This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/UCt-2RG8DDA9lIubZ6vaBkXie8s.roa File: UCt-2RG8DDA9lIubZ6vaBkXie8s.roa (raw, json) Hash identifier: pmQpHOgufTef7GqgLI6BVeJZqGkNzgxQ3KCU77FrqgI= Subject key identifier: 50:2B:7E:D9:11:BC:0C:30:3D:94:8B:9B:67:AB:DA:06:45:E2:7B:CB Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019C0E90B575A750E79141212FAFD03563BE Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/UCt-2RG8DDA9lIubZ6vaBkXie8s.roa Signing time: Fri 30 Jan 2026 11:01:30 +0000 ROA not before: Fri 30 Jan 2026 11:01:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 37.77.147.0/24 maxlen: 24 37.140.221.0/24 maxlen: 24 62.233.44.0/24 maxlen: 24 91.213.117.0/24 maxlen: 24 185.11.63.0/24 maxlen: 24 193.109.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0e:90:b5:75:a7:50:e7:91:41:21:2f:af:d0:35:63:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 30 11:01:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=502b7ed911bc0c303d948b9b67abda0645e27bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ca:f2:90:7b:4e:03:e5:37:3f:fb:8e:f3:ac: f7:f6:78:4f:df:82:50:17:d0:6b:15:45:d4:c5:dc: 45:71:00:29:57:97:5c:5b:69:09:3a:7c:ab:61:0c: 17:7f:bc:58:df:6e:2a:ae:fa:d9:4d:45:7a:16:36: 11:6f:a4:2c:8c:8f:36:0c:a6:3f:93:1c:b1:bf:7e: 09:e3:b1:0e:ed:fe:06:52:3a:4d:95:1a:26:8f:f4: 29:3d:7c:e9:60:49:28:76:6a:92:b1:21:0f:e8:49: 01:1c:cf:b4:9c:df:b0:5f:c2:69:a0:ac:e9:6a:fb: d5:4f:23:a7:75:94:95:eb:e7:17:0d:e3:20:d9:50: 89:55:23:30:77:33:81:f5:9d:e3:87:84:66:2e:d3: 97:47:f4:95:28:9e:f5:ec:6a:a5:5b:ac:aa:a0:a8: c4:d4:17:89:ff:78:d9:ba:3c:71:ac:e4:76:6a:f8: ad:19:d0:d2:39:3f:e5:d0:b1:a4:0c:86:ac:63:36: 93:e4:13:84:54:b7:b9:1b:6d:75:e8:5e:db:9f:66: 97:20:0c:7c:cd:4d:25:95:a4:4a:34:71:8d:3d:76: da:e4:05:f3:4a:3e:cf:bc:f4:7e:75:ce:40:79:c7: b5:84:2e:d9:fc:dc:8b:ba:d8:6d:ce:b4:8d:02:a1: 0d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2B:7E:D9:11:BC:0C:30:3D:94:8B:9B:67:AB:DA:06:45:E2:7B:CB X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/UCt-2RG8DDA9lIubZ6vaBkXie8s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.77.147.0/24 37.140.221.0/24 62.233.44.0/24 91.213.117.0/24 185.11.63.0/24 193.109.213.0/24 Signature Algorithm: sha256WithRSAEncryption 42:86:74:4d:5c:5c:4e:c4:8d:89:fb:fc:d2:ab:07:67:7e:3b: 95:04:05:4e:ff:39:68:c0:47:80:fc:df:10:6f:8f:74:ea:f6: 78:f3:00:1f:0e:c1:38:4c:d8:0c:17:8e:70:c7:a0:dd:d5:80: 06:5f:52:aa:e0:20:38:37:bf:a4:7d:6e:78:12:1e:ec:a9:c2: 59:7a:72:f9:24:a1:7a:25:9d:9c:da:51:98:2d:f4:4f:83:09: b6:c0:a7:03:17:7d:12:19:23:0f:98:e7:86:10:b4:af:f6:9b: c4:30:33:5a:09:8f:64:c2:7e:8e:f9:a1:2f:df:41:28:f6:a5: db:96:1f:71:28:b4:24:fe:aa:26:c6:06:83:62:ce:e1:a6:27: 22:60:e9:7f:cc:0a:aa:7f:7a:77:9a:06:d0:6d:db:4f:ad:89: a3:fa:8e:0b:c9:e8:57:f6:bf:13:34:f1:e1:08:40:8b:8f:65: 52:70:f9:43:f9:87:b5:37:13:ef:85:0f:ac:85:a3:2f:74:29: 7c:31:1f:3f:b0:9b:ca:69:53:51:03:71:8b:2e:b6:91:98:f1: fa:e6:d8:85:1e:ce:bb:07:bc:0a:87:99:94:91:bf:24:0e:bb: 37:75:8f:8b:35:a3:17:a1:fc:9e:d0:07:1c:04:c3:11:a9:a5: 0d:e9:63:e4 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZwOkLV1p1DnkUEhL6/QNWO+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTMwMTEwMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDJiN2VkOTExYmMwYzMwM2Q5NDhiOWI2N2FiZGEwNjQ1ZTI3YmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1crykHtOA+U3P/uO86z39nhP34JQ F9BrFUXUxdxFcQApV5dcW2kJOnyrYQwXf7xY324qrvrZTUV6FjYRb6QsjI82DKY/ kxyxv34J47EO7f4GUjpNlRomj/QpPXzpYEkodmqSsSEP6EkBHM+0nN+wX8JpoKzp avvVTyOndZSV6+cXDeMg2VCJVSMwdzOB9Z3jh4RmLtOXR/SVKJ717GqlW6yqoKjE 1BeJ/3jZujxxrOR2avitGdDSOT/l0LGkDIasYzaT5BOEVLe5G2116F7bn2aXIAx8 zU0llaRKNHGNPXba5AXzSj7PvPR+dc5Aece1hC7Z/NyLuthtzrSNAqENrwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFFArftkRvAwwPZSLm2er2gZF4nvLMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvVUN0LTJSRzhEREE5bEl1Ylo2dmFCa1hpZThzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAJU2TAwQA JYzdAwQAPuksAwQAW9V1AwQAuQs/AwQAwW3VMA0GCSqGSIb3DQEBCwUAA4IBAQBC hnRNXFxOxI2J+/zSqwdnfjuVBAVO/zlowEeA/N8Qb4906vZ48wAfDsE4TNgMF45w x6Dd1YAGX1Kq4CA4N7+kfW54Eh7sqcJZenL5JKF6JZ2c2lGYLfRPgwm2wKcDF30S GSMPmOeGELSv9pvEMDNaCY9kwn6O+aEv30Eo9qXblh9xKLQk/qomxgaDYs7hpici YOl/zAqqf3p3mgbQbdtPrYmj+o4LyehX9r8TNPHhCECLj2VScPlD+Ye1NxPvhQ+s haMvdCl8MR8/sJvKaVNRA3GLLraRmPH65tiFHs67B7wKh5mUkb8kDrs3dY+LNaMX ofye0AccBMMRqaUN6WPk -----END CERTIFICATE-----Generated at Sat Jan 31 00:24:39 2026 by rpki-client