This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/UnAAO5LZUpGqAlAFH0cTVQdXrPQ.roa File: UnAAO5LZUpGqAlAFH0cTVQdXrPQ.roa (raw, json) Hash identifier: +0fvTCTz6t0CVUgBJlyimNyAqahKNROglBmjcNIj20s= Subject key identifier: 52:70:00:3B:92:D9:52:91:AA:02:50:05:1F:47:13:55:07:57:AC:F4 Certificate issuer: /CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b Certificate serial: 019B7CEE244041F10D66304C0E1899F886EF Authority key identifier: CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/UnAAO5LZUpGqAlAFH0cTVQdXrPQ.roa Signing time: Fri 02 Jan 2026 04:19:00 +0000 ROA not before: Fri 02 Jan 2026 04:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210644 IP address blocks: 176.124.202.0/24 maxlen: 24 176.124.203.0/24 maxlen: 24 176.124.204.0/24 maxlen: 24 176.124.205.0/24 maxlen: 24 176.124.206.0/24 maxlen: 24 176.124.207.0/27 maxlen: 27 176.124.220.0/24 maxlen: 24 176.124.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:24:40:41:f1:0d:66:30:4c:0e:18:99:f8:86:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b Validity Not Before: Jan 2 04:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5270003b92d95291aa0250051f4713550757acf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fe:f0:85:39:c0:de:d8:9f:4f:f7:5d:c6:19: 94:35:e2:8d:2d:b1:f6:46:0a:6c:13:f5:96:68:09: 63:5c:be:91:48:74:08:18:10:87:54:a5:73:dd:b7: 9f:0f:b2:e8:b4:c0:2d:85:93:8a:e5:93:81:87:90: c6:0f:71:17:80:e1:b7:d5:89:85:00:b8:53:ce:a6: fb:de:06:32:cb:c8:81:ee:5d:57:4b:87:9f:c9:54: cd:13:7b:7a:42:a6:d4:1a:7a:5b:25:81:e4:b5:28: f3:c0:9e:9a:fb:d7:30:fb:b7:05:c0:19:ef:d3:b1: 81:22:a9:c3:7a:e6:d8:aa:72:ae:04:56:9e:b4:ac: 9a:8f:e8:6a:fb:5b:b8:e1:af:e3:c4:06:3a:76:f1: 7c:8d:d6:32:c5:93:95:16:2f:af:eb:a9:88:ac:47: 7d:d0:e2:89:ae:27:75:9e:36:4d:a1:9e:f8:7e:c3: 2b:fa:f9:ae:9e:39:62:fc:76:f4:ba:6d:78:e7:cc: ec:a6:37:83:c4:d6:83:87:81:f5:7e:93:b0:cb:b3: 3a:50:96:e8:c1:7b:4b:94:81:cf:13:ca:c3:ca:8f: cb:29:8f:6f:9f:9d:df:e2:59:a6:c5:ab:7e:ce:00: ba:d3:8d:24:76:95:bd:ee:37:3b:03:3a:5f:33:e3: a1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:70:00:3B:92:D9:52:91:AA:02:50:05:1F:47:13:55:07:57:AC:F4 X509v3 Authority Key Identifier: keyid:CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/UnAAO5LZUpGqAlAFH0cTVQdXrPQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.124.202.0-176.124.207.31 176.124.220.0/23 Signature Algorithm: sha256WithRSAEncryption 33:9f:f5:17:97:d9:c7:9c:75:8b:fb:2e:07:4c:f0:b2:7c:29: