This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/UDKnq7i5-1LxNA79DLap5_xnYXc.roa File: UDKnq7i5-1LxNA79DLap5_xnYXc.roa (raw, json) Hash identifier: bwIftxc9q93hJ4E3ViMd2jP3yU+krx5QdkO9T9zGDn4= Subject key identifier: 50:32:A7:AB:B8:B9:FB:52:F1:34:0E:FD:0C:B6:A9:E7:FC:67:61:77 Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019B76EB055C40756AD4735051662A332468 Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/UDKnq7i5-1LxNA79DLap5_xnYXc.roa Signing time: Thu 01 Jan 2026 00:17:52 +0000 ROA not before: Thu 01 Jan 2026 00:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29119 IP address blocks: 5.182.72.0/22 maxlen: 24 45.136.32.0/22 maxlen: 24 45.146.224.0/22 maxlen: 24 45.149.117.0/24 maxlen: 24 45.149.118.0/24 maxlen: 24 77.81.167.0/24 maxlen: 24 92.114.36.0/24 maxlen: 24 92.114.53.0/24 maxlen: 24 92.114.83.0/24 maxlen: 24 141.98.52.0/22 maxlen: 24 185.44.28.0/22 maxlen: 24 185.94.248.0/22 maxlen: 24 185.123.136.0/22 maxlen: 24 185.126.232.0/22 maxlen: 24 185.128.192.0/22 maxlen: 24 185.150.80.0/22 maxlen: 24 185.151.176.0/22 maxlen: 24 185.198.108.0/22 maxlen: 24 185.230.0.0/22 maxlen: 24 185.248.208.0/22 maxlen: 24 193.39.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:05:5c:40:75:6a:d4:73:50:51:66:2a:33:24:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Jan 1 00:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5032a7abb8b9fb52f1340efd0cb6a9e7fc676177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ed:47:6a:50:7a:6e:24:bc:30:76:38:52:72: bd:16:ba:ca:51:ba:9c:21:2f:7d:77:c5:85:98:9f: 66:eb:10:84:ae:b3:89:de:ac:d2:23:fe:97:12:ea: c1:f6:27:42:22:01:3f:ea:a6:9b:7f:db:77:2c:c4: b1:f3:a6:d2:98:61:15:ab:60:de:97:a0:50:7c:50: 08:77:06:f1:31:86:5f:27:61:ed:11:63:84:c2:f8: f9:60:e2:5b:10:78:66:f3:d7:6f:07:9a:8e:03:67: 33:fe:9b:a6:17:13:85:0c:e9:71:78:89:a6:97:4c: 41:02:48:b6:fd:b0:fb:92:b4:ec:02:37:ca:7d:db: 15:a7:6f:50:42:64:9f:e4:f8:59:8b:19:9e:76:ea: 57:74:65:06:10:cf:f8:99:5d:a8:72:1d:e1:08:4f: 77:77:23:a3:7f:09:97:77:8c:f4:f1:2e:00:76:ea: 4a:ed:73:b2:a1:0d:43:fc:2e:2e:ab:e3:ef:b9:80: f2:38:2a:8b:61:28:28:7d:74:d5:d3:94:44:fd:9b: 61:bf:6a:09:39:8c:fb:df:b0:37:07:cd:5c:43:d7: 94:74:59:ee:96:d1:f5:1e:34:24:5c:93:86:c5:35: 6a:bc:74:38:16:26:54:1d:e3:d7:cb:7f:57:f4:5b: 5e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:32:A7:AB:B8:B9:FB:52:F1:34:0E:FD:0C:B6:A9:E7:FC:67:61:77 X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/UDKnq7i5-1LxNA79DLap5_xnYXc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.72.0/22 45.136.32.0/22 45.146.224.0/22 45.149.117.0-45.149.118.255 77.81.167.0/24 92.114.36.0/24 92.114.53.0/24 92.114.83.0/24 141.98.52.0/22 185.44.28.0/22 185.94.248.0/22 185.123.136.0/22 185.126.232.0/22 185.128.192.0/22 185.150.80.0/22 185.151.176.0/22 185.198.108.0/22 185.230.0.0/22 185.248.208.0/22 193.39.216.