This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/UJCPO6SBe2Pn-KzYrhDlsVxlY2U.roa File: UJCPO6SBe2Pn-KzYrhDlsVxlY2U.roa (raw, json) Hash identifier: Qbe4xHtUi2GeinBPbxNvkpGyI+DwbFr+ucxkyaBZjqE= Subject key identifier: 50:90:8F:3B:A4:81:7B:63:E7:F8:AC:D8:AE:10:E5:B1:5C:65:63:65 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019BADCBD31BEB686AC6F95E829EAEAD9B69 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/UJCPO6SBe2Pn-KzYrhDlsVxlY2U.roa Signing time: Sun 11 Jan 2026 16:02:54 +0000 ROA not before: Sun 11 Jan 2026 16:02:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207252 IP address blocks: 5.83.152.0/24 maxlen: 24 5.230.125.0/24 maxlen: 24 5.231.29.0/24 maxlen: 24 77.90.12.0/24 maxlen: 24 77.90.42.0/24 maxlen: 24 85.93.8.0/24 maxlen: 24 89.144.15.0/24 maxlen: 24 185.119.16.0/22 maxlen: 24 185.119.16.0/24 maxlen: 24 185.119.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:cb:d3:1b:eb:68:6a:c6:f9:5e:82:9e:ae:ad:9b:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 11 16:02:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50908f3ba4817b63e7f8acd8ae10e5b15c656365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:52:26:eb:9f:54:87:15:64:d0:14:b3:1d:af: da:86:a4:84:08:67:cd:3b:62:ca:c3:aa:e5:96:33: 6a:83:c5:b3:db:65:9e:8a:5d:53:1d:58:a3:38:26: fe:40:c1:cf:9f:60:2f:06:12:d4:f4:bd:54:c2:c7: dd:43:a0:33:b4:fc:e3:c1:ea:60:7f:82:04:41:40: 8f:0b:48:e3:c3:ed:fd:0e:48:4a:a0:fb:04:f2:c8: de:2d:5d:b6:50:d4:79:ba:ee:36:26:f8:80:69:80: 63:53:3e:d3:db:99:67:c2:82:65:c6:17:43:95:fc: 1c:6e:4b:f0:51:c1:44:73:1c:5c:d5:ba:3f:0f:0f: 91:ac:20:18:de:ba:71:d8:10:47:80:e4:70:53:06: 5f:fd:82:7a:95:35:37:3c:5c:70:7f:93:0f:32:a2: 28:34:52:1d:c4:ca:98:68:94:96:b9:0f:eb:a7:f7: f8:be:bd:1a:1f:2f:c2:73:de:75:6a:3c:eb:60:79: dc:9a:c3:cc:ff:d3:d2:32:b7:91:dd:e6:7f:32:06: 1d:3f:0d:b0:2c:e6:43:41:ec:69:1f:4d:ee:5c:c1: cf:d0:9e:95:af:f4:ae:43:23:73:d2:bb:cd:e0:15: f4:99:7c:be:99:20:da:1a:ea:b1:e4:33:0b:20:55: 09:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:90:8F:3B:A4:81:7B:63:E7:F8:AC:D8:AE:10:E5:B1:5C:65:63:65 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/UJCPO6SBe2Pn-KzYrhDlsVxlY2U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.152.0/24 5.230.125.0/24 5.231.29.0/24 77.90.12.0/24 77.90.42.0/24 85.93.8.0/24 89.144.15.0/24 185.119.16.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:f3:76:18:91:af:b8:ba:c5:b9:d6:23:c7:18:ab:4c:06:dc: 1c:0b:17:d7:33:2f:4d:02:cf:ef:eb:b7:c7:ff:0d:c3:5c:8e: 70:1c:d0:10:d5:b7:20:be:69:97:27:bc:75:55:f9:a4:b7:92: c3:ab:48:46:82:70:08:9f:38:b0:1e:5c:af:24:bb:ae:c5:eb: 96:7c:90:49:11:ba:8e:68:73:af:a8:e0:e6:65:76:34:55:08: 63:9a:73:28:c1:8a:c3:cb:2f:39:db:36:6c:9b:cc:6b:27:42: 20:34:a9:1b:5b:d7:54:e2:e7:fb:45:47:e8:3e:35:ed:c6:ad: 1c:aa:55:ec:41:60:a8:2d:aa:0d:9c:1c:40:72:40:4a:5c:78: 7a:36:4e:18:d6:71:8c:09:ab:5f:c3:68:23:41:1d:1a:2b:bd: e2:39:75:55:d6:64:2d:5f:5f:23:1c:05:c6:bd:c4:77:e1:cb: 89:f6:44:7d:8e:ca:f5:90:aa:13:8c:1f:7b:d8:93:2f:4c:3a: 68:37:d7:1e:f9:69:8b:8f:38:08:cf:16:49:62:fc:ac:fe:d0: 20:8b:3f:78:60:45:e5:07:e0:16:9c:8f:1f:3c:ca:c3:60:9d: f8:e0:29:2d:ac:64:36:c4:ec:33:e3:2e:ec:f7:02:20:ae:03: f1:38:44:4a -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZuty9Mb62hqxvlegp6urZtpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTExMTYwMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDkwOGYzYmE0ODE3YjYzZTdmOGFjZDhhZTEwZTViMTVjNjU2MzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lIm659UhxVk0BSzHa/ahqSECGfN O2LKw6rlljNqg8Wz22Weil1THVijOCb+QMHPn2AvBhLU9L1UwsfdQ6AztPzjwepg f4IEQUCPC0jjw+39DkhKoPsE8sjeLV22UNR5uu42JviAaYBjUz7T25lnwoJlxhdD lfwcbkvwUcFEcxxc1bo/Dw+RrCAY3rpx2BBHgORwUwZf/YJ6lTU3PFxwf5MPMqIo NFIdxMqYaJSWuQ/rp/f4vr0aHy/Cc951ajzrYHncmsPM/9PSMreR3eZ/MgYdPw2w LOZDQexpH03uXMHP0J6Vr/SuQyNz0rvN4BX0mXy+mSDaGuqx5DMLIFUJ1wIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFFCQjzukgXtj5/is2K4Q5bFcZWNlMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvVUpDUE82U0JlMlBuLUt6WXJoRGxzVnhsWTJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQABVOYAwQA BeZ9AwQABecdAwQATVoMAwQATVoqAwQAVV0IAwQAWZAPAwQCuXcQMA0GCSqGSIb3 DQEBCwUAA4IBAQBs83YYka+4usW51iPHGKtMBtwcCxfXMy9NAs/v67fH/w3DXI5w HNAQ1bcgvmmXJ7x1Vfmkt5LDq0hGgnAInziwHlyvJLuuxeuWfJBJEbqOaHOvqODm ZXY0VQhjmnMowYrDyy852zZsm8xrJ0IgNKkbW9dU4uf7RUfoPjXtxq0cqlXsQWCo LaoNnBxAckBKXHh6Nk4Y1nGMCatfw2gjQR0aK73iOXVV1mQtX18jHAXGvcR34cuJ 9kR9jsr1kKoTjB972JMvTDpoN9ce+WmLjzgIzxZJYvys/tAgiz94YEXlB+AWnI8f PMrDYJ344CktrGQ2xOwz4y7s9wIgrgPxOERK -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:58 2026 by rpki-client