This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/UZP3Gc1tEArZEO1jpWrsmOTGGCA.roa File: UZP3Gc1tEArZEO1jpWrsmOTGGCA.roa (raw, json) Hash identifier: t5wFQXCnNtRMJj9vlZU4BrlPsrIPbpyPer98pMTdsxM= Subject key identifier: 51:93:F7:19:CD:6D:10:0A:D9:10:ED:63:A5:6A:EC:98:E4:C6:18:20 Certificate issuer: /CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e Certificate serial: 019B7910E76491B43546F0580FBDFFDBC977 Authority key identifier: 9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/UZP3Gc1tEArZEO1jpWrsmOTGGCA.roa Signing time: Thu 01 Jan 2026 10:18:29 +0000 ROA not before: Thu 01 Jan 2026 10:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43915 IP address blocks: 5.181.104.0/22 maxlen: 22 45.66.36.0/22 maxlen: 22 45.80.160.0/22 maxlen: 22 45.130.56.0/22 maxlen: 22 45.143.112.0/22 maxlen: 22 45.152.28.0/22 maxlen: 22 62.169.148.0/23 maxlen: 23 79.135.122.0/23 maxlen: 24 87.117.64.0/22 maxlen: 22 87.117.68.0/23 maxlen: 23 91.239.57.0/24 maxlen: 24 94.154.184.0/22 maxlen: 24 109.224.216.0/22 maxlen: 22 109.224.224.0/22 maxlen: 24 109.224.224.0/23 maxlen: 23 109.224.226.0/23 maxlen: 24 109.224.234.0/23 maxlen: 24 109.224.236.0/22 maxlen: 22 109.224.240.0/23 maxlen: 24 144.178.104.0/23 maxlen: 23 144.178.118.0/23 maxlen: 23 144.178.252.0/23 maxlen: 23 147.189.156.0/22 maxlen: 24 147.189.214.0/24 maxlen: 24 176.116.116.0/22 maxlen: 22 178.248.128.0/21 maxlen: 21 185.23.254.0/23 maxlen: 24 185.147.184.0/22 maxlen: 22 185.161.4.0/22 maxlen: 22 185.231.136.0/21 maxlen: 21 188.214.236.0/22 maxlen: 22 193.35.146.0/23 maxlen: 23 194.105.134.0/23 maxlen: 24 194.145.242.0/23 maxlen: 24 194.146.160.0/22 maxlen: 24 194.169.152.0/22 maxlen: 22 195.72.56.0/22 maxlen: 22 195.184.250.0/23 maxlen: 23 195.206.172.0/22 maxlen: 24 195.242.148.0/23 maxlen: 23 195.244.2.0/23 maxlen: 23 212.59.72.0/21 maxlen: 24 212.108.90.0/23 maxlen: 23 213.225.224.0/22 maxlen: 24 217.14.184.0/21 maxlen: 21 217.20.244.0/22 maxlen: 24 217.171.100.0/22 maxlen: 22 217.171.104.0/22 maxlen: 22 2a07:5940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.mft rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e7:64:91:b4:35:46:f0:58:0f:bd:ff:db:c9:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f26ac9eeb3a2cfa2f6ca3f413efb9cdffe9724e Validity Not Before: Jan 1 10:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5193f719cd6d100ad910ed63a56aec98e4c61820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:77:da:69:db:78:52:b0:6f:73:66:49:f3:48: