This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/UkKSFgRU0i3KaGnHwMCMWucAEJg.roa File: UkKSFgRU0i3KaGnHwMCMWucAEJg.roa (raw, json) Hash identifier: 5Ch+ryXt3IKffn5gHuwCN/ReoHH/iCHv2Si1y+KwSg0= Subject key identifier: 52:42:92:16:04:54:D2:2D:CA:68:69:C7:C0:C0:8C:5A:E7:00:10:98 Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Certificate serial: 019B76EAEB82F4BCA6FCEF127E26209CD055 Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/UkKSFgRU0i3KaGnHwMCMWucAEJg.roa Signing time: Thu 01 Jan 2026 00:17:45 +0000 ROA not before: Thu 01 Jan 2026 00:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44477 IP address blocks: 138.124.228.0/24 maxlen: 24 138.124.229.0/24 maxlen: 24 138.124.230.0/24 maxlen: 24 138.124.231.0/24 maxlen: 24 138.124.240.0/24 maxlen: 24 138.124.241.0/24 maxlen: 24 138.124.242.0/24 maxlen: 24 138.124.243.0/24 maxlen: 24 138.124.244.0/24 maxlen: 24 138.124.245.0/24 maxlen: 24 138.124.246.0/24 maxlen: 24 138.124.247.0/24 maxlen: 24 138.124.248.0/24 maxlen: 24 138.124.249.0/24 maxlen: 24 138.124.250.0/24 maxlen: 24 138.124.251.0/24 maxlen: 24 138.124.252.0/24 maxlen: 24 138.124.253.0/24 maxlen: 24 138.124.254.0/24 maxlen: 24 138.124.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:eb:82:f4:bc:a6:fc:ef:12:7e:26:20:9c:d0:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Validity Not Before: Jan 1 00:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=524292160454d22dca6869c7c0c08c5ae7001098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:3a:99:3d:56:19:28:6d:78:ba:cf:61:ba:46: b7:36:b8:40:18:c1:ca:99:03:83:ed:ce:4f:b7:fa: 77:01:d9:59:c6:7a:bc:60:0a:b5:a1:f1:e0:3b:86: 97:01:a1:6c:ca:3f:df:4d:57:5e:22:49:98:6e:3e: 12:6f:28:2e:06:d0:32:87:8c:71:26:20:c7:b5:5e: 1d:c0:70:85:4e:38:a4:83:18:05:4b:19:b8:82:cd: 69:6e:10:ab:f5:2c:67:6d:61:51:25:69:fd:e0:8e: 63:ca:f2:26:bf:1e:2c:cb:eb:cb:98:48:85:30:48: c0:b6:42:51:41:de:61:72:d5:c4:50:49:53:e2:3c: 5e:d6:a2:17:0e:13:c7:1b:47:b8:3b:1e:39:2f:da: e1:be:be:a4:f3:56:5d:89:3a:0c:5e:9f:0b:12:6d: 67:35:4c:ff:9a:7d:95:91:fb:fe:dd:00:d8:e4:54: e7:99:4d:d0:8b:16:ec:46:39:d6:49:7b:5c:17:a5: cc:33:50:ce:3c:cb:33:3b:bb:2c:41:57:36:ed:55: f1:68:66:d3:4f:e5:eb:5a:a2:5d:3c:fe:9d:93:bd: aa:c6:25:54:07:91:9b:7a:dc:ce:2a:64:6f:68:b9: c9:d7:48:d5:bd:99:11:26:f1:85:e7:7d:66:b3:24: 47:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:42:92:16:04:54:D2:2D:CA:68:69:C7:C0:C0:8C:5A:E7:00:10:98 X509v3 Authority Key Identifier: keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/UkKSFgRU0i3KaGnHwMCMWucAEJg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.124.228.0/22 138.124.240.0/20 Signature Algorithm: sha256WithRSAEncryption 37:53:0b:67:5f:bd:95:4e:7c:8b:e5:19:51:a8:47:71:2f:59: c4:39:76:4f:ee:f1:23:3c:44:04:7c:9c:a8:74:fe:fd:a0:ae: 04:17:da:4b:d9:f9:be:d9:75:34:85:80:97:1a:1f:1a:e3:c8: 3a:3c:62:5c:68:54:2f:45:e7:df:40:03:02:e1:0f:8a:5a:22: 79:48:80:6a:71:05:08:fa:d4:dd:2d:7c:c7:17:73:76:18:07: 94:54:42:d5:b9:cb:11:11:e6:64:57:04:4f:0c:55:ad:75:1c: 8b:b9:a9:54:88:fa:ef:7f:14:72:a5:32:e3:ba:68:7f:4c:39: c7:11:7f:53:76:8c:37:a6:ba:2e:3a:6c:72:dc:23:69:c0:f5: 8f:03:96:c0:f0:59:cd:e2:6b:f5:ab:fa:25:6e:fd:76:da:0a: 75:c1:56:78:cc:fe:ea:e2:61:fa:e4:26:e4:09:fe:1e:c4:1f: 9d:d9:59:1e:7b:10:69:46:06:9d:76:e2:a1:09:46:d7:21:04: 6b:31:f3:48:75:d0:2d:bc:c8:81:6a:4e:f0:89:72:2b:2a:f4: 98:84:19:ae:3f:d2:9a:c2:93:54:d7:9c:5c:ea:8c:8d:71:07: 1b:c1:42:3e:fb:8b:1b:12:4a:2b:44:fc:d8:c5:54:56:ff:10: 6c:56:3e:31 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26uuC9Lym/O8SfiYgnNBVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx N2U1MmMwHhcNMjYwMTAxMDAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjQyOTIxNjA0NTRkMjJkY2E2ODY5YzdjMGMwOGM1YWU3MDAxMDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9zqZPVYZKG14us9huka3NrhAGMHK mQOD7c5Pt/p3AdlZxnq8YAq1ofHgO4aXAaFsyj/fTVdeIkmYbj4SbyguBtAyh4xx JiDHtV4dwHCFTjikgxgFSxm4gs1pbhCr9SxnbWFRJWn94I5jyvImvx4sy+vLmEiF MEjAtkJRQd5hctXEUElT4jxe1qIXDhPHG0e4Ox45L9rhvr6k81ZdiToMXp8LEm1n NUz/mn2Vkfv+3QDY5FTnmU3QixbsRjnWSXtcF6XMM1DOPMszO7ssQVc27VXxaGbT T+XrWqJdPP6dk72qxiVUB5GbetzOKmRvaLnJ10jVvZkRJvGF531msyRH6wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFJCkhYEVNItymhpx8DAjFrnABCYMB8GA1UdIwQY MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt ZTAxZTk0MTI0Njc0LzEvVWtLU0ZnUlUwaTNLYUduSHdNQ01XdWNBRUpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0 LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCinzkAwQE inzwMA0GCSqGSIb3DQEBCwUAA4IBAQA3UwtnX72VTnyL5RlRqEdxL1nEOXZP7vEj PEQEfJyodP79oK4EF9pL2fm+2XU0hYCXGh8a48g6PGJcaFQvReffQAMC4Q+KWiJ5 SIBqcQUI+tTdLXzHF3N2GAeUVELVucsREeZkVwRPDFWtdRyLualUiPrvfxRypTLj umh/TDnHEX9Tdow3prouOmxy3CNpwPWPA5bA8FnN4mv1q/olbv122gp1wVZ4zP7q 4mH65CbkCf4exB+d2VkeexBpRgadduKhCUbXIQRrMfNIddAtvMiBak7wiXIrKvSY hBmuP9KawpNU15xc6oyNcQcbwUI++4sbEkorRPzYxVRW/xBsVj4x -----END CERTIFICATE-----Generated at Fri Jan 9 12:06:12 2026 by rpki-client