This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/UhhULK4VhHUpXbHrquJFK5XwzTM.roa File: UhhULK4VhHUpXbHrquJFK5XwzTM.roa (raw, json) Hash identifier: cTOGj51BZIsKfKZvp1Y6kCOw9tCtCwH0h8hrKoSZm2w= Subject key identifier: 52:18:54:2C:AE:15:84:75:29:5D:B1:EB:AA:E2:45:2B:95:F0:CD:33 Certificate issuer: /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb Certificate serial: 019B7EA72DE6A685ACFF65CADD3BBDB3E8CD Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/UhhULK4VhHUpXbHrquJFK5XwzTM.roa Signing time: Fri 02 Jan 2026 12:20:44 +0000 ROA not before: Fri 02 Jan 2026 12:20:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25233 IP address blocks: 77.64.0.0/17 maxlen: 17 77.64.40.0/24 maxlen: 24 78.93.0.0/16 maxlen: 16 78.93.28.0/24 maxlen: 24 78.93.45.0/24 maxlen: 24 78.93.50.0/24 maxlen: 24 78.93.92.0/22 maxlen: 22 78.93.96.0/22 maxlen: 22 78.93.107.0/24 maxlen: 24 78.93.108.0/24 maxlen: 24 78.93.109.0/24 maxlen: 24 78.93.144.0/24 maxlen: 24 78.93.145.0/24 maxlen: 24 78.93.146.0/24 maxlen: 24 78.93.147.0/24 maxlen: 24 78.93.148.0/24 maxlen: 24 78.93.149.0/24 maxlen: 24 78.93.150.0/24 maxlen: 24 78.93.151.0/24 maxlen: 24 78.93.152.0/24 maxlen: 24 78.93.153.0/24 maxlen: 24 78.93.154.0/24 maxlen: 24 78.93.155.0/24 maxlen: 24 78.93.156.0/24 maxlen: 24 78.93.157.0/24 maxlen: 24 78.93.158.0/24 maxlen: 24 78.93.159.0/24 maxlen: 24 78.93.160.0/24 maxlen: 24 78.93.161.0/24 maxlen: 24 84.22.224.0/19 maxlen: 19 84.22.231.0/24 maxlen: 24 84.22.234.0/24 maxlen: 24 84.22.238.0/24 maxlen: 24 84.22.241.0/24 maxlen: 24 84.22.254.0/24 maxlen: 24 86.60.64.0/18 maxlen: 18 86.60.101.0/24 maxlen: 24 86.60.107.0/24 maxlen: 24 86.60.109.0/24 maxlen: 24 86.60.112.0/21 maxlen: 21 86.60.126.0/24 maxlen: 24 212.93.192.0/19 maxlen: 19 212.93.196.0/24 maxlen: 24 212.100.192.0/19 maxlen: 19 212.100.210.0/24 maxlen: 24 212.100.218.0/24 maxlen: 24 212.116.192.0/19 maxlen: 19 213.184.160.0/19 maxlen: 19 2a02:df0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:2d:e6:a6:85:ac:ff:65:ca:dd:3b:bd:b3:e8:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb Validity Not Before: Jan 2 12:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5218542cae158475295db1ebaae2452b95f0cd33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:44:69:df:21:52:9b:1a:17:3e:63:70:ea:3b: 95:15:c5:7d:b6:4f:58:9d:95:88:67:f0:a6:32:34: e3:ce:5d:54:f0:e2:52:00:30:6f:6f:ad:a8:b1:13: d9:bc:ff:13:91:94:ac:77:5d:95:97:28:b0:cf:9d: dd:90:dc:63:52:4b:08:9f:fd:11:2f:bd:84:b8:9d: d0:67:17:76:f0:c5:15:b1:65:f5:45:b1:86:9e:f5: ea:fa:b9:c5:85:9e:3c:18:4b:0b:17:f4:ce:a6:70: 7f:7a:89:b3:d4:e7:7c:29:55:03:f4:93:78:45:fd: 85:7c:ed:af:76:c2:6d:f3:f2:d4:40:b8:b5:e8:a7: 3d:01:3e:91:46:1c:15:93:30:ae:9f:a1:05:df:43: 44:b6:47:ee:b6:e8:45:2c:34:87:b1:ce:c5:15:81: ad:bb:f2:1d:04:37:2e:86:3c:3b:a8:02:bb:e6:5c: ee:33:0c:19:54:ca:5d:b1:6a:90:8f:7d:a7:db:dd: c1:c3:b8:f4:c7:fd:77:e3:43:bb:d5:4b:d9:ea:14: cf:0d:65:8c:eb:05:ba:e8:81:9d:55:f0:26:34:04: 39:fe:75:59:7f:7e:6e:8e:84:c5:c5:25:a6:7e:95: 