This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/uhyFSL1UPDs4_nfLAbM-v4irdMY.roa File: uhyFSL1UPDs4_nfLAbM-v4irdMY.roa (raw, json) Hash identifier: ZO01BMp7TpnMAsZpqdmKDRBdOPJexIHg8AYIpzq+2b0= Subject key identifier: BA:1C:85:48:BD:54:3C:3B:38:FE:77:CB:01:B3:3E:BF:88:AB:74:C6 Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0 Certificate serial: 019B7EA65B20686DF669674CABD336ACC95C Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/uhyFSL1UPDs4_nfLAbM-v4irdMY.roa Signing time: Fri 02 Jan 2026 12:19:50 +0000 ROA not before: Fri 02 Jan 2026 12:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2854 IP address blocks: 46.111.0.0/20 maxlen: 20 46.111.120.0/21 maxlen: 21 46.111.128.0/21 maxlen: 21 185.128.196.0/24 maxlen: 24 194.84.46.0/24 maxlen: 24 195.151.140.0/23 maxlen: 23 195.151.242.0/24 maxlen: 24 212.176.0.0/19 maxlen: 19 212.176.32.0/19 maxlen: 19 212.176.64.0/19 maxlen: 19 212.176.96.0/19 maxlen: 19 212.176.128.0/20 maxlen: 20 212.176.224.0/19 maxlen: 19 2a00:1ec8:27::/48 maxlen: 48 2a00:1ec8:38::/48 maxlen: 48 2a00:1ec8:54::/48 maxlen: 48 2a00:1ec8:61::/48 maxlen: 48 2a00:1ec8:63::/48 maxlen: 48 2a00:1ec8:66::/48 maxlen: 48 2a00:1ec8:77::/48 maxlen: 48 2a00:1ec8:78::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:5b:20:68:6d:f6:69:67:4c:ab:d3:36:ac:c9:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0 Validity Not Before: Jan 2 12:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba1c8548bd543c3b38fe77cb01b33ebf88ab74c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:65:e5:31:f9:34:b7:64:b6:a8:16:68:ab:73: c9:9b:ef:33:cb:5d:fc:3f:d0:c1:dc:52:b4:21:b2: 0f:3a:60:5a:89:7f:2e:09:33:3f:29:30:c6:18:52: 4a:b6:22:eb:ad:01:86:ac:d8:ed:0d:d5:64:99:31: 02:08:d1:f3:59:cf:09:3f:77:41:b9:89:2f:61:c1: a7:08:b3:db:eb:57:60:0a:c3:f5:9f:db:c7:11:87: 7f:5e:f6:52:d7:5f:e5:40:52:bb:f4:12:31:73:37: 92:39:c0:f9:89:78:67:92:db:77:59:2a:3e:d2:f7: 10:92:e4:ae:ed:7e:7b:da:2d:da:49:66:f2:d5:65: ff:85:45:c4:20:ab:2a:d4:0d:31:f7:1f:45:4e:b1: 32:06:38:f5:b4:81:72:d8:36:ea:94:39:78:7f:1d: b5:36:43:e0:4c:da:3a:1a:a5:0f:a7:0b:21:53:e3: 9f:c3:b7:59:dc:b4:3e:34:39:c4:60:53:aa:2e:f5: 08:78:9e:7f:80:cd:6f:61:d8:d0:a3:b6:c3:16:93: 06:12:13:5d:e6:2c:d1:ed:96:8b:5e:2d:70:b2:f1: a2:b4:0e:80:53:a0:64:e7:51:ff:69:c6:1b:18:2a: 51:90:e8:7e:b8:5f:40:9e:f2:4c:b8:da:87:6b:a7: 34:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1C:85:48:BD:54:3C:3B:38:FE:77:CB:01:B3:3E:BF:88:AB:74:C6 X509v3 Authority Key Identifier: keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/uhyFSL1UPDs4_nfLAbM-v4irdMY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.111.0.0/20 46.111.120.0-46.111.135.255 185.128.196.0/24 194.84.46.0/24 195.151.140.0/23 195.151.242.0/24 212.176.0.0-212.176.143.255 