This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/uKWh_c7kBQ-lyI8dk47qyONXsHI.roa File: uKWh_c7kBQ-lyI8dk47qyONXsHI.roa (raw, json) Hash identifier: WgzqgSvlC/MGSeG/ABr9wD/AWzOmM4M93N1qF2LKkqc= Subject key identifier: B8:A5:A1:FD:CE:E4:05:0F:A5:C8:8F:1D:93:8E:EA:C8:E3:57:B0:72 Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Certificate serial: 019BDF8A9C56708D5738ECBB63AEFC0C72C3 Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/uKWh_c7kBQ-lyI8dk47qyONXsHI.roa Signing time: Wed 21 Jan 2026 07:52:41 +0000 ROA not before: Wed 21 Jan 2026 07:52:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136787 IP address blocks: 5.44.248.0/24 maxlen: 24 36.255.188.0/24 maxlen: 24 36.255.189.0/24 maxlen: 24 36.255.190.0/24 maxlen: 24 36.255.191.0/24 maxlen: 24 45.94.232.0/24 maxlen: 24 45.94.233.0/24 maxlen: 24 45.94.234.0/24 maxlen: 24 45.94.235.0/24 maxlen: 24 45.143.68.0/24 maxlen: 24 45.143.69.0/24 maxlen: 24 45.143.70.0/24 maxlen: 24 45.143.71.0/24 maxlen: 24 45.157.124.0/22 maxlen: 24 45.157.124.0/24 maxlen: 24 45.157.125.0/24 maxlen: 24 45.157.126.0/24 maxlen: 24 45.157.127.0/24 maxlen: 24 83.150.240.0/24 maxlen: 24 83.150.241.0/24 maxlen: 24 83.150.242.0/24 maxlen: 24 83.150.243.0/24 maxlen: 24 87.239.254.0/24 maxlen: 24 95.181.216.0/24 maxlen: 24 95.181.217.0/24 maxlen: 24 95.181.218.0/24 maxlen: 24 95.181.219.0/24 maxlen: 24 103.225.200.0/24 maxlen: 24 103.225.201.0/24 maxlen: 24 103.225.202.0/24 maxlen: 24 103.225.203.0/24 maxlen: 24 167.160.122.0/24 maxlen: 24 167.160.123.0/24 maxlen: 24 167.160.124.0/24 maxlen: 24 167.160.125.0/24 maxlen: 24 167.160.126.0/24 maxlen: 24 167.160.127.0/24 maxlen: 24 171.22.252.0/24 maxlen: 24 185.46.116.0/24 maxlen: 24 185.46.117.0/24 maxlen: 24 185.46.240.0/24 maxlen: 24 185.46.241.0/24 maxlen: 24 185.46.242.0/24 maxlen: 24 185.46.243.0/24 maxlen: 24 185.75.208.0/24 maxlen: 24 185.75.209.0/24 maxlen: 24 185.75.210.0/24 maxlen: 24 185.75.211.0/24 maxlen: 24 185.201.190.0/24 maxlen: 24 185.253.68.0/24 maxlen: 24 185.253.69.0/24 maxlen: 24 185.253.70.0/24 maxlen: 24 185.253.71.0/24 maxlen: 24 193.108.242.0/24 maxlen: 24 193.108.243.0/24 maxlen: 24 193.201.248.0/24 maxlen: 24 193.201.249.0/24 maxlen: 24 193.201.250.0/24 maxlen: 24 193.201.251.0/24 maxlen: 24 194.32.106.0/24 maxlen: 24 194.36.96.0/24 maxlen: 24 194.36.97.0/24 maxlen: 24 194.36.98.0/24 maxlen: 24 194.36.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:8a:9c:56:70:8d:57:38:ec:bb:63:ae:fc:0c:72:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Validity Not Before: Jan 21 07:52:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8a5a1fdcee4050fa5c88f1d938eeac8e357b072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8c:2c:66:cb:4c:07:e6:98:66:6a:68:fb:82: 45:70:64:31:aa:dd:01:3c:aa:6e:f9:d6:63:9c:53: 14:17:2e:24:5c:a4:96:15:2b:59:45:70:13:cc:e1: cc:5c:5d:b8:ca:55:93:35:a3:15:54:0b:f9:6c:94: d7:0a:98:25:06:ca:ab:9c:b1:54:d0:60:97:ee:bc: 0a:96:1e:dd:bd:ad:5e:71:9c:10:a3:6e:3f:ec:42: 5f:c0:cf:ff:18:5d:16:f3:30:da:c0:e8:1e:32:8f: 77:0b:6e:51:c7:85:67:cb:d6:7f:22:90:c9:6e:15: 2c:c6:56:3f:f4:42:3c:b0:54:a9:63:50:51:96:77: bb:9d:4d:23:3e:31:41:4f:3b:89:ad:43:76:74:90: 49:77:6b:e2:24:24:9d:1e:e7:c1:ee:f8:13:46:ef: 75:ae:ec:47:dc:95:e8:60:d3:15:70:69:77:4a:ce: d7:ce:01:20:c7:7b:ff:2d:09:48:b2:95:13:f4:0f: b7:0f:5b:48:3a:38:61:f8:d4:12:9c:10:4d:57:c5: 38:eb:d9:66:a3:74:b7:d2:3f:88:d7:f5:3b:22:d4: 45:0a:78:bb:b6:04:7b:37:74:ce:05:cc:70:20:eb: 4c:15:7b:83:91:79:9f:e2:2f:0b:d7:7c:b0:07:6f: 21:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A5:A1:FD:CE:E4:05:0F:A5:C8:8F:1D:93:8E:EA:C8:E3:57:B0:72 X509v3 Authority Key Identifier: keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/uKWh_c7kBQ-lyI8dk47qyONXsHI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.44.248.0/24 36.255.188.0/22 45.94.232.0/22 45.143.68.0/22 45.157.124.0/22 83.150.240.0/22 87.239.254.0/24 95.181.216.0/22 103.225.200.0/22 167.160.122.0-167.160.127.255 171.22.252.0/24 185.46.116.0/23 185.46.240.0/22 185.75.208.0/22 185.201.190.0/24 185.253.68.0/22 193.108.242.0/23 193.201.248.0/22 194.32.106.0/24 194.36.96.0/22 Signature Algorithm: sha256WithRSAEncryption 26:05:12:0b:b0:1f:de:99:46:ac:35:2f:a7:af:95:06:0f:db: ea:ff:ab:30:06:5b:e8:32:b0:2f:10:d0:ad:76:28:8f:da:7f: 54:dc:21:dc:29:b2:9f:fd:9c:49:0f:66:da:fc:c6:da:64:21: 6c:12:d4:54:42:9a:3f:f5:f0:ba:28:1c:39:f1:90:a1:db:5b: 73:9d:51:1d:8b:cd:6f:ab:2e:56:58:63:75:2e:e0:a1:42:3d: 75:e9:03:16:1d:5b:6d:bc:fb:b6:1f:1e:76:54:52:58:99:97: 79:85:59:33:01:f4:84:ed:a0:bd:c0:53:75:d5:b3:cf:c2:87: b1:11:08:8a:f7:c0:c5:d9:e5:b3:d3:99:ad:22:49:68:36:9c: 44:e4:99:1c:8d:b9:d8:9d:a5:50:2c:dc:a4:c1:c8:a4:d0:e9: cf:d6:d7:2a:ba:1b:f2:97:db:c6:b2:8b:cf:da:52:9c:a8:c4: ee:b1:87:43:45:2f:2a:01:e4:8b:14:00:cf:9b:31:32:5f:37: 6e:69:00:80:85:b1:61:ad:4c:91:a9:b6:b5:60:f4:34:bf:70: 93:bc:01:4a:cd:c8:95:1a:02:f8:51:f8:f0:17:17:78:6e:77: f2:0d:fb:ae:61:f3:d9:84:79:42:56:3c:f0:5c:2f:31:bf:6e: 31:c0:a5:32 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgISAZvfipxWcI1XOOy7Y678DHLDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx OWE3NGUwHhcNMjYwMTIxMDc1MjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGE1YTFmZGNlZTQwNTBmYTVjODhmMWQ5MzhlZWFjOGUzNTdiMDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArowsZstMB+aYZmpo+4JFcGQxqt0B PKpu+dZjnFMUFy4kXKSWFStZRXATzOHMXF24ylWTNaMVVAv5bJTXCpglBsqrnLFU 0GCX7rwKlh7dva1ecZwQo24/7EJfwM//GF0W8zDawOgeMo93C25Rx4Vny9Z/IpDJ bhUsxlY/9EI8sFSpY1BRlne7nU0jPjFBTzuJrUN2dJBJd2viJCSdHufB7vgTRu91 ruxH3JXoYNMVcGl3Ss7XzgEgx3v/LQlIspUT9A+3D1tIOjhh+NQSnBBNV8U469lm o3S30j+I1/U7ItRFCni7tgR7N3TOBcxwIOtMFXuDkXmf4i8L13ywB28hYwIDAQAB o4ICiDCCAoQwHQYDVR0OBBYEFLilof3O5AUPpciPHZOO6sjjV7ByMB8GA1UdIwQY MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct OTViMDhlMzY2MGNmLzEvdUtXaF9jN2tCUS1seUk4ZGs0N3F5T05Yc0hJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGdBggrBgEFBQcBBwEB/wSBjTCBijCBhwQCAAEwgYADBAAF LPgDBAIk/7wDBAItXugDBAItj0QDBAItnXwDBAJTlvADBABX7/4DBAJftdgDBAJn 4cgwDAMEAaegegMEB6egAAMEAKsW/AMEAbkudAMEArku8AMEArlL0AMEALnJvgME Arn9RAMEAcFs8gMEAsHJ+AMEAMIgagMEAsIkYDANBgkqhkiG9w0BAQsFAAOCAQEA JgUSC7Af3plGrDUvp6+VBg/b6v+rMAZb6DKwLxDQrXYoj9p/VNwh3Cmyn/2cSQ9m 2vzG2mQhbBLUVEKaP/XwuigcOfGQodtbc51RHYvNb6suVlhjdS7goUI9dekDFh1b bbz7th8edlRSWJmXeYVZMwH0hO2gvcBTddWzz8KHsREIivfAxdnls9OZrSJJaDac ROSZHI252J2lUCzcpMHIpNDpz9bXKrob8pfbxrKLz9pSnKjE7rGHQ0UvKgHkixQA z5sxMl83bmkAgIWxYa1Mkam2tWD0NL9wk7wBSs3IlRoC+FH48BcXeG538g37rmHz 2YR5QlY88FwvMb9uMcClMg== -----END CERTIFICATE-----Generated at Sun Jan 25 10:32:04 2026 by rpki-client