This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/Uk_XDceW-ZPDKMcc_f2F6eLioUk.roa File: Uk_XDceW-ZPDKMcc_f2F6eLioUk.roa (raw, json) Hash identifier: jLiOckt+vrx8TOSEJT6TLvtJFvKCadRGVP5+VbDfoXE= Subject key identifier: 52:4F:D7:0D:C7:96:F9:93:C3:28:C7:1C:FD:FD:85:E9:E2:E2:A1:49 Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d Certificate serial: 019B7D5AF32CC4F3C2D6010ACBD226341637 Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/Uk_XDceW-ZPDKMcc_f2F6eLioUk.roa Signing time: Fri 02 Jan 2026 06:17:51 +0000 ROA not before: Fri 02 Jan 2026 06:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41436 IP address blocks: 5.180.180.0/24 maxlen: 24 5.180.181.0/24 maxlen: 24 5.180.182.0/24 maxlen: 24 5.180.183.0/24 maxlen: 24 45.91.168.0/24 maxlen: 24 45.91.169.0/24 maxlen: 24 63.250.56.0/24 maxlen: 24 63.250.57.0/24 maxlen: 24 83.229.82.0/24 maxlen: 24 83.229.83.0/24 maxlen: 24 103.13.210.0/24 maxlen: 24 103.45.247.0/24 maxlen: 24 185.181.8.0/24 maxlen: 24 185.220.204.0/24 maxlen: 24 185.220.205.0/24 maxlen: 24 185.227.110.0/24 maxlen: 24 185.247.117.0/24 maxlen: 24 193.168.173.0/24 maxlen: 24 194.37.81.0/24 maxlen: 24 194.146.38.0/24 maxlen: 24 194.146.39.0/24 maxlen: 24 195.238.121.0/24 maxlen: 24 2a06:c5c0:200::/48 maxlen: 48 2a07:3b80:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:f3:2c:c4:f3:c2:d6:01:0a:cb:d2:26:34:16:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d Validity Not Before: Jan 2 06:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=524fd70dc796f993c328c71cfdfd85e9e2e2a149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:98:b9:7b:f6:98:eb:11:de:d7:fa:f5:d1:a0: 5c:19:21:8f:84:ae:8c:90:ef:f3:2f:a5:5d:f6:3a: 7e:c2:28:63:2d:f6:e2:70:5a:84:42:e6:8d:de:be: 2b:d6:6c:44:d8:88:56:43:d3:2b:3e:1d:c3:52:6c: 74:f3:e9:03:e6:c2:23:6e:ef:33:4f:2a:21:e7:f3: 56:05:4e:3f:df:02:ed:13:67:bf:47:6a:e1:0a:f9: 99:94:73:82:25:07:f2:6d:9a:1c:8d:d6:ee:ec:81: 8e:35:bd:15:c3:0d:89:63:f3:d3:79:28:a3:c9:46: 4c:e2:33:a6:b2:2d:80:3c:64:42:3a:50:bb:43:d5: 3c:8d:9d:5d:73:65:5a:e5:04:f7:ff:03:b3:43:43: a7:56:57:29:91:48:2a:ec:03:83:2f:aa:93:61:a1: 2f:be:fd:6f:1e:0b:a8:14:19:35:c6:d7:b9:a6:f1: f8:13:9e:ed:6d:27:bc:ad:da:21:5d:e4:b7:cc:08: 28:3b:1e:2d:5d:ce:a5:bf:93:c6:bd:b4:06:aa:96: 67:65:66:31:14:83:d2:67:5b:a5:68:6d:87:d6:34: 22:b4:bf:8a:90:50:c6:46:e2:df:71:be:3d:88:ce: 6f:81:21:ed:27:fb:43:d6:76:34:fb:b8:26:0b:12: cd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4F:D7:0D:C7:96:F9:93:C3:28:C7:1C:FD:FD:85:E9:E2:E2:A1:49 X509v3 Authority Key Identifier: keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/Uk_XDceW-ZPDKMcc_f2F6eLioUk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.180.0/22 45.91.168.0/23 63.250.56.0/23 