This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/UsJrUy2UuzGGDnQa-en_vet84IU.roa File: UsJrUy2UuzGGDnQa-en_vet84IU.roa (raw, json) Hash identifier: anygphX/NHAj2pg72RtTsBDk/dlZBM2mWyxRgOxxXzo= Subject key identifier: 52:C2:6B:53:2D:94:BB:31:86:0E:74:1A:F9:E9:FF:BD:EB:7C:E0:85 Certificate issuer: /CN=61b534437503668815add93cd17d0ad3e1b1a877 Certificate serial: 019B7C7FDE28A7E96943EF97764603431FB4 Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/UsJrUy2UuzGGDnQa-en_vet84IU.roa Signing time: Fri 02 Jan 2026 02:18:33 +0000 ROA not before: Fri 02 Jan 2026 02:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13127 IP address blocks: 62.58.0.0/15 maxlen: 24 62.166.0.0/17 maxlen: 24 62.166.50.0/24 maxlen: 24 62.166.51.0/24 maxlen: 24 62.166.56.0/24 maxlen: 24 81.58.0.0/15 maxlen: 24 81.58.0.0/16 maxlen: 24 81.59.128.0/17 maxlen: 24 82.172.0.0/16 maxlen: 24 82.172.128.0/17 maxlen: 24 82.173.0.0/16 maxlen: 24 82.173.81.0/24 maxlen: 24 82.173.128.0/18 maxlen: 24 82.173.192.0/19 maxlen: 24 82.175.0.0/16 maxlen: 24 87.211.0.0/16 maxlen: 24 87.213.0.0/16 maxlen: 24 87.214.0.0/15 maxlen: 24 87.215.0.0/16 maxlen: 24 143.176.0.0/16 maxlen: 24 143.179.0.0/16 maxlen: 24 217.149.216.0/24 maxlen: 24 2a01:380::/32 maxlen: 40 2a01:380:6000::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:de:28:a7:e9:69:43:ef:97:76:46:03:43:1f:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877 Validity Not Before: Jan 2 02:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52c26b532d94bb31860e741af9e9ffbdeb7ce085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:38:73:b0:06:10:a8:f4:ee:c2:4d:c2:b6:2f: 17:2d:6c:ef:15:f3:c8:b7:8f:72:7d:76:8a:5b:d0: e7:68:fb:c7:cd:dd:4d:5f:bd:1f:b8:d3:18:25:f1: 46:10:ab:1d:33:86:4c:e3:d9:9f:09:20:a8:61:46: ff:70:e9:18:c9:b5:9d:50:7a:ef:06:09:33:85:d9: 8c:ca:b4:64:19:eb:60:e0:0c:d2:0d:2d:3f:8c:bc: 19:e0:b8:14:03:8f:e2:19:81:b7:b6:33:8f:3c:69: a8:c0:78:ba:f1:c9:d0:0a:11:43:91:3f:82:7a:1f: 99:eb:b2:c2:c8:0d:85:9b:93:4e:7a:26:fa:7c:3b: d9:64:9b:8b:fa:18:8b:f1:19:4f:6c:6d:f6:7f:41: 3c:ea:cf:89:da:4e:c1:0b:03:87:6d:16:d7:9f:38: 4e:af:d5:52:1c:c1:ea:56:95:1e:eb:ce:32:72:22: d0:3d:85:b3:81:32:a4:84:8c:30:1e:09:5d:5b:f4: 58:89:c2:cb:a2:5b:c1:b1:df:7b:0a:de:f2:e2:4c: 99:23:8b:f4:1e:de:46:3d:c5:90:d4:4f:20:10:f7: ab:87:6e:be:27:4c:eb:45:e2:cb:2a:87:d8:52:eb: a6:5e:6e:3d:07:7d:ef:8d:59:e0:a0:ca:e3:60:76: f6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C2:6B:53:2D:94:BB:31:86:0E:74:1A:F9:E9:FF:BD:EB:7C:E0:85 X509v3 Authority Key Identifier: keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/UsJrUy2UuzGGDnQa-en_vet84IU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.58.0.0/15 62.166.0.0/17 81.58.0.0/15 82.172.0.0/15 82.175.0.0/16 87.211.0.0/16 87.213.0.0-87.215.255.255 143.176.0.0/16 143.179.0.0/16 217.149.216.0/24 IPv6: 2a01:380::/32 Signature Algorithm: sha256WithRSAEncryption 16:26:7d:85:a4:74:3d:4a:f2:34:2b:60:9e:c8:fb:df:18:b6: 4d:0d:d0:69:c8:06:a9:6a:49:dc:58:b4:e9:e1:68:b0:36:cd: d4:37:7a:b8:81:ba:aa:75:ac:25:bf:4f:f0:ee:83:02:3a:ad: d2:e7:ff:a8:d8:45:45:78:19:15:9e:77:c7:53:3a:92:8f:2e: 15:c1:a5:5c:ee:9d:32:5c:aa:62:d5:ce:0c:77:72:1d:44:f4: 16:bc:0b:ba:b5:41:45:9a:74:5d:f7:a2:06:ee:9f:dc:d8:fd: df:d3:4d:0f:3a:76:cd:28:9a:2f:a1:69:e3:44:8c:ee:07:e5: 1c:5a:aa:04:96:49:da:e9:be:cf:d0:2b:b3:3a:31:ba:4c:ca: 16:0d:45:56:43:3e:b7:9c:1f:8f:cf:2d:a6:9e:6c:3b:20:46: f8:4d:7e:6b:85:59:39:b0:61:bf:da:03:42:aa:b3:57:86:b5: 8c:41:e3:dd:0f:ad:b0:55:c5:62:6c:ac:45:1c:17:cf:bb:e8: 2b:88:07:81:99:77:16:48:95:62:83:e8:d0:de:da:fe:df:7d: bb:fc:32:a5:d6:4d:59:79:58:2f