This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/pkUUzqA3QbThc7oqdUnjxN9QYMU.roa File: pkUUzqA3QbThc7oqdUnjxN9QYMU.roa (raw, json) Hash identifier: RswzhGW9W7Aa5lMfftJP3fP15HlpGxcfnXUCf1iUSNg= Subject key identifier: A6:45:14:CE:A0:37:41:B4:E1:73:BA:2A:75:49:E3:C4:DF:50:60:C5 Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Certificate serial: 019B7FF1EFE34F5F4C724D86497130E13E53 Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/pkUUzqA3QbThc7oqdUnjxN9QYMU.roa Signing time: Fri 02 Jan 2026 18:22:00 +0000 ROA not before: Fri 02 Jan 2026 18:22:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210099 IP address blocks: 46.31.78.0/24 maxlen: 24 85.117.236.0/24 maxlen: 24 85.117.237.0/24 maxlen: 24 85.117.238.0/24 maxlen: 24 185.17.112.0/24 maxlen: 24 185.17.113.0/24 maxlen: 24 185.17.114.0/24 maxlen: 24 185.17.115.0/24 maxlen: 24 185.73.200.0/24 maxlen: 24 185.73.201.0/24 maxlen: 24 185.73.202.0/24 maxlen: 24 185.73.203.0/24 maxlen: 24 185.165.77.0/24 maxlen: 24 185.165.78.0/24 maxlen: 24 2a04:7c1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:ef:e3:4f:5f:4c:72:4d:86:49:71:30:e1:3e:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Validity Not Before: Jan 2 18:22:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a64514cea03741b4e173ba2a7549e3c4df5060c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:74:26:a4:b8:4e:2b:e0:ae:b7:ed:d3:d1:e5: aa:67:08:5c:46:f1:6f:f6:f6:92:9e:02:60:b4:33: 5b:fe:70:e0:ce:ec:f2:03:af:e1:1e:72:87:80:f5: 71:45:97:e4:d1:9e:6c:67:cf:74:98:23:9b:4a:61: f9:6e:a0:f9:a7:17:cb:b4:3d:b6:67:f2:4f:1d:14: 47:6d:86:c3:b0:87:af:85:98:be:5d:56:db:3c:4b: 13:ec:40:57:55:ab:29:95:4b:08:ab:be:b8:1d:c4: b7:0a:7a:76:2b:03:1b:b9:71:a4:eb:03:61:0c:5a: e1:65:28:4e:d3:91:6d:27:cb:d8:57:96:85:d0:31: 2a:bd:e6:e3:2c:13:d1:15:a6:7f:93:17:51:cc:1c: 86:08:1c:26:0e:88:12:e9:dc:87:88:1f:b8:27:2f: eb:9a:ff:7d:69:a4:b8:27:e4:18:1f:42:90:07:fd: 50:0a:a2:00:64:34:6c:f4:7a:25:5f:ec:25:76:23: d2:e4:c4:56:ee:1b:1f:2d:a4:ea:4c:ac:86:aa:55: 49:fd:77:ba:b5:7e:9c:7b:51:fa:d4:90:bd:98:eb: 2d:54:91:ee:ba:3f:b3:67:0c:3e:6f:45:eb:4d:0d: 1f:02:7b:49:a5:08:7f:09:59:af:a5:41:eb:37:d9: 58:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:45:14:CE:A0:37:41:B4:E1:73:BA:2A:75:49:E3:C4:DF:50:60:C5 X509v3 Authority Key Identifier: keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/pkUUzqA3QbThc7oqdUnjxN9QYMU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.78.0/24 85.117.236.0-85.117.238.255 185.17.112.0/22 185.73.200.0/22 