This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/XUUckoSuUv2EJgJ7PIO8adk16ks.roa File: XUUckoSuUv2EJgJ7PIO8adk16ks.roa (raw, json) Hash identifier: tzSd8b46wrKHHj3JR9ZXkqNjIIpHpcM89O3eCBiPmtQ= Subject key identifier: 5D:45:1C:92:84:AE:52:FD:84:26:02:7B:3C:83:BC:69:D9:35:EA:4B Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff Certificate serial: 019B7F833882F2AC44B515C47835AB332829 Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/XUUckoSuUv2EJgJ7PIO8adk16ks.roa Signing time: Fri 02 Jan 2026 16:21:04 +0000 ROA not before: Fri 02 Jan 2026 16:21:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199980 IP address blocks: 82.160.168.0/23 maxlen: 23 82.160.170.0/24 maxlen: 24 82.160.180.0/24 maxlen: 24 88.199.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:38:82:f2:ac:44:b5:15:c4:78:35:ab:33:28:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff Validity Not Before: Jan 2 16:21:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d451c9284ae52fd8426027b3c83bc69d935ea4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5f:5e:76:55:22:0e:bc:9f:be:8a:71:b9:47: 26:83:0c:a5:40:e4:a3:66:58:07:d9:88:b6:48:71: 5c:43:54:1a:06:74:a0:cf:08:28:d5:f1:20:29:3a: fa:df:f9:d0:84:96:e8:70:f0:cc:c4:0a:c1:5a:26: ff:bb:5f:fb:69:c8:2f:59:b2:3b:ed:14:0f:54:37: e3:84:ff:47:37:47:ac:b8:e5:b0:af:82:d1:89:b0: 60:1a:54:b8:91:d9:48:ef:0d:43:76:97:0a:9b:11: 14:58:c0:3b:9c:51:fb:39:46:d6:87:02:bc:71:2d: 97:2e:bc:68:75:b5:ee:95:c4:c0:c7:49:f9:c5:0b: fd:62:8e:fc:1e:77:cd:97:bf:ba:4c:33:86:8e:99: 3c:12:b8:b1:99:d0:c7:ee:0f:50:5b:52:6b:e1:a3: 2c:88:2c:c5:67:42:c8:8e:a6:2a:08:5e:34:ed:85: a9:7c:8d:92:7b:63:39:16:a0:31:c1:a6:ad:84:83: d0:cb:07:aa:a0:d5:8e:ed:ab:7c:e1:2f:75:38:ef: 1e:14:ad:30:ad:09:84:22:19:a9:e4:dc:7a:c5:aa: 96:ca:ef:dc:fd:fd:ea:4c:74:50:29:6c:e1:df:1a: ce:b0:52:8f:be:53:1b:d6:bd:9e:6b:6f:0e:62:b7: 61:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:45:1C:92:84:AE:52:FD:84:26:02:7B:3C:83:BC:69:D9:35:EA:4B X509v3 Authority Key Identifier: keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/XUUckoSuUv2EJgJ7PIO8adk16ks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.160.168.0-82.160.170.255 82.160.180.0/24 88.199.116.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:69:aa:0c:5b:56:6b:0d:4c:c9:3e:9f:ca:5c:1b:44:6a:58: 5f:46:e9:00:27:7f:f3:8e:f3:82:7f:ec:e4:1c:9d:dc:7f:8e: 6b:0b:67:ea:d6:79:01:de:76:e1:7e:20:70:07:6b:c5:28:01: 06:1f:1c:fc:c8:41:5d:75:2d:69:3b:a4:2e:a0:99:c6:f4:91: 91:e7:b8:78:3c:54:b3:f2:0c:39:df:18:f1:5f:4f:6a:01:e4: 6d:1a:68:ab:72:b3:16:bf:ce:64:0e:57:71:5f:39:84:e0:1d: b6:82:51:cb:0f:fe:c0:dd:22:5e:f3:d1:df:20:90:93:58:31: 3f:c7:88:bd:13:09:34:67:8b:61:99:a9:63:79:23:15:02:af: 7f:c4:fd:2b:63:cc:b5:f3:ab:86:84:7b:cf:27:6c:dd:ca:c9: 80:df:d1:0b:a0:5b:d9:6b:00:c7:ee:ea:c2:7f:76:a1:0b:4b: be:64:ce:e3:cd:63:9d:7c:9a:ff:f4:2d:0a:e5:b3:80:a4:df: 33:79:9a:0a:4f:df:9a:83:0b:18:d7:24:4b:55:b0:d2:8d:a6: f6:b3:cd:d2:f0:f5:ba:91:fa:13:cc:c9:a7:2d:a8:96:56:8c: a1:00:aa:8e:ac:16:2b:f7:e0:70:4f:73:03:16:4a:8c:ff:4c: c0:50:72:05 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt/gziC8qxEtRXEeDWrMygpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OTMwMWRjYzdmYWU0ZjdjZTAxZTQ5ODdhNzdjYjgyYTMz NmFiZmYwHhcNMjYwMTAyMTYyMTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDQ1MWM5Mjg0YWU1MmZkODQyNjAyN2IzYzgzYmM2OWQ5MzVlYTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV9edlUiDryfvopxuUcmgwylQOSj ZlgH2Yi2SHFcQ1QaBnSgzwgo1fEgKTr63/nQhJbocPDMxArBWib/u1/7acgvWbI7 7RQPVDfjhP9HN0esuOWwr4LRibBgGlS4kdlI7w1DdpcKmxEUWMA7nFH7OUbWhwK8 cS2XLrxodbXulcTAx0n5xQv9Yo78HnfNl7+6TDOGjpk8ErixmdDH7g9QW1Jr4aMs iCzFZ0LIjqYqCF407YWpfI2Se2M5FqAxwaathIPQyweqoNWO7at84S91OO8eFK0w rQmEIhmp5Nx6xaqWyu/c/f3qTHRQKWzh3xrOsFKPvlMb1r2ea28OYrdhhQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFF1FHJKErlL9hCYCezyDvGnZNepLMB8GA1UdIwQY MBaAFBeTAdzH+uT3zgHkmHp3y4KjNqv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjVNQjNNZjY1UGZPQWVTWWVuZkxncU0ycV84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9lZDc5NjMtNzJlYS00YzFkLWFkZGQt YWZmOTJjMTZkOGUzLzEvWFVVY2tvU3VVdjJFSmdKN1BJTzhhZGsxNmtzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9lZDc5NjMtNzJlYS00YzFkLWFkZGQtYWZmOTJjMTZkOGUz LzEvRjVNQjNNZjY1UGZPQWVTWWVuZkxncU0ycV84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBANSoKgD BABSoKoDBABSoLQDBAJYx3QwDQYJKoZIhvcNAQELBQADggEBAItpqgxbVmsNTMk+ n8pcG0RqWF9G6QAnf/OO84J/7OQcndx/jmsLZ+rWeQHeduF+IHAHa8UoAQYfHPzI QV11LWk7pC6gmcb0kZHnuHg8VLPyDDnfGPFfT2oB5G0aaKtysxa/zmQOV3FfOYTg HbaCUcsP/sDdIl7z0d8gkJNYMT/HiL0TCTRni2GZqWN5IxUCr3/E/StjzLXzq4aE e88nbN3KyYDf0QugW9lrAMfu6sJ/dqELS75kzuPNY518mv/0LQrls4Ck3zN5mgpP 35qDCxjXJEtVsNKNpvazzdLw9bqR+hPMyactqJZWjKEAqo6sFiv34HBPcwMWSoz/ TMBQcgU= -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:57 2026 by rpki-client