This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/UkHuwvXpiXRHIhbyBvTostE3B6o.roa File: UkHuwvXpiXRHIhbyBvTostE3B6o.roa (raw, json) Hash identifier: LDkYPDa17b3K47KMjI4lwMK7BAYCSq53vGg7wq0uqF0= Subject key identifier: 52:41:EE:C2:F5:E9:89:74:47:22:16:F2:06:F4:E8:B2:D1:37:07:AA Certificate issuer: /CN=66d337d330ba44efcfef555355132a6a2c69783c Certificate serial: 019B7FF1844D2738EFED459F8A7DF5858EDF Authority key identifier: 66:D3:37:D3:30:BA:44:EF:CF:EF:55:53:55:13:2A:6A:2C:69:78:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtM30zC6RO_P71VTVRMqaixpeDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/UkHuwvXpiXRHIhbyBvTostE3B6o.roa Signing time: Fri 02 Jan 2026 18:21:33 +0000 ROA not before: Fri 02 Jan 2026 18:21:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9147 IP address blocks: 185.176.56.0/22 maxlen: 22 185.176.56.0/24 maxlen: 24 185.176.57.0/24 maxlen: 24 185.176.58.0/24 maxlen: 24 185.176.59.0/24 maxlen: 24 212.86.64.0/19 maxlen: 19 212.86.64.0/20 maxlen: 20 212.86.64.0/24 maxlen: 24 212.86.65.0/24 maxlen: 24 212.86.66.0/24 maxlen: 24 212.86.67.0/24 maxlen: 24 212.86.68.0/24 maxlen: 24 212.86.69.0/24 maxlen: 24 212.86.70.0/24 maxlen: 24 212.86.71.0/24 maxlen: 24 212.86.72.0/24 maxlen: 24 212.86.73.0/24 maxlen: 24 212.86.74.0/24 maxlen: 24 212.86.75.0/24 maxlen: 24 212.86.76.0/24 maxlen: 24 212.86.77.0/24 maxlen: 24 212.86.78.0/24 maxlen: 24 212.86.79.0/24 maxlen: 24 212.86.80.0/20 maxlen: 20 212.86.80.0/24 maxlen: 24 212.86.81.0/24 maxlen: 24 212.86.82.0/24 maxlen: 24 212.86.83.0/24 maxlen: 24 212.86.84.0/24 maxlen: 24 212.86.85.0/24 maxlen: 24 212.86.86.0/24 maxlen: 24 212.86.87.0/24 maxlen: 24 212.86.88.0/24 maxlen: 24 212.86.89.0/24 maxlen: 24 212.86.90.0/24 maxlen: 24 212.86.91.0/24 maxlen: 24 212.86.92.0/24 maxlen: 24 212.86.93.0/24 maxlen: 24 212.86.94.0/24 maxlen: 24 212.86.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZtM30zC6RO_P71VTVRMqaixpeDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:84:4d:27:38:ef:ed:45:9f:8a:7d:f5:85:8e:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66d337d330ba44efcfef555355132a6a2c69783c Validity Not Before: Jan 2 18:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5241eec2f5e98974472216f206f4e8b2d13707aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c3:8a:a7:6b:08:c0:e2:ca:76:50:ab:87:9c: 19:70:ad:b7:b2:c9:7b:79:1c:46:03:47:74:3d:24: 6a:c1:de:b4:23:05:d5:77:77:35:f6:a4:86:da:67: 4d:6f:99:b4:69:1f:bb:a0:2c:8e:cb:78:e0:0c:db: d0:14:70:7d:ff:56:b1:82:af:e3:df:fc:c9:dd:3b: 33:df:19:84:69:a5:f6:60:cc:60:07:ea:ad:30:a2: b8:a0:b1:35:31:b5:f2:14:d8:20:ca:ac:d4:23:de: 7c:9b:c1:8f:3c:7e:5f:34:07:97:61:23:f3:0a:d7: ec:3a:0a:b8:f9:68:46:86:58:eb:8a:95:ff:b7:9b: ae:5e:7e:17:29:2a:0b:14:49:28:c8:ea:2e:28:cd: e2:74:02:71:45:40:0c:14:ab:8d:74:df:f1:23:f7: 03:1f:c2:61:fd:7b:ce:99:c3:ad:53:23:62:4b:c1: 00:c7:1e:a7:7c:e3:ef:02:73:e0:fe:51:f2:35:8b: 86:32:66:88:b9:a4:c9:92:a9:9b:3a:a8:b2:e8:6f: 7c:18:c4:22:ec:61:c9:3a:3d:43:7e:2d:df:cf:a0: c5:1c:be:bb:b1:0d:44:fe:9a:aa:04:7e:4b:87:e1: f5:04:05:a7:68:7e:12:6a:00:3b:2b:a4:9d:ce:04: db:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:41:EE:C2:F5:E9:89:74:47:22:16:F2:06:F4:E8:B2:D1:37:07:AA X509v3 Authority Key Identifier: keyid:66:D3:37:D3:30:BA:44:EF:CF:EF:55:53:55:13:2A:6A:2C:69:78:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtM30zC6RO_P71VTVRMqaixpeDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/UkHuwvXpiXRHIhbyBvTostE3B6o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.176.56.0/22 212.86.64.0/19 Signature Algorithm: sha256WithRSAEncryption 47:e0:49:9c:2f:0d:c5:33:13:be:5f:c9:d5:84:45:aa:d4:98: 9c:52:ee:05:23:24:65:d6:9b:87:43:58:f8:8e:d4:03:5c:93: a9:10:df:c2:de:0f:37:af:fd:d1:42:11:f9:b5:78:25:97:92: 18:e1:69:64:3d:cf:4d:9a:64:a8:72:14:4e:9c:cd:7b:4f:16: 4c:90:4d:ed:b6:65:e5:14:cf:7d:00:45:db:ea:b6:ac:fe:9c: 66:05:31:47:cf:4b:66:62:39:40:c6:a7:cf:cc:4c:a1:d2:1c: 8a:a8:b7:1a:ef:90:b1:d5:c3:bb:1d:74:a8:21:5c:ce:85:54: 74:51:45:e7:2d:d8:41:d3:5b:f0:31:2f:04:33:c7:ec:49:99: 67:76:52:6f:43:a9:a5:a8:6b:c2:06:f5:27:16:a6:5e:65:12: 48:01:48:08:c9:85:41:f0:26:6b:58:e0:2d:70:e4:9d:de:ab: 5a:7d:c5:a1:25:73:3d:dc:b6:5e:12:97:02:2c:ba:26:93:98: ae:eb:84:5c:56:40:89:6a:3c:6d:5f:2f:1e:05:53:ee:10:16: ef:ce:44:eb:1d:f7:e0:5d:85:18:77:f5:94:a2:ec:32:7b:4c: 62:cf:02:c8:bf:7a:74:0b:6d:7e:eb:3d:6d:cf:85:5d:0c:31: c7:75:aa:56 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8YRNJzjv7UWfin31hY7fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZDMzN2QzMzBiYTQ0ZWZjZmVmNTU1MzU1MTMyYTZhMmM2 OTc4M2MwHhcNMjYwMTAyMTgyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjQxZWVjMmY1ZTk4OTc0NDcyMjE2ZjIwNmY0ZThiMmQxMzcwN2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMOKp2sIwOLKdlCrh5wZcK23ssl7 eRxGA0d0PSRqwd60IwXVd3c19qSG2mdNb5m0aR+7oCyOy3jgDNvQFHB9/1axgq/j 3/zJ3Tsz3xmEaaX2YMxgB+qtMKK4oLE1MbXyFNggyqzUI958m8GPPH5fNAeXYSPz CtfsOgq4+WhGhljripX/t5uuXn4XKSoLFEkoyOouKM3idAJxRUAMFKuNdN/xI/cD H8Jh/XvOmcOtUyNiS8EAxx6nfOPvAnPg/lHyNYuGMmaIuaTJkqmbOqiy6G98GMQi 7GHJOj1Dfi3fz6DFHL67sQ1E/pqqBH5Lh+H1BAWnaH4SagA7K6SdzgTbIwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFJB7sL16Yl0RyIW8gb06LLRNweqMB8GA1UdIwQY MBaAFGbTN9MwukTvz+9VU1UTKmosaXg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRNMzB6QzZST19QNzFWVFZSTXFhaXhwZUR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yYjVlN2MtNjdiMS00NzdkLTg5NWYt OGY1ZmM5MjEyNWRiLzEvVWtIdXd2WHBpWFJISWhieUJ2VG9zdEUzQjZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8yYjVlN2MtNjdiMS00NzdkLTg5NWYtOGY1ZmM5MjEyNWRi LzEvWnRNMzB6QzZST19QNzFWVFZSTXFhaXhwZUR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCubA4AwQF 1FZAMA0GCSqGSIb3DQEBCwUAA4IBAQBH4EmcLw3FMxO+X8nVhEWq1JicUu4FIyRl 1puHQ1j4jtQDXJOpEN/C3g83r/3RQhH5tXgll5IY4WlkPc9NmmSochROnM17TxZM kE3ttmXlFM99AEXb6ras/pxmBTFHz0tmYjlAxqfPzEyh0hyKqLca75Cx1cO7HXSo IVzOhVR0UUXnLdhB01vwMS8EM8fsSZlndlJvQ6mlqGvCBvUnFqZeZRJIAUgIyYVB 8CZrWOAtcOSd3qtafcWhJXM93LZeEpcCLLomk5iu64RcVkCJajxtXy8eBVPuEBbv zkTrHffgXYUYd/WUouwye0xizwLIv3p0C21+6z1tz4VdDDHHdapW -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:53 2026 by rpki-client