This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/uCPERwsuvyXpYR4y_BXupFIJXt4.roa File: uCPERwsuvyXpYR4y_BXupFIJXt4.roa (raw, json) Hash identifier: jbxXtknnk4DV3WL6pnrxlE1uxvDz9l+QZBW7wpDD5fM= Subject key identifier: B8:23:C4:47:0B:2E:BF:25:E9:61:1E:32:FC:15:EE:A4:52:09:5E:DE Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Certificate serial: 019B7C80D5EBEE834FC8717741C0B7C48F1E Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/uCPERwsuvyXpYR4y_BXupFIJXt4.roa Signing time: Fri 02 Jan 2026 02:19:36 +0000 ROA not before: Fri 02 Jan 2026 02:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199242 IP address blocks: 31.222.234.0/24 maxlen: 24 37.72.142.0/24 maxlen: 24 62.3.11.0/24 maxlen: 24 62.106.90.0/24 maxlen: 24 62.233.61.0/24 maxlen: 24 80.71.144.0/24 maxlen: 24 91.246.50.0/24 maxlen: 24 146.19.4.0/24 maxlen: 24 146.19.199.0/24 maxlen: 24 146.19.203.0/24 maxlen: 24 176.97.217.0/24 maxlen: 24 176.126.101.0/24 maxlen: 24 185.234.12.0/24 maxlen: 24 188.244.119.0/24 maxlen: 24 193.9.48.0/24 maxlen: 24 193.162.132.0/24 maxlen: 24 193.162.133.0/24 maxlen: 24 194.26.230.0/24 maxlen: 24 194.26.231.0/24 maxlen: 24 194.99.158.0/24 maxlen: 24 195.96.130.0/24 maxlen: 24 195.96.131.0/24 maxlen: 24 212.52.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:d5:eb:ee:83:4f:c8:71:77:41:c0:b7:c4:8f:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Validity Not Before: Jan 2 02:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b823c4470b2ebf25e9611e32fc15eea452095ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:75:23:ee:72:fc:d1:77:f4:8a:6a:79:ec:6c: b0:70:03:fd:ab:dd:69:a7:38:d8:40:88:a5:a4:84: 0a:27:33:05:70:b4:8a:5c:b7:30:09:4b:46:79:79: 62:ad:64:50:a9:7a:bf:e3:d0:76:d3:cf:6a:50:3b: 7c:1d:d1:f0:7e:4c:3e:69:f9:de:6e:8c:59:af:11: 4b:ad:5f:30:b1:fe:76:a5:a2:fe:be:6b:9d:f3:2f: 99:e2:c4:1f:1a:78:8f:c8:c3:4d:93:8c:aa:c7:b8: 6b:17:0f:a4:71:1a:c6:7e:75:40:db:d6:19:c2:c7: 7c:4c:80:bd:34:7e:65:69:f1:10:93:3f:27:19:95: 7a:07:b1:83:36:1e:93:aa:59:93:52:66:dd:99:8d: 37:ba:07:ff:a1:d1:b2:7b:0c:00:22:50:96:72:46: 80:5c:97:eb:35:c6:ca:5f:2d:76:9c:ee:3d:6b:02: 50:09:97:78:92:9a:79:99:76:41:a6:fd:d2:84:19: 24:9c:e6:cf:89:7a:46:b9:9d:1c:38:51:4a:92:cf: c1:9b:15:7f:ed:08:b9:c9:f8:67:3d:b3:f3:b8:05: d6:8b:68:df:2a:be:3c:23:85:53:36:03:85:ae:13: 03:ce:3a:cc:3b:2f:72:2e:07:b0:44:ad:99:8d:4e: d8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:23:C4:47:0B:2E:BF:25:E9:61:1E:32:FC:15:EE:A4:52:09:5E:DE X509v3 Authority Key Identifier: keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/uCPERwsuvyXpYR4y_BXupFIJXt4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.222.234.0/24 37.72.142.0/24 62.3.11.0/24 62.106.90.0/24 62.233.61.0/24 80.71.144.0/24 91.246.50.0/24 146.19.4.0/24 146.19.199.0/24 146.19.203.0/24 176.97.217.0/24 176.126.101.0/24 185.234.12.0/24 188.244.119.0/24 193.9.48.0/24 193.162.132.0/23 194.26.230.0/23 194.99.158.0/24 195.96.130.0/23 212.52.28.