This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/Urm8LGF3nWAC-z0vN8e0GgC0tZI.roa File: Urm8LGF3nWAC-z0vN8e0GgC0tZI.roa (raw, json) Hash identifier: ExuI2kIDGZzfnph2B5PPw/UGl0nESxyqgqQscTauTwI= Subject key identifier: 52:B9:BC:2C:61:77:9D:60:02:FB:3D:2F:37:C7:B4:1A:00:B4:B5:92 Certificate issuer: /CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434 Certificate serial: 019B7D5C8DB32C9634D4885CD0C946AC27F5 Authority key identifier: AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/Urm8LGF3nWAC-z0vN8e0GgC0tZI.roa Signing time: Fri 02 Jan 2026 06:19:36 +0000 ROA not before: Fri 02 Jan 2026 06:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60068 IP address blocks: 89.187.160.0/23 maxlen: 23 89.187.162.0/23 maxlen: 23 89.187.164.0/24 maxlen: 24 89.187.165.0/24 maxlen: 24 89.187.166.0/23 maxlen: 23 89.187.168.0/24 maxlen: 24 89.187.169.0/24 maxlen: 24 89.187.170.0/23 maxlen: 23 89.187.172.0/23 maxlen: 23 89.187.174.0/24 maxlen: 24 89.187.175.0/24 maxlen: 24 89.187.176.0/22 maxlen: 22 89.187.180.0/22 maxlen: 22 89.187.184.0/22 maxlen: 22 89.187.188.0/22 maxlen: 22 185.93.0.0/24 maxlen: 24 185.93.1.0/24 maxlen: 24 185.93.2.0/24 maxlen: 24 185.93.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:8d:b3:2c:96:34:d4:88:5c:d0:c9:46:ac:27:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434 Validity Not Before: Jan 2 06:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52b9bc2c61779d6002fb3d2f37c7b41a00b4b592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:11:73:ab:6d:41:5d:02:6c:7e:fc:fa:a1:c2: 88:6d:d0:11:44:b8:dc:cd:5f:bb:8d:80:95:31:41: c3:62:27:6e:50:61:f4:4f:6d:70:c1:aa:06:45:b5: a9:17:49:14:d2:72:a1:2b:35:5b:d5:45:ec:41:ba: ac:02:fd:53:d4:2b:60:84:a5:73:d3:75:a0:5f:67: 94:86:67:c3:3b:af:77:cb:20:1d:ba:6b:0c:93:0f: 48:f5:ea:f6:23:bc:50:81:2f:fd:fd:88:63:ea:20: bb:fe:16:f0:31:dc:ef:2c:c6:94:87:02:32:12:16: b2:b5:82:d0:40:df:fb:15:60:e5:56:36:62:75:04: c4:27:93:01:7e:df:8d:81:b4:b3:93:d8:bf:3c:5f: 3d:ab:71:4d:24:d6:4d:bf:f1:69:a1:3d:43:ab:fb: 94:98:31:56:40:11:4c:5b:66:d8:88:f4:00:72:7d: 77:49:9d:e6:16:84:7c:c5:11:b4:f5:be:da:f8:c0: 91:a8:f6:b7:a7:26:18:ec:90:c8:15:a2:53:79:4d: da:b0:8a:d7:41:ac:79:7c:d3:84:d6:5c:49:33:41: 43:52:13:84:97:3b:95:39:52:05:3a:89:09:29:84: cb:64:91:a5:39:fd:92:81:b1:c8:c9:c7:28:52:ec: 23:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B9:BC:2C:61:77:9D:60:02:FB:3D:2F:37:C7:B4:1A:00:B4:B5:92 X509v3 Authority Key Identifier: keyid:AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/Urm8LGF3nWAC-z0vN8e0GgC0tZI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.187.160.0/19 