d6:0a:76:0b:9a:f5:1d:44:0c:90:ba:70:a5:4c:71: c8:c1:07:6d:16:9f:5a:75:49:f2:b3:fb:8d:a2:96: 7f:fd:ee:e6:77:34:eb:62:74:30:42:2c:f3:e5:bc: 1f:5b:f6:9d:41:9a:d1:2d:e9:8c:f2:54:f1:f2:3d: 6b:15:20:6e:21:05:0c:13:c9:0c:6d:c3:df:c5:48: cb:08:af:6b:23:21:01:ac:7f:cc:7e:df:2e:83:f7: ed:8e:b2:24:52:30:ba:4c:c2:15:89:e5:21:04:01: b8:10:82:ce:42:8c:2e:34:04:5e:06:35:7a:33:77: d8:a5:a8:9e:3a:a2:df:4c:b5:a7:6e:12:90:c2:f4: b2:3c:fe:f1:02:ff:6b:f4:3f:04:17:1e:ac:37:5e: 45:85:6e:3d:34:18:21:cc:9e:80:10:2c:e5:45:6b: c3:39:fd:6e:4b:01:2a:55:f4:e0:65:dc:da:59:2f: 63:91:e4:5a:9b:ec:74:0e:3a:5f:c7:23:bf:95:ea: 5f:55:cb:e0:b5:d9:0c:ab:8c:14:e3:01:47:f7:ad: 61:c7:80:38:57:e3:d4:79:14:c5:bd:c1:21:a2:23: 24:76:e3:13:b7:e6:c4:f4:80:18:44:57:ed:3c:ea: 40:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:93:F7:19:CD:6D:10:0A:D9:10:ED:63:A5:6A:EC:98:E4:C6:18:20 X509v3 Authority Key Identifier: keyid:9F:26:AC:9E:EB:3A:2C:FA:2F:6C:A3:F4:13:EF:B9:CD:FF:E9:72:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyasnus6LPovbKP0E--5zf_pck4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/UZP3Gc1tEArZEO1jpWrsmOTGGCA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc318b-9240-4775-a4ab-7d4266cf822a/1/nyasnus6LPovbKP0E--5zf_pck4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.104.0/22 45.66.36.0/22 45.80.160.0/22 45.130.56.0/22 45.143.112.0/22 45.152.28.0/22 62.169.148.0/23 79.135.122.0/23 87.117.64.0-87.117.69.255 91.239.57.0/24 94.154.184.0/22 109.224.216.0/22 109.224.224.0/22 109.224.234.0-109.224.241.255 144.178.104.0/23 144.178.118.0/23 144.178.252.0/23 147.189.156.0/22 147.189.214.0/24 176.116.116.0/22 178.248.128.0/21 185.23.254.0/23 185.147.184.0/22 185.161.4.0/22 185.231.136.0/21 188.214.236.0/22 193.35.146.0/23 194.105.134.0/23 194.145.242.0/23 194.146.160.0/22 194.169.152.0/22 195.72.56.0/22 195.184.250.0/23 195.206.172.0/22 195.242.148.0/23 195.244.2.0/23 212.59.72.0/21 212.108.90.0/23 213.225.224.0/22 217.14.184.0/21 217.20.244.0/22 217.171.100.0-217.171.107.255 IPv6: 2a07:5940::/32 Signature Algorithm: sha256WithRSAEncryption 85:a1:56:34:e2:63:e8:b0:7d:ed:9e:13:84:5b:ef:91:90:63: 76:db:a0:e2:6b:74:b6:6f:66:27:21:8c:1f:9b:e4:07:11:07: 48:1c:9e:68:53:3e:f8:20:40:ce:2c:40:2b:82:b3:7c:e7:f4: a3:ae:0a:64:38:35:cb:a2:0f:97:b2:c5:90:a5:ee:41:b9:ae: 7c:bf:95:7a:28:50:14:2e:81:28:b8:d1:26:0f:1a:31:31:38: 16:0a:1e:88:c1:02:78:62:1f:97:f2:b4:c0:ac:77:3c:66:32: 84:c3:d4:9e:5d:23:16:ea:6a:71:fe:d7:d5:44:96:d9:4d:61: 