212.176.224.0/19 IPv6: 2a00:1ec8:27::/48 2a00:1ec8:38::/48 2a00:1ec8:54::/48 2a00:1ec8:61::/48 2a00:1ec8:63::/48 2a00:1ec8:66::/48 2a00:1ec8:77::-2a00:1ec8:78:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 92:22:df:f1:c8:4a:f6:18:c0:6c:ef:12:c2:4e:78:57:8d:55: c7:dc:0b:fa:3a:23:47:24:1a:eb:62:74:da:2a:d2:e4:52:38: e0:8c:0e:2f:a6:55:97:b6:08:3b:b3:ee:84:09:be:5a:2b:ea: 90:a3:1e:93:54:77:79:c9:bf:d1:6a:f4:26:1e:b3:f9:4a:34: d9:4f:cf:3f:87:e0:ae:de:8f:16:58:e4:7f:ca:81:ba:4a:35: bf:f8:0e:06:a8:0a:75:50:a4:14:b4:66:11:84:85:54:53:f6: 92:5d:51:f7:f2:f0:4d:53:c2:af:de:b9:39:88:b3:c1:8c:53: d1:24:5b:f3:61:6c:c6:71:3d:fe:f0:b6:ed:d4:d5:f9:53:43: c2:48:92:8c:1c:29:47:68:56:57:cb:d5:88:b3:a9:3b:ab:36: 37:df:5a:16:9d:f3:e8:16:d9:fe:d0:54:f3:8f:ce:c6:23:8e: 88:dd:05:2f:b6:49:06:df:e3:c7:6a:f5:46:59:77:16:70:90: 0b:9c:bc:d9:92:dc:14:26:8b:bd:dc:05:0f:2c:5f:38:ac:9a: 6a:7d:51:6c:a9:f1:9a:f5:b6:f8:7f:95:ed:be:dc:2d:ba:b8: 85:8b:8c:18:44:ea:41:b8:6f:b6:31:ea:d7:6f:e3:b7:f2:dd: 51:d0:f7:8a -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgISAZt+plsgaG32aWdMq9M2rMlcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MzkwZWMwYWRjYTVmMDc0M2QxODExNDVjNzg5OWY5OTFm YjY1ZTAwHhcNMjYwMTAyMTIxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTFjODU0OGJkNTQzYzNiMzhmZTc3Y2IwMWIzM2ViZjg4YWI3NGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2XlMfk0t2S2qBZoq3PJm+8zy138 P9DB3FK0IbIPOmBaiX8uCTM/KTDGGFJKtiLrrQGGrNjtDdVkmTECCNHzWc8JP3dB uYkvYcGnCLPb61dgCsP1n9vHEYd/XvZS11/lQFK79BIxczeSOcD5iXhnktt3WSo+ 0vcQkuSu7X572i3aSWby1WX/hUXEIKsq1A0x9x9FTrEyBjj1tIFy2DbqlDl4fx21 NkPgTNo6GqUPpwshU+Ofw7dZ3LQ+NDnEYFOqLvUIeJ5/gM1vYdjQo7bDFpMGEhNd 5izR7ZaLXi1wsvGitA6AU6Bk51H/acYbGCpRkOh+uF9AnvJMuNqHa6c0KwIDAQAB o4IClzCCApMwHQYDVR0OBBYEFLochUi9VDw7OP53ywGzPr+Iq3TGMB8GA1UdIwQY MBaAFCk5DsCtyl8HQ9GBFFx4mfmR+2XgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUt ZWQ0MzNhYWM3ODI4LzEvdWh5RlNMMVVQRHM0X25mTEFiTS12NGlyZE1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUtZWQ0MzNhYWM3ODI4 LzEvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGsBggrBgEFBQcBBwEB/wSBnDCBmTBFBAIAATA/AwQELm8A MAwDBAMub3gDBAMub4ADBAC5gMQDBADCVC4DBAHDl4wDBADDl/IwCwMDBNSwAwQE 1LCAAwQF1LDgMFAEAgACMEoDBwAqAB7IACcDBwAqAB7IADgDBwAqAB7IAFQDBwAq AB7IAGEDBwAqAB7IAGMDBwAqAB7IAGYwEgMHACoAHsgAdwMHACoAHsgAeDANBgkq hkiG9w0BAQsFAAOCAQEAkiLf8chK9hjAbO8Swk54V41Vx9wL+jojRyQa62J02irS 5FI44IwOL6ZVl7YIO7PuhAm+WivqkKMek1R3ecm/0Wr0Jh6z+Uo02U/PP4fgrt6P Fljkf8qBuko1v/gOBqgKdVCkFLRmEYSFVFP2kl1R9/LwTVPCr965OYizwYxT0SRb 82FsxnE9/vC27dTV+VNDwkiSjBwpR2hWV8vViLOpO6s2N99aFp3z6BbZ/tBU84/O xiOOiN0FL7ZJBt/jx2r1Rll3FnCQC5y82ZLcFCaLvdwFDyxfOKyaan1RbKnxmvW2 +H+V7b7cLbq4hYuMGETqQbhvtjHq12/jt/LdUdD3ig== -----END CERTIFICATE-----Generated at Mon Jan 26 07:56:23 2026 by rpki-client