This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/zUhUpuiJQjYFriCknaMoHa_j9nc.roa File: zUhUpuiJQjYFriCknaMoHa_j9nc.roa (raw, json) Hash identifier: nBYPwfayco1MFhHmBX7gPY3k4pTwilgUn82s5ypu69Q= Subject key identifier: CD:48:54:A6:E8:89:42:36:05:AE:20:A4:9D:A3:28:1D:AF:E3:F6:77 Certificate issuer: /CN=022e76e8994b66613748e021b5f4007f01b54d4f Certificate serial: 019B78A2282F0CDDF9F432DD775F6EDAE879 Authority key identifier: 02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/zUhUpuiJQjYFriCknaMoHa_j9nc.roa Signing time: Thu 01 Jan 2026 08:17:31 +0000 ROA not before: Thu 01 Jan 2026 08:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15962 IP address blocks: 5.178.48.0/20 maxlen: 20 78.141.64.0/18 maxlen: 18 85.237.224.0/19 maxlen: 19 92.52.0.0/18 maxlen: 18 95.105.128.0/17 maxlen: 17 95.105.128.0/18 maxlen: 18 95.105.192.0/18 maxlen: 18 109.230.0.0/18 maxlen: 18 178.143.0.0/16 maxlen: 16 178.143.0.0/17 maxlen: 17 178.143.128.0/17 maxlen: 17 185.50.212.0/22 maxlen: 22 213.151.192.0/18 maxlen: 18 213.151.246.0/24 maxlen: 24 213.151.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.mft rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:28:2f:0c:dd:f9:f4:32:dd:77:5f:6e:da:e8:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=022e76e8994b66613748e021b5f4007f01b54d4f Validity Not Before: Jan 1 08:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd4854a6e889423605ae20a49da3281dafe3f677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1d:9e:5b:4a:49:74:8c:61:3e:cd:f7:66:83: 13:7c:91:93:e0:eb:a0:ed:1c:bb:bd:03:f9:3f:56: e1:73:87:ee:22:9e:30:04:1a:6e:30:2b:b0:4c:81: 49:ac:76:6c:a0:5c:28:83:dd:91:ab:65:9a:b8:8e: b0:b0:d2:83:48:e8:fb:89:88:3d:34:2f:dc:a4:9a: 7d:a4:39:79:ae:fc:69:ac:24:a6:15:e1:95:c3:c1: 72:57:f5:cf:0e:46:47:a2:64:5d:8f:70:ed:e7:9f: 50:71:a8:2f:3a:61:23:15:cf:62:db:7d:7e:c4:84: 70:41:73:f2:4e:ae:79:f4:49:da:3a:17:d0:f7:7b: b4:38:16:38:c4:c0:2c:36:22:10:00:ac:e2:a7:1e: b9:2a:19:09:8a:d6:c8:db:c1:18:45:25:15:1a:29: 0f:e1:1c:8d:bc:30:71:5c:b2:80:6e:40:2c:31:48: 1d:de:ac:e8:e1:3c:5b:6d:28:35:91:11:e5:6a:27: 53:2e:05:44:d6:fc:d5:52:fe:bc:63:74:27:90:14: 06:ac:dc:41:2d:7c:e7:ea:a2:57:83:ab:4f:55:ca: 64:d6:b3:17:5c:9a:ae:4f:05:30:b5:9f:c9:01:3d: 20:eb:38:ee:1c:8b:80:6c:86:46:c9:bc:94:72:67: cb:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:48:54:A6:E8:89:42:36:05:AE:20:A4:9D:A3:28:1D:AF:E3:F6:77 X509v3 Authority Key Identifier: keyid:02:2E:76:E8:99:4B:66:61:37:48:E0:21:B5:F4:00:7F:01:B5:4D:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ai526JlLZmE3SOAhtfQAfwG1TU8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/zUhUpuiJQjYFriCknaMoHa_j9nc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/248588-1f8d-48d1-8bb2-971b0c065460/1/Ai526JlLZmE3SOAhtfQAfwG1TU8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.178.48.0/20 