This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/uLk-SOdg3NaZVxDw7uzOJ2cDto0.roa File: uLk-SOdg3NaZVxDw7uzOJ2cDto0.roa (raw, json) Hash identifier: WMGu6CGGF8Zc3rzf7uT2wsSrHABykv7oyw0K24uqKAU= Subject key identifier: B8:B9:3E:48:E7:60:DC:D6:99:57:10:F0:EE:EC:CE:27:67:03:B6:8D Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3 Certificate serial: 019B7B3650561BAE655C77B2F8F3E03AC8C8 Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/uLk-SOdg3NaZVxDw7uzOJ2cDto0.roa Signing time: Thu 01 Jan 2026 20:18:35 +0000 ROA not before: Thu 01 Jan 2026 20:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3170 IP address blocks: 83.97.16.0/22 maxlen: 24 83.97.16.0/24 maxlen: 32 91.240.224.0/24 maxlen: 24 103.141.24.0/23 maxlen: 32 185.17.196.0/22 maxlen: 24 185.175.90.0/24 maxlen: 24 188.64.34.0/23 maxlen: 24 188.64.36.0/22 maxlen: 24 193.35.56.0/22 maxlen: 24 193.105.188.0/24 maxlen: 24 194.0.58.0/24 maxlen: 24 194.69.165.0/24 maxlen: 24 195.74.52.0/22 maxlen: 24 195.144.8.0/24 maxlen: 24 195.191.218.0/23 maxlen: 24 195.191.219.0/24 maxlen: 32 2a03:ee40::/32 maxlen: 32 2a07:240::/29 maxlen: 48 2a10:4740::/29 maxlen: 48 2a11:2640::/32 maxlen: 32 2a11:2641::/32 maxlen: 32 2a11:2647::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:50:56:1b:ae:65:5c:77:b2:f8:f3:e0:3a:c8:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3 Validity Not Before: Jan 1 20:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8b93e48e760dcd6995710f0eeecce276703b68d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b7:9e:6a:0a:81:05:db:4b:b9:06:31:4a:c6: 92:79:d7:ae:37:a3:30:e1:e5:5b:43:3e:13:e8:10: d4:6e:bc:86:42:d4:03:7d:4f:eb:47:5c:88:40:36: 36:7d:69:40:a7:be:0d:ab:6e:61:fc:6e:f8:1f:c4: 47:93:95:89:7d:6a:bc:b8:d1:22:f9:8a:21:c6:1e: 2b:87:06:e5:41:2b:f0:dd:0d:e5:b1:55:ac:4d:17: ad:c5:95:59:3e:a4:5f:0e:7c:4d:a7:02:c4:e1:0c: c4:93:b5:3f:5e:0e:81:61:03:f1:47:e3:2f:a6:70: 39:af:cf:1b:a2:3e:37:5b:f7:ba:32:1a:c6:06:ac: 11:bc:94:e8:30:7a:ee:f7:18:db:a3:55:6f:55:e6: 63:41:41:d2:71:26:23:88:01:e2:63:91:6a:4a:0b: 85:c1:c2:c3:62:d3:fe:68:84:39:d3:b9:db:2b:e2: e8:d5:f6:be:9f:3b:ea:a2:c2:a3:6d:61:13:cb:b5: ff:ed:5d:da:8d:ed:e5:37:7a:c2:15:6b:08:92:d6: a1:57:bd:c9:e7:bb:11:ce:c3:75:9b:01:82:9f:e2: 25:21:e7:a2:bd:99:7c:ba:1f:2a:56:89:4f:4c:1d: 5d:1a:7b:50:2a:2b:e9:21:42:b1:04:07:b6:94:97: d1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B9:3E:48:E7:60:DC:D6:99:57:10:F0:EE:EC:CE:27:67:03:B6:8D X509v3 Authority Key Identifier: keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/uLk-SOdg3NaZVxDw7uzOJ2cDto0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.97.16.0/22 91.240.224.0/24 103.141.24.0/23 185.17.196.0/22 