This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/uOJGLkQyNKaT4f4wdR-jRPZe12A.roa File: uOJGLkQyNKaT4f4wdR-jRPZe12A.roa (raw, json) Hash identifier: 5CaACMppaC0ZLckUFh8CxWfK9ZG13WoON1Fhk+k16FE= Subject key identifier: B8:E2:46:2E:44:32:34:A6:93:E1:FE:30:75:1F:A3:44:F6:5E:D7:60 Certificate issuer: /CN=60a540ce450456345ec8e098ef4f53634d74bf1f Certificate serial: 019B7C13567F37A2AB1CE2332F76B9099E5C Authority key identifier: 60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/uOJGLkQyNKaT4f4wdR-jRPZe12A.roa Signing time: Fri 02 Jan 2026 00:20:00 +0000 ROA not before: Fri 02 Jan 2026 00:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213122 IP address blocks: 5.252.165.0/24 maxlen: 24 5.252.166.0/24 maxlen: 24 5.252.167.0/24 maxlen: 24 31.216.59.0/24 maxlen: 24 45.87.60.0/24 maxlen: 24 45.87.61.0/24 maxlen: 24 45.87.62.0/24 maxlen: 24 45.87.63.0/24 maxlen: 24 45.130.152.0/24 maxlen: 24 45.130.153.0/24 maxlen: 24 45.130.154.0/24 maxlen: 24 45.130.155.0/24 maxlen: 24 45.143.144.0/24 maxlen: 24 45.143.145.0/24 maxlen: 24 45.143.146.0/24 maxlen: 24 45.143.147.0/24 maxlen: 24 89.36.230.0/24 maxlen: 24 89.37.100.0/24 maxlen: 24 89.46.43.0/24 maxlen: 24 103.104.248.0/24 maxlen: 24 103.104.249.0/24 maxlen: 24 103.104.250.0/24 maxlen: 24 103.104.251.0/24 maxlen: 24 103.202.52.0/24 maxlen: 24 103.202.53.0/24 maxlen: 24 103.202.54.0/24 maxlen: 24 103.202.55.0/24 maxlen: 24 185.162.74.0/24 maxlen: 24 185.162.75.0/24 maxlen: 24 188.210.236.0/24 maxlen: 24 194.49.68.0/24 maxlen: 24 194.49.69.0/24 maxlen: 24 194.49.78.0/24 maxlen: 24 194.49.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:56:7f:37:a2:ab:1c:e2:33:2f:76:b9:09:9e:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60a540ce450456345ec8e098ef4f53634d74bf1f Validity Not Before: Jan 2 00:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8e2462e443234a693e1fe30751fa344f65ed760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:63:86:1d:da:69:61:26:c0:52:b5:63:1b:9b: 84:b2:a2:a9:6b:48:3c:10:2b:76:75:dd:e6:9a:c1: 21:61:89:f7:2c:55:f6:90:46:b7:37:e5:df:02:89: b7:16:cd:8b:de:a0:a4:86:ac:36:fb:f5:c5:4b:6d: 4c:e6:0e:4f:cb:91:53:03:2f:68:dc:e3:37:28:98: 5f:18:45:f3:87:b3:85:a5:b3:20:93:90:af:74:83: 98:e4:14:5c:db:39:e6:6f:23:1d:64:c0:12:63:a2: 4f:e2:37:f4:05:d9:d2:b3:7d:89:74:30:7b:29:9a: 0f:46:d9:72:6e:6e:97:4a:15:b0:e2:99:75:48:20: 6b:b0:47:a7:ec:d5:74:37:8b:c4:d5:76:70:b0:40: 91:2d:85:b5:db:a7:1c:e9:41:62:98:96:d5:d9:e6: c5:58:45:a8:13:ed:1c:44:2c:8b:f3:08:98:44:70: 90:fe:4c:54:0c:31:c3:73:90:cb:91:c8:6c:12:67: 2c:ef:de:24:a7:77:84:75:4d:88:ae:5b:79:3c:e4: 77:c2:d7:5d:5d:d1:18:fb:37:58:6e:60:83:6f:09: d5:e4:10:82:4b:16:72:1a:3d:f8:d4:28:59:af:da: 30:59:4a:e4:63:cb:92:af:ae:7c:11:30:9d:fb:6e: 4b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E2:46:2E:44:32:34:A6:93:E1:FE:30:75:1F:A3:44:F6:5E:D7:60 X509v3 Authority Key Identifier: keyid:60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/uOJGLkQyNKaT4f4wdR-jRPZe12A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.165.0-5.252.167.255 31.216.59.0/24 45.87.60.0/22 45.130.152.0/22 45.143.144.0/22 89.36.230.0/24 89.37.100.0/24 89.46.43.0/24 103.104.248.0/22 103.202.52.0/22 185.162.74.0/23 188.210.236.0/24 194.49.68.0/23 194.49.78.0/23 Signature Algorithm: sha256WithRSAEncryption b0:45:43:83:47:1d:3c:d6:c4:2f:f7:1a:16:f0:58:b2:66:3d: 2d:e7:8f:6b:94:b1:dd:f4:a1:8f:1d:36:c4:49:a9:12:32:4d: 55:ba:49:a0:ac:31:1f:eb:3c:bc:aa:df:69:27:16:30:2a:82: cb:7f:76:87:e1:8a:53:e3:75:ee:a0:ff:97:9e:e2:dc:33:3a: 37:3a:f2:92:db:2f:b2:1e:f6:6e:3f:a7:42:d7:58:2a:cd:e6: e7:d2:9f:46:23:6a:5a:5a:2e:dc:09:12:d8:e9:ad:50:1c:da: 13:87:ab:d7:f6:5e:13:2d:6e:f4:74:66:8f:11:b4:11:b2:87: 1d:17:c8:47:fc:3e:71:a6:c9:d5:b9:1b:ee:63:aa:96:3f:95: a1:03:e7:31:75:31:09:5a:36:4b:1d:0f:12:ec:76:e4:7f:b2: 09:38:b5:a0:75:fb:12:68:07:1d:f7:7b:3b:da:74:dd:27:41: ca:77:53:5e:f1:02:26:c2:88:0f:4b:b4:29:4e:36:bc:0d:3d: 68:30:34:dc:f9:78:df:35:cc:b0:a6:d8:9d:bf:ac:f8:37:30: 75:46:8a:2f:22:36:cd:f7:aa:46:de:f8:b9:26:84:7e:8c:17: eb:02:81:41:d9:b5:0c:ec:0b:da:0d:ff:0f:c2:58:a9:35:e7: 22:f6:b2:e2 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgISAZt8E1Z/N6KrHOIzL3a5CZ5cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYTU0MGNlNDUwNDU2MzQ1ZWM4ZTA5OGVmNGY1MzYzNGQ3 NGJmMWYwHhcNMjYwMTAyMDAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGUyNDYyZTQ0MzIzNGE2OTNlMWZlMzA3NTFmYTM0NGY2NWVkNzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGOGHdppYSbAUrVjG5uEsqKpa0g8 ECt2dd3mmsEhYYn3LFX2kEa3N+XfAom3Fs2L3qCkhqw2+/XFS21M5g5Py5FTAy9o 3OM3KJhfGEXzh7OFpbMgk5CvdIOY5BRc2znmbyMdZMASY6JP4jf0BdnSs32JdDB7 KZoPRtlybm6XShWw4pl1SCBrsEen7NV0N4vE1XZwsECRLYW126cc6UFimJbV2ebF WEWoE+0cRCyL8wiYRHCQ/kxUDDHDc5DLkchsEmcs794kp3eEdU2Irlt5POR3wtdd XdEY+zdYbmCDbwnV5BCCSxZyGj341ChZr9owWUrkY8uSr658ETCd+25LqQIDAQAB o4ICXzCCAlswHQYDVR0OBBYEFLjiRi5EMjSmk+H+MHUfo0T2XtdgMB8GA1UdIwQY MBaAFGClQM5FBFY0XsjgmO9PU2NNdL8fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUtWQXprVUVWalJleU9DWTcwOVRZMDEwdng4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xOTVhNDctYTJjYi00ZjAwLTg1MzEt ZTQ3MzUzMWY2ZmU4LzEvdU9KR0xrUXlOS2FUNGY0d2RSLWpSUFplMTJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8xOTVhNDctYTJjYi00ZjAwLTg1MzEtZTQ3MzUzMWY2ZmU4 LzEvWUtWQXprVUVWalJleU9DWTcwOVRZMDEwdng4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAATBcMAwDBAAF/KUD BAMF/KADBAAf2DsDBAItVzwDBAItgpgDBAItj5ADBABZJOYDBABZJWQDBABZLisD BAJnaPgDBAJnyjQDBAG5okoDBAC80uwDBAHCMUQDBAHCMU4wDQYJKoZIhvcNAQEL BQADggEBALBFQ4NHHTzWxC/3GhbwWLJmPS3nj2uUsd30oY8dNsRJqRIyTVW6SaCs MR/rPLyq32knFjAqgst/dofhilPjde6g/5ee4twzOjc68pLbL7Ie9m4/p0LXWCrN 5ufSn0YjalpaLtwJEtjprVAc2hOHq9f2XhMtbvR0Zo8RtBGyhx0XyEf8PnGmydW5 G+5jqpY/laED5zF1MQlaNksdDxLsduR/sgk4taB1+xJoBx33ezvadN0nQcp3U17x AibCiA9LtClONrwNPWgwNNz5eN81zLCm2J2/rPg3MHVGii8iNs33qkbe+LkmhH6M F+sCgUHZtQzsC9oN/w/CWKk15yL2suI= -----END CERTIFICATE-----Generated at Fri Jan 9 19:41:04 2026 by rpki-client