This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/_UAEb8lxXMfLr99B3gLyKpq6SRc.roa File: _UAEb8lxXMfLr99B3gLyKpq6SRc.roa (raw, json) Hash identifier: 5fNZHaDxkH+elaL5Caoe2vhcopBQ8ICg8obtjvq1FY0= Subject key identifier: FD:40:04:6F:C9:71:5C:C7:CB:AF:DF:41:DE:02:F2:2A:9A:BA:49:17 Certificate issuer: /CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932 Certificate serial: 019B79ED4C92813D87EACC1B755B9B525859 Authority key identifier: A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/_UAEb8lxXMfLr99B3gLyKpq6SRc.roa Signing time: Thu 01 Jan 2026 14:19:13 +0000 ROA not before: Thu 01 Jan 2026 14:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51265 IP address blocks: 62.240.128.0/19 maxlen: 24 83.216.32.0/19 maxlen: 21 176.126.39.0/24 maxlen: 24 178.157.4.0/22 maxlen: 22 185.44.52.0/22 maxlen: 22 185.69.244.0/22 maxlen: 22 193.9.252.0/23 maxlen: 24 2a04:9540::/29 maxlen: 29 2a07:1740::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:4c:92:81:3d:87:ea:cc:1b:75:5b:9b:52:58:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932 Validity Not Before: Jan 1 14:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd40046fc9715cc7cbafdf41de02f22a9aba4917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2d:05:98:1a:ff:59:b5:c9:16:47:07:21:42: 4b:68:69:4b:b0:f9:fc:d1:9f:da:5a:e4:f0:e0:2b: f5:ab:cf:95:01:68:c4:6f:92:bd:cc:d9:c7:7f:25: 69:2c:55:ef:33:7d:c6:c6:4e:d1:5a:f3:35:2c:86: 78:b8:1f:fb:7f:cc:7f:1e:c3:c1:65:6b:99:08:1b: 96:63:aa:31:9a:31:31:2b:e0:00:0b:0e:db:98:a6: 66:c6:fc:cf:5b:f9:f6:a7:8d:29:ad:6c:8d:02:ee: 86:87:aa:da:04:5b:0d:25:c6:07:d4:08:e6:52:02: d5:f7:40:42:c5:e0:0c:7d:04:47:43:54:9f:64:a4: 14:9a:33:fb:db:5f:80:11:07:18:60:55:e1:d6:f0: 49:53:70:51:01:ae:05:f6:1b:53:f0:94:94:46:a2: b2:a7:71:be:16:83:84:68:2f:3d:3b:23:ed:27:de: 05:48:16:86:f4:6a:f3:4d:5a:6f:e5:c2:08:05:bd: d2:dd:ed:3b:cb:ac:7d:18:68:dc:64:0f:80:5d:06: 75:85:65:aa:e0:7a:d3:27:ac:df:9c:58:89:32:6c: 05:cc:b0:34:0e:a5:0d:42:58:d2:7a:d4:d5:47:9a: c1:af:60:23:1a:fb:5b:cd:8f:73:05:5d:f3:79:98: 6a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:40:04:6F:C9:71:5C:C7:CB:AF:DF:41:DE:02:F2:2A:9A:BA:49:17 X509v3 Authority Key Identifier: keyid:A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/_UAEb8lxXMfLr99B3gLyKpq6SRc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.240.128.0/19 83.216.32.0/19 176.126.39.0/24 178.157.4.0/22 185.44.52.0/22 185.69.244.0/22 193.9.252.0/23 IPv6: 2a04:9540::/29 2a07:1740::/29 Signature Algorithm: sha256WithRSAEncryption 0c:fa:22:b3:db:59:dd:42:90:d4:31:63:fa:10:9c:67:51:d0: 