185.175.90.0/24 188.64.34.0-188.64.39.255 193.35.56.0/22 193.105.188.0/24 194.0.58.0/24 194.69.165.0/24 195.74.52.0/22 195.144.8.0/24 195.191.218.0/23 IPv6: 2a03:ee40::/32 2a07:240::/29 2a10:4740::/29 2a11:2640::/31 2a11:2647::/32 Signature Algorithm: sha256WithRSAEncryption 1e:2b:de:de:0f:de:d6:a7:bc:63:20:fc:f8:be:e6:e3:ec:7f: 54:be:e3:04:dc:f4:90:f6:17:4e:a7:ac:0d:54:cf:b3:00:2e: 0e:be:fa:20:79:b2:6d:f1:91:03:d1:1b:d3:38:8b:f1:4b:cd: a3:65:93:89:f6:e0:e7:81:8a:f2:ae:02:83:24:73:10:b6:0c: c3:61:6e:96:e1:39:7d:ba:34:03:83:05:03:4e:a5:62:6b:89: b8:7b:49:d8:8e:cd:6a:c6:77:f2:0e:75:4b:96:f3:ca:8d:26: 94:cd:fb:a3:33:cf:ea:6c:79:08:b5:7d:c2:3a:c9:ec:af:b8: cb:a6:1b:58:33:5e:cc:b2:a1:d4:14:03:4d:2e:fe:dc:54:43: d9:52:c2:55:8f:b5:da:84:85:e6:4d:a5:2d:27:85:ff:1b:96: a2:b2:c4:34:14:3c:3d:52:74:ad:e9:3f:cc:00:cc:2d:6d:57: 98:d6:8f:71:6f:20:9f:10:db:b9:a0:c9:e0:aa:ba:80:9f:92: b4:4f:4d:e0:4d:6a:9f:9e:23:b0:7a:44:60:90:ce:b9:e3:d9: af:ee:e9:79:df:3c:38:ab:66:4e:9e:21:e4:5f:5a:96:81:ee: cb:05:71:f1:55:f5:31:2b:f2:93:a9:fd:24:50:b7:30:bb:df: 6d:c8:ff:54 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt7NlBWG65lXHey+PPgOsjIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5 MjFlYzMwHhcNMjYwMTAxMjAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGI5M2U0OGU3NjBkY2Q2OTk1NzEwZjBlZWVjY2UyNzY3MDNiNjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7eeagqBBdtLuQYxSsaSedeuN6Mw 4eVbQz4T6BDUbryGQtQDfU/rR1yIQDY2fWlAp74Nq25h/G74H8RHk5WJfWq8uNEi +Yohxh4rhwblQSvw3Q3lsVWsTRetxZVZPqRfDnxNpwLE4QzEk7U/Xg6BYQPxR+Mv pnA5r88boj43W/e6MhrGBqwRvJToMHru9xjbo1VvVeZjQUHScSYjiAHiY5FqSguF wcLDYtP+aIQ507nbK+Lo1fa+nzvqosKjbWETy7X/7V3aje3lN3rCFWsIktahV73J 57sRzsN1mwGCn+IlIeeivZl8uh8qVolPTB1dGntQKivpIUKxBAe2lJfRfQIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFLi5PkjnYNzWmVcQ8O7szidnA7aNMB8GA1UdIwQY MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt YmJhODYwYjI2YzAyLzEvdUxrLVNPZGczTmFaVnhEdzd1ek9KMmNEdG8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGcBggrBgEFBQcBBwEB/wSBjDCBiTBcBAIAATBWAwQCU2EQ AwQAW/DgAwQBZ40YAwQCuRHEAwQAua9aMAwDBAG8QCIDBAO8QCADBALBIzgDBADB abwDBADCADoDBADCRaUDBALDSjQDBADDkAgDBAHDv9owKQQCAAIwIwMFACoD7kAD BQMqBwJAAwUDKhBHQAMFASoRJkADBQAqESZHMA0GCSqGSIb3DQEBCwUAA4IBAQAe K97eD97Wp7xjIPz4vubj7H9UvuME3PSQ9hdOp6wNVM+zAC4OvvogebJt8ZED0RvT OIvxS82jZZOJ9uDngYryrgKDJHMQtgzDYW6W4Tl9ujQDgwUDTqVia4m4e0nYjs1q xnfyDnVLlvPKjSaUzfujM8/qbHkItX3COsnsr7jLphtYM17MsqHUFANNLv7cVEPZ UsJVj7XahIXmTaUtJ4X/G5aissQ0FDw9UnSt6T/MAMwtbVeY1o9xbyCfENu5oMng qrqAn5K0T03gTWqfniOwekRgkM6549mv7ul53zw4q2ZOniHkX1qWge7LBXHxVfUx K/KTqf0kULcwu99tyP9U -----END CERTIFICATE-----Generated at Sun Jan 25 11:42:56 2026 by rpki-client