This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/UG82JYjOL5Jql3nxWvN-Xh4Nr4A.roa File: UG82JYjOL5Jql3nxWvN-Xh4Nr4A.roa (raw, json) Hash identifier: 05+0vfIPDLVFjVB3L2D7iJWPXu6x5fdq82fKXp61A0s= Subject key identifier: 50:6F:36:25:88:CE:2F:92:6A:97:79:F1:5A:F3:7E:5E:1E:0D:AF:80 Certificate issuer: /CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3 Certificate serial: 019B7EA5052BB4EDF0EDF25F2E277E830651 Authority key identifier: 07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/UG82JYjOL5Jql3nxWvN-Xh4Nr4A.roa Signing time: Fri 02 Jan 2026 12:18:22 +0000 ROA not before: Fri 02 Jan 2026 12:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49835 IP address blocks: 5.10.200.0/24 maxlen: 24 5.10.201.0/24 maxlen: 24 5.10.202.0/24 maxlen: 24 5.10.203.0/24 maxlen: 24 5.10.204.0/24 maxlen: 24 5.10.205.0/24 maxlen: 24 5.10.206.0/24 maxlen: 24 5.10.207.0/24 maxlen: 24 109.69.8.0/24 maxlen: 24 109.69.9.0/24 maxlen: 24 109.69.10.0/24 maxlen: 24 109.69.11.0/24 maxlen: 24 109.69.12.0/24 maxlen: 24 109.69.13.0/24 maxlen: 24 109.69.14.0/24 maxlen: 24 109.69.15.0/24 maxlen: 24 185.32.16.0/24 maxlen: 24 185.32.17.0/24 maxlen: 24 185.32.18.0/24 maxlen: 24 185.32.19.0/24 maxlen: 24 2a00:1508::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:05:2b:b4:ed:f0:ed:f2:5f:2e:27:7e:83:06:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3 Validity Not Before: Jan 2 12:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=506f362588ce2f926a9779f15af37e5e1e0daf80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:18:37:ca:43:1b:8c:c8:19:6c:fc:0b:2b:18: 0c:84:3c:c8:eb:1c:dc:a4:6f:bb:7b:89:44:4d:a4: 2a:47:52:5f:b8:f6:c9:6f:8b:9c:ae:a7:6c:bd:d2: f3:4c:d5:44:de:fb:0f:c3:28:5e:cb:bf:4f:01:c7: bb:f2:34:74:90:52:02:68:77:1e:e4:e0:3f:2d:b8: 6e:df:e0:79:33:17:34:72:56:4c:29:02:ed:34:c7: ca:46:87:46:d3:43:a9:13:d1:fc:04:fc:8b:8b:f1: 81:9e:97:0f:ee:c7:d0:c4:bd:d3:1c:b8:d4:53:df: f1:63:d1:1b:f9:21:97:98:ef:98:9d:30:bc:a5:d1: a6:22:1d:6f:61:50:1a:1b:ef:ed:10:77:95:0a:76: 25:1a:d8:a0:6f:85:2f:ad:ad:ce:5e:ba:45:a3:51: 7e:52:00:88:5a:8f:4a:40:2f:0e:90:07:91:00:31: a7:8e:2b:65:e9:7b:78:eb:3d:19:7f:2b:2e:af:84: 9b:38:5a:55:11:d9:88:bb:e6:f9:95:2d:d9:af:67: 09:00:b0:55:61:c2:76:ef:e8:2e:ce:9a:2f:ec:f7: ff:c6:7b:c7:fe:55:f2:0d:67:16:cb:a1:4f:b0:35: 17:c3:5b:7d:8a:02:5b:eb:e3:a4:f0:1c:5f:1f:33: 4b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:6F:36:25:88:CE:2F:92:6A:97:79:F1:5A:F3:7E:5E:1E:0D:AF:80 X509v3 Authority Key Identifier: keyid:07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/UG82JYjOL5Jql3nxWvN-Xh4Nr4A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.10.200.0/21 