This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/UyEyoxYffVHMgek2KWRxc9EkWzI.roa File: UyEyoxYffVHMgek2KWRxc9EkWzI.roa (raw, json) Hash identifier: b9ia7zBPnauhiAFfLtEGaadCmnS7C4S6xG4WG0fb70o= Subject key identifier: 53:21:32:A3:16:1F:7D:51:CC:81:E9:36:29:64:71:73:D1:24:5B:32 Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426 Certificate serial: 019B7D5B3CA74BF30C21DBBFCAE9D16C7CF8 Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/UyEyoxYffVHMgek2KWRxc9EkWzI.roa Signing time: Fri 02 Jan 2026 06:18:09 +0000 ROA not before: Fri 02 Jan 2026 06:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62164 IP address blocks: 5.181.164.0/22 maxlen: 22 5.181.164.0/23 maxlen: 23 5.181.167.0/24 maxlen: 24 45.11.88.0/22 maxlen: 22 45.11.88.0/23 maxlen: 24 45.11.90.0/23 maxlen: 23 45.81.150.0/24 maxlen: 24 45.81.151.0/24 maxlen: 24 45.92.29.0/24 maxlen: 24 85.209.84.0/23 maxlen: 23 85.209.87.0/24 maxlen: 24 185.149.232.0/22 maxlen: 22 185.149.232.0/24 maxlen: 24 185.149.233.0/24 maxlen: 24 185.149.234.0/23 maxlen: 23 185.191.228.0/23 maxlen: 23 185.191.231.0/24 maxlen: 24 185.199.224.0/23 maxlen: 23 185.199.226.0/24 maxlen: 24 185.202.172.0/23 maxlen: 23 185.202.174.0/24 maxlen: 24 185.215.148.0/24 maxlen: 24 185.215.151.0/24 maxlen: 24 185.218.235.0/24 maxlen: 24 185.235.14.0/23 maxlen: 23 193.39.184.0/24 maxlen: 24 193.39.185.0/24 maxlen: 24 193.39.186.0/24 maxlen: 24 193.39.187.0/24 maxlen: 24 212.162.148.0/22 maxlen: 22 2a0b:aac0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 09:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:3c:a7:4b:f3:0c:21:db:bf:ca:e9:d1:6c:7c:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426 Validity Not Before: Jan 2 06:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=532132a3161f7d51cc81e93629647173d1245b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:93:d6:31:76:4e:9a:b7:2f:22:d1:42:35:0a: 1a:5a:ac:e5:2d:0e:1b:6f:6b:75:7c:06:b3:a9:2f: 98:39:23:f0:5c:28:18:a0:d0:37:bd:88:4c:1b:99: b7:57:80:80:80:30:4c:c4:7e:c4:3d:8f:b7:78:46: 21:42:74:4a:54:f1:02:3f:34:aa:84:1b:f9:54:c8: b9:90:02:19:85:2d:b8:73:77:fe:96:36:4a:65:bb: d5:34:09:aa:dc:e1:39:a1:0f:5b:e4:11:95:cf:8d: 13:0c:0c:6b:ef:17:38:e5:66:9c:d6:16:60:29:f7: 12:15:76:a3:aa:89:a6:31:cb:00:44:de:11:e2:16: fd:18:03:61:13:16:e3:64:8e:21:37:1c:c9:31:71: 3c:1b:ff:63:59:3a:bf:7f:ec:42:26:fe:08:60:9e: b7:54:98:56:c7:65:4e:88:d9:08:12:fe:9f:20:b2: 8a:a6:e3:1c:3c:81:91:5a:9f:23:50:6c:e2:de:0d: a5:0e:47:f6:ba:58:75:67:ad:f7:5a:a5:6c:c9:b2: f1:82:7c:b4:e9:9f:c9:4e:2b:5d:65:f4:0f:2f:6d: 13:4c:61:08:d3:91:0b:a4:01:ad:38:78:bb:33:4f: b2:3a:09:dc:df:3e:99:53:c3:a9:13:35:ae:f0:17: 07:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:21:32:A3:16:1F:7D:51:CC:81:E9:36:29:64:71:73:D1:24:5B:32 X509v3 Authority Key Identifier: keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/UyEyoxYffVHMgek2KWRxc9EkWzI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.164.0/22 