This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/uUoKvpcOk1MN1N-RCShYaCzs_Ms.roa File: uUoKvpcOk1MN1N-RCShYaCzs_Ms.roa (raw, json) Hash identifier: kQd1YigGHb1xiD3rBDQj/Z4qQiqNkv9K2U3Hpfudh9s= Subject key identifier: B9:4A:0A:BE:97:0E:93:53:0D:D4:DF:91:09:28:58:68:2C:EC:FC:CB Certificate issuer: /CN=a088b0547f09fe9224050d70a523da5bedbe0738 Certificate serial: 019B77C71D4D654F6650C7BE8B65A84DDFC6 Authority key identifier: A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/uUoKvpcOk1MN1N-RCShYaCzs_Ms.roa Signing time: Thu 01 Jan 2026 04:18:16 +0000 ROA not before: Thu 01 Jan 2026 04:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212027 IP address blocks: 37.230.138.0/24 maxlen: 24 45.85.60.0/22 maxlen: 24 45.143.196.0/22 maxlen: 24 45.143.196.0/24 maxlen: 24 45.143.197.0/24 maxlen: 24 45.143.198.0/24 maxlen: 24 45.143.199.0/24 maxlen: 24 81.16.176.0/24 maxlen: 24 81.16.177.0/24 maxlen: 24 91.208.92.0/24 maxlen: 24 185.83.152.0/24 maxlen: 24 185.83.153.0/24 maxlen: 24 185.83.154.0/23 maxlen: 23 185.83.154.0/24 maxlen: 24 185.83.155.0/24 maxlen: 24 185.206.148.0/24 maxlen: 24 185.206.149.0/24 maxlen: 24 185.206.150.0/24 maxlen: 24 185.206.151.0/24 maxlen: 24 188.64.33.0/24 maxlen: 24 194.164.96.0/24 maxlen: 24 194.213.3.0/24 maxlen: 24 213.170.135.0/24 maxlen: 24 2a10:e780::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.mft rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:1d:4d:65:4f:66:50:c7:be:8b:65:a8:4d:df:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a088b0547f09fe9224050d70a523da5bedbe0738 Validity Not Before: Jan 1 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b94a0abe970e93530dd4df91092858682cecfccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:56:7d:bd:c7:e9:c5:b6:de:1c:be:0a:0a:02: 3e:a4:d3:1f:99:ff:b3:93:b2:13:a2:c1:fc:a6:5d: 54:7a:b1:b6:02:d4:3e:5d:4f:09:97:c7:ec:dc:99: 64:fb:37:78:15:63:a4:f7:12:19:93:26:e8:3f:f3: 02:af:2a:b5:90:09:f0:f1:49:3f:2b:68:5d:fd:ef: 75:83:82:d4:70:0b:4c:fb:36:fa:83:0b:6d:69:0a: 16:8a:eb:07:52:29:9f:60:4f:8b:39:42:ed:03:05: ee:72:17:21:5f:89:56:e7:5a:4d:08:44:d5:33:68: c9:f6:3a:de:49:ca:31:e9:db:c1:0a:dc:64:49:fb: b2:ae:5b:cf:37:db:64:13:af:e3:4a:d9:a4:79:35: 2c:25:fb:03:38:2d:b0:77:c5:cf:ad:a2:d3:0e:4e: 1e:53:18:58:e2:7d:40:29:19:ed:da:1d:51:ef:ac: ee:b0:b4:2f:48:c3:dd:ad:a6:30:f8:49:10:f7:72: 30:3d:93:79:63:66:d7:50:15:ad:b5:12:d4:92:0b: aa:84:6f:14:d5:90:ff:05:a4:25:f8:50:52:d8:9b: a3:3b:2c:81:ad:47:c8:0c:c9:ca:3d:e5:b3:88:79: 96:e4:23:07:18:f5:d8:1b:64:b4:5b:76:fc:02:40: e4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4A:0A:BE:97:0E:93:53:0D:D4:DF:91:09:28:58:68:2C:EC:FC:CB X509v3 Authority Key Identifier: keyid:A0:88:B0:54:7F:09:FE:92:24:05:0D:70:A5:23:DA:5B:ED:BE:07:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/uUoKvpcOk1MN1N-RCShYaCzs_Ms.