: 24 5.153.169.0/24 maxlen: 24 5.153.170.0/24 maxlen: 24 5.153.171.0/24 maxlen: 24 5.153.173.0/24 maxlen: 24 5.153.174.0/24 maxlen: 24 92.242.96.0/19 maxlen: 24 195.184.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:6a:be:07:e3:86:02:f1:77:92:cd:4f:e6:16:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16 Validity Not Before: Jan 1 22:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5117b2784751624f8ae634dc225f0ea2aeccded7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f2:aa:16:3c:90:ee:d2:04:4a:80:14:13:24: 6b:7b:6c:ea:89:d3:55:9c:7b:ef:94:ad:66:d9:ca: 03:3d:45:aa:0f:dc:89:3b:0f:c7:17:e4:e5:fa:e9: 43:42:f3:c2:37:60:47:db:dc:cd:b9:b8:58:65:52: 7c:33:b8:53:c4:cd:c2:b8:4c:12:e3:60:ca:d8:47: 67:e6:f0:b2:fb:c8:5d:78:25:95:1d:98:47:9d:ee: fd:7a:08:14:df:0f:8a:d2:66:26:ab:d0:08:b5:e3: 81:04:78:a5:a6:d5:eb:ea:63:dd:13:0d:e9:e0:66: 1b:1b:da:11:84:0e:1d:40:aa:ca:0e:3d:df:0a:32: 87:d8:f1:86:62:80:c3:6a:95:34:6f:dc:b5:fa:46: 1a:47:fa:2f:f4:90:65:2c:0c:e7:7c:ca:ce:19:10: 1d:aa:13:d3:29:0b:f8:c0:f0:f8:c0:ba:36:0f:52: 52:0f:5e:83:86:3a:62:ea:21:28:20:5a:51:a0:df: 6f:02:b4:ad:33:25:02:0b:0c:3e:13:15:6b:9c:79: 11:b2:21:73:3f:70:2f:4f:9a:ba:6c:09:6b:2b:43: 65:31:ff:3b:5a:50:23:00:c2:01:91:37:28:66:04: 98:ca:86:42:70:1f:02:8f:d1:07:b7:b2:bf:08:7a: 5e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:17:B2:78:47:51:62:4F:8A:E6:34:DC:22:5F:0E:A2:AE:CC:DE:D7 X509v3 Authority Key Identifier: keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/UReyeEdRYk-K5jTcIl8Ooq7M3tc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.112.0/22 5.153.128.0-5.153.171.255 5.153.173.0-5.153.174.255 92.242.96.0/19 195.184.192.0/19 Signature Algorithm: sha256WithRSAEncryption 2f:40:a7:86:31:1e:d9:38:c8:c9:cf:79:d0:75:c1:60:14:e0: 97:34:7b:c9:7e:9d:a6:63:38:b5:39:7b:81:6d:6a:24:3a:51: e5:5d:92:18:f1:08:4d:3a:75:28:38:d3:69:59:41:48:c7:29: 91:00:f4:9a:26:18:d1:93:a1:e4:b5:71:3d:9e:25:1f:08:e3: 57:a9:1f:63:11:c9:bb:37:91:ab:6e:45:72:0e:9e:1d:c6:a5: da:57:3b:ac:f2:37:f1:81:73:5a:43:b2:91:c3:69:76:3d:48: 6d:ff:aa:ba:89:f0:f7:d5:f5:34:9b:a7:ea:fe:dd:e8:d4:1c: aa:0c:ab:39:fd:29:27:f4:50:96:31:35:6f:8a:59:dc:69:f0: 70:cb:3a:ac:29:93:74:61:52:a3:dc:b5:10:12:7f:f3:17:c6: 5b:28:97:f5:ad:eb:32:c6:15:7e:5d:eb:76:55:2b:56:be:55: 78:a1:34:35:7d:08:2a:06:5f:95:32:b7:f6:96:a4:af:c6:2c: 37:85:73:58:d6:17:79:29:42:05:09:4f:1f:55:04:74:e5:2f: cc:e2:e5:83:ad:32:72:59:f0:bc:b9:02:be:ea:f7:56:99:71: a5:95:9a:cb:92:22:b7:56:8a:51:d6:ae:82:e3:98:69:8f:bf: 65:e8:5e:98 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt7o2q+B+OGAvF3ks1P5hY3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx ZGRhMTYwHhcNMjYwMTAxMjIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTE3YjI3ODQ3NTE2MjRmOGFlNjM0ZGMyMjVmMGVhMmFlY2NkZWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPKqFjyQ7tIESoAUEyRre2zqidNV nHvvlK1m2coDPUWqD9yJOw/HF+Tl+ulDQvPCN2BH29zNubhYZVJ8M7hTxM3CuEwS 42DK2Edn5vCy+8hdeCWVHZhHne79eggU3w+K0mYmq9AIteOBBHilptXr6mPdEw3p 4GYbG9oRhA4dQKrKDj3fCjKH2PGGYoDDapU0b9y1+kYaR/ov9JBlLAznfMrOGRAd qhPTKQv4wPD4wLo2D1JSD16Dhjpi6iEoIFpRoN9vArStMyUCCww+ExVrnHkRsiFz P3AvT5q6bAlrK0NlMf87WlAjAMIBkTcoZgSYyoZCcB8Cj9EHt7K/CHpenwIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFFEXsnhHUWJPiuY03CJfDqKuzN7XMB8GA1UdIwQY MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt ZmVlOGYzNzkwNTY3LzEvVVJleWVFZFJZay1LNWpUY0lsOE9vcTdNM3RjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3 LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQCAjlwMAwD BAcFmYADBAIFmagwDAMEAAWZrQMEAAWZrgMEBVzyYAMEBcO4wDANBgkqhkiG9w0B AQsFAAOCAQEAL0CnhjEe2TjIyc950HXBYBTglzR7yX6dpmM4tTl7gW1qJDpR5V2S GPEITTp1KDjTaVlBSMcpkQD0miYY0ZOh5LVxPZ4lHwjjV6kfYxHJuzeRq25Fcg6e Hcal2lc7rPI38YFzWkOykcNpdj1Ibf+quonw99X1NJun6v7d6NQcqgyrOf0pJ/RQ ljE1b4pZ3GnwcMs6rCmTdGFSo9y1EBJ/8xfGWyiX9a3rMsYVfl3rdlUrVr5VeKE0 NX0IKgZflTK39pakr8YsN4VzWNYXeSlCBQlPH1UEdOUvzOLlg60yclnwvLkCvur3 VplxpZWay5Iit1aKUdauguOYaY+/ZehemA== -----END CERTIFICATE-----Generated at Mon Jan 26 10:24:10 2026 by rpki-client