This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/5UgWz4TquW-RCZNQAffQO9XK1TY.roa File: 5UgWz4TquW-RCZNQAffQO9XK1TY.roa (raw, json) Hash identifier: K3S0eQrPAI5ZGDD9EhtxIW1xNbkOZ7avoejLjH/PyGs= Subject key identifier: E5:48:16:CF:84:EA:B9:6F:91:09:93:50:01:F7:D0:3B:D5:CA:D5:36 Certificate issuer: /CN=8c856557c4146a8b50dc4d94424b06680cef755b Certificate serial: 019B77C7575D89B7AE9BEC6A29737A27AB90 Authority key identifier: 8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/5UgWz4TquW-RCZNQAffQO9XK1TY.roa Signing time: Thu 01 Jan 2026 04:18:31 +0000 ROA not before: Thu 01 Jan 2026 04:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39326 IP address blocks: 37.46.200.0/21 maxlen: 24 46.17.56.0/21 maxlen: 24 77.75.104.0/21 maxlen: 24 80.71.0.0/19 maxlen: 24 80.71.27.0/24 maxlen: 24 89.248.16.0/20 maxlen: 24 93.89.80.0/20 maxlen: 24 185.75.28.0/22 maxlen: 24 185.75.30.0/24 maxlen: 24 194.0.77.0/24 maxlen: 24 194.0.78.0/23 maxlen: 24 195.90.120.0/23 maxlen: 24 195.90.121.0/24 maxlen: 24 195.238.232.0/24 maxlen: 24 217.196.224.0/19 maxlen: 24 2001:a08::/32 maxlen: 32 2a01:348::/32 maxlen: 32 2a01:348:62::/48 maxlen: 48 2a01:348:fab::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:57:5d:89:b7:ae:9b:ec:6a:29:73:7a:27:ab:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c856557c4146a8b50dc4d94424b06680cef755b Validity Not Before: Jan 1 04:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e54816cf84eab96f9109935001f7d03bd5cad536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ef:6e:7e:58:2b:8a:25:b8:6a:3b:a8:61:87: c0:8b:ef:39:26:b0:6e:db:2e:40:06:04:7c:2a:8f: 3a:41:cc:36:da:5b:06:32:5e:3d:b9:11:c9:0c:c3: ec:74:5b:3a:52:08:60:24:e3:31:a6:1b:5a:91:3e: 26:b1:82:6f:0a:bd:67:3a:33:81:81:1a:6a:07:d0: fb:f1:ad:a4:36:14:81:1e:ef:d7:31:72:3a:e6:28: 8f:80:fb:8e:da:d0:ac:5e:cb:f3:21:e8:8f:bf:95: fc:e4:4c:a7:21:c3:9b:31:e5:d2:fd:b5:e4:3c:48: 36:24:d3:3e:d2:57:93:90:a2:f1:aa:d8:1e:d9:72: 41:8d:42:4a:6c:9b:c7:df:ad:c3:b3:e3:55:5f:60: 3a:8d:8e:3b:7e:69:ed:3d:60:b0:91:30:92:7c:e1: e8:09:28:45:10:e6:2d:fc:55:f9:f3:04:df:ce:6f: 4e:a6:1b:36:c3:33:32:a8:98:82:10:e3:bf:e7:21: 7a:49:51:0c:e6:a9:03:1a:51:ee:3e:82:ce:be:cc: f9:e0:1d:aa:13:79:d6:fd:f8:f1:8c:33:bb:4e:5a: 5e:10:2b:e6:80:bb:79:37:29:ec:d6:a3:8d:78:4b: 83:46:72:b7:36:0a:5e:52:24:69:ce:39:0f:2d:a7: fe:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:48:16:CF:84:EA:B9:6F:91:09:93:50:01:F7:D0:3B:D5:CA:D5:36 X509v3 Authority Key Identifier: keyid:8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/5UgWz4TquW-RCZNQAffQO9XK1TY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.46.200.0/21 46.17.56.0/21 77.75.104.0/21 80.71.0.0/19 89.248.16.0/20 93.89.80.0/20 185.75.28.0/22 194.0.77.0-194.0.79.255 195.90.120.0/23 