This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/UyCV5qcRCLQ5doQBF4zOCazHOB8.roa File: UyCV5qcRCLQ5doQBF4zOCazHOB8.roa (raw, json) Hash identifier: FE6P7OspYYWrHf7w/CILjtdjVfVvvvnjVFJC9iwTuSw= Subject key identifier: 53:20:95:E6:A7:11:08:B4:39:76:84:01:17:8C:CE:09:AC:C7:38:1F Certificate issuer: /CN=f563da6eb3b7a07fdc4525883004970d640b036b Certificate serial: 019B7A5AE15C29CC6C9874A88F97A6663F8E Authority key identifier: F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/UyCV5qcRCLQ5doQBF4zOCazHOB8.roa Signing time: Thu 01 Jan 2026 16:18:54 +0000 ROA not before: Thu 01 Jan 2026 16:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6661 IP address blocks: 37.157.152.0/21 maxlen: 24 78.141.128.0/18 maxlen: 24 83.99.0.0/17 maxlen: 24 87.240.192.0/18 maxlen: 24 88.207.128.0/17 maxlen: 24 107.183.0.0/17 maxlen: 24 146.0.128.0/18 maxlen: 24 146.0.212.0/22 maxlen: 24 146.0.216.0/21 maxlen: 24 178.254.64.0/18 maxlen: 24 185.32.236.0/22 maxlen: 24 188.115.0.0/18 maxlen: 24 194.154.192.0/19 maxlen: 24 195.46.224.0/19 maxlen: 24 213.135.224.0/19 maxlen: 24 213.166.32.0/19 maxlen: 24 2001:7e8::/32 maxlen: 48 2a00:ca60::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e1:5c:29:cc:6c:98:74:a8:8f:97:a6:66:3f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f563da6eb3b7a07fdc4525883004970d640b036b Validity Not Before: Jan 1 16:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=532095e6a71108b439768401178cce09acc7381f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2e:98:27:de:5f:57:59:40:44:4b:fd:bd:3b: d2:f1:0a:a1:f8:4f:0d:ab:4d:df:b0:9f:35:c6:39: 29:76:89:ce:61:0b:82:62:33:58:f1:bb:84:6c:0b: 4f:51:8c:92:33:d8:9c:68:9c:10:5b:dc:3b:54:fa: e0:15:89:e2:7f:0f:11:a3:b8:ea:1c:7f:ca:52:08: 2c:5c:e2:9f:1f:54:32:6b:ec:24:a9:42:3f:55:ff: 3c:8e:66:28:14:52:d4:e4:d7:15:c5:e2:00:66:17: 6c:e1:3e:3a:22:07:5c:12:f6:18:85:37:8c:fc:b1: 0b:a4:90:b2:33:6c:59:d2:81:be:59:f2:b7:ad:3a: d4:ad:c5:90:5d:47:f8:72:7d:15:33:43:4a:11:90: cf:64:52:bb:f8:97:79:32:ed:c1:a8:e8:27:ea:cd: af:bb:e1:b7:cd:a8:b0:d6:24:b8:c4:2e:58:7a:e9: 7e:c3:0f:87:da:38:c7:6b:c0:4a:25:19:36:59:2c: a4:9e:ac:5d:30:fd:2d:c4:71:13:0e:3c:02:61:ae: 22:89:3a:59:c6:dc:08:1a:e3:e7:1b:72:2b:9a:c0: ed:62:dc:e8:50:d7:db:c2:d6:33:d4:54:ed:15:32: 09:4f:35:ec:1b:1f:5c:bc:f7:b9:c6:df:cd:46:78: c3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:20:95:E6:A7:11:08:B4:39:76:84:01:17:8C:CE:09:AC:C7:38:1F X509v3 Authority Key Identifier: keyid:F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/UyCV5qcRCLQ5doQBF4zOCazHOB8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.157.152.0/21 78.141.128.0/18 83.99.0.0/17 87.240.192.0/18 88.207.128.0/17 107.183.0.0/17 146.0.128.0/18 146.0.212.0-146.0.223.255 178.254.64.0/18 185.32.236.0/22 188.115.0.0/18 194.154.192.0/19 195.46.224.0/19 