93:d0:36:a4:7f:62:a0:0a:8e:44:2c:94:e3:bd:ce: eb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:18:54:2C:AE:15:84:75:29:5D:B1:EB:AA:E2:45:2B:95:F0:CD:33 X509v3 Authority Key Identifier: keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/UhhULK4VhHUpXbHrquJFK5XwzTM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.64.0.0/17 78.93.0.0/16 84.22.224.0/19 86.60.64.0/18 212.93.192.0/19 212.100.192.0/19 212.116.192.0/19 213.184.160.0/19 IPv6: 2a02:df0::/32 Signature Algorithm: sha256WithRSAEncryption 90:c1:f9:11:7a:c7:dc:bc:74:40:66:b0:47:a8:4a:34:13:89: a6:ca:c9:f3:fb:37:83:06:15:7a:d5:95:b8:21:8f:c0:72:02: c4:9e:98:6b:df:51:c8:e7:1d:e8:be:3a:91:84:19:0f:67:33: 4a:5d:35:1f:2c:af:35:f4:de:af:db:50:93:fb:dc:47:5a:99: c6:d0:69:06:6a:cc:77:06:97:f4:dc:5a:ac:a2:60:5c:a3:b5: b9:bb:94:31:e3:8d:b8:0d:14:fe:d8:2d:80:f4:f1:5f:bc:94: bd:df:03:7f:76:bd:0b:ca:8d:bb:66:cb:a9:40:d9:59:d3:d8: f9:2b:c6:e1:03:88:9c:e7:d2:2e:97:5f:ee:d4:c0:fb:df:90: 7c:61:8e:c3:e8:81:77:60:15:f2:72:71:99:4e:28:1d:99:ff: 18:21:ce:e9:e4:8d:a9:e8:27:f9:dd:b9:da:84:59:75:a4:ea: eb:18:ae:3f:2f:6c:d0:94:33:2d:eb:f7:5b:ed:a6:65:79:fb: db:84:20:e4:93:8d:d7:c1:18:70:24:16:22:c3:9e:29:c2:9a: 34:ec:bd:ee:7f:72:d8:85:ac:73:2f:1c:69:95:0c:5e:46:93: 40:07:4e:39:10:ef:64:65:a2:68:87:eb:4f:11:34:13:7b:e7: a6:5e:35:f9 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZt+py3mpoWs/2XK3Tu9s+jNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNDNlOWUyNjc5NTZlN2YyNjJjMTdmMDA4OWYwZjYwYmE3 YWJlZmIwHhcNMjYwMTAyMTIyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjE4NTQyY2FlMTU4NDc1Mjk1ZGIxZWJhYWUyNDUyYjk1ZjBjZDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvERp3yFSmxoXPmNw6juVFcV9tk9Y nZWIZ/CmMjTjzl1U8OJSADBvb62osRPZvP8TkZSsd12Vlyiwz53dkNxjUksIn/0R L72EuJ3QZxd28MUVsWX1RbGGnvXq+rnFhZ48GEsLF/TOpnB/eomz1Od8KVUD9JN4 Rf2FfO2vdsJt8/LUQLi16Kc9AT6RRhwVkzCun6EF30NEtkfutuhFLDSHsc7FFYGt u/IdBDcuhjw7qAK75lzuMwwZVMpdsWqQj32n293Bw7j0x/1340O71UvZ6hTPDWWM 6wW66IGdVfAmNAQ5/nVZf35ujoTFxSWmfpWT0Dakf2KgCo5ELJTjvc7rowIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFFIYVCyuFYR1KV2x66riRSuV8M0zMB8GA1UdIwQY MBaAFFpD6eJnlW5/JiwX8AifD2C6er77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wNjQ0NGMtOWQ5Yi00YzZiLTk1MGIt NzljODk4N2E4YjFjLzEvVWhoVUxLNFZoSFVwWGJIcnF1SkZLNVh3elRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wNjQ0NGMtOWQ5Yi00YzZiLTk1MGItNzljODk4N2E4YjFj LzEvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjA1BAIAATAvAwQHTUAAAwMA Tl0DBAVUFuADBAZWPEADBAXUXcADBAXUZMADBAXUdMADBAXVuKAwDQQCAAIwBwMF ACoCDfAwDQYJKoZIhvcNAQELBQADggEBAJDB+RF6x9y8dEBmsEeoSjQTiabKyfP7 N4MGFXrVlbghj8ByAsSemGvfUcjnHei+OpGEGQ9nM0pdNR8srzX03q/bUJP73Eda mcbQaQZqzHcGl/TcWqyiYFyjtbm7lDHjjbgNFP7YLYD08V+8lL3fA392vQvKjbtm y6lA2VnT2PkrxuEDiJzn0i6XX+7UwPvfkHxhjsPogXdgFfJycZlOKB2Z/xghzunk janoJ/ndudqEWXWk6usYrj8vbNCUMy3r91vtpmV5+9uEIOSTjdfBGHAkFiLDninC mjTsve5/ctiFrHMvHGmVDF5Gk0AHTjkQ72RlomiH608RNBN756ZeNfk= -----END CERTIFICATE-----Generated at Mon Jan 26 00:38:56 2026 by rpki-client