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:59:37:5a:dc:96:2d:5d:b7:d2:8d:23:04:b6:31:10:a3:91: 47:64:f8:fb:67:28:18:ec:4c:1f:29:e8:4f:e2:7e:54:de:09: 4c:5e:67:9d:60:c1:bb:5b:5d:d1:7b:5e:2f:bc:5c:87:3f:09: 71:bc:e8:90:f6:b3:89:c6:84:bf:4c:79:aa:38:df:19:46:0a: 80:37:15:96:a3:87:5a:04:e1:fa:6b:62:18:dd:db:d0:f7:84: b8:67:56:38:2e:60:67:21:80:c1:7c:2c:dd:33:d5:55:8b:e4: ed:af:70:80:91:62:54:c4:a2:85:2f:d8:0d:0d:da:f3:1e:60: c5:e2:50:08:7e:de:ed:be:03:08:80:19:6a:4b:7a:69:7b:78: bf:36:0b:94:ec:05:77:af:5b:1a:99:46:f4:0b:c3:12:41:fa: e3:c1:9e:95:1d:fc:c3:7b:ed:1d:06:a2:1f:33:be:ce:41:4c: be:19:81:9f:03:24:52:67:df:96:46:32:10:52:66:82:07:e4: e8:cf:4a:e8:29:a1:8d:be:6c:a8:44:21:ed:6d:d5:1c:02:68: 4b:20:3f:44:ad:64:4b:f4:f2:6c:1a:16:e2:98:2e:de:22:63: ee:aa:a9:83:33:cb:27:26:e3:d4:b2:10:5b:1d:1f:7e:03:a7: 07:f7:a8:46 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgISAZt8gNXr7oNPyHF3QcC3xI8eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMzY4YjBhZWM2YzdmZDQ4ZDBkOTZiNDA3N2EyM2Y5MDZh ODZhNDgwHhcNMjYwMTAyMDIxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODIzYzQ0NzBiMmViZjI1ZTk2MTFlMzJmYzE1ZWVhNDUyMDk1ZWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHUj7nL80Xf0imp57GywcAP9q91p pzjYQIilpIQKJzMFcLSKXLcwCUtGeXlirWRQqXq/49B2089qUDt8HdHwfkw+afne boxZrxFLrV8wsf52paL+vmud8y+Z4sQfGniPyMNNk4yqx7hrFw+kcRrGfnVA29YZ wsd8TIC9NH5lafEQkz8nGZV6B7GDNh6TqlmTUmbdmY03ugf/odGyewwAIlCWckaA XJfrNcbKXy12nO49awJQCZd4kpp5mXZBpv3ShBkknObPiXpGuZ0cOFFKks/BmxV/ 7Qi5yfhnPbPzuAXWi2jfKr48I4VTNgOFrhMDzjrMOy9yLgewRK2ZjU7YcQIDAQAB o4ICfjCCAnowHQYDVR0OBBYEFLgjxEcLLr8l6WEeMvwV7qRSCV7eMB8GA1UdIwQY MBaAFC42iwrsbH/UjQ2WtAd6I/kGqGpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQt MTQyN2RkMTZlZmE0LzEvdUNQRVJ3c3V2eVhwWVI0eV9CWHVwRklKWHQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQtMTQyN2RkMTZlZmE0 LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGTBggrBgEFBQcBBwEB/wSBgzCBgDB+BAIAATB4AwQAH97q AwQAJUiOAwQAPgMLAwQAPmpaAwQAPuk9AwQAUEeQAwQAW/YyAwQAkhMEAwQAkhPH AwQAkhPLAwQAsGHZAwQAsH5lAwQAueoMAwQAvPR3AwQAwQkwAwQBwaKEAwQBwhrm AwQAwmOeAwQBw2CCAwQA1DQcMA0GCSqGSIb3DQEBCwUAA4IBAQAeWTda3JYtXbfS jSMEtjEQo5FHZPj7ZygY7EwfKehP4n5U3glMXmedYMG7W13Re14vvFyHPwlxvOiQ 9rOJxoS/THmqON8ZRgqANxWWo4daBOH6a2IY3dvQ94S4Z1Y4LmBnIYDBfCzdM9VV i+Ttr3CAkWJUxKKFL9gNDdrzHmDF4lAIft7tvgMIgBlqS3ppe3i/NguU7AV3r1sa mUb0C8MSQfrjwZ6VHfzDe+0dBqIfM77OQUy+GYGfAyRSZ9+WRjIQUmaCB+Toz0ro KaGNvmyoRCHtbdUcAmhLID9ErWRL9PJsGhbimC7eImPuqqmDM8snJuPUshBbHR9+ A6cH96hG -----END CERTIFICATE-----Generated at Sun Jan 25 17:49:12 2026 by rpki-client