This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/d_UGzNdnm51QADs8DNYUUySL-9M.roa File: d_UGzNdnm51QADs8DNYUUySL-9M.roa (raw, json) Hash identifier: JDA3qW1t0qSXif4u81vdBdu6MklOAan5plROG8p9IT8= Subject key identifier: 77:F5:06:CC:D7:67:9B:9D:50:00:3B:3C:0C:D6:14:53:24:8B:FB:D3 Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Certificate serial: 019BC01AC71D82273DB38EAFCD55E37BDCB5 Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/d_UGzNdnm51QADs8DNYUUySL-9M.roa Signing time: Thu 15 Jan 2026 05:22:18 +0000 ROA not before: Thu 15 Jan 2026 05:22:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6079 IP address blocks: 9.142.0.0/16 maxlen: 24 9.142.64.0/20 maxlen: 20 9.142.76.0/23 maxlen: 23 9.142.78.0/24 maxlen: 24 9.142.79.0/24 maxlen: 24 9.142.80.0/21 maxlen: 21 9.142.92.0/23 maxlen: 23 9.142.94.0/24 maxlen: 24 9.142.95.0/24 maxlen: 24 9.142.128.0/19 maxlen: 19 9.142.160.0/19 maxlen: 19 9.142.224.0/20 maxlen: 20 9.142.224.0/21 maxlen: 21 9.142.236.0/23 maxlen: 23 9.142.238.0/24 maxlen: 24 9.142.239.0/24 maxlen: 24 9.142.240.0/21 maxlen: 21 9.142.248.0/22 maxlen: 22 9.142.252.0/23 maxlen: 23 9.142.254.0/24 maxlen: 24 9.142.255.0/24 maxlen: 24 138.226.32.0/20 maxlen: 20 138.226.80.0/21 maxlen: 21 138.226.120.0/21 maxlen: 21 138.226.128.0/18 maxlen: 18 138.226.200.0/21 maxlen: 21 158.120.49.0/24 maxlen: 24 158.120.51.0/24 maxlen: 24 158.120.53.0/24 maxlen: 24 158.120.55.0/24 maxlen: 24 158.120.57.0/24 maxlen: 24 158.120.59.0/24 maxlen: 24 158.120.61.0/24 maxlen: 24 158.120.63.0/24 maxlen: 24 192.46.184.0/21 maxlen: 21 192.46.184.0/22 maxlen: 22 192.46.188.0/24 maxlen: 24 192.46.200.0/22 maxlen: 22 192.53.64.0/22 maxlen: 22 192.53.68.0/22 maxlen: 22 192.53.136.0/22 maxlen: 22 192.53.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c0:1a:c7:1d:82:27:3d:b3:8e:af:cd:55:e3:7b:dc:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Validity Not Before: Jan 15 05:22:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77f506ccd7679b9d50003b3c0cd61453248bfbd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4c:c1:15:36:74:49:b2:8e:74:9c:55:81:b5: b7:47:a9:32:bc:9a:bd:6b:8e:f1:b5:f5:bf:e8:c1: 69:1d:13:b4:95:9e:f7:9d:c0:29:ff:ee:31:f2:04: b1:3d:f5:03:98:a8:2c:34:3a:a2:41:a8:85:df:8d: fa:d2:f1:d0:f1:f4:f9:5f:cd:50:7d:a8:93:0a:ea: 12:5b:b3:9d:cd:f8:f2:51:4d:21:96:f3:2f:28:4f: 56:cd:2f:f4:95:9f:62:9a:95:b1:00:5a:a4:78:a2: 4e:4f:c0:c7:72:2f:53:70:9b:76:3e:a1:a9:b0:14: f3:ba:5b:5a:1e:b2:a3:f9:dd:f2:42:33:91:2a:a7: c1:96:d0:ac:82:34:57:38:6f:18:1f:4a:ad:92:3d: 51:57:f3:9c:a9:31:43:5a:dc:de:86:f3:f6:ba:17: a9:29:69:98:62:e5:fc:a7:04:05:15:23:39:d6:a3: 08:77:10:5c:a2:29:da:53:03:be:00:80:a7:eb:58: 5f:4f:5f:4c:6c:db:fd:e8:d5:14:33:b6:92:5f:d8: 34:1f:e0:8b:a3:9f:27:8a:37:6c:e5:26:bf:93:b8: 22:74:28:86:92:6c:50:18:3b:11:b9:69:6f:9a:90: 44:7e:17:bd:5e:f2:a6:28:78:1f:ee:c4:94:9d:21: 13:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F5:06:CC:D7:67:9B:9D:50:00:3B:3C:0C:D6:14:53:24:8B:FB:D3 X509v3 Authority Key Identifier: keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/d_UGzNdnm51QADs8DNYUUySL-9M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 9.142.0.0/16 138.226.32.0/20 138.226.80.0/21 138.226.120.0-138.226.191.255 138.226.200.0/21 158.120.49.0/24 158.120.51.0/24 158.120.53.0/24 158.120.55.0/24 158.120.57.0/24 158.120.59.0/24 158.120.61.0/24 158.120.63.0/24 192.46.184.0/21 192.46.200.0/22 192.53.64.0/21 192.53.136.0/21 Signature Algorithm: sha256WithRSAEncryption 68:be:7a:c1:5c:05:83:10:27:f8:59:52:2d:af:ef:15:8a:6f: ea:0d:10:e2:75:bc:ea:04:09:d3:ad:7f:8a:0f:d3:6e:cf:8d: b9:92:b7:8b:ce:fd:8d:72:d0:6e:8a:b9:17:ef:a6:bb:89:0c: f6:de:f2:86:27:b8:84:a4:12:b2:06:13:88:ef:89:39:91:7a: bb:61:c4:aa:d4:09:aa:ef:94:9f:d8:16:04:b8:dd:01:4f:53: 8a:3e:29:32:54:7a:fe:0c:f8:c0:03:ae:1d:9a:09:7f:c8:38: 73:42:0d:c3:17:bc:2e:06:0b:57:7c:04:81:4a:a6:cb:97:52: ab:31:81:31:13:47:b4:21:e1:24:fe:fe:77:e1:6a:74:1c:3f: 7e:2e:cc:50:91:52:d6:e6:7f:67:aa:b9:21:97:76:3c:9b:d5: 9d:a9:cd:6b:63:48:6f:22:18:24:92:94:2e:fb:08:ab:29:3a: 1a:87:78:43:37:e5:00:f8:39:d5:9a:84:02:4d:44:75:7f:14: a5:d2:4d:dd:83:8a:24:d6:bb:3a:f9:b6:66:a7:bd:c4:87:4b: e6:df:03:e5:c7:64:1d:15:23:32:b7:d9:ce:25:6c:16:87:e8: 5e:c4:36:2c:81:7b:39:14:bf:14:92:64:74:8d:d3:60:90:62: 97:cb:74:9b -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgISAZvAGscdgic9s46vzVXje9y1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1 ZmIwYjUwHhcNMjYwMTE1MDUyMjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2Y1MDZjY2Q3Njc5YjlkNTAwMDNiM2MwY2Q2MTQ1MzI0OGJmYmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0zBFTZ0SbKOdJxVgbW3R6kyvJq9 a47xtfW/6MFpHRO0lZ73ncAp/+4x8gSxPfUDmKgsNDqiQaiF34360vHQ8fT5X81Q faiTCuoSW7OdzfjyUU0hlvMvKE9WzS/0lZ9impWxAFqkeKJOT8DHci9TcJt2PqGp sBTzultaHrKj+d3yQjORKqfBltCsgjRXOG8YH0qtkj1RV/OcqTFDWtzehvP2uhep KWmYYuX8pwQFFSM51qMIdxBcoinaUwO+AICn61hfT19MbNv96NUUM7aSX9g0H+CL o58nijds5Sa/k7gidCiGkmxQGDsRuWlvmpBEfhe9XvKmKHgf7sSUnSETjwIDAQAB o4ICcTCCAm0wHQYDVR0OBBYEFHf1BszXZ5udUAA7PAzWFFMki/vTMB8GA1UdIwQY MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct NWUwZjRhYjgwOWJiLzEvZF9VR3pOZG5tNTFRQURzOEROWVVVeVNMLTlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGGBggrBgEFBQcBBwEB/wR3MHUwcwQCAAEwbQMDAAmOAwQE iuIgAwQDiuJQMAwDBAOK4ngDBAaK4oADBAOK4sgDBACeeDEDBACeeDMDBACeeDUD BACeeDcDBACeeDkDBACeeDsDBACeeD0DBACeeD8DBAPALrgDBALALsgDBAPANUAD BAPANYgwDQYJKoZIhvcNAQELBQADggEBAGi+esFcBYMQJ/hZUi2v7xWKb+oNEOJ1 vOoECdOtf4oP027PjbmSt4vO/Y1y0G6KuRfvpruJDPbe8oYnuISkErIGE4jviTmR erthxKrUCarvlJ/YFgS43QFPU4o+KTJUev4M+MADrh2aCX/IOHNCDcMXvC4GC1d8 BIFKpsuXUqsxgTETR7Qh4ST+/nfhanQcP34uzFCRUtbmf2equSGXdjyb1Z2pzWtj SG8iGCSSlC77CKspOhqHeEM35QD4OdWahAJNRHV/FKXSTd2DiiTWuzr5tmanvcSH S+bfA+XHZB0VIzK32c4lbBaH6F7ENiyBezkUvxSSZHSN02CQYpfLdJs= -----END CERTIFICATE-----Generated at Mon Jan 19 16:53:17 2026 by rpki-client