This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/U0VXVBNH_sq5iJd2GKeaUQVKrlM.roa File: U0VXVBNH_sq5iJd2GKeaUQVKrlM.roa (raw, json) Hash identifier: 9SxTMnA/ARh1HjLKf0PfWKa0umnzt2pBGbzQr2CW6PA= Subject key identifier: 53:45:57:54:13:47:FE:CA:B9:88:97:76:18:A7:9A:51:05:4A:AE:53 Certificate issuer: /CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd Certificate serial: 019B7FF2323370AEC13F38B2D70E35182F1A Authority key identifier: 81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/U0VXVBNH_sq5iJd2GKeaUQVKrlM.roa Signing time: Fri 02 Jan 2026 18:22:17 +0000 ROA not before: Fri 02 Jan 2026 18:22:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21430 IP address blocks: 31.7.240.0/21 maxlen: 21 77.78.64.0/22 maxlen: 22 77.78.68.0/23 maxlen: 23 77.78.74.0/23 maxlen: 23 77.78.80.0/21 maxlen: 21 77.78.88.0/23 maxlen: 23 77.78.91.0/24 maxlen: 24 77.78.92.0/23 maxlen: 24 77.78.122.0/24 maxlen: 24 80.250.0.0/19 maxlen: 19 81.0.196.0/23 maxlen: 23 81.0.198.0/24 maxlen: 24 81.0.200.0/22 maxlen: 22 81.0.204.0/23 maxlen: 23 81.0.210.0/23 maxlen: 23 81.0.215.0/24 maxlen: 24 81.0.216.0/24 maxlen: 24 81.0.222.0/23 maxlen: 23 81.0.224.0/24 maxlen: 24 81.0.227.0/24 maxlen: 24 81.0.229.0/24 maxlen: 24 81.0.244.0/23 maxlen: 23 81.0.251.0/24 maxlen: 24 81.0.252.0/23 maxlen: 23 82.208.0.0/22 maxlen: 22 82.208.13.0/24 maxlen: 24 82.208.15.0/24 maxlen: 24 82.208.19.0/24 maxlen: 24 82.208.24.0/23 maxlen: 23 82.208.30.0/23 maxlen: 24 82.208.36.0/23 maxlen: 23 82.208.38.0/24 maxlen: 24 82.208.42.0/23 maxlen: 23 82.208.45.0/24 maxlen: 24 82.208.51.0/24 maxlen: 24 82.208.52.0/22 maxlen: 22 82.208.57.0/24 maxlen: 24 82.208.59.0/24 maxlen: 24 83.136.200.0/21 maxlen: 21 85.239.224.0/23 maxlen: 23 85.239.226.0/24 maxlen: 24 85.239.228.0/23 maxlen: 23 85.239.251.0/24 maxlen: 24 85.239.254.0/23 maxlen: 23 109.123.200.0/23 maxlen: 23 109.123.201.0/24 maxlen: 24 109.123.204.0/24 maxlen: 24 109.123.212.0/23 maxlen: 23 109.123.226.0/24 maxlen: 24 147.161.28.0/22 maxlen: 22 185.33.136.0/22 maxlen: 22 185.161.240.0/22 maxlen: 22 217.11.226.0/24 maxlen: 24 217.11.231.0/24 maxlen: 24 217.11.234.0/24 maxlen: 24 217.11.237.0/24 maxlen: 24 217.11.238.0/23 maxlen: 23 217.11.240.0/23 maxlen: 23 217.11.244.0/24 maxlen: 24 217.11.250.0/24 maxlen: 24 217.11.252.0/23 maxlen: 23 217.11.255.0/24 maxlen: 24 2a01:6400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:32:33:70:ae:c1:3f:38:b2:d7:0e:35:18:2f:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd Validity Not Before: Jan 2 