5e:a2:cd:c7:b1:1f:1a:c8:4a:d2:aa:2d:72:3d:3e:ef:e7:ff: 7e:ae:a5:e0:d0:f3:8b:8a:33:fb:e9:1e:b9:3f:25:1b:03:98: b3:b4:a9:8a:56:7d:b4:f1:05:dc:7b:d8:20:be:c5:15:54:35: e2:6e:d0:97:2d:f2:79:4a:19:fb:20:17:2f:c2:55:77:41:cb: 26:7d:70:b4:b7:66:70:aa:4a:82:3d:a1:49:5c:73:07:71:d9: 6f:12:7f:bc:7e:bc:1a:02:ea:13:35:2e:f9:65:21:0a:5d:58: 21:69:ce:fe:54:ec:9c:76:ed:77:7a:06:90:92:44:7a:c3:46: 57:80:85:28 -----BEGIN CERTIFICATE----- MIIGJDCCBQygAwIBAgISAZt5EOdkkbQ1RvBYD73/28l3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMjZhYzllZWIzYTJjZmEyZjZjYTNmNDEzZWZiOWNkZmZl OTcyNGUwHhcNMjYwMTAxMTAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTkzZjcxOWNkNmQxMDBhZDkxMGVkNjNhNTZhZWM5OGU0YzYxODIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunfaadt4UrBvc2ZJ80jWCnYLmvUd RAyQunClTHHIwQdtFp9adUnys/uNopZ//e7mdzTrYnQwQizz5bwfW/adQZrRLemM 8lTx8j1rFSBuIQUME8kMbcPfxUjLCK9rIyEBrH/Mft8ug/ftjrIkUjC6TMIVieUh BAG4EILOQowuNAReBjV6M3fYpaieOqLfTLWnbhKQwvSyPP7xAv9r9D8EFx6sN15F hW49NBghzJ6AECzlRWvDOf1uSwEqVfTgZdzaWS9jkeRam+x0DjpfxyO/lepfVcvg tdkMq4wU4wFH961hx4A4V+PUeRTFvcEhoiMkduMTt+bE9IAYRFftPOpAWQIDAQAB o4IDMDCCAywwHQYDVR0OBBYEFFGT9xnNbRAK2RDtY6Vq7JjkxhggMB8GA1UdIwQY MBaAFJ8mrJ7rOiz6L2yj9BPvuc3/6XJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kYzMxOGItOTI0MC00Nzc1LWE0YWIt N2Q0MjY2Y2Y4MjJhLzEvVVpQM0djMXRFQXJaRU8xanBXcnNtT1RHR0NBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9kYzMxOGItOTI0MC00Nzc1LWE0YWItN2Q0MjY2Y2Y4MjJh LzEvbnlhc251czZMUG92YktQMEUtLTV6Zl9wY2s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBRAYIKwYBBQUHAQcBAf8EggEzMIIBLzCCARwEAgABMIIB FAMEAgW1aAMEAi1CJAMEAi1QoAMEAi2COAMEAi2PcAMEAi2YHAMEAT6plAMEAU+H ejAMAwQGV3VAAwQBV3VEAwQAW+85AwQCXpq4AwQCbeDYAwQCbeDgMAwDBAFt4OoD BAFt4PADBAGQsmgDBAGQsnYDBAGQsvwDBAKTvZwDBACTvdYDBAKwdHQDBAOy+IAD BAG5F/4DBAK5k7gDBAK5oQQDBAO554gDBAK81uwDBAHBI5IDBAHCaYYDBAHCkfID BALCkqADBALCqZgDBALDSDgDBAHDuPoDBALDzqwDBAHD8pQDBAHD9AIDBAPUO0gD BAHUbFoDBALV4eADBAPZDrgDBALZFPQwDAMEAtmrZAMEAtmraDANBAIAAjAHAwUA KgdZQDANBgkqhkiG9w0BAQsFAAOCAQEAhaFWNOJj6LB97Z4ThFvvkZBjdtug4mt0 tm9mJyGMH5vkBxEHSByeaFM++CBAzixAK4KzfOf0o64KZDg1y6IPl7LFkKXuQbmu fL+VeihQFC6BKLjRJg8aMTE4FgoeiMECeGIfl/K0wKx3PGYyhMPUnl0jFupqcf7X 1USW2U1hXqLNx7EfGshK0qotcj0+7+f/fq6l4NDzi4oz++keuT8lGwOYs7SpilZ9 tPEF3HvYIL7FFVQ14m7Qly3yeUoZ+yAXL8JVd0HLJn1wtLdmcKpKgj2hSVxzB3HZ bxJ/vH68GgLqEzUu+WUhCl1YIWnO/lTsnHbtd3oGkJJEesNGV4CFKA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:07 2026 by rpki-client