78.141.64.0/18 85.237.224.0/19 92.52.0.0/18 95.105.128.0/17 109.230.0.0/18 178.143.0.0/16 185.50.212.0/22 213.151.192.0/18 Signature Algorithm: sha256WithRSAEncryption 54:a5:5d:1d:3b:e7:dd:a1:c0:13:01:78:d4:5a:9e:8c:4d:44: 0e:db:4f:29:d3:aa:f0:e3:46:aa:92:2b:e9:91:5c:19:45:39: b1:76:e5:13:26:3c:b7:b5:01:e5:63:b7:0f:56:82:97:aa:97: 7c:52:63:00:24:d2:37:51:6e:a8:72:e5:5f:91:7c:16:e1:d9: 5f:0c:74:c4:9e:02:63:cf:b7:48:a5:e2:2a:d5:71:33:a8:84: ae:fe:dd:3d:cc:fa:3e:f4:07:6f:b8:5a:05:99:fa:bf:54:db: 0f:2f:c5:8f:6a:69:99:76:f2:9e:1b:6d:44:b0:77:4c:c9:66: fd:83:9e:9b:34:04:b7:c1:54:61:15:14:e8:5a:dd:22:c2:b2: 4e:31:b6:dd:e8:f4:03:18:d9:7f:18:98:66:b7:43:23:33:09: a0:0c:f8:f6:d1:b7:45:3a:d8:08:71:ce:1a:b7:e4:6b:46:a3: 28:01:2e:8f:44:23:ab:62:e2:58:c8:7d:47:51:db:70:c2:0f: b7:2b:46:c7:e7:cb:1f:be:f5:92:21:c2:06:30:70:97:26:5c: 0a:a0:83:c1:1d:7a:41:cb:2c:e7:05:e8:6d:39:65:85:d1:aa: f9:7e:a5:f5:4e:32:9e:d3:6b:14:09:a1:f3:3b:6a:0a:14:b4: ec:de:1e:60 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt4oigvDN359DLdd19u2uh5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMmU3NmU4OTk0YjY2NjEzNzQ4ZTAyMWI1ZjQwMDdmMDFi NTRkNGYwHhcNMjYwMTAxMDgxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDQ4NTRhNmU4ODk0MjM2MDVhZTIwYTQ5ZGEzMjgxZGFmZTNmNjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB2eW0pJdIxhPs33ZoMTfJGT4Oug 7Ry7vQP5P1bhc4fuIp4wBBpuMCuwTIFJrHZsoFwog92Rq2WauI6wsNKDSOj7iYg9 NC/cpJp9pDl5rvxprCSmFeGVw8FyV/XPDkZHomRdj3Dt559QcagvOmEjFc9i231+ xIRwQXPyTq559EnaOhfQ93u0OBY4xMAsNiIQAKzipx65KhkJitbI28EYRSUVGikP 4RyNvDBxXLKAbkAsMUgd3qzo4TxbbSg1kRHlaidTLgVE1vzVUv68Y3QnkBQGrNxB LXzn6qJXg6tPVcpk1rMXXJquTwUwtZ/JAT0g6zjuHIuAbIZGybyUcmfLuwIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFM1IVKboiUI2Ba4gpJ2jKB2v4/Z3MB8GA1UdIwQY MBaAFAIuduiZS2ZhN0jgIbX0AH8BtU1PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8yNDg1ODgtMWY4ZC00OGQxLThiYjIt OTcxYjBjMDY1NDYwLzEvelVoVXB1aUpRallGcmlDa25hTW9IYV9qOW5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8yNDg1ODgtMWY4ZC00OGQxLThiYjItOTcxYjBjMDY1NDYw LzEvQWk1MjZKbExabUUzU09BaHRmUUFmd0cxVFU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTA7BAIAATA1AwQEBbIwAwQG To1AAwQFVe3gAwQGXDQAAwQHX2mAAwQGbeYAAwMAso8DBAK5MtQDBAbVl8AwDQYJ KoZIhvcNAQELBQADggEBAFSlXR07592hwBMBeNRanoxNRA7bTynTqvDjRqqSK+mR XBlFObF25RMmPLe1AeVjtw9Wgpeql3xSYwAk0jdRbqhy5V+RfBbh2V8MdMSeAmPP t0il4irVcTOohK7+3T3M+j70B2+4WgWZ+r9U2w8vxY9qaZl28p4bbUSwd0zJZv2D nps0BLfBVGEVFOha3SLCsk4xtt3o9AMY2X8YmGa3QyMzCaAM+PbRt0U62Ahxzhq3 5GtGoygBLo9EI6ti4ljIfUdR23DCD7crRsfnyx++9ZIhwgYwcJcmXAqgg8EdekHL LOcF6G05ZYXRqvl+pfVOMp7TaxQJofM7agoUtOzeHmA= -----END CERTIFICATE-----Generated at Wed Jan 21 21:01:24 2026 by rpki-client