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:2a:1d:03:2d:bc:17:4a:da:7d:c8:24:5c:1e:33:cf:72:fb: 40:8a:a0:23:1e:fd:45:2d:92:4b:37:3a:c3:13:a4:73:c8:b8: 15:b1:d9:b5:a8:e4:98:67:63:d1:6a:86:ac:f7:98:0f:96:23: 0b:69:f1:49:6d:94:c4:5d:1b:bc:92:43:cf:da:ca:78:85:21: 13:2c:22:17:93:b8:84:0e:34:45:b1:ec:a2:00:c5:03:b6:94: f3:19:bd:0e:e3:d7:35:1b:50:e7:17:14:3c:04:58:55:05:a8: ec:4c:90:33:b7:7c:df:bf:f0:dd:3c:48:87:d5:83:6f:d7:7f: c9:a9:86:79:2f:e1:1e:18:61:29:5b:18:9c:de:97:5b:95:09: f2:cd:cf:07:e9:2e:a5:f6:24:4d:40:40:4e:29:3e:c6:de:1b: 0d:7c:f2:b2:25:a7:fd:1e:70:0c:9c:6c:eb:50:95:a6:1e:b3: 48:9b:0c:a5:3b:94:82:2e:28:19:0a:84:74:a0:96:b6:63:a0: 8c:2d:d7:40:6c:48:a6:23:71:8b:65:03:a1:0e:ef:03:cf:c5: bc:b9:1a:37:3b:01:c3:cd:41:7d:ad:fc:75:3e:33:9e:a0:d9: 69:6b:6e:9f:75:92:56:fc:bb:28:ed:90:e8:f2:75:a2:d1:80: e0:22:e6:51 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgISAZt26wVcQHVq1HNQUWYqMyRoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwMTAxMDAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDMyYTdhYmI4YjlmYjUyZjEzNDBlZmQwY2I2YTllN2ZjNjc2MTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue1HalB6biS8MHY4UnK9FrrKUbqc IS99d8WFmJ9m6xCErrOJ3qzSI/6XEurB9idCIgE/6qabf9t3LMSx86bSmGEVq2De l6BQfFAIdwbxMYZfJ2HtEWOEwvj5YOJbEHhm89dvB5qOA2cz/pumFxOFDOlxeImm l0xBAki2/bD7krTsAjfKfdsVp29QQmSf5PhZixmedupXdGUGEM/4mV2och3hCE93 dyOjfwmXd4z08S4AdupK7XOyoQ1D/C4uq+PvuYDyOCqLYSgofXTV05RE/Zthv2oJ OYz737A3B81cQ9eUdFnultH1HjQkXJOGxTVqvHQ4FiZUHePXy39X9Fte0QIDAQAB o4ICiDCCAoQwHQYDVR0OBBYEFFAyp6u4uftS8TQO/Qy2qef8Z2F3MB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvVURLbnE3aTUtMUx4TkE3OURMYXA1X3huWVhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGdBggrBgEFBQcBBwEB/wSBjTCBijCBhwQCAAEwgYADBAIF tkgDBAItiCADBAItkuAwDAMEAC2VdQMEAC2VdgMEAE1RpwMEAFxyJAMEAFxyNQME AFxyUwMEAo1iNAMEArksHAMEArle+AMEArl7iAMEArl+6AMEArmAwAMEArmWUAME ArmXsAMEArnGbAMEArnmAAMEArn40AMEAsEn2DANBgkqhkiG9w0BAQsFAAOCAQEA bSodAy28F0rafcgkXB4zz3L7QIqgIx79RS2SSzc6wxOkc8i4FbHZtajkmGdj0WqG rPeYD5YjC2nxSW2UxF0bvJJDz9rKeIUhEywiF5O4hA40RbHsogDFA7aU8xm9DuPX NRtQ5xcUPARYVQWo7EyQM7d837/w3TxIh9WDb9d/yamGeS/hHhhhKVsYnN6XW5UJ 8s3PB+kupfYkTUBATik+xt4bDXzysiWn/R5wDJxs61CVph6zSJsMpTuUgi4oGQqE dKCWtmOgjC3XQGxIpiNxi2UDoQ7vA8/FvLkaNzsBw81Bfa38dT4znqDZaWtun3WS Vvy7KO2Q6PJ1otGA4CLmUQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:27:39 2026 by rpki-client