This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/UjpGqkRA-GecGub_bNfWIbCr8qA.roa File: UjpGqkRA-GecGub_bNfWIbCr8qA.roa (raw, json) Hash identifier: MyFhNDBxXDyd4tsLsFpkGJ4cdmLuM53A1RTlBXsPZhc= Subject key identifier: 52:3A:46:AA:44:40:F8:67:9C:1A:E6:FF:6C:D7:D6:21:B0:AB:F2:A0 Certificate issuer: /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7 Certificate serial: 019B78A3619F0205F8159FEB929A5ED9668C Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/UjpGqkRA-GecGub_bNfWIbCr8qA.roa Signing time: Thu 01 Jan 2026 08:18:51 +0000 ROA not before: Thu 01 Jan 2026 08:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57276 IP address blocks: 37.157.32.0/22 maxlen: 22 37.157.36.0/22 maxlen: 22 82.163.112.0/22 maxlen: 22 82.163.116.0/22 maxlen: 22 82.163.124.0/23 maxlen: 23 82.163.126.0/23 maxlen: 23 185.53.224.0/23 maxlen: 23 185.53.226.0/23 maxlen: 23 195.250.16.0/24 maxlen: 24 195.250.17.0/24 maxlen: 24 195.250.18.0/24 maxlen: 24 195.250.19.0/24 maxlen: 24 2a01:a220::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:61:9f:02:05:f8:15:9f:eb:92:9a:5e:d9:66:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7 Validity Not Before: Jan 1 08:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=523a46aa4440f8679c1ae6ff6cd7d621b0abf2a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:04:ec:17:e8:e0:2f:47:ed:68:e6:d8:c8:e1: fc:87:1b:48:31:40:5e:d5:1e:c9:8a:4e:5d:ca:1d: ae:a8:6c:40:9a:b7:77:5c:7c:f3:cb:99:21:27:63: c0:64:41:85:ab:66:db:b5:a1:15:79:8d:6a:23:96: 06:ac:1f:34:7c:e8:32:00:11:f2:9f:05:cc:eb:44: 42:11:8e:65:95:f9:21:e0:d5:02:53:a6:61:8c:1d: bb:b5:9b:90:db:65:1a:5b:9b:9e:4c:8a:95:1f:08: 9e:12:7d:ec:7d:a2:5f:b4:06:a8:ae:8d:e2:ff:49: f3:a8:c7:80:0a:30:3a:f9:2f:56:3d:09:6a:53:74: 0b:fb:28:f6:bf:03:7a:af:c2:a4:22:25:a3:6f:4a: a7:f2:17:df:ba:0a:aa:cf:39:15:be:a9:95:b8:f0: 79:d9:fb:1c:30:84:8e:f9:a6:cb:68:19:d5:ea:a0: 9f:19:78:4c:51:30:aa:82:f1:62:08:c6:d9:81:96: 3c:f4:74:75:32:85:c5:4f:56:5c:ee:59:c9:70:f5: d0:e3:b3:87:d4:76:7f:c7:8e:9d:0a:73:8b:38:63: 0d:8d:e8:d2:b7:04:df:b1:d9:29:d0:63:6b:fb:98: 8b:c0:1a:f4:8f:c2:55:21:08:5a:4c:8b:63:58:cc: 22:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:3A:46:AA:44:40:F8:67:9C:1A:E6:FF:6C:D7:D6:21:B0:AB:F2:A0 X509v3 Authority Key Identifier: keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/UjpGqkRA-GecGub_bNfWIbCr8qA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.157.32.0/21 82.163.112.0/21 82.163.124.0/22 185.53.224.0/22 195.250.16.0/22 IPv6: 