This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/UqpRL__Efeid9a8cIN4aVjD7btc.roa File: UqpRL__Efeid9a8cIN4aVjD7btc.roa (raw, json) Hash identifier: Jo0BVJIAZaCqo9aHwqKM5mX9gen1oqBNsGDUzTFR458= Subject key identifier: 52:AA:51:2F:FF:C4:7D:E8:9D:F5:AF:1C:20:DE:1A:56:30:FB:6E:D7 Certificate issuer: /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb Certificate serial: 019B8DF1D262682726C29CA9835E1D72C9FB Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/UqpRL__Efeid9a8cIN4aVjD7btc.roa Signing time: Mon 05 Jan 2026 11:36:34 +0000 ROA not before: Mon 05 Jan 2026 11:36:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43987 IP address blocks: 46.49.132.0/24 maxlen: 24 46.49.135.0/24 maxlen: 24 46.49.140.0/24 maxlen: 24 46.49.141.0/24 maxlen: 24 46.49.143.0/24 maxlen: 24 46.49.144.0/24 maxlen: 24 46.49.173.0/24 maxlen: 24 46.49.210.0/24 maxlen: 24 95.177.148.0/24 maxlen: 24 95.177.149.0/24 maxlen: 24 95.177.156.0/23 maxlen: 23 95.177.192.0/19 maxlen: 19 95.177.192.0/20 maxlen: 20 95.177.224.0/19 maxlen: 19 2a02:df5::/32 maxlen: 32 2a02:df5:5::/48 maxlen: 48 2a02:df5:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:f1:d2:62:68:27:26:c2:9c:a9:83:5e:1d:72:c9:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb Validity Not Before: Jan 5 11:36:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52aa512fffc47de89df5af1c20de1a5630fb6ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8e:fd:6d:32:b8:a3:65:df:db:78:82:0d:33: ad:91:fd:57:ba:4a:c1:66:b8:f8:6f:d7:d5:df:62: 8a:6d:f3:99:4a:d3:2c:68:51:98:d9:83:eb:63:74: 51:6f:4c:0a:67:d7:5c:8d:90:25:6a:af:ff:4a:21: 9d:f9:fd:a2:fc:f5:5a:c2:e1:c3:43:dc:41:1d:12: 0a:a0:86:bd:64:37:31:41:4a:a2:86:e5:9a:ce:4d: 64:52:7a:04:47:35:91:d0:3c:79:6b:29:83:17:8e: 8e:08:3a:60:c2:ad:4f:5b:c7:eb:e4:53:44:8f:82: e8:2d:d2:e0:c4:c3:17:2d:22:91:d3:a2:f3:6e:bd: 0a:74:0b:d3:ea:16:40:16:c3:0f:1e:6f:4d:64:7c: 8c:27:66:f8:70:08:7f:84:72:08:30:83:a1:20:32: 42:23:76:e4:36:3a:2c:42:40:26:60:78:6c:17:b1: a6:29:fe:f0:f0:f0:a3:bf:dc:f0:37:d4:c5:57:89: eb:50:99:18:75:80:db:52:e8:98:b1:3c:cf:e3:8a: e1:07:4c:37:25:b2:31:ff:35:08:8a:03:e1:e4:cc: 75:ad:4a:9b:f8:b0:a6:4b:ea:7b:35:a5:1a:a0:1e: c3:9d:cf:9c:6e:af:f6:66:0d:2c:38:6f:dc:8a:87: 1f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:AA:51:2F:FF:C4:7D:E8:9D:F5:AF:1C:20:DE:1A:56:30:FB:6E:D7 X509v3 Authority Key Identifier: keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/UqpRL__Efeid9a8cIN4aVjD7btc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.49.132.0/24 46.49.135.0/24 46.49.140.0/23 46.49.143.0-46.49.144.255 46.49.173.0/24 46.49.210.0/24 