45.11.88.0/22 45.81.150.0/23 45.92.29.0/24 85.209.84.0/23 85.209.87.0/24 185.149.232.0/22 185.191.228.0/23 185.191.231.0/24 185.199.224.0-185.199.226.255 185.202.172.0-185.202.174.255 185.215.148.0/24 185.215.151.0/24 185.218.235.0/24 185.235.14.0/23 193.39.184.0/22 212.162.148.0/22 IPv6: 2a0b:aac0::/29 Signature Algorithm: sha256WithRSAEncryption 74:29:64:2e:46:e7:4c:61:d7:46:fe:94:70:32:e6:31:54:2e: 27:7f:b2:7c:5a:ac:36:9e:f3:65:6d:bd:81:a1:06:93:43:7f: d4:ed:89:d7:97:cc:44:55:ea:a7:f6:66:76:86:ce:d8:38:de: d8:49:4e:32:d7:bf:f2:c8:ce:3a:04:79:64:13:0e:d2:d9:87: c4:29:83:92:f9:e0:80:6c:9b:62:8b:1d:ab:f6:c6:21:b4:5d: 27:27:76:d4:21:7c:61:7f:8f:1b:82:e7:3b:85:0f:d9:46:d7: 00:3d:ed:8c:82:9d:26:8b:4a:66:9e:41:65:20:a9:b1:9d:63: 3b:d0:42:3c:22:20:80:9f:67:ee:84:c5:80:54:44:8c:60:74: 2b:65:0c:dc:f5:de:b3:b8:2d:72:b7:c5:b0:9d:47:03:30:28: 24:9a:71:28:ed:90:84:68:f7:13:88:a7:76:56:70:e1:36:b9: 78:6b:86:bc:75:f0:c5:c1:73:64:53:19:8e:31:1a:ef:fc:5a: ed:b6:96:04:56:7b:98:03:aa:fd:f5:d1:4e:02:b6:ff:71:04: 79:27:de:29:16:c9:40:70:af:15:2f:e8:1a:39:c4:4a:f3:5d: e9:43:75:56:36:e8:c7:31:1f:7f:82:39:81:70:0f:1e:69:21: 0e:59:f4:85 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgISAZt9WzynS/MMIdu/yunRbHz4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYzhiNzNhYjdiZGViNzZmZjQ4YjJjYTA5OTYxNmVkYmU3 MWM0MjYwHhcNMjYwMTAyMDYxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzIxMzJhMzE2MWY3ZDUxY2M4MWU5MzYyOTY0NzE3M2QxMjQ1YjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupPWMXZOmrcvItFCNQoaWqzlLQ4b b2t1fAazqS+YOSPwXCgYoNA3vYhMG5m3V4CAgDBMxH7EPY+3eEYhQnRKVPECPzSq hBv5VMi5kAIZhS24c3f+ljZKZbvVNAmq3OE5oQ9b5BGVz40TDAxr7xc45Wac1hZg KfcSFXajqommMcsARN4R4hb9GANhExbjZI4hNxzJMXE8G/9jWTq/f+xCJv4IYJ63 VJhWx2VOiNkIEv6fILKKpuMcPIGRWp8jUGzi3g2lDkf2ulh1Z633WqVsybLxgny0 6Z/JTitdZfQPL20TTGEI05ELpAGtOHi7M0+yOgnc3z6ZU8OpEzWu8BcHFwIDAQAB o4ICizCCAocwHQYDVR0OBBYEFFMhMqMWH31RzIHpNilkcXPRJFsyMB8GA1UdIwQY MBaAFIHItzq3vet2/0iyygmWFu2+ccQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUt ZDg0ODhiM2FiNDJmLzEvVXlFeW94WWZmVkhNZ2VrMktXUnhjOUVrV3pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUtZDg0ODhiM2FiNDJm LzEvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGgBggrBgEFBQcBBwEB/wSBkDCBjTB8BAIAATB2AwQCBbWk AwQCLQtYAwQBLVGWAwQALVwdAwQBVdFUAwQAVdFXAwQCuZXoAwQBub/kAwQAub/n MAwDBAW5x+ADBAC5x+IwDAMEArnKrAMEALnKrgMEALnXlAMEALnXlwMEALna6wME AbnrDgMEAsEnuAMEAtSilDANBAIAAjAHAwUDKguqwDANBgkqhkiG9w0BAQsFAAOC AQEAdClkLkbnTGHXRv6UcDLmMVQuJ3+yfFqsNp7zZW29gaEGk0N/1O2J15fMRFXq p/ZmdobO2Dje2ElOMte/8sjOOgR5ZBMO0tmHxCmDkvnggGybYosdq/bGIbRdJyd2 1CF8YX+PG4LnO4UP2UbXAD3tjIKdJotKZp5BZSCpsZ1jO9BCPCIggJ9n7oTFgFRE jGB0K2UM3PXes7gtcrfFsJ1HAzAoJJpxKO2QhGj3E4indlZw4Ta5eGuGvHXwxcFz ZFMZjjEa7/xa7baWBFZ7mAOq/fXRTgK2/3EEeSfeKRbJQHCvFS/oGjnESvNd6UN1 VjboxzEff4I5gXAPHmkhDln0hQ== -----END CERTIFICATE-----Generated at Sat Jan 24 18:17:20 2026 by rpki-client