This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/_uj2tlKBdkTq6x9tsyECYeH5nJQ.roa File: _uj2tlKBdkTq6x9tsyECYeH5nJQ.roa (raw, json) Hash identifier: SXC8oyTa56Vt7j8yIpOQSBCWfzUUAQ84s8IJucSdT1M= Subject key identifier: FE:E8:F6:B6:52:81:76:44:EA:EB:1F:6D:B3:21:02:61:E1:F9:9C:94 Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 019BFFCE5470BB1087C04576BA0FA6591DBA Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/_uj2tlKBdkTq6x9tsyECYeH5nJQ.roa Signing time: Tue 27 Jan 2026 14:14:30 +0000 ROA not before: Tue 27 Jan 2026 14:14:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44477 IP address blocks: 2.58.124.0/22 maxlen: 24 5.252.21.0/24 maxlen: 24 5.252.22.0/24 maxlen: 24 5.252.23.0/24 maxlen: 24 92.118.126.0/24 maxlen: 24 92.118.127.0/24 maxlen: 24 146.19.233.0/24 maxlen: 24 2a0b:ec82::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 09:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:ce:54:70:bb:10:87:c0:45:76:ba:0f:a6:59:1d:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Jan 27 14:14:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fee8f6b652817644eaeb1f6db3210261e1f99c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:be:fe:50:b0:bf:c5:21:c2:be:70:71:91:2a: 5a:33:06:94:b0:8d:2a:49:8e:dd:aa:6d:c1:94:32: b0:6e:4e:e9:e2:0d:fb:41:40:cd:85:d3:ec:22:d7: f1:b4:b5:b7:9f:fc:0d:69:49:73:66:23:b2:7c:d6: b8:f1:f5:b9:64:a2:ec:4d:01:96:71:98:07:24:79: 6f:8b:50:e7:77:b0:a9:6b:e4:b3:59:9b:8b:89:90: 29:b1:59:c8:f6:07:4b:b4:9b:18:16:3b:fe:5e:0c: b9:a0:55:4c:ed:5d:be:75:17:a1:08:95:a5:5e:12: 53:d7:65:34:0c:17:e2:9f:e3:19:cc:c1:cc:81:5a: 96:d7:39:11:0d:20:5d:5f:1c:bc:9b:68:33:90:99: 21:68:e2:88:be:c6:17:2f:4f:f9:05:5c:b2:a4:8a: c2:01:75:d5:fd:ef:68:90:c5:fd:da:a2:f0:a4:4c: a9:3f:e7:ec:28:d8:07:b0:65:b1:a5:ff:c3:38:71: 7a:36:64:6c:49:5a:44:ba:88:58:d2:a9:a9:a6:1c: c8:2e:32:d6:11:f9:66:c6:0d:34:3d:27:31:1a:c2: 4e:4f:82:3c:33:1b:9e:9e:56:00:58:cb:22:5c:14: a2:0f:ac:6b:53:0c:08:ab:de:75:47:b9:1d:58:d4: 7e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E8:F6:B6:52:81:76:44:EA:EB:1F:6D:B3:21:02:61:E1:F9:9C:94 X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/_uj2tlKBdkTq6x9tsyECYeH5nJQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.124.0/22 5.252.21.0-5.252.23.255 92.118.126.0/23 146.19.233.0/24 IPv6: 2a0b:ec82::/32 Signature Algorithm: sha256WithRSAEncryption 1e:ea:22:b3:2d:64:99:80:22:e5:15:6d:d6:e7:87:7d:a4:b8: be:f5:7c:b1:f5:94:83:e6:5f:4e:13:d1:92:e0:31:f0:c3:45: 9f:c4:20:cd:ab:5a:98:e6:c3:6c:96:d7:dc:e6:71:95:ef:da: 4d:bd:a6:cd:9f:d4:0a:4a:13:ed:ca:45:aa:a0:6e:11:cf:1c: ab:53:36:74:0e:80:0f:a1:06:f8:53:90:f8:92:78:de:53:59: e5:38:34:2b:58:dc:1e:4b:a9:1a:93:38:11:f8:4d:0d:33:f6: 04:ee:e0:0e:b9:62:10:ec:54:64:60:10:ef:38:14:61:1b:d4: 89:f7:bc:3b:f5:27:6b:f2:e8:03:10:9d:ec:16:a9:00:7e:72: bd:6c:47:06:e5:61:05:51:51:43:6b:07:37:03:76:bd:90:0e: 41:40:95:1e:c7:88:36:47:59:7f:da:34:11:cc:e0:5b:24:bf: 88:3a:04:e6:bc:9e:24:27:1e:99:34:c6:1c:00:21:81:ef:6e: 72:69:b0:87:31:c8:2b:5e:da:31:f4:af:3e:e1:01:dc:d0:35: 99:7e:06:9c:c2:fa:a5:56:b6:17:35:e8:f0:27:64:dc:91:09: a4:78:25:b4:7c:47:f2:1a:98:ec:a7:45:22:a5:77:93:4c:50: 83:b4:f1:16 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZv/zlRwuxCHwEV2ug+mWR26MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjYwMTI3MTQxNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWU4ZjZiNjUyODE3NjQ0ZWFlYjFmNmRiMzIxMDI2MWUxZjk5Yzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8L7+ULC/xSHCvnBxkSpaMwaUsI0q SY7dqm3BlDKwbk7p4g37QUDNhdPsItfxtLW3n/wNaUlzZiOyfNa48fW5ZKLsTQGW cZgHJHlvi1Dnd7Cpa+SzWZuLiZApsVnI9gdLtJsYFjv+Xgy5oFVM7V2+dRehCJWl XhJT12U0DBfin+MZzMHMgVqW1zkRDSBdXxy8m2gzkJkhaOKIvsYXL0/5BVyypIrC AXXV/e9okMX92qLwpEypP+fsKNgHsGWxpf/DOHF6NmRsSVpEuohY0qmpphzILjLW Eflmxg00PScxGsJOT4I8MxuenlYAWMsiXBSiD6xrUwwIq951R7kdWNR++wIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFP7o9rZSgXZE6usfbbMhAmHh+ZyUMB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvX3VqMnRsS0Jka1RxNng5dHN5RUNZZUg1bkpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgAwQCAjp8MAwD BAAF/BUDBAMF/BADBAFcdn4DBACSE+kwDQQCAAIwBwMFACoL7IIwDQYJKoZIhvcN AQELBQADggEBAB7qIrMtZJmAIuUVbdbnh32kuL71fLH1lIPmX04T0ZLgMfDDRZ/E IM2rWpjmw2yW19zmcZXv2k29ps2f1ApKE+3KRaqgbhHPHKtTNnQOgA+hBvhTkPiS eN5TWeU4NCtY3B5LqRqTOBH4TQ0z9gTu4A65YhDsVGRgEO84FGEb1In3vDv1J2vy 6AMQnewWqQB+cr1sRwblYQVRUUNrBzcDdr2QDkFAlR7HiDZHWX/aNBHM4Fskv4g6 BOa8niQnHpk0xhwAIYHvbnJpsIcxyCte2jH0rz7hAdzQNZl+BpzC+qVWthc16PAn ZNyRCaR4JbR8R/IamOynRSKld5NMUIO08RY= -----END CERTIFICATE-----Generated at Sat Feb 7 18:35:44 2026 by rpki-client