18:22:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=534557541347fecab988977618a79a51054aae53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fc:43:f1:2b:52:52:c0:de:5f:1e:8b:c4:22: 55:e1:4f:40:35:37:ee:e8:1d:8c:1d:d9:47:c7:d1: 7f:6b:67:c7:9b:d1:03:1b:1f:f8:73:b6:2d:00:31: 12:63:08:3e:ed:04:25:64:01:51:7f:ab:99:a5:b0: 41:66:4b:6a:7a:97:f5:21:77:f3:f2:83:54:d1:61: e8:66:21:a6:e6:ea:93:7e:a1:61:14:f0:f5:d8:b7: a8:42:7b:7c:51:6c:1e:7c:72:87:e6:95:9d:c2:f2: b8:4f:e2:27:b1:27:ab:4f:ba:a8:d7:74:b2:72:f3: 33:b5:0f:78:eb:d7:23:57:4b:aa:b3:69:a7:65:4f: 19:29:26:52:31:80:8d:41:fe:f0:02:d2:21:b1:78: d2:09:d5:cd:72:b1:f6:85:04:2b:f6:e4:da:f5:61: e1:62:f0:22:81:63:92:3e:71:14:d5:1c:86:ac:48: 04:5a:b3:27:2e:fb:75:e5:a8:12:9b:e0:2c:70:3f: ab:1f:71:3c:6a:bf:78:cb:41:df:36:df:f1:8e:0f: 0c:af:be:71:73:c5:32:d7:e9:7b:ee:76:68:a0:8b: 6a:d2:63:31:4d:55:22:b0:bb:c9:99:31:67:85:c1: 43:fc:50:bb:7c:32:01:41:b1:91:7f:51:23:35:4c: a4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:45:57:54:13:47:FE:CA:B9:88:97:76:18:A7:9A:51:05:4A:AE:53 X509v3 Authority Key Identifier: keyid:81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/U0VXVBNH_sq5iJd2GKeaUQVKrlM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.7.240.0/21 77.78.64.0-77.78.69.255 77.78.74.0/23 77.78.80.0-77.78.89.255 77.78.91.0-77.78.93.255 77.78.122.0/24 80.250.0.0/19 81.0.196.0-81.0.198.255 81.0.200.0-81.0.205.255 81.0.210.0/23 81.0.215.0-81.0.216.255 81.0.222.0-81.0.224.255 81.0.227.0/24 81.0.229.0/24 81.0.244.0/23 81.0.251.0-81.0.253.255 82.208.0.0/22 82.208.13.0/24 82.208.15.0/24 82.208.19.0/24 82.208.24.0/23 82.208.30.0/23 82.208.36.0-82.208.38.255 82.208.42.0/23 82.208.45.0/24 82.208.51.0-82.208.55.255 82.208.57.0/24 82.208.59.0/24 83.136.200.0/21 85.239.224.0-85.239.226.255 85.239.228.0/23 85.239.251.0/24 85.239.254.0/23 109.123.200.0/23 109.123.204.0/24 109.123.212.0/23 109.123.226.0/24 147.161.28.0/22 185.33.136.0/22 185.161.240.0/22 217.11.226.0/24 217.11.231.0/24 217.11.234.0/24 217.11.237.0-217.11.241.255 217.11.244.0/24 217.11.250.0/24 217.11.252.0/23 217.11.255.0/24 IPv6: 2a01:6400::/32 Signature Algorithm: sha256WithRSAEncryption 9a:f2:2c:c5:ee:11:c3:3a:04:43:4c:c0:1a:a4:60:59:d0:fb: d8:d6:ae:e7:9b:79:27:c0:7a:9a:7b:91:ef:13:61:45:8d:99: 93:af:b9:76:aa:05:d5:27:83:2c:a3:5e:01:19:d4:00:44:4c: 4c:a7:99:05:db:fd:0e:98:a3:d8:ea:fc:68:c6:ca:e4:72:e2: 47:35:49:56:08:12:45:59:9d:ad:47:74:47:71:da:47:8c:81: ba:70:f3:6e:8a:a2:e3:88:c9:2c:26:b5:23:f6:27:ac:bf:e5: 68:a6:86:3c:d8:40:e9:7d:08:35:04:b8:c1:34:88:1b:82:d8: 53:0f:54:11:ec:4a:f6:22:ba:80:69:4f:fc:a6:0e:2f:5c:ed: 9f:7f:91:26:30:63:67:ed:3c:3d:5e:9f:55:cf:06:63:95:c7: 