This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/UnXuq7L8efKEbPexQG4ZSvo7Cnk.roa File: UnXuq7L8efKEbPexQG4ZSvo7Cnk.roa (raw, json) Hash identifier: x6ewFPlmukvgw78bPzGQkfC4tU52Nz/FT5801JiC85Y= Subject key identifier: 52:75:EE:AB:B2:FC:79:F2:84:6C:F7:B1:40:6E:19:4A:FA:3B:0A:79 Certificate issuer: /CN=1ada225cb7f29416e7534695fbfb21762fee93c8 Certificate serial: 019B7F13B17B7EEDD9DACE2CF849FC8C1A35 Authority key identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/UnXuq7L8efKEbPexQG4ZSvo7Cnk.roa Signing time: Fri 02 Jan 2026 14:19:15 +0000 ROA not before: Fri 02 Jan 2026 14:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25135 IP address blocks: 77.233.128.0/24 maxlen: 24 85.255.224.0/20 maxlen: 20 85.255.232.0/23 maxlen: 23 85.255.234.0/23 maxlen: 23 85.255.236.0/23 maxlen: 23 88.82.0.0/19 maxlen: 19 148.252.128.0/19 maxlen: 19 148.252.128.0/23 maxlen: 23 148.252.132.0/23 maxlen: 23 148.252.136.0/22 maxlen: 22 148.252.140.0/23 maxlen: 23 148.252.144.0/23 maxlen: 23 148.252.146.0/23 maxlen: 23 148.252.148.0/23 maxlen: 23 148.252.150.0/24 maxlen: 24 148.252.152.0/24 maxlen: 24 148.252.156.0/23 maxlen: 23 148.252.158.0/23 maxlen: 23 148.252.160.0/19 maxlen: 19 148.252.160.0/23 maxlen: 23 148.252.164.0/23 maxlen: 23 185.69.144.0/23 maxlen: 23 185.69.146.0/23 maxlen: 23 194.62.232.0/24 maxlen: 24 194.62.238.0/24 maxlen: 24 212.183.128.0/19 maxlen: 19 212.183.128.0/20 maxlen: 20 212.183.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.mft rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:b1:7b:7e:ed:d9:da:ce:2c:f8:49:fc:8c:1a:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ada225cb7f29416e7534695fbfb21762fee93c8 Validity Not Before: Jan 2 14:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5275eeabb2fc79f2846cf7b1406e194afa3b0a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c5:3e:b0:85:f3:d4:c3:2f:b5:bc:8d:9b:86: 69:9e:71:dd:8c:29:7b:d3:bc:40:6b:22:f3:a0:5f: 9f:31:23:98:67:9e:cf:8c:c8:93:19:5c:b5:89:6f: 2d:af:21:7d:ab:93:77:de:fd:60:73:a6:78:cc:b7: 2a:4e:08:0b:d5:b7:8d:bf:d7:b1:04:7a:49:b3:e4: f8:c7:af:24:3e:8d:97:d7:90:9a:28:58:eb:a6:40: d4:0f:57:88:1f:de:c6:53:7d:2a:1e:dd:2b:d4:c8: c9:f1:1e:af:dd:b4:7c:b4:91:00:41:42:cd:cf:38: 9e:0e:89:db:30:ee:40:85:7a:ca:e6:76:8d:04:b1: 12:fa:1b:58:4d:11:73:80:70:f8:80:eb:de:a1:6e: 52:03:9a:ef:31:d9:0f:2b:87:99:0e:a3:7f:bb:f4: 99:47:ee:fa:5e:2a:cf:a3:cf:a8:34:e5:15:2f:ab: a5:fa:3b:b3:ef:06:af:b0:e3:01:0c:21:3d:7b:e9: 51:43:0a:b9:c0:d9:01:8f:e4:3d:ea:08:0c:0a:96: ad:8f:b3:da:e8:43:d3:24:40:e3:ab:19:cb:ea:f9: e9:d8:6b:d7:e1:89:ee:45:f8:34:af:39:ed:80:9a: 23:e5:c4:96:38:06:0e:3a:f4:e8:71:c9:16:86:6e: b5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:75:EE:AB:B2:FC:79:F2:84:6C:F7:B1:40:6E:19:4A:FA:3B:0A:79 X509v3 Authority Key Identifier: keyid:1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/UnXuq7L8efKEbPexQG4ZSvo7Cnk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.233.128.0/24 85.255.224.0/20 88.82.0.0/19 148.252.128.0/18 185.69.144.0/22 194.62.232.0/24 194.62.238.0/24 212.183.128.0/19 Signature Algorithm: sha256WithRSAEncryption 52:c6:45:73:f3:e9:88:ed:da:5c:2d:78:58:42:74:15:9d:35: eb:69:b0:61:76:db:c1:c7:b3:2f:6e:56:bf:a7:e5:52:29:3b: 56:9c:8e:db:c9:4b:80:ea:24:40:fd:d5:32:3d:5a:b0:e2:57: 85:60:38:22:eb:1d:d0:a4:13:e2:0d:f0:12:c5:95:1e:37:6b: 32:5d:1f:01:1a:4a:9b:96:0e:77:14:e8:9f:da:20:e8:ac:56: 00:7b:c6:12:c5:73:3c:f0:d9:de:fc:3b:b0:d9:95:98:d9:00: 92:ed:3c:6f:1c:5d:01:20:ed:9d:2b:61:88:54:08:40:1a:9a: ce:a6:ce:22:1a:7c:3d:ce:5a:2b:ca:1c:34:01:57:49:f6:bc: 42:32:e0:28:10:0c:b3:66:24:6c:a9:0d:ba:c6:7d:77:26:1f: 4d:bf:f7:65:ae:60:b9:c8:38:60:53:58:74:bf:32:63:a9:5c: 66:cc:30:03:45:dc:8e:8b:11:fc:9a:6e:0d:bb:7e:77:4a:55: 97:82:f9:42:a3:c4:3f:3b:3c:07:db:a0:2e:b6:f3:90:d5:2c: f5:6b:8d:29:2e:8b:c4:0e:bc:f9:29:64:43:44:f2:45:06:a8: 22:83:54:95:c4:49:35:ed:a7:da:73:95:61:5c:1a:2a:2a:a7: e7:cf:2a:aa -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt/E7F7fu3Z2s4s+En8jBo1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZGEyMjVjYjdmMjk0MTZlNzUzNDY5NWZiZmIyMTc2MmZl ZTkzYzgwHhcNMjYwMTAyMTQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Mjc1ZWVhYmIyZmM3OWYyODQ2Y2Y3YjE0MDZlMTk0YWZhM2IwYTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8U+sIXz1MMvtbyNm4ZpnnHdjCl7 07xAayLzoF+fMSOYZ57PjMiTGVy1iW8tryF9q5N33v1gc6Z4zLcqTggL1beNv9ex BHpJs+T4x68kPo2X15CaKFjrpkDUD1eIH97GU30qHt0r1MjJ8R6v3bR8tJEAQULN zzieDonbMO5AhXrK5naNBLES+htYTRFzgHD4gOveoW5SA5rvMdkPK4eZDqN/u/SZ R+76XirPo8+oNOUVL6ul+juz7wavsOMBDCE9e+lRQwq5wNkBj+Q96ggMCpatj7Pa 6EPTJEDjqxnL6vnp2GvX4YnuRfg0rzntgJoj5cSWOAYOOvTocckWhm611QIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFFJ17quy/HnyhGz3sUBuGUr6Owp5MB8GA1UdIwQY MBaAFBraIly38pQW51NGlfv7IXYv7pPIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3RvaVhMZnlsQmJuVTBhVi1fc2hkaV91azhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lOWQ5Y2MtMjY2OC00MmZjLTgzMTUt NzUyNWQ0ZDQwOGI1LzEvVW5YdXE3TDhlZktFYlBleFFHNFpTdm83Q25rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9lOWQ5Y2MtMjY2OC00MmZjLTgzMTUtNzUyNWQ0ZDQwOGI1 LzEvR3RvaVhMZnlsQmJuVTBhVi1fc2hkaV91azhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQATemAAwQE Vf/gAwQFWFIAAwQGlPyAAwQCuUWQAwQAwj7oAwQAwj7uAwQF1LeAMA0GCSqGSIb3 DQEBCwUAA4IBAQBSxkVz8+mI7dpcLXhYQnQVnTXrabBhdtvBx7Mvbla/p+VSKTtW nI7byUuA6iRA/dUyPVqw4leFYDgi6x3QpBPiDfASxZUeN2syXR8BGkqblg53FOif 2iDorFYAe8YSxXM88Nne/Duw2ZWY2QCS7TxvHF0BIO2dK2GIVAhAGprOps4iGnw9 zloryhw0AVdJ9rxCMuAoEAyzZiRsqQ26xn13Jh9Nv/dlrmC5yDhgU1h0vzJjqVxm zDADRdyOixH8mm4Nu353SlWXgvlCo8Q/OzwH26AutvOQ1Sz1a40pLovEDrz5KWRD RPJFBqgig1SVxEk17afac5VhXBoqKqfnzyqq -----END CERTIFICATE-----Generated at Mon Jan 26 01:16:45 2026 by rpki-client