93:31:79:b1:b7:00:55:bb:e3:94:d8:3f:1e:09:77:e7:66:f9: 7f:63:a7:2f:7d:2a:17:94:b8:85:59:e5:58:0d:54:01:52:76: ce:e1:12:84:da:df:27:51:9a:2c:d7:2b:c5:34:fe:b5:0b:a3: 8d:29:f1:e3:45:48:e7:da:d4:fc:cc:3b:af:16:ec:28:41:fa: b7:5e:19:74:1e:0f:de:98:80:08:69:01:41:cd:6c:3d:a7:99: 0f:82:f6:be:0f:61:f3:63:84:33:0e:0f:8c:4b:27:b2:12:97: 66:ee:0e:7d:40:f4:41:5a:c3:45:45:fa:ec:7e:e6:61:ab:b8: 5b:88:0a:bb:2f:c6:46:d0:4c:57:20:31:3e:2b:15:5c:12:67: 4c:50:c9:c7:ab:83:8b:04:39:f8:d5:2b:6a:4e:8e:82:a2:3e: 4f:05:5a:be:4e:cb:ee:a9:6d:95:f0:8e:54:b5:31:b6:c9:f4: 5b:32:cb:b4:6f:a1:be:2e:d8:c2:b5:e3:4f:5c:86:8d:5c:20: 6c:40:43:c6:d6:0f:d4:38:cb:75:f2:e8:2f:b0:45:e4:41:c8: 19:bb:38:b0:f1:b0:3f:58:d7:6a:a5:e0:e5:49:1a:76:6e:b6: ba:24:a8:21 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZt57UySgT2H6swbdVubUlhZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYmZkMDZjZTg1NWI2MmQ5YjY4OGNkOGM1MzVkNWY0OTRj ZDM5MzIwHhcNMjYwMTAxMTQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDQwMDQ2ZmM5NzE1Y2M3Y2JhZmRmNDFkZTAyZjIyYTlhYmE0OTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzi0FmBr/WbXJFkcHIUJLaGlLsPn8 0Z/aWuTw4Cv1q8+VAWjEb5K9zNnHfyVpLFXvM33Gxk7RWvM1LIZ4uB/7f8x/HsPB ZWuZCBuWY6oxmjExK+AACw7bmKZmxvzPW/n2p40prWyNAu6Gh6raBFsNJcYH1Ajm UgLV90BCxeAMfQRHQ1SfZKQUmjP721+AEQcYYFXh1vBJU3BRAa4F9htT8JSURqKy p3G+FoOEaC89OyPtJ94FSBaG9GrzTVpv5cIIBb3S3e07y6x9GGjcZA+AXQZ1hWWq 4HrTJ6zfnFiJMmwFzLA0DqUNQljSetTVR5rBr2AjGvtbzY9zBV3zeZhqXQIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFP1ABG/JcVzHy6/fQd4C8iqaukkXMB8GA1UdIwQY MBaAFKC/0GzoVbYtm2iM2MU11fSUzTkyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0xfUWJPaFZ0aTJiYUl6WXhUWFY5SlROT1RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wMzMxNmQtMDRlMC00NjYwLWE2M2Ut NjcxODM5MjAwNjA0LzEvX1VBRWI4bHhYTWZMcjk5QjNnTHlLcHE2U1JjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8wMzMxNmQtMDRlMC00NjYwLWE2M2UtNjcxODM5MjAwNjA0 LzEvb0xfUWJPaFZ0aTJiYUl6WXhUWFY5SlROT1RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAwBAIAATAqAwQFPvCAAwQF U9ggAwQAsH4nAwQCsp0EAwQCuSw0AwQCuUX0AwQBwQn8MBQEAgACMA4DBQMqBJVA AwUDKgcXQDANBgkqhkiG9w0BAQsFAAOCAQEADPois9tZ3UKQ1DFj+hCcZ1HQkzF5 sbcAVbvjlNg/Hgl352b5f2OnL30qF5S4hVnlWA1UAVJ2zuEShNrfJ1GaLNcrxTT+ tQujjSnx40VI59rU/Mw7rxbsKEH6t14ZdB4P3piACGkBQc1sPaeZD4L2vg9h82OE Mw4PjEsnshKXZu4OfUD0QVrDRUX67H7mYau4W4gKuy/GRtBMVyAxPisVXBJnTFDJ x6uDiwQ5+NUrak6OgqI+TwVavk7L7qltlfCOVLUxtsn0WzLLtG+hvi7YwrXjT1yG jVwgbEBDxtYP1DjLdfLoL7BF5EHIGbs4sPGwP1jXaqXg5Ukadm62uiSoIQ== -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:49 2026 by rpki-client