8f:46:b6:a1:de:89:c9:fb:1f:72:67:09:55:df:66:f3:fd:68: d3:e0:05:b1:e2:a2:9a:65:f4:27:02:fc:b4:ac:df:87:5c:74: 77:ad:73:e9:c0:e6:63:f6:df:fc:0e:53:8d:2c:72:12:33:ee: 53:98:2d:95:94:7b:3f:bf:b0:e8:e5:cd:77:67:5e:bc:85:85: 8e:ed:b8:1a:75:ea:cb:72:d3:21:df:97:30:b5:dd:dc:14:43: 85:c7:8e:90 -----BEGIN CERTIFICATE----- MIIGkDCCBXigAwIBAgISAZt/8jIzcK7BPziy1w41GC8aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxODEyMzg1YjgyZGRhMGZkNDgyNmFiYjdhZWZlYjBkZjNl YjhmZmQwHhcNMjYwMTAyMTgyMjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzQ1NTc1NDEzNDdmZWNhYjk4ODk3NzYxOGE3OWE1MTA1NGFhZTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfxD8StSUsDeXx6LxCJV4U9ANTfu 6B2MHdlHx9F/a2fHm9EDGx/4c7YtADESYwg+7QQlZAFRf6uZpbBBZktqepf1IXfz 8oNU0WHoZiGm5uqTfqFhFPD12LeoQnt8UWwefHKH5pWdwvK4T+InsSerT7qo13Sy cvMztQ9469cjV0uqs2mnZU8ZKSZSMYCNQf7wAtIhsXjSCdXNcrH2hQQr9uTa9WHh YvAigWOSPnEU1RyGrEgEWrMnLvt15agSm+AscD+rH3E8ar94y0HfNt/xjg8Mr75x c8Uy1+l77nZooItq0mMxTVUisLvJmTFnhcFD/FC7fDIBQbGRf1EjNUyksQIDAQAB o4IDnDCCA5gwHQYDVR0OBBYEFFNFV1QTR/7KuYiXdhinmlEFSq5TMB8GA1UdIwQY MBaAFIGBI4W4LdoP1IJqu3rv6w3z64/9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1lFamhiZ3QyZ19VZ21xN2V1X3JEZlByal8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wMDkwNzQtNjZmNi00ZDRkLTk3NGEt ZGEyZWM4Y2ZiODg4LzEvVTBWWFZCTkhfc3E1aUpkMkdLZWFVUVZLcmxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8wMDkwNzQtNjZmNi00ZDRkLTk3NGEtZGEyZWM4Y2ZiODg4 LzEvZ1lFamhiZ3QyZ19VZ21xN2V1X3JEZlByal8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBsAYIKwYBBQUHAQcBAf8EggGfMIIBmzCCAYgEAgABMIIB gAMEAx8H8DAMAwQGTU5AAwQBTU5EAwQBTU5KMAwDBARNTlADBAFNTlgwDAMEAE1O WwMEAU1OXAMEAE1OegMEBVD6ADAMAwQCUQDEAwQAUQDGMAwDBANRAMgDBAFRAMwD BAFRANIwDAMEAFEA1wMEAFEA2DAMAwQBUQDeAwQAUQDgAwQAUQDjAwQAUQDlAwQB UQD0MAwDBABRAPsDBAFRAPwDBAJS0AADBABS0A0DBABS0A8DBABS0BMDBAFS0BgD BAFS0B4wDAMEAlLQJAMEAFLQJgMEAVLQKgMEAFLQLTAMAwQAUtAzAwQDUtAwAwQA UtA5AwQAUtA7AwQDU4jIMAwDBAVV7+ADBABV7+IDBAFV7+QDBABV7/sDBAFV7/4D BAFte8gDBABte8wDBAFte9QDBABte+IDBAKToRwDBAK5IYgDBAK5ofADBADZC+ID BADZC+cDBADZC+owDAMEANkL7QMEAdkL8AMEANkL9AMEANkL+gMEAdkL/AMEANkL /zANBAIAAjAHAwUAKgFkADANBgkqhkiG9w0BAQsFAAOCAQEAmvIsxe4RwzoEQ0zA GqRgWdD72Nau55t5J8B6mnuR7xNhRY2Zk6+5dqoF1SeDLKNeARnUAERMTKeZBdv9 Dpij2Or8aMbK5HLiRzVJVggSRVmdrUd0R3HaR4yBunDzboqi44jJLCa1I/YnrL/l aKaGPNhA6X0INQS4wTSIG4LYUw9UEexK9iK6gGlP/KYOL1ztn3+RJjBjZ+08PV6f Vc8GY5XHj0a2od6JyfsfcmcJVd9m8/1o0+AFseKimmX0JwL8tKzfh1x0d61z6cDm Y/bf/A5TjSxyEjPuU5gtlZR7P7+w6OXNd2devIWFju24GnXqy3LTId+XMLXd3BRD hceOkA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:03 2026 by rpki-client