213.135.224.0/19 213.166.32.0/19 IPv6: 2001:7e8::/32 2a00:ca60::/32 Signature Algorithm: sha256WithRSAEncryption 1a:95:49:fc:4b:9f:e2:0c:60:e5:d1:50:b4:8a:ee:2e:7c:84: 0a:54:07:11:7a:7b:db:2c:80:de:73:ea:9c:2c:b0:56:7f:f0: d1:d7:f2:e2:3f:cf:69:fa:f5:ae:53:f7:c5:42:df:4e:55:cd: 03:da:7e:b6:cd:8d:50:8e:46:8c:5f:1b:ef:bc:6a:4b:97:4a: c0:27:3d:bf:f6:53:45:d5:07:ed:d5:e8:05:9a:fe:b8:0f:a6: f4:c0:f0:a4:77:ca:ec:85:9c:58:9c:82:be:5a:9a:1c:c7:85: 44:66:1e:52:a5:ea:46:49:8f:b9:96:67:cb:79:4b:14:25:9e: 16:54:7d:e8:f6:29:3c:f2:63:52:e6:f8:56:7c:5a:e4:22:1c: 77:7f:9e:19:d5:41:51:1d:98:65:cd:5a:98:92:ce:88:4a:78: 79:1e:ba:16:aa:08:40:fa:db:eb:7f:09:0b:2b:ab:c1:5f:ec: ec:d2:f6:99:94:28:b6:ef:d2:56:bf:59:75:0b:8d:7b:35:5f: 24:95:09:d7:72:0f:53:f4:04:02:6d:a9:19:db:7c:ff:50:3c: 5a:6f:19:c7:54:79:63:06:e7:a0:b4:69:a8:14:7f:45:14:fe: e0:ef:88:d4:36:ec:23:7a:24:fe:e1:59:9d:05:81:9f:be:f5: 8f:4b:26:18 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgISAZt6WuFcKcxsmHSoj5emZj+OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NjNkYTZlYjNiN2EwN2ZkYzQ1MjU4ODMwMDQ5NzBkNjQw YjAzNmIwHhcNMjYwMTAxMTYxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzIwOTVlNmE3MTEwOGI0Mzk3Njg0MDExNzhjY2UwOWFjYzczODFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S6YJ95fV1lAREv9vTvS8Qqh+E8N q03fsJ81xjkpdonOYQuCYjNY8buEbAtPUYySM9icaJwQW9w7VPrgFYnifw8Ro7jq HH/KUggsXOKfH1Qya+wkqUI/Vf88jmYoFFLU5NcVxeIAZhds4T46IgdcEvYYhTeM /LELpJCyM2xZ0oG+WfK3rTrUrcWQXUf4cn0VM0NKEZDPZFK7+Jd5Mu3BqOgn6s2v u+G3zaiw1iS4xC5Yeul+ww+H2jjHa8BKJRk2WSyknqxdMP0txHETDjwCYa4iiTpZ xtwIGuPnG3IrmsDtYtzoUNfbwtYz1FTtFTIJTzXsGx9cvPe5xt/NRnjDJwIDAQAB o4ICfjCCAnowHQYDVR0OBBYEFFMgleanEQi0OXaEAReMzgmsxzgfMB8GA1UdIwQY MBaAFPVj2m6zt6B/3EUliDAElw1kCwNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVdQYWJyTzNvSF9jUlNXSU1BU1hEV1FMQTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy82MzU2NGYtYWNhMS00NjNkLWJlMWUt ZTU1MjBhYTdiYTM3LzEvVXlDVjVxY1JDTFE1ZG9RQkY0ek9DYXpIT0I4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy82MzU2NGYtYWNhMS00NjNkLWJlMWUtZTU1MjBhYTdiYTM3 LzEvOVdQYWJyTzNvSF9jUlNXSU1BU1hEV1FMQTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGTBggrBgEFBQcBBwEB/wSBgzCBgDBoBAIAATBiAwQDJZ2Y AwQGTo2AAwQHU2MAAwQGV/DAAwQHWM+AAwQHa7cAAwQGkgCAMAwDBAKSANQDBAWS AMADBAay/kADBAK5IOwDBAa8cwADBAXCmsADBAXDLuADBAXVh+ADBAXVpiAwFAQC AAIwDgMFACABB+gDBQAqAMpgMA0GCSqGSIb3DQEBCwUAA4IBAQAalUn8S5/iDGDl 0VC0iu4ufIQKVAcRenvbLIDec+qcLLBWf/DR1/LiP89p+vWuU/fFQt9OVc0D2n62 zY1QjkaMXxvvvGpLl0rAJz2/9lNF1Qft1egFmv64D6b0wPCkd8rshZxYnIK+Wpoc x4VEZh5SpepGSY+5lmfLeUsUJZ4WVH3o9ik88mNS5vhWfFrkIhx3f54Z1UFRHZhl zVqYks6ISnh5HroWqghA+tvrfwkLK6vBX+zs0vaZlCi279JWv1l1C417NV8klQnX cg9T9AQCbakZ23z/UDxabxnHVHljBuegtGmoFH9FFP7g74jUNuwjeiT+4VmdBYGf vvWPSyYY -----END CERTIFICATE-----Generated at Tue Jan 27 07:57:38 2026 by rpki-client