This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/UBRxr2nYR9E7znMInZ4kkE77leM.roa File: UBRxr2nYR9E7znMInZ4kkE77leM.roa (raw, json) Hash identifier: n5idYROewwRPTbiKVI2bzv8U9KgMAq8Hw16uWVfkjtA= Subject key identifier: 50:14:71:AF:69:D8:47:D1:3B:CE:73:08:9D:9E:24:90:4E:FB:95:E3 Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940 Certificate serial: 019B7CEE4A41B01B5AB4E142FF6047C26299 Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/UBRxr2nYR9E7znMInZ4kkE77leM.roa Signing time: Fri 02 Jan 2026 04:19:09 +0000 ROA not before: Fri 02 Jan 2026 04:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9183 IP address blocks: 139.15.0.0/16 maxlen: 24 185.112.176.0/22 maxlen: 24 192.48.31.0/24 maxlen: 24 193.108.217.0/24 maxlen: 24 193.141.57.0/24 maxlen: 24 194.39.218.0/23 maxlen: 24 2a03:cc00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:4a:41:b0:1b:5a:b4:e1:42:ff:60:47:c2:62:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940 Validity Not Before: Jan 2 04:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=501471af69d847d13bce73089d9e24904efb95e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:af:cd:5d:3d:f3:0c:bb:d0:7b:38:35:ff:9c: 94:2e:96:e6:67:a2:ee:95:8b:88:cc:29:ac:f2:46: d6:b1:ba:52:a0:56:b0:c5:1b:dd:14:8f:dc:85:a2: 46:93:8c:4d:df:9b:df:e0:76:f4:73:45:53:d4:0a: 88:f0:35:43:e4:7c:31:e4:fc:b1:af:e5:1d:c3:28: c6:4c:64:84:80:96:8e:42:0e:01:4f:35:6e:64:0c: 4a:00:de:6d:f4:c6:ee:9f:5e:06:ed:d2:24:f9:05: 16:5d:db:8c:f8:e1:96:1a:8e:6c:a8:fb:d6:ee:4c: 7e:0f:a4:f5:7f:39:76:85:ef:1d:ee:f3:82:ee:35: c7:f7:c5:02:8f:34:44:42:24:df:bb:03:4b:d4:27: 69:4f:e7:09:9d:77:df:93:cf:4e:76:fe:98:51:d5: af:ef:15:0e:0b:6c:b0:d3:c3:12:1f:f8:ea:e1:78: 73:64:87:5e:5c:f1:05:76:c6:10:78:42:bb:45:68: 0b:67:5a:94:9e:a3:e2:f6:35:ba:c8:ef:a0:dc:f1: 75:33:dd:90:26:80:45:25:fe:80:06:99:7b:81:07: 99:09:75:28:7e:04:ae:c8:64:e2:8b:74:c6:00:af: 22:eb:ab:e3:18:7f:a4:1d:83:72:21:40:5c:ca:f2: dd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:14:71:AF:69:D8:47:D1:3B:CE:73:08:9D:9E:24:90:4E:FB:95:E3 X509v3 Authority Key Identifier: keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/UBRxr2nYR9E7znMInZ4kkE77leM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.15.0.0/16 185.112.176.0/22 192.48.31.0/24 193.108.217.0/24 193.141.57.0/24 194.39.218.0/23 IPv6: 2a03:cc00::/32 Signature Algorithm: sha256WithRSAEncryption 