b4:2c:fb:dd:fb:05:d5:b6:a4:1b:92:3f:45:21:4f:f2:6b:0e: bb:97:b1:92:da:fa:97:9e:69:91:b2:d5:f5:30:84:b0:ac:33: e2:13:da:b3:80:a2:cd:57:9c:83:8a:16:c3:bf:ac:7c:aa:dc: 05:c4:0b:65:14:22:e4:6e:e0:69:a6:10:75:59:8b:1c:85:51: bf:be:d4:6f:46:3c:c0:ab:00:91:b4:a2:1b:fa:e5:23:9c:22: 8c:79:e5:18:e0:21:21:7e:b3:69:be:19:f0:b3:f6:ca:f3:9c: 63:ef:c0:7d:0b:79:0b:13:5d:87:c4:41:77:e8:33:0a:4a:4f: 35:c4:78:17:5f:75:81:81:ca:03:3c:a3:ef:2f:40:57:52:99: 78:dc:d8:d0:9c:64:d2:ef:7b:e6:69:b5:e6:c6:14:64:a1:1f: 65:dc:ea:09:43:70:8b:27:25:1a:d7:87:c6:e5:73:db:f0:dd: 8e:ac:43:1c:e7:ad:83:a2:81:c2:45:ba:b6:2c:77:cb:c9:38: fa:47:b5:ad:bc:0e:51:86:8a:5c:10:45:4a:c8:de:ec:82:7b: e5:b8:07:8e:d2:20:14:b8:a5:ca:83:d3:01:5a:9f:6d:82:a6: 2d:89:4a:84 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87iRAQfENZjBMDhiZ+IbvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjY2Q1ODNjOGQ3MWEyNDI3ZTAwNjBlM2NjOTI0ZjMyZGMx YTgyMGIwHhcNMjYwMTAyMDQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjcwMDAzYjkyZDk1MjkxYWEwMjUwMDUxZjQ3MTM1NTA3NTdhY2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv7whTnA3tifT/ddxhmUNeKNLbH2 RgpsE/WWaAljXL6RSHQIGBCHVKVz3befD7LotMAthZOK5ZOBh5DGD3EXgOG31YmF ALhTzqb73gYyy8iB7l1XS4efyVTNE3t6QqbUGnpbJYHktSjzwJ6a+9cw+7cFwBnv 07GBIqnDeubYqnKuBFaetKyaj+hq+1u44a/jxAY6dvF8jdYyxZOVFi+v66mIrEd9 0OKJrid1njZNoZ74fsMr+vmunjli/Hb0um1458zspjeDxNaDh4H1fpOwy7M6UJbo wXtLlIHPE8rDyo/LKY9vn53f4lmmxat+zgC6040kdpW97jc7AzpfM+OhnQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFJwADuS2VKRqgJQBR9HE1UHV6z0MB8GA1UdIwQY MBaAFMzNWDyNcaJCfgBg48ySTzLcGoILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek0xWVBJMXhva0otQUdEanpKSlBNdHdhZ2dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81NmEwMmEtYzVmZC00MTE5LThjNWYt ZjQ4NTAyZDEzOTQ4LzEvVW5BQU81TFpVcEdxQWxBRkgwY1RWUWRYclBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81NmEwMmEtYzVmZC00MTE5LThjNWYtZjQ4NTAyZDEzOTQ4 LzEvek0xWVBJMXhva0otQUdEanpKSlBNdHdhZ2dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAATAVMA0DBAGwfMoD BQWwfM8AAwQBsHzcMA0GCSqGSIb3DQEBCwUAA4IBAQAzn/UXl9nHnHWL+y4HTPCy fCm0LPvd+wXVtqQbkj9FIU/yaw67l7GS2vqXnmmRstX1MISwrDPiE9qzgKLNV5yD ihbDv6x8qtwFxAtlFCLkbuBpphB1WYschVG/vtRvRjzAqwCRtKIb+uUjnCKMeeUY 4CEhfrNpvhnws/bK85xj78B9C3kLE12HxEF36DMKSk81xHgXX3WBgcoDPKPvL0BX Upl43NjQnGTS73vmabXmxhRkoR9l3OoJQ3CLJyUa14fG5XPb8N2OrEMc562DooHC Rbq2LHfLyTj6R7WtvA5RhopcEEVKyN7sgnvluAeO0iAUuKXKg9MBWp9tgqYtiUqE -----END CERTIFICATE-----Generated at Tue Jan 20 06:07:15 2026 by rpki-client