This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/Ue9DIINKYrGn1tdejFEb6gztPV4.roa File: Ue9DIINKYrGn1tdejFEb6gztPV4.roa (raw, json) Hash identifier: c1z5wiNQ531GjFPY2V7nJM/EQVknOfa3Q0UMyTLhXdg= Subject key identifier: 51:EF:43:20:83:4A:62:B1:A7:D6:D7:5E:8C:51:1B:EA:0C:ED:3D:5E Certificate issuer: /CN=f69c7eb86224adb38408847dee4cfc4c4003ad5d Certificate serial: 019B7EA71FD527CC12FB645D76530FF315F6 Authority key identifier: F6:9C:7E:B8:62:24:AD:B3:84:08:84:7D:EE:4C:FC:4C:40:03:AD:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/Ue9DIINKYrGn1tdejFEb6gztPV4.roa Signing time: Fri 02 Jan 2026 12:20:40 +0000 ROA not before: Fri 02 Jan 2026 12:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199478 IP address blocks: 37.130.144.0/24 maxlen: 24 37.130.145.0/24 maxlen: 24 37.130.146.0/24 maxlen: 24 37.130.147.0/24 maxlen: 24 37.130.148.0/24 maxlen: 24 37.130.149.0/24 maxlen: 24 37.130.150.0/24 maxlen: 24 37.130.151.0/24 maxlen: 24 91.193.152.0/24 maxlen: 24 91.193.153.0/24 maxlen: 24 91.193.154.0/24 maxlen: 24 91.193.155.0/24 maxlen: 24 144.2.164.0/24 maxlen: 24 144.2.165.0/24 maxlen: 24 144.2.166.0/24 maxlen: 24 144.2.167.0/24 maxlen: 24 185.16.208.0/24 maxlen: 24 185.16.209.0/24 maxlen: 24 185.16.210.0/24 maxlen: 24 185.16.211.0/24 maxlen: 24 185.157.152.0/24 maxlen: 24 185.157.153.0/24 maxlen: 24 185.157.154.0/24 maxlen: 24 185.157.155.0/24 maxlen: 24 185.251.104.0/24 maxlen: 24 185.251.105.0/24 maxlen: 24 185.251.106.0/24 maxlen: 24 185.251.107.0/24 maxlen: 24 193.84.19.0/24 maxlen: 24 193.84.30.0/24 maxlen: 24 193.84.70.0/24 maxlen: 24 193.84.74.0/24 maxlen: 24 194.62.158.0/24 maxlen: 24 194.62.159.0/24 maxlen: 24 194.62.190.0/24 maxlen: 24 194.62.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:1f:d5:27:cc:12:fb:64:5d:76:53:0f:f3:15:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69c7eb86224adb38408847dee4cfc4c4003ad5d Validity Not Before: Jan 2 12:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51ef4320834a62b1a7d6d75e8c511bea0ced3d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:28:a8:b0:06:e1:eb:68:f2:f2:71:9e:43:8d: e6:d3:c3:be:3e:0a:2f:9a:c7:ba:47:24:7d:da:f8: 82:6e:98:06:e3:0a:e8:50:36:7a:27:8b:bd:16:7e: 60:7e:e0:8b:7a:4e:ef:3f:ab:ef:05:c0:45:7b:79: 51:0e:5a:a5:2a:f1:45:20:2c:fb:55:6b:65:ef:ea: 81:82:46:df:8c:1b:4e:79:8f:42:23:01:7c:3c:3d: 35:60:d2:5b:48:77:ea:64:34:66:cc:12:7e:48:50: 2b:e2:01:4e:db:9a:0d:a6:9c:01:86:28:a7:85:07: 59:7b:a1:1f:42:0a:4d:a2:1a:b7:23:38:8c:06:b4: 96:13:16:00:a4:51:cf:25:40:34:ae:59:31:49:1e: 9b:f7:dd:93:4b:1c:c2:cc:1f:e3:19:d3:7c:c1:40: da:da:e0:4a:0b:3c:98:ee:ca:af:1c:98:11:c8:a1: 54:cf:7d:cd:f6:f8:6e:9b:a0:36:3c:f1:dd:0f:17: 3e:83:e9:3c:55:2f:20:bc:39:cc:af:c0:7f:65:e5: 61:28:dc:ef:0d:0b:f9:8f:ce:71:ba:74:bc:4b:7d: 09:5b:43:fe:20:a6:2a:9d:7e:15:a5:eb:82:53:00: bb:fd:dc:8a:43:b4:5c:30:bd:33:08:84:50:f4:e9: 12:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:EF:43:20:83:4A:62:B1:A7:D6:D7:5E:8C:51:1B:EA:0C:ED:3D:5E X509v3 Authority Key Identifier: keyid:F6:9C:7E:B8:62:24:AD:B3:84:08:84:7D:EE:4C:FC:4C:40:03:AD:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/Ue9DIINKYrGn1tdejFEb6gztPV4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.130.144.0/21 91.193.152.0/22 144.2.164.0/22 185.16.208.0/22 185.157.152.0/22 185.251.104.0/22 193.84.19.0/24 193.84.30.0/24 193.84.70.0/24 193.84.74.0/24 194.62.158.0/23 194.62.190.0/23 Signature Algorithm: sha256WithRSAEncryption c1:8b:6b:cb:84:1b:dd:fc:08:bd:58:57:b5:b4:e4:f0:34:7e: a7:d1:13:e1:66:5f:e8:e9:95:5a:70:64:c5:2c:38:1d:2d:0c: 34:00:13:ce:ab:6a:3e:4b:94:d0:fd:2b:bb:cf:70:ad:84:41: 18:9b:b2:67:99:b4:05:92:22:dc:a9:02:80:f6:a3:7c:f2:80: 28:8d:f9:89:eb:89:6a:fd:13:91:d3:ee:e9:93:39:45:1c:08: c8:62:65:fe:5b:37:8c:b6:71:27:59:19:4b:e2:b0:8d:36:9e: a1:70:10:70:1b:d7:3d:e6:5a:8d:95:61:16:47:69:38:9f:26: 66:7a:7a:65:ca:e3:50:43:47:75:56:50:72:32:5b:b3:10:ea: b8:9e:0c:9d:4c:31:a8:81:72:9c:3b:c6:ee:c6:d8:e2:78:e1: 4a:82:b5:24:51:39:5e:5c:f0:46:96:df:1b:9d:0e:ae:7b:f9: 34:91:2a:65:61:80:20:d9:d7:61:fb:4b:ab:81:cb:5f:4d:b4: 1c:60:03:c0:70:7f:b3:d8:87:1c:f9:2e:38:c9:c8:0d:46:22: b0:20:b7:19:94:57:6a:ac:58:81:c4:d3:00:c2:73:69:5b:5b: 2e:af:23:6d:6f:2c:c7:f4:48:16:35:76:03:d5:af:1c:9c:34: 39:50:4a:f2 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt+px/VJ8wS+2RddlMP8xX2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OWM3ZWI4NjIyNGFkYjM4NDA4ODQ3ZGVlNGNmYzRjNDAw M2FkNWQwHhcNMjYwMTAyMTIyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWVmNDMyMDgzNGE2MmIxYTdkNmQ3NWU4YzUxMWJlYTBjZWQzZDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SiosAbh62jy8nGeQ43m08O+Pgov mse6RyR92viCbpgG4wroUDZ6J4u9Fn5gfuCLek7vP6vvBcBFe3lRDlqlKvFFICz7 VWtl7+qBgkbfjBtOeY9CIwF8PD01YNJbSHfqZDRmzBJ+SFAr4gFO25oNppwBhiin hQdZe6EfQgpNohq3IziMBrSWExYApFHPJUA0rlkxSR6b992TSxzCzB/jGdN8wUDa 2uBKCzyY7sqvHJgRyKFUz33N9vhum6A2PPHdDxc+g+k8VS8gvDnMr8B/ZeVhKNzv DQv5j85xunS8S30JW0P+IKYqnX4VpeuCUwC7/dyKQ7RcML0zCIRQ9OkSwQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFHvQyCDSmKxp9bXXoxRG+oM7T1eMB8GA1UdIwQY MBaAFPacfrhiJK2zhAiEfe5M/ExAA61dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXB4LXVHSWtyYk9FQ0lSOTdrejhURUFEclYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84MzRlODItZjg2My00Y2E4LTgwNjEt ZjYxNmQ5MzE4MDg3LzEvVWU5RElJTktZckduMXRkZWpGRWI2Z3p0UFY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy84MzRlODItZjg2My00Y2E4LTgwNjEtZjYxNmQ5MzE4MDg3 LzEvOXB4LXVHSWtyYk9FQ0lSOTdrejhURUFEclYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQDJYKQAwQC W8GYAwQCkAKkAwQCuRDQAwQCuZ2YAwQCuftoAwQAwVQTAwQAwVQeAwQAwVRGAwQA wVRKAwQBwj6eAwQBwj6+MA0GCSqGSIb3DQEBCwUAA4IBAQDBi2vLhBvd/Ai9WFe1 tOTwNH6n0RPhZl/o6ZVacGTFLDgdLQw0ABPOq2o+S5TQ/Su7z3CthEEYm7JnmbQF kiLcqQKA9qN88oAojfmJ64lq/ROR0+7pkzlFHAjIYmX+WzeMtnEnWRlL4rCNNp6h cBBwG9c95lqNlWEWR2k4nyZmenplyuNQQ0d1VlByMluzEOq4ngydTDGogXKcO8bu xtjieOFKgrUkUTleXPBGlt8bnQ6ue/k0kSplYYAg2ddh+0urgctfTbQcYAPAcH+z 2Icc+S44ycgNRiKwILcZlFdqrFiBxNMAwnNpW1suryNtbyzH9EgWNXYD1a8cnDQ5 UEry -----END CERTIFICATE-----Generated at Mon Jan 26 05:57:37 2026 by rpki-client