109.69.8.0/21 185.32.16.0/22 IPv6: 2a00:1508::/32 Signature Algorithm: sha256WithRSAEncryption 87:23:1d:20:0c:70:66:2d:62:c2:11:16:4f:f2:63:b6:b3:eb: 0d:01:64:c5:79:45:a7:d2:4a:34:c5:1a:da:04:ab:15:97:7e: a3:c6:bf:a2:f6:f5:86:e9:73:51:d2:eb:5a:aa:7f:51:16:aa: cb:e5:21:b9:2f:24:86:d9:81:e8:60:49:13:78:ad:96:b4:8c: 28:18:a0:e8:56:de:99:29:8d:60:08:89:08:1b:30:24:4d:09: dc:dd:ed:da:b5:2c:97:28:8f:b4:dc:e5:2e:0a:d6:5a:be:5e: 90:10:c0:67:aa:0d:fa:2a:ed:5d:89:f3:c0:da:4a:4f:c2:7c: 46:55:c2:bb:f1:9e:e0:1a:5f:d7:73:d7:c2:de:5a:c2:60:65: 67:a1:20:75:bf:6f:d9:7a:d0:7d:c9:01:e1:68:9f:c3:ae:65: e2:49:cd:17:97:95:61:b6:10:99:1b:35:75:26:f9:20:c0:ec: 7f:5a:3f:f4:f9:96:a2:9f:da:34:6f:00:fa:92:5d:13:ed:16: f5:70:32:46:31:83:ad:ae:71:f6:5d:fc:66:93:cf:84:60:2d: 4f:ce:ec:d9:56:b7:c8:e7:cb:96:61:d8:12:1f:d3:15:9d:72: 4f:a8:b0:f1:bc:74:6a:00:ec:1b:db:a6:e3:57:6c:e6:db:11: 64:3f:e4:64 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt+pQUrtO3w7fJfLid+gwZRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3OWViNGQ4YzY1ZjNhN2I0NTRjYTJhNWU1ZjY0MDk0ZTlk ODhiZDMwHhcNMjYwMTAyMTIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDZmMzYyNTg4Y2UyZjkyNmE5Nzc5ZjE1YWYzN2U1ZTFlMGRhZjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRg3ykMbjMgZbPwLKxgMhDzI6xzc pG+7e4lETaQqR1JfuPbJb4ucrqdsvdLzTNVE3vsPwyhey79PAce78jR0kFICaHce 5OA/Lbhu3+B5Mxc0clZMKQLtNMfKRodG00OpE9H8BPyLi/GBnpcP7sfQxL3THLjU U9/xY9Eb+SGXmO+YnTC8pdGmIh1vYVAaG+/tEHeVCnYlGtigb4Uvra3OXrpFo1F+ UgCIWo9KQC8OkAeRADGnjitl6Xt46z0Zfysur4SbOFpVEdmIu+b5lS3Zr2cJALBV YcJ27+guzpov7Pf/xnvH/lXyDWcWy6FPsDUXw1t9igJb6+Ok8BxfHzNL1wIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFFBvNiWIzi+Sapd58Vrzfl4eDa+AMB8GA1UdIwQY MBaAFAeetNjGXzp7RUyipeX2QJTp2IvTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjU2MDJNWmZPbnRGVEtLbDVmWkFsT25ZaTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yZmMwMDctMzYxZC00ZjQ3LWFhZjct NDg0ZDg0M2U2ZGUzLzEvVUc4MkpZak9MNUpxbDNueFd2Ti1YaDROcjRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8yZmMwMDctMzYxZC00ZjQ3LWFhZjctNDg0ZDg0M2U2ZGUz LzEvQjU2MDJNWmZPbnRGVEtLbDVmWkFsT25ZaTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDBQrIAwQD bUUIAwQCuSAQMA0EAgACMAcDBQAqABUIMA0GCSqGSIb3DQEBCwUAA4IBAQCHIx0g DHBmLWLCERZP8mO2s+sNAWTFeUWn0ko0xRraBKsVl36jxr+i9vWG6XNR0utaqn9R FqrL5SG5LySG2YHoYEkTeK2WtIwoGKDoVt6ZKY1gCIkIGzAkTQnc3e3atSyXKI+0 3OUuCtZavl6QEMBnqg36Ku1difPA2kpPwnxGVcK78Z7gGl/Xc9fC3lrCYGVnoSB1 v2/ZetB9yQHhaJ/DrmXiSc0Xl5VhthCZGzV1JvkgwOx/Wj/0+Zain9o0bwD6kl0T 7Rb1cDJGMYOtrnH2Xfxmk8+EYC1PzuzZVrfI58uWYdgSH9MVnXJPqLDxvHRqAOwb 26bjV2zm2xFkP+Rk -----END CERTIFICATE-----Generated at Tue Feb 10 04:00:12 2026 by rpki-client