This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/8UKAERrBYmJnT6c7KmOWpnP03AU.roa File: 8UKAERrBYmJnT6c7KmOWpnP03AU.roa (raw, json) Hash identifier: RSk1BA4bvSXH8hjE9Jc578pan9A3SzSNjGvKDRIsMTI= Subject key identifier: F1:42:80:11:1A:C1:62:62:67:4F:A7:3B:2A:63:96:A6:73:F4:DC:05 Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7 Certificate serial: 019B7F140C75F3B6378EC27171CB09748102 Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/8UKAERrBYmJnT6c7KmOWpnP03AU.roa Signing time: Fri 02 Jan 2026 14:19:38 +0000 ROA not before: Fri 02 Jan 2026 14:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 212.11.0.0/24 maxlen: 24 212.11.6.0/24 maxlen: 24 212.11.9.0/24 maxlen: 24 212.11.10.0/24 maxlen: 24 212.11.13.0/24 maxlen: 24 212.11.48.0/24 maxlen: 24 212.11.49.0/24 maxlen: 24 212.11.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 23:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:0c:75:f3:b6:37:8e:c2:71:71:cb:09:74:81:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7 Validity Not Before: Jan 2 14:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f14280111ac16262674fa73b2a6396a673f4dc05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:65:09:a7:ff:13:95:6e:bd:d6:63:32:aa:93: 7c:21:58:c8:f4:21:a0:5e:ba:64:62:15:86:90:f7: 78:4d:c8:6c:87:9e:d8:4f:38:5d:69:cd:33:e6:9e: f2:c9:7e:dd:ce:99:42:ef:1a:55:15:88:96:de:ff: 32:16:92:73:1f:a9:e0:21:fa:0a:f8:1a:31:09:6e: a7:b4:a0:42:13:2c:3c:4e:24:ee:28:1b:f1:3d:ee: c4:a4:fb:bd:00:0a:70:5a:84:e6:76:5c:69:9d:25: 68:2b:1c:91:25:38:7f:b1:dc:b3:81:09:da:ba:7a: b3:0e:58:1e:d7:12:60:43:33:65:ca:ce:7f:6e:d2: ad:67:7a:c2:b7:06:20:5e:13:92:07:06:55:f3:f2: 61:1d:f3:15:cf:42:14:13:4f:d1:1d:89:cd:6a:fa: 0a:09:6b:a8:f3:ad:e4:76:a4:b4:c7:32:9d:51:d3: e9:41:14:31:68:51:43:18:a5:b2:24:4c:50:4c:3a: de:19:74:ec:cc:59:dc:aa:6f:6f:c9:2f:1b:c5:3b: ec:8d:92:b4:c3:80:ae:f1:c4:dd:99:d8:9b:63:71: cf:de:94:f5:8f:89:a7:3f:5e:b3:e9:53:19:d5:10: c6:b0:e3:9d:02:74:81:1b:33:1f:24:23:3c:65:bb: 34:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:42:80:11:1A:C1:62:62:67:4F:A7:3B:2A:63:96:A6:73:F4:DC:05 X509v3 Authority Key Identifier: keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/8UKAERrBYmJnT6c7KmOWpnP03AU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.11.0.0/24 212.11.6.0/24 212.11.9.0-212.11.10.255 212.11.13.0/24 212.11.48.0/23 212.11.52.0/24 Signature Algorithm: sha256WithRSAEncryption 94:1a:53:d7:96:97:a6:f8:45:5e:c5:36:11:c8:16:71:cb:c7: 7e:f3:31:a9:27:dc:73:64:76:9d:5d:77:f5:a4:4a:8a:a2:96: 3d:6a:3f:a5:fb:30:46:c4:c0:07:05:a7:6b:ee:d3:13:99:b1: 85:64:47:9e:1e:c6:43:6d:71:33:02:6e:6d:ef:d4:a1:5d:6a: 2e:7b:b2:05:3b:92:ce:49:bf:a9:77:fb:57:98:64:9c:8b:d3: 21:03:37:76:37:60:44:3b:0e:13:94:27:79:9e:92:9a:9b:aa: f0:e7:00:27:c3:9a:23:7c:7d:c5:8b:9e:df:06:9b:fa:39:4e: 45:37:52:93:c5:ba:59:8a:0e:11:1f:88:9e:ef:c1:4a:7a:3c: 72:17:95:ee:83:4e:a3:57:62:30:ec:97:d5:59:27:15:a3:8a: 38:54:66:9a:55:dd:fd:f3:eb:36:be:1a:0d:46:24:a7:00:ec: e5:f6:9f:29:c4:00:85:0c:7e:8b:71:4c:1a:8c:19:d3:79:81: b5:5e:9b:82:e4:78:0c:bc:76:0a:ef:53:e9:64:70:fa:61:fa: 11:25:6c:1a:5d:43:46:6b:a5:04:10:eb:98:fa:e0:2d:ba:73: 1a:ad:87:32:fa:48:7f:fb:71:a7:1f:78:46:59:45:3b:37:ca: 5c:8b:07:83 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt/FAx187Y3jsJxccsJdIECMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NTRiNjE4M2U0NTk3NDhjODllZTU0MzFiOGYzMWRlNjky YWUzYjcwHhcNMjYwMTAyMTQxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTQyODAxMTFhYzE2MjYyNjc0ZmE3M2IyYTYzOTZhNjczZjRkYzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GUJp/8TlW691mMyqpN8IVjI9CGg XrpkYhWGkPd4Tchsh57YTzhdac0z5p7yyX7dzplC7xpVFYiW3v8yFpJzH6ngIfoK +BoxCW6ntKBCEyw8TiTuKBvxPe7EpPu9AApwWoTmdlxpnSVoKxyRJTh/sdyzgQna unqzDlge1xJgQzNlys5/btKtZ3rCtwYgXhOSBwZV8/JhHfMVz0IUE0/RHYnNavoK CWuo863kdqS0xzKdUdPpQRQxaFFDGKWyJExQTDreGXTszFncqm9vyS8bxTvsjZK0 w4Cu8cTdmdibY3HP3pT1j4mnP16z6VMZ1RDGsOOdAnSBGzMfJCM8Zbs0kQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFPFCgBEawWJiZ0+nOypjlqZz9NwFMB8GA1UdIwQY MBaAFFlUthg+RZdIyJ7lQxuPMd5pKuO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMt ZDJhZGVlZDc1NWQ4LzEvOFVLQUVSckJZbUpuVDZjN0ttT1dwblAwM0FVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMtZDJhZGVlZDc1NWQ4 LzEvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQA1AsAAwQA 1AsGMAwDBADUCwkDBADUCwoDBADUCw0DBAHUCzADBADUCzQwDQYJKoZIhvcNAQEL BQADggEBAJQaU9eWl6b4RV7FNhHIFnHLx37zMakn3HNkdp1dd/WkSoqilj1qP6X7 MEbEwAcFp2vu0xOZsYVkR54exkNtcTMCbm3v1KFdai57sgU7ks5Jv6l3+1eYZJyL 0yEDN3Y3YEQ7DhOUJ3mekpqbqvDnACfDmiN8fcWLnt8Gm/o5TkU3UpPFulmKDhEf iJ7vwUp6PHIXle6DTqNXYjDsl9VZJxWjijhUZppV3f3z6za+Gg1GJKcA7OX2nynE AIUMfotxTBqMGdN5gbVem4LkeAy8dgrvU+lkcPph+hElbBpdQ0ZrpQQQ65j64C26 cxqthzL6SH/7cacfeEZZRTs3ylyLB4M= -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:58 2026 by rpki-client