185.93.0.0/22 Signature Algorithm: sha256WithRSAEncryption 60:ea:f5:ac:5f:d3:f9:ec:0b:53:14:57:e6:a4:ee:84:7b:a1: 84:5e:a1:98:ce:51:ee:f6:7c:95:f5:95:88:0f:d7:e4:62:7c: 07:1e:a6:06:0f:25:97:06:f0:46:cd:a8:09:fc:3e:4d:b7:39: 6a:88:61:c3:29:e3:f7:f6:91:1c:31:2d:ba:c9:8a:22:6b:ca: 18:ac:49:23:55:e6:4b:eb:b8:c4:97:0b:cf:71:ad:87:4e:64: 8f:d6:3c:cc:b1:dc:ae:21:03:6a:be:81:3b:22:59:0f:10:a5: a9:0e:1e:9f:83:a9:f4:90:48:a5:8b:7a:5b:e3:6d:0f:40:14: 50:ba:54:dd:08:5b:dc:23:39:33:c2:ae:d7:3a:d1:95:06:e9: 54:ea:42:17:ef:b6:3d:19:87:77:97:a7:59:8b:91:a6:5d:66: 47:a8:df:d5:c6:fa:b6:3e:74:d8:0c:4a:57:42:13:6d:37:0f: a5:39:8d:99:58:dd:8a:d6:24:13:08:25:14:e9:94:fe:f1:b4: 95:2b:b9:20:bc:d4:d9:ca:a5:f3:f0:91:1b:8f:c6:f1:ac:ec: 9d:77:a1:99:8f:f4:b4:c4:a3:d1:05:85:fd:74:97:6b:4e:03: 8b:1b:5e:ea:29:c8:0e:de:f8:51:63:dc:f3:c9:9c:8a:a4:24: 4b:b6:67:30 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XI2zLJY01Ihc0MlGrCf1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNmUzZTEzMTExNDM5MTQ3ZjY1ZDMzN2Q1ZjBiMWJjMmVk Nzk0MzQwHhcNMjYwMTAyMDYxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmI5YmMyYzYxNzc5ZDYwMDJmYjNkMmYzN2M3YjQxYTAwYjRiNTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxFzq21BXQJsfvz6ocKIbdARRLjc zV+7jYCVMUHDYiduUGH0T21wwaoGRbWpF0kU0nKhKzVb1UXsQbqsAv1T1CtghKVz 03WgX2eUhmfDO693yyAdumsMkw9I9er2I7xQgS/9/Yhj6iC7/hbwMdzvLMaUhwIy EhaytYLQQN/7FWDlVjZidQTEJ5MBft+NgbSzk9i/PF89q3FNJNZNv/FpoT1Dq/uU mDFWQBFMW2bYiPQAcn13SZ3mFoR8xRG09b7a+MCRqPa3pyYY7JDIFaJTeU3asIrX Qax5fNOE1lxJM0FDUhOElzuVOVIFOokJKYTLZJGlOf2SgbHIyccoUuwjhQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFK5vCxhd51gAvs9LzfHtBoAtLWSMB8GA1UdIwQY MBaAFKxuPhMRFDkUf2XTN9Xwsbwu15Q0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckc0LUV4RVVPUlJfWmRNMzFmQ3h2QzdYbERRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xMmJhMmEtMGNjYS00MzdhLTk4NWQt ZmVmZTg1N2ZlYTgwLzEvVXJtOExHRjNuV0FDLXowdk44ZTBHZ0MwdFpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xMmJhMmEtMGNjYS00MzdhLTk4NWQtZmVmZTg1N2ZlYTgw LzEvckc0LUV4RVVPUlJfWmRNMzFmQ3h2QzdYbERRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFWbugAwQC uV0AMA0GCSqGSIb3DQEBCwUAA4IBAQBg6vWsX9P57AtTFFfmpO6Ee6GEXqGYzlHu 9nyV9ZWID9fkYnwHHqYGDyWXBvBGzagJ/D5NtzlqiGHDKeP39pEcMS26yYoia8oY rEkjVeZL67jElwvPca2HTmSP1jzMsdyuIQNqvoE7IlkPEKWpDh6fg6n0kEili3pb 420PQBRQulTdCFvcIzkzwq7XOtGVBulU6kIX77Y9GYd3l6dZi5GmXWZHqN/Vxvq2 PnTYDEpXQhNtNw+lOY2ZWN2K1iQTCCUU6ZT+8bSVK7kgvNTZyqXz8JEbj8bxrOyd d6GZj/S0xKPRBYX9dJdrTgOLG17qKcgO3vhRY9zzyZyKpCRLtmcw -----END CERTIFICATE-----Generated at Wed Jan 21 07:24:29 2026 by rpki-client