195.238.232.0/24 217.196.224.0/19 IPv6: 2001:a08::/32 2a01:348::/32 Signature Algorithm: sha256WithRSAEncryption b1:20:7a:7c:4e:0d:c5:87:53:37:bb:32:ae:ff:c7:c5:fa:f2: 8c:41:37:f6:ef:11:fb:1a:68:a9:48:ed:7f:99:84:6c:c5:d6: 88:92:2f:56:34:7c:e7:74:0e:5b:b2:44:8a:a5:dc:c3:ff:47: a0:29:c5:b6:31:6e:be:05:cf:fc:b4:18:92:20:c4:07:61:9a: 5c:54:13:aa:1b:ab:b9:49:53:b9:60:f6:92:8c:07:20:d0:50: 33:49:03:d3:9c:ca:8f:69:d8:cb:78:ff:aa:42:38:48:b3:39: b3:22:2a:30:35:da:27:4a:75:8a:1d:7d:52:0b:7c:8f:ba:2b: df:9b:b2:74:e0:0b:00:74:f6:d7:1c:f3:94:e4:e5:1e:3e:e0: 9d:92:19:3d:f9:de:87:d0:66:c5:f0:63:1e:d1:7e:8c:a5:84: e4:51:e9:c4:42:93:b1:b5:92:78:52:e9:35:79:ab:ba:fc:3c: 66:5f:9f:f9:12:a8:ab:9d:ca:e9:fa:3c:d0:10:4c:fc:d7:55: 15:59:57:d0:2d:43:0c:82:99:d2:bb:83:54:11:29:8a:24:66: 71:fa:27:bd:4b:1e:ae:d9:de:13:25:34:8c:2f:18:53:f6:83: b6:4a:62:a6:17:5f:e4:c9:ea:b9:cc:b5:15:d1:03:0f:d9:b5: 31:5d:69:5e -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgISAZt3x1ddibeum+xqKXN6J6uQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjODU2NTU3YzQxNDZhOGI1MGRjNGQ5NDQyNGIwNjY4MGNl Zjc1NWIwHhcNMjYwMTAxMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTQ4MTZjZjg0ZWFiOTZmOTEwOTkzNTAwMWY3ZDAzYmQ1Y2FkNTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou9uflgriiW4ajuoYYfAi+85JrBu 2y5ABgR8Ko86Qcw22lsGMl49uRHJDMPsdFs6UghgJOMxphtakT4msYJvCr1nOjOB gRpqB9D78a2kNhSBHu/XMXI65iiPgPuO2tCsXsvzIeiPv5X85EynIcObMeXS/bXk PEg2JNM+0leTkKLxqtge2XJBjUJKbJvH363Ds+NVX2A6jY47fmntPWCwkTCSfOHo CShFEOYt/FX58wTfzm9Ophs2wzMyqJiCEOO/5yF6SVEM5qkDGlHuPoLOvsz54B2q E3nW/fjxjDO7TlpeECvmgLt5Nyns1qONeEuDRnK3NgpeUiRpzjkPLaf+TwIDAQAB o4ICYzCCAl8wHQYDVR0OBBYEFOVIFs+E6rlvkQmTUAH30DvVytU2MB8GA1UdIwQY MBaAFIyFZVfEFGqLUNxNlEJLBmgM73VbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaklWbFY4UVVhb3RRM0UyVVFrc0dhQXp2ZFZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8zMDZhZGItN2FhNy00YjgyLWIwNWEt MmE2YjlhMGNjYWJkLzEvNVVnV3o0VHF1Vy1SQ1pOUUFmZlFPOVhLMVRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8zMDZhZGItN2FhNy00YjgyLWIwNWEtMmE2YjlhMGNjYWJk LzEvaklWbFY4UVVhb3RRM0UyVVFrc0dhQXp2ZFZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBQBAIAATBKAwQDJS7IAwQD LhE4AwQDTUtoAwQFUEcAAwQEWfgQAwQEXVlQAwQCuUscMAwDBADCAE0DBATCAEAD BAHDWngDBADD7ugDBAXZxOAwFAQCAAIwDgMFACABCggDBQAqAQNIMA0GCSqGSIb3 DQEBCwUAA4IBAQCxIHp8Tg3Fh1M3uzKu/8fF+vKMQTf27xH7GmipSO1/mYRsxdaI ki9WNHzndA5bskSKpdzD/0egKcW2MW6+Bc/8tBiSIMQHYZpcVBOqG6u5SVO5YPaS jAcg0FAzSQPTnMqPadjLeP+qQjhIszmzIiowNdonSnWKHX1SC3yPuivfm7J04AsA dPbXHPOU5OUePuCdkhk9+d6H0GbF8GMe0X6MpYTkUenEQpOxtZJ4Uuk1eau6/Dxm X5/5Eqirncrp+jzQEEz811UVWVfQLUMMgpnSu4NUESmKJGZx+ie9Sx6u2d4TJTSM LxhT9oO2SmKmF1/kyeq5zLUV0QMP2bUxXWle -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:22 2026 by rpki-client