2a01:a220::/29 Signature Algorithm: sha256WithRSAEncryption a4:8d:13:52:7c:5b:05:e6:aa:4c:e3:4d:ed:cc:af:73:93:4a: b3:87:98:2d:72:43:f8:c5:5e:c3:37:a6:cf:fb:fc:c6:e2:5a: 5d:3c:c1:c1:af:3c:0b:d7:15:52:c4:76:a1:61:73:dd:51:de: 5a:4b:dd:d3:fa:0a:c0:ef:11:2e:38:65:74:30:c7:de:c0:93: 85:49:19:f6:4a:1a:f7:da:b4:9b:6a:2a:94:f4:37:98:84:42: 8d:3d:71:33:29:19:a7:34:41:b4:02:73:77:bc:6a:94:93:6c: b7:55:da:40:2f:95:8d:58:70:aa:55:c9:83:18:f8:d6:b9:f3: 9d:23:8a:87:47:e8:9f:70:02:2c:96:c6:65:b7:79:e3:65:89: 3d:4d:20:87:c6:45:71:c3:ee:45:b0:91:23:e9:76:74:51:41: cc:af:d3:40:14:b0:bd:01:23:09:94:7a:cb:cb:c2:b9:3e:91: 4c:42:6f:9d:4d:33:7b:ad:83:c2:86:8a:51:bc:0e:ef:ec:37: 60:92:6c:50:a5:2e:8b:70:12:48:20:bd:1b:d5:4d:40:3e:09: e3:dc:de:26:05:40:e1:e6:e5:cc:96:7f:d8:1e:4e:3c:e7:e1: a4:56:bc:4b:d4:c7:d3:a1:a2:6a:a8:a9:12:43:22:5d:5e:36: f0:27:4c:5f -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt4o2GfAgX4FZ/rkppe2WaMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZTg0M2E4NWRkNjY0ZTlkYzAzMTA4OTJiZDdkZDljZTUy NTkxYzcwHhcNMjYwMTAxMDgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjNhNDZhYTQ0NDBmODY3OWMxYWU2ZmY2Y2Q3ZDYyMWIwYWJmMmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQTsF+jgL0ftaObYyOH8hxtIMUBe 1R7Jik5dyh2uqGxAmrd3XHzzy5khJ2PAZEGFq2bbtaEVeY1qI5YGrB80fOgyABHy nwXM60RCEY5llfkh4NUCU6ZhjB27tZuQ22UaW5ueTIqVHwieEn3sfaJftAaoro3i /0nzqMeACjA6+S9WPQlqU3QL+yj2vwN6r8KkIiWjb0qn8hffugqqzzkVvqmVuPB5 2fscMISO+abLaBnV6qCfGXhMUTCqgvFiCMbZgZY89HR1MoXFT1Zc7lnJcPXQ47OH 1HZ/x46dCnOLOGMNjejStwTfsdkp0GNr+5iLwBr0j8JVIQhaTItjWMwikwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFFI6RqpEQPhnnBrm/2zX1iGwq/KgMB8GA1UdIwQY MBaAFE7oQ6hd1mTp3AMQiSvX3ZzlJZHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9hZGFkMjAtYzUxMi00ZmIwLWExMjct NDhjZjQxMmIzODdiLzEvVWpwR3FrUkEtR2VjR3ViX2JOZldJYkNyOHFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9hZGFkMjAtYzUxMi00ZmIwLWExMjctNDhjZjQxMmIzODdi LzEvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDJZ0gAwQD UqNwAwQCUqN8AwQCuTXgAwQCw/oQMA0EAgACMAcDBQMqAaIgMA0GCSqGSIb3DQEB CwUAA4IBAQCkjRNSfFsF5qpM403tzK9zk0qzh5gtckP4xV7DN6bP+/zG4lpdPMHB rzwL1xVSxHahYXPdUd5aS93T+grA7xEuOGV0MMfewJOFSRn2Shr32rSbaiqU9DeY hEKNPXEzKRmnNEG0AnN3vGqUk2y3VdpAL5WNWHCqVcmDGPjWufOdI4qHR+ifcAIs lsZlt3njZYk9TSCHxkVxw+5FsJEj6XZ0UUHMr9NAFLC9ASMJlHrLy8K5PpFMQm+d TTN7rYPChopRvA7v7DdgkmxQpS6LcBJIIL0b1U1APgnj3N4mBUDh5uXMln/YHk48 5+GkVrxL1MfToaJqqKkSQyJdXjbwJ0xf -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:00 2026 by rpki-client