This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/uMJPOKzkgdQavc3oQbOARYWXmCA.roa File: uMJPOKzkgdQavc3oQbOARYWXmCA.roa (raw, json) Hash identifier: vBWVvB65jxPLMGmagc+s9IhXw0CoL7C2ScG9h4Br6A4= Subject key identifier: B8:C2:4F:38:AC:E4:81:D4:1A:BD:CD:E8:41:B3:80:45:85:97:98:20 Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254 Certificate serial: 019B7910AD23472577C81111FB66413387FA Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/uMJPOKzkgdQavc3oQbOARYWXmCA.roa Signing time: Thu 01 Jan 2026 10:18:14 +0000 ROA not before: Thu 01 Jan 2026 10:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207144 IP address blocks: 85.11.128.0/24 maxlen: 24 85.11.129.0/24 maxlen: 24 85.11.130.0/24 maxlen: 24 85.11.131.0/24 maxlen: 24 85.11.132.0/24 maxlen: 24 85.11.133.0/24 maxlen: 24 85.11.134.0/24 maxlen: 24 85.11.135.0/24 maxlen: 24 85.11.136.0/24 maxlen: 24 85.11.137.0/24 maxlen: 24 85.11.138.0/24 maxlen: 24 85.11.139.0/24 maxlen: 24 85.11.140.0/24 maxlen: 24 85.11.141.0/24 maxlen: 24 85.11.142.0/24 maxlen: 24 85.11.143.0/24 maxlen: 24 85.11.160.0/24 maxlen: 24 85.11.162.0/24 maxlen: 24 85.11.164.0/24 maxlen: 24 85.11.165.0/24 maxlen: 24 85.11.166.0/24 maxlen: 24 85.11.168.0/24 maxlen: 24 85.11.169.0/24 maxlen: 24 85.11.170.0/24 maxlen: 24 85.11.171.0/24 maxlen: 24 85.11.172.0/24 maxlen: 24 85.11.173.0/24 maxlen: 24 85.11.174.0/24 maxlen: 24 85.11.175.0/24 maxlen: 24 85.11.176.0/24 maxlen: 24 85.11.177.0/24 maxlen: 24 85.11.178.0/24 maxlen: 24 85.11.179.0/24 maxlen: 24 85.11.184.0/24 maxlen: 24 85.11.185.0/24 maxlen: 24 85.11.186.0/24 maxlen: 24 85.11.188.0/24 maxlen: 24 85.11.189.0/24 maxlen: 24 85.11.191.0/24 maxlen: 24 185.164.240.0/24 maxlen: 24 185.164.241.0/24 maxlen: 24 185.164.242.0/24 maxlen: 24 185.164.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ad:23:47:25:77:c8:11:11:fb:66:41:33:87:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254 Validity Not Before: Jan 1 10:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8c24f38ace481d41abdcde841b3804585979820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c8:8c:bf:59:2b:66:ec:9e:7a:9e:4f:81:d4: b7:19:eb:f8:ef:bc:87:a1:5f:70:7a:71:73:3b:9d: ea:fe:e5:46:bb:02:6a:3f:12:30:d8:fd:61:e0:ee: dc:58:ca:8a:0a:bf:54:f9:37:8d:d3:71:a4:18:8c: f0:7b:d2:11:00:30:db:c9:93:2d:18:5b:19:c7:cc: ae:fa:a4:31:bf:8d:5e:cf:30:2c:41:cb:ac:75:41: 58:aa:34:c2:37:e7:79:ab:3d:5c:84:a4:b1:f6:e9: 18:ec:67:1a:43:8f:54:08:e2:c0:18:d1:b5:74:4f: b2:76:e4:88:1a:06:80:cf:0b:bc:53:8a:cd:bd:ea: 9c:34:78:f2:59:2b:c5:45:96:37:3f:c7:88:19:fe: f5:18:ac:01:61:91:76:72:bd:ca:96:cd:1a:0c:e4: dc:bc:a4:3e:bb:32:3f:88:36:9a:3e:8f:12:7d:ad: b9:fd:d1:d2:f4:1f:dd:0e:33:da:a9:d6:4b:08:c9: 74:12:b8:07:ff:a0:67:c1:8f:2c:74:d8:8b:5d:cc: c5:e9:23:3b:04:77:d4:d0:01:68:64:a7:7a:32:6a: c5:c0:7d:96:db:cd:53:89:6f:40:87:9d:41:5d:cc: 5b:ec:3a:d6:55:10:67:29:ab:cc:a2:80:52:a2:0e: 55:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C2:4F:38:AC:E4:81:D4:1A:BD:CD:E8:41:B3:80:45:85:97:98:20 X509v3 Authority Key Identifier: keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/uMJPOKzkgdQavc3oQbOARYWXmCA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.11.128.0/20 85.11.160.0/24 85.11.162.0/24 85.11.164.0-85.11.166.255 85.11.168.0-85.11.179.255 85.11.184.0-85.11.186.255 85.11.188.0/23 85.11.191.0/24 185.164.240.0/22 Signature Algorithm: sha256WithRSAEncryption a4:5f:c3:eb:64:aa:2c:66:4b:91:45:2a:23:a5:6b:47:eb:bc: e8:44:81:77:07:6f:8a:95:94:dc:f0:35:50:d7:ab:9e:09:d1: 32:50:3c:58:07:f2:c5:c8:bf:6d:75:6e:72:e8:db:2c:64:ec: 09:65:19:31:82:9e:6d:6b:64:91:e9:36:f5:c2:c4:d8:2b:c4: 14:d8:82:3d:4e:26:aa:e9:5d:9a:a5:d8:2f:51:69:00:73:22: c7:37:b8:03:f6:c5:5b:3f:71:1c:a5:7c:f5:79:7a:85:d6:ce: e0:9e:6a:6e:c0:98:25:45:44:f4:c0:de:46:bf:51:fb:b9:3a: 3b:e9:a2:f5:68:d2:1e:8d:80:ae:22:24:5b:b3:8e:49:9c:ec: 93:93:da:6d:80:d0:a1:6b:77:58:32:68:44:f2:1b:25:35:06: 00:a2:17:ad:40:c5:2e:a8:e3:dc:b8:2c:63:68:cf:d5:9f:19: ed:ad:ee:48:e4:8c:cb:6b:d7:bd:11:b6:8e:0e:b6:5b:f4:ab: b9:ec:2b:67:d1:a2:ce:47:7c:fc:b6:1e:65:8d:8f:c6:18:12: e7:c3:1b:d2:2a:16:dd:9c:64:f1:7d:6f:fc:a2:f6:a4:05:58: 87:2a:d3:00:a3:d9:c5:62:96:ba:71:99:f2:8a:8e:77:e5:7c: 75:b7:8b:37 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgISAZt5EK0jRyV3yBER+2ZBM4f6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NzVkNTE5ZGUyMzljZjE2NGNiOTRhNjY2MGMyNTMwY2Vh ZWYyNTQwHhcNMjYwMTAxMTAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGMyNGYzOGFjZTQ4MWQ0MWFiZGNkZTg0MWIzODA0NTg1OTc5ODIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MiMv1krZuyeep5PgdS3Gev477yH oV9wenFzO53q/uVGuwJqPxIw2P1h4O7cWMqKCr9U+TeN03GkGIzwe9IRADDbyZMt GFsZx8yu+qQxv41ezzAsQcusdUFYqjTCN+d5qz1chKSx9ukY7GcaQ49UCOLAGNG1 dE+yduSIGgaAzwu8U4rNveqcNHjyWSvFRZY3P8eIGf71GKwBYZF2cr3Kls0aDOTc vKQ+uzI/iDaaPo8Sfa25/dHS9B/dDjPaqdZLCMl0ErgH/6BnwY8sdNiLXczF6SM7 BHfU0AFoZKd6MmrFwH2W281TiW9Ah51BXcxb7DrWVRBnKavMooBSog5VlQIDAQAB o4ICUTCCAk0wHQYDVR0OBBYEFLjCTzis5IHUGr3N6EGzgEWFl5ggMB8GA1UdIwQY MBaAFFl11RneI5zxZMuUpmYMJTDOrvJUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUt MmNjNjc1NzI2OTc1LzEvdU1KUE9LemtnZFFhdmMzb1FiT0FSWVdYbUNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUtMmNjNjc1NzI2OTc1 LzEvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQEVQuAAwQA VQugAwQAVQuiMAwDBAJVC6QDBABVC6YwDAMEA1ULqAMEAlULsDAMAwQDVQu4AwQA VQu6AwQBVQu8AwQAVQu/AwQCuaTwMA0GCSqGSIb3DQEBCwUAA4IBAQCkX8PrZKos ZkuRRSojpWtH67zoRIF3B2+KlZTc8DVQ16ueCdEyUDxYB/LFyL9tdW5y6NssZOwJ ZRkxgp5ta2SR6Tb1wsTYK8QU2II9Tiaq6V2apdgvUWkAcyLHN7gD9sVbP3EcpXz1 eXqF1s7gnmpuwJglRUT0wN5Gv1H7uTo76aL1aNIejYCuIiRbs45JnOyTk9ptgNCh a3dYMmhE8hslNQYAohetQMUuqOPcuCxjaM/Vnxntre5I5IzLa9e9EbaODrZb9Ku5 7Ctn0aLOR3z8th5ljY/GGBLnwxvSKhbdnGTxfW/8ovakBViHKtMAo9nFYpa6cZny io535Xx1t4s3 -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:59 2026 by rpki-client