95.177.148.0/23 95.177.156.0/23 95.177.192.0/18 IPv6: 2a02:df5::/32 Signature Algorithm: sha256WithRSAEncryption 5b:70:91:e9:13:15:3f:48:88:e0:56:e0:39:60:a4:0d:97:53: d2:2f:12:20:23:13:59:ca:7b:7c:cc:65:7b:4c:d8:95:a0:8f: 24:2b:f8:28:9c:1d:56:43:d8:03:e9:fa:d2:58:e2:a6:0a:41: 58:e8:7f:45:72:b8:67:8c:99:27:c8:a0:5f:1a:17:dd:88:dc: 75:fd:25:f4:29:00:92:cc:43:aa:d2:3b:65:4e:06:73:27:29: 18:54:1a:d6:b9:09:f3:48:a2:67:fe:d6:c5:93:26:8c:cb:ce: 22:ca:f7:fb:26:32:ba:31:bc:96:fa:ad:37:a3:cc:5a:50:7e: 4d:e0:3a:c2:3e:13:31:0b:a7:b2:c5:62:cb:ba:98:97:3e:9f: 17:d4:b7:55:bd:72:12:90:45:6e:7d:83:03:4e:2c:38:79:f0: d2:3b:85:2b:cf:97:a3:d3:ad:de:92:1f:e0:de:1d:79:e2:18: fe:3c:a9:08:f5:a2:e7:2c:e1:d5:bf:e4:15:0c:60:cb:17:79: fa:ea:a4:c8:9f:85:c3:b4:0e:38:7b:a2:fc:75:3f:ae:88:22: 36:fc:69:d8:c1:6d:fe:44:d4:4b:e1:4a:f1:5c:ae:9b:63:4a: 9b:95:b3:ef:5a:f1:7d:15:d5:bd:2c:91:19:21:1d:02:bc:32: 7c:63:a6:9a -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgISAZuN8dJiaCcmwpypg14dcsn7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNDNlOWUyNjc5NTZlN2YyNjJjMTdmMDA4OWYwZjYwYmE3 YWJlZmIwHhcNMjYwMTA1MTEzNjM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmFhNTEyZmZmYzQ3ZGU4OWRmNWFmMWMyMGRlMWE1NjMwZmI2ZWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1I79bTK4o2Xf23iCDTOtkf1XukrB Zrj4b9fV32KKbfOZStMsaFGY2YPrY3RRb0wKZ9dcjZAlaq//SiGd+f2i/PVawuHD Q9xBHRIKoIa9ZDcxQUqihuWazk1kUnoERzWR0Dx5aymDF46OCDpgwq1PW8fr5FNE j4LoLdLgxMMXLSKR06Lzbr0KdAvT6hZAFsMPHm9NZHyMJ2b4cAh/hHIIMIOhIDJC I3bkNjosQkAmYHhsF7GmKf7w8PCjv9zwN9TFV4nrUJkYdYDbUuiYsTzP44rhB0w3 JbIx/zUIigPh5Mx1rUqb+LCmS+p7NaUaoB7Dnc+cbq/2Zg0sOG/ciocfiQIDAQAB o4ICUDCCAkwwHQYDVR0OBBYEFFKqUS//xH3onfWvHCDeGlYw+27XMB8GA1UdIwQY MBaAFFpD6eJnlW5/JiwX8AifD2C6er77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wNjQ0NGMtOWQ5Yi00YzZiLTk1MGIt NzljODk4N2E4YjFjLzEvVXFwUkxfX0VmZWlkOWE4Y0lONGFWakQ3YnRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wNjQ0NGMtOWQ5Yi00YzZiLTk1MGItNzljODk4N2E4YjFj LzEvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTBEBAIAATA+AwQALjGEAwQA LjGHAwQBLjGMMAwDBAAuMY8DBAAuMZADBAAuMa0DBAAuMdIDBAFfsZQDBAFfsZwD BAZfscAwDQQCAAIwBwMFACoCDfUwDQYJKoZIhvcNAQELBQADggEBAFtwkekTFT9I iOBW4DlgpA2XU9IvEiAjE1nKe3zMZXtM2JWgjyQr+CicHVZD2APp+tJY4qYKQVjo f0VyuGeMmSfIoF8aF92I3HX9JfQpAJLMQ6rSO2VOBnMnKRhUGta5CfNIomf+1sWT JozLziLK9/smMroxvJb6rTejzFpQfk3gOsI+EzELp7LFYsu6mJc+nxfUt1W9chKQ RW59gwNOLDh58NI7hSvPl6PTrd6SH+DeHXniGP48qQj1oucs4dW/5BUMYMsXefrq pMifhcO0Djh7ovx1P66IIjb8adjBbf5E1EvhSvFcrptjSpuVs+9a8X0V1b0skRkh HQK8Mnxjppo= -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:33 2026 by rpki-client