18:22:cf:c0:d2:42:b8:2b:05:d8:e8:0d:8f:08:dd:18:0e:3c: 78:c9:46:69:c0:3e:b3:b3:12:c8:36:07:8f:49:d9:f5:6d:8f: 6f:e6:b9:80:f4:51:89:b0:da:3f:47:d0:0d:6f:82:66:36:1f: 77:b7:73:5d:e0:66:c4:9f:3e:2b:5b:a6:e3:bd:8f:cd:e2:d8: 15:d4:f5:fc:06:8b:67:b9:92:9a:68:7a:94:14:e1:18:71:bb: 14:fd:59:a6:91:79:08:31:0b:67:72:f1:be:35:02:8c:ef:2b: 99:0c:f5:16:46:08:b9:d3:2b:b0:05:c6:33:20:d9:ff:75:b7: fb:02:8e:fd:f4:e1:47:99:cf:d9:11:60:bd:35:93:aa:f6:fd: 58:75:34:34:ec:2d:76:d5:af:a6:0e:6f:84:d9:18:4b:4e:93: 71:30:47:fc:cc:15:46:9f:a3:c6:3e:3e:b8:5b:e2:76:63:4b: e9:cc:52:92:6e:fa:76:e3:5e:cd:aa:d0:80:ce:1b:88:34:96: 68:0e:b2:1b:3f:1c:40:23:cb:f7:67:8a:ea:0f:0a:16:14:d1: 64:ff:40:70:c3:70:0c:e5:4b:64:5b:2d:b9:ce:2d:94:53:c1: b6:67:06:d5:e1:65:2e:29:cf:23:ca:d5:68:86:19:2b:70:b8: 43:78:d0:ee -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt87kpBsBtatOFC/2BHwmKZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NDkyOGEzOTYyN2NkNWVlNWY5NzViZDg5N2MyZDc3NWFi Mjk5NDAwHhcNMjYwMTAyMDQxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDE0NzFhZjY5ZDg0N2QxM2JjZTczMDg5ZDllMjQ5MDRlZmI5NWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa/NXT3zDLvQezg1/5yULpbmZ6Lu lYuIzCms8kbWsbpSoFawxRvdFI/chaJGk4xN35vf4Hb0c0VT1AqI8DVD5Hwx5Pyx r+UdwyjGTGSEgJaOQg4BTzVuZAxKAN5t9Mbun14G7dIk+QUWXduM+OGWGo5sqPvW 7kx+D6T1fzl2he8d7vOC7jXH98UCjzREQiTfuwNL1CdpT+cJnXffk89Odv6YUdWv 7xUOC2yw08MSH/jq4XhzZIdeXPEFdsYQeEK7RWgLZ1qUnqPi9jW6yO+g3PF1M92Q JoBFJf6ABpl7gQeZCXUofgSuyGTii3TGAK8i66vjGH+kHYNyIUBcyvLd+wIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFFAUca9p2EfRO85zCJ2eJJBO+5XjMB8GA1UdIwQY MBaAFIlJKKOWJ81e5fl1vYl8LXdasplAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEt MTU5M2Q0MDQ1Y2JjLzEvVUJSeHIybllSOUU3em5NSW5aNGtrRTc3bGVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEtMTU5M2Q0MDQ1Y2Jj LzEvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjApBAIAATAjAwMAiw8DBAK5 cLADBADAMB8DBADBbNkDBADBjTkDBAHCJ9owDQQCAAIwBwMFACoDzAAwDQYJKoZI hvcNAQELBQADggEBABgiz8DSQrgrBdjoDY8I3RgOPHjJRmnAPrOzEsg2B49J2fVt j2/muYD0UYmw2j9H0A1vgmY2H3e3c13gZsSfPitbpuO9j83i2BXU9fwGi2e5kppo epQU4RhxuxT9WaaReQgxC2dy8b41AozvK5kM9RZGCLnTK7AFxjMg2f91t/sCjv30 4UeZz9kRYL01k6r2/Vh1NDTsLXbVr6YOb4TZGEtOk3EwR/zMFUafo8Y+Prhb4nZj S+nMUpJu+nbjXs2q0IDOG4g0lmgOshs/HEAjy/dniuoPChYU0WT/QHDDcAzlS2Rb LbnOLZRTwbZnBtXhZS4pzyPK1WiGGStwuEN40O4= -----END CERTIFICATE-----Generated at Mon Jan 26 05:04:43 2026 by rpki-client