This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/Ui7fU_ExtBQjRDUB3fQ-b_PpUpk.roa File: Ui7fU_ExtBQjRDUB3fQ-b_PpUpk.roa (raw, json) Hash identifier: k7V6RcZgsQ7uAKSC8Cpi5tMaIoKJRCG66jYZCk0ZWm8= Subject key identifier: 52:2E:DF:53:F1:31:B4:14:23:44:35:01:DD:F4:3E:6F:F3:E9:52:99 Certificate issuer: /CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb Certificate serial: 019B78A3220935DF5DC01F8C824B7AE77B61 Authority key identifier: CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/Ui7fU_ExtBQjRDUB3fQ-b_PpUpk.roa Signing time: Thu 01 Jan 2026 08:18:35 +0000 ROA not before: Thu 01 Jan 2026 08:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8678 IP address blocks: 5.23.120.0/21 maxlen: 21 46.182.64.0/21 maxlen: 21 80.251.32.0/20 maxlen: 20 92.61.0.0/20 maxlen: 20 185.22.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:22:09:35:df:5d:c0:1f:8c:82:4b:7a:e7:7b:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb Validity Not Before: Jan 1 08:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=522edf53f131b41423443501ddf43e6ff3e95299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:d8:5b:7b:f4:59:a9:a9:3b:42:83:a2:df:f1: 4b:dd:71:50:a4:20:c7:d8:a0:77:24:b9:14:5b:d7: 08:b4:74:19:f7:04:86:09:6d:d0:fd:47:84:a9:89: d8:8f:63:b1:49:0e:67:65:09:ad:fa:d9:ff:57:ab: 4a:62:44:d4:0e:e0:6f:87:f7:6d:dc:ba:e6:07:11: 90:06:94:b3:b7:34:b3:fb:60:65:f7:5c:b1:f6:b1: db:74:c4:d7:6c:84:ac:e1:e8:15:7f:d1:90:05:5a: 1a:ca:13:95:d1:5d:0f:85:3e:c9:ba:e6:79:d9:6b: 87:1e:ca:8f:ed:0a:18:c5:d4:ba:40:8e:79:11:80: 49:df:ef:41:e1:88:c3:2c:c4:0e:20:b7:01:cb:a7: 8e:66:b2:a3:f3:de:2d:0a:3a:aa:b8:85:87:09:e6: 33:9a:33:c1:c7:e5:4e:6a:11:ea:eb:a5:96:55:4e: 54:4f:1f:cd:d0:70:c3:0d:0b:f9:8d:51:b2:b1:e3: b0:d5:3e:9b:12:51:cd:be:8a:fb:5a:02:48:28:e3: 1c:3f:50:02:0d:2b:5c:6c:f4:20:29:fb:d7:6a:d9: 26:72:07:e5:00:e5:04:ba:46:e4:3c:bf:fa:8c:15: 5d:1a:7c:71:dd:95:6e:d4:b7:f2:8d:2e:be:31:65: 7e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2E:DF:53:F1:31:B4:14:23:44:35:01:DD:F4:3E:6F:F3:E9:52:99 X509v3 Authority Key Identifier: keyid:CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/Ui7fU_ExtBQjRDUB3fQ-b_PpUpk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.23.120.0/21 46.182.64.0/21 80.251.32.0/20 92.61.0.0/20 185.22.248.0/22 Signature Algorithm: sha256WithRSAEncryption 64:a0:58:bb:37:da:e1:12:a1:88:05:8a:b4:d9:aa:9c:97:4d: 14:0f:9b:fb:3d:6b:1f:50:09:d6:f9:4e:52:71:16:dc:c9:01: 