83.229.82.0/23 103.13.210.0/24 103.45.247.0/24 185.181.8.0/24 185.220.204.0/23 185.227.110.0/24 185.247.117.0/24 193.168.173.0/24 194.37.81.0/24 194.146.38.0/23 195.238.121.0/24 IPv6: 2a06:c5c0:200::/48 2a07:3b80:3::/48 Signature Algorithm: sha256WithRSAEncryption 8c:db:00:46:d4:be:4a:76:6f:d1:9d:da:2e:4e:4a:e7:7d:48: e6:23:0a:b4:c2:ed:a9:f4:2f:47:26:38:fa:89:a9:0e:ed:c3: 19:0c:9c:3b:7c:37:f7:71:64:35:06:de:2e:e6:26:78:6f:c3: 05:c0:d4:14:15:e0:3b:c2:6b:8f:b4:ad:47:42:66:48:42:e9: af:a3:fb:d0:e4:85:b0:71:5a:a9:9e:58:99:1c:f8:08:1d:8a: 3d:88:1c:50:78:30:ea:ef:99:86:a9:d9:fe:29:24:6a:d7:e4: 86:f2:30:fd:67:43:c3:7a:42:27:b0:f1:89:e3:41:06:d6:f9: aa:7b:dc:d2:85:d2:d7:5e:76:8a:db:d2:23:7e:cc:c6:28:9d: a5:ec:db:13:8e:19:1f:bd:6b:85:18:11:21:d5:b9:15:95:16: 2e:50:65:c6:b7:be:e6:79:cf:57:0a:03:3a:89:97:c1:84:39: 87:41:9a:a7:1e:4a:db:72:e7:ea:e8:96:65:f6:a6:f5:10:dc: 12:2b:20:9d:84:75:e5:e4:f0:d4:52:76:b4:63:dd:1f:c9:ed: 84:82:ee:5c:e6:43:53:fb:97:6a:5b:03:70:8d:17:45:e0:19: 5d:1c:4b:f8:9f:2e:26:1b:7a:6f:ba:66:6f:53:bc:82:df:24: 91:14:ae:76 -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgISAZt9WvMsxPPC1gEKy9ImNBY3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YmQ3OTIzYWZkYmFlODdkMDdiMjMwOGRkMzg5ZDljZjA4 MmVkNmQwHhcNMjYwMTAyMDYxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjRmZDcwZGM3OTZmOTkzYzMyOGM3MWNmZGZkODVlOWUyZTJhMTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZi5e/aY6xHe1/r10aBcGSGPhK6M kO/zL6Vd9jp+wihjLfbicFqEQuaN3r4r1mxE2IhWQ9MrPh3DUmx08+kD5sIjbu8z Tyoh5/NWBU4/3wLtE2e/R2rhCvmZlHOCJQfybZocjdbu7IGONb0Vww2JY/PTeSij yUZM4jOmsi2APGRCOlC7Q9U8jZ1dc2Va5QT3/wOzQ0OnVlcpkUgq7AODL6qTYaEv vv1vHguoFBk1xte5pvH4E57tbSe8rdohXeS3zAgoOx4tXc6lv5PGvbQGqpZnZWYx FIPSZ1ulaG2H1jQitL+KkFDGRuLfcb49iM5vgSHtJ/tD1nY0+7gmCxLNNwIDAQAB o4ICcjCCAm4wHQYDVR0OBBYEFFJP1w3HlvmTwyjHHP39heni4qFJMB8GA1UdIwQY MBaAFOW9eSOv266H0HsjCN04nZzwgu1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2Ut MjZkMWU1NDU3OGYxLzEvVWtfWERjZVctWlBES01jY19mMkY2ZUxpb1VrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2UtMjZkMWU1NDU3OGYx LzEvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwWgQCAAEwVAMEAgW0tAME AS1bqAMEAT/6OAMEAVPlUgMEAGcN0gMEAGct9wMEALm1CAMEAbnczAMEALnjbgME ALn3dQMEAMGorQMEAMIlUQMEAcKSJgMEAMPueTAYBAIAAjASAwcAKgbFwAIAAwcA Kgc7gAADMA0GCSqGSIb3DQEBCwUAA4IBAQCM2wBG1L5Kdm/RndouTkrnfUjmIwq0 wu2p9C9HJjj6iakO7cMZDJw7fDf3cWQ1Bt4u5iZ4b8MFwNQUFeA7wmuPtK1HQmZI Qumvo/vQ5IWwcVqpnliZHPgIHYo9iBxQeDDq75mGqdn+KSRq1+SG8jD9Z0PDekIn sPGJ40EG1vmqe9zShdLXXnaK29IjfszGKJ2l7NsTjhkfvWuFGBEh1bkVlRYuUGXG t77mec9XCgM6iZfBhDmHQZqnHkrbcufq6JZl9qb1ENwSKyCdhHXl5PDUUna0Y90f ye2Egu5c5kNT+5dqWwNwjRdF4BldHEv4ny4mG3pvumZvU7yC3ySRFK52 -----END CERTIFICATE-----Generated at Sun Jan 25 21:03:12 2026 by rpki-client