185.165.77.0-185.165.78.255 IPv6: 2a04:7c1::/32 Signature Algorithm: sha256WithRSAEncryption 6b:9b:55:d7:58:d2:fc:21:93:66:23:07:f7:b7:84:66:49:f6: eb:03:bf:da:96:cd:71:10:3c:a3:f8:0f:c4:1a:33:0a:24:83: 10:ec:0f:06:81:27:ef:01:e6:0f:22:8a:8f:8e:d9:63:4d:3a: e5:ad:ab:8a:15:24:23:d4:79:f0:2b:9e:35:38:ff:94:ac:83: b8:e2:b9:67:d0:31:3c:91:0c:85:b8:3e:9b:f6:5f:6c:6e:61: 95:28:16:b7:da:5a:87:64:d5:8a:7a:82:e7:a7:fc:bc:fe:ed: 34:f0:d2:5d:c5:c5:a4:77:be:50:70:3a:46:77:65:a6:bb:25: f2:56:9e:a2:11:69:58:f3:f5:9f:6b:fd:b1:17:ab:27:db:53: 10:4f:05:3c:f4:eb:3a:4e:8f:ce:10:5b:b5:00:bc:0d:81:c6: 07:77:91:e0:91:69:f7:3e:14:4e:ab:7d:86:5f:f1:3c:ee:49: f1:7a:7f:df:97:07:5a:b6:f2:4e:2a:82:4b:42:01:af:24:83: 81:0c:6a:1f:b8:f2:09:09:7e:eb:79:d3:ef:3d:5d:f3:a1:8d: 51:ab:a0:0b:19:a6:83:7d:e9:04:c3:3e:de:55:35:a1:72:42: 3b:68:ff:bb:e7:ed:0c:33:41:72:c0:7e:32:56:36:12:20:38: 8e:26:91:e9 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgISAZt/8e/jT19Mck2GSXEw4T5TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NmRkOWRhZDc1ODc3ZjdkMjhkMTRlMDhkYzU1YjEzMzBi ZDEzYjcwHhcNMjYwMTAyMTgyMjAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjQ1MTRjZWEwMzc0MWI0ZTE3M2JhMmE3NTQ5ZTNjNGRmNTA2MGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3QmpLhOK+Cut+3T0eWqZwhcRvFv 9vaSngJgtDNb/nDgzuzyA6/hHnKHgPVxRZfk0Z5sZ890mCObSmH5bqD5pxfLtD22 Z/JPHRRHbYbDsIevhZi+XVbbPEsT7EBXVasplUsIq764HcS3Cnp2KwMbuXGk6wNh DFrhZShO05FtJ8vYV5aF0DEqvebjLBPRFaZ/kxdRzByGCBwmDogS6dyHiB+4Jy/r mv99aaS4J+QYH0KQB/1QCqIAZDRs9HolX+wldiPS5MRW7hsfLaTqTKyGqlVJ/Xe6 tX6ce1H61JC9mOstVJHuuj+zZww+b0XrTQ0fAntJpQh/CVmvpUHrN9lYlwIDAQAB o4ICQDCCAjwwHQYDVR0OBBYEFKZFFM6gN0G04XO6KnVJ48TfUGDFMB8GA1UdIwQY MBaAFKdt2drXWHf30o0U4I3FWxMwvRO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQt MmFjNmZmNzViZWIwLzEvcGtVVXpxQTNRYlRoYzdvcWRVbmp4TjlRWU1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQtMmFjNmZmNzViZWIw LzEvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTA0BAIAATAuAwQALh9OMAwD BAJVdewDBABVde4DBAK5EXADBAK5ScgwDAMEALmlTQMEALmlTjANBAIAAjAHAwUA KgQHwTANBgkqhkiG9w0BAQsFAAOCAQEAa5tV11jS/CGTZiMH97eEZkn26wO/2pbN cRA8o/gPxBozCiSDEOwPBoEn7wHmDyKKj47ZY0065a2rihUkI9R58CueNTj/lKyD uOK5Z9AxPJEMhbg+m/ZfbG5hlSgWt9pah2TVinqC56f8vP7tNPDSXcXFpHe+UHA6 Rndlprsl8laeohFpWPP1n2v9sRerJ9tTEE8FPPTrOk6PzhBbtQC8DYHGB3eR4JFp 9z4UTqt9hl/xPO5J8Xp/35cHWrbyTiqCS0IBrySDgQxqH7jyCQl+63nT7z1d86GN UaugCxmmg33pBMM+3lU1oXJCO2j/u+ftDDNBcsB+MlY2EiA4jiaR6Q== -----END CERTIFICATE-----Generated at Wed Jan 21 16:15:39 2026 by rpki-client