69:49:f6:be:18:3c:62:6f:a9:b1:f4:0d:03:55:aa:32:ee:c4: e6:9e:cf:63:84:0e:f2:8b:60:3d:45:1a:1d:8a:5b:c1:fe:79: 80:08:b8:49:01:a6:ea:db:a0:90:ee:77:40:42:8e:b6:8a:7e: 75:68:2d:71:dc:a5:76:02:ac:3c:e4:5d:54:7b:4b:3d:c8:65: 6e:09:75:41:ec:61:f1:50:7f:8f:cd:16:20:2c:5a:cf:4a:9c: a6:c7:37:ef:cd:7c:08:41:00:d1:90:d1:2d:70:36:c1:46:79: cf:d4:af:30:cd:b3:dc:1f:3b:a4:64:5d:70:fc:cc:af:c7:38: 3a:09:7b:f5:e2:6c:d2:1d:2e:20:82:58:33:65:76:0f:b8:9f: 41:e0:06:e4:c1:18:e0:9f:7b:1a:88:ae:f5:bf:6b:ac:c1:86: 9d:fa:ec:25:84:28:0c:59:4f:08:50:61:a4:01:1d:aa:ae:3a: 90:5d:2d:af:3b:7a:ae:84:8f:7d:47:73:02:f0:6c:52:29:f6: 9f:a3:1e:4f:5e:0b:b6:17:6d:56:21:4e:39:47:ab:0b:12:74: 33:ab:12:eb -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt4oyIJNd9dwB+Mgkt653thMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZjY4ZWMxMjdmYjMyYzY3OTIxOGFmYzc2ZTFiNmVhYTU5 NTIxYmIwHhcNMjYwMTAxMDgxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjJlZGY1M2YxMzFiNDE0MjM0NDM1MDFkZGY0M2U2ZmYzZTk1Mjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9thbe/RZqak7QoOi3/FL3XFQpCDH 2KB3JLkUW9cItHQZ9wSGCW3Q/UeEqYnYj2OxSQ5nZQmt+tn/V6tKYkTUDuBvh/dt 3LrmBxGQBpSztzSz+2Bl91yx9rHbdMTXbISs4egVf9GQBVoayhOV0V0PhT7JuuZ5 2WuHHsqP7QoYxdS6QI55EYBJ3+9B4YjDLMQOILcBy6eOZrKj894tCjqquIWHCeYz mjPBx+VOahHq66WWVU5UTx/N0HDDDQv5jVGyseOw1T6bElHNvor7WgJIKOMcP1AC DStcbPQgKfvXatkmcgflAOUEukbkPL/6jBVdGnxx3ZVu1LfyjS6+MWV+kQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFFIu31PxMbQUI0Q1Ad30Pm/z6VKZMB8GA1UdIwQY MBaAFM32jsEn+zLGeSGK/HbhtuqllSG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemZhT3dTZjdNc1o1SVlyOGR1RzI2cVdWSWJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wODM3N2YtZjIzMi00NGIwLWEzYjUt OTgyNDZhNGNiNmY4LzEvVWk3ZlVfRXh0QlFqUkRVQjNmUS1iX1BwVXBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8wODM3N2YtZjIzMi00NGIwLWEzYjUtOTgyNDZhNGNiNmY4 LzEvemZhT3dTZjdNc1o1SVlyOGR1RzI2cVdWSWJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDBRd4AwQD LrZAAwQEUPsgAwQEXD0AAwQCuRb4MA0GCSqGSIb3DQEBCwUAA4IBAQBkoFi7N9rh EqGIBYq02aqcl00UD5v7PWsfUAnW+U5ScRbcyQFpSfa+GDxib6mx9A0DVaoy7sTm ns9jhA7yi2A9RRodilvB/nmACLhJAabq26CQ7ndAQo62in51aC1x3KV2Aqw85F1U e0s9yGVuCXVB7GHxUH+PzRYgLFrPSpymxzfvzXwIQQDRkNEtcDbBRnnP1K8wzbPc HzukZF1w/Myvxzg6CXv14mzSHS4gglgzZXYPuJ9B4AbkwRjgn3saiK71v2uswYad +uwlhCgMWU8IUGGkAR2qrjqQXS2vO3quhI99R3MC8GxSKfafox5PXgu2F21WIU45 R6sLEnQzqxLr -----END CERTIFICATE-----Generated at Mon Jan 26 14:01:03 2026 by rpki-client