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d90635-b282-4e86-9e53-df82fa897326/1/oIiwVH8J_pIkBQ1wpSPaW-2-Bzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.138.0/24 45.85.60.0/22 45.143.196.0/22 81.16.176.0/23 91.208.92.0/24 185.83.152.0/22 185.206.148.0/22 188.64.33.0/24 194.164.96.0/24 194.213.3.0/24 213.170.135.0/24 IPv6: 2a10:e780::/40 Signature Algorithm: sha256WithRSAEncryption 4f:6b:d9:4a:27:e5:f9:62:21:a5:4f:7e:52:6c:11:20:17:c7: 5a:ec:8b:b0:0a:3b:78:91:04:41:cb:05:7d:8c:47:cb:95:16: cd:69:5e:8a:82:5b:e4:99:e6:d3:66:6e:a5:85:59:3a:1c:d1: 07:fc:cf:eb:13:0d:cc:1f:b0:04:e2:1a:66:01:5c:97:cb:0d: dd:5a:14:71:8f:00:4d:18:40:ab:e9:61:01:83:0b:bf:f2:92: 04:8b:63:77:ea:d3:d9:e2:94:75:4e:a0:22:97:f9:20:73:32: 9c:6f:85:17:6a:e2:d2:21:db:7c:3f:99:5f:bb:56:c8:1f:0b: 0c:66:d0:6e:6b:5a:cd:28:34:20:f5:ba:38:22:50:2f:2e:78: c6:47:fb:bb:01:4a:62:fe:9d:0a:17:96:22:06:8f:3b:29:58: 3a:78:70:63:12:8a:c3:1e:bb:a0:1d:4e:f1:44:fb:1b:96:5a: 53:e0:a0:28:90:11:ee:ed:f0:34:8c:65:9b:18:ad:94:14:45: 6a:3e:a6:b1:3e:a0:57:17:83:53:79:95:d4:1b:9e:a2:a6:77: 98:14:10:b7:4f:60:e4:5f:06:4c:63:98:05:e9:a1:36:8c:6a: 84:a1:d5:35:8f:88:bf:96:27:af:98:69:f2:78:9e:5d:6d:8d: c7:68:a1:ed -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgISAZt3xx1NZU9mUMe+i2WoTd/GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwODhiMDU0N2YwOWZlOTIyNDA1MGQ3MGE1MjNkYTViZWRi ZTA3MzgwHhcNMjYwMTAxMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTRhMGFiZTk3MGU5MzUzMGRkNGRmOTEwOTI4NTg2ODJjZWNmY2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVZ9vcfpxbbeHL4KCgI+pNMfmf+z k7ITosH8pl1UerG2AtQ+XU8Jl8fs3Jlk+zd4FWOk9xIZkyboP/MCryq1kAnw8Uk/ K2hd/e91g4LUcAtM+zb6gwttaQoWiusHUimfYE+LOULtAwXuchchX4lW51pNCETV M2jJ9jreScox6dvBCtxkSfuyrlvPN9tkE6/jStmkeTUsJfsDOC2wd8XPraLTDk4e UxhY4n1AKRnt2h1R76zusLQvSMPdraYw+EkQ93IwPZN5Y2bXUBWttRLUkguqhG8U 1ZD/BaQl+FBS2JujOyyBrUfIDMnKPeWziHmW5CMHGPXYG2S0W3b8AkDkBwIDAQAB o4ICVTCCAlEwHQYDVR0OBBYEFLlKCr6XDpNTDdTfkQkoWGgs7PzLMB8GA1UdIwQY MBaAFKCIsFR/Cf6SJAUNcKUj2lvtvgc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kOTA2MzUtYjI4Mi00ZTg2LTllNTMt ZGY4MmZhODk3MzI2LzEvdVVvS3ZwY09rMU1OMU4tUkNTaFlhQ3pzX01zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9kOTA2MzUtYjI4Mi00ZTg2LTllNTMtZGY4MmZhODk3MzI2 LzEvb0lpd1ZIOEpfcElrQlExd3BTUGFXLTItQnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBIBAIAATBCAwQAJeaKAwQC LVU8AwQCLY/EAwQBURCwAwQAW9BcAwQCuVOYAwQCuc6UAwQAvEAhAwQAwqRgAwQA wtUDAwQA1aqHMA4EAgACMAgDBgAqEOeAADANBgkqhkiG9w0BAQsFAAOCAQEAT2vZ Sifl+WIhpU9+UmwRIBfHWuyLsAo7eJEEQcsFfYxHy5UWzWleioJb5Jnm02ZupYVZ OhzRB/zP6xMNzB+wBOIaZgFcl8sN3VoUcY8ATRhAq+lhAYMLv/KSBItjd+rT2eKU dU6gIpf5IHMynG+FF2ri0iHbfD+ZX7tWyB8LDGbQbmtazSg0IPW6OCJQLy54xkf7 uwFKYv6dCheWIgaPOylYOnhwYxKKwx67oB1O8UT7G5ZaU+CgKJAR7u3wNIxlmxit lBRFaj6msT6gVxeDU3mV1BueoqZ3mBQQt09g5F8GTGOYBemhNoxqhKHVNY+Iv5Yn r5hp8nieXW2Nx2ih7Q== -----END CERTIFICATE-----Generated at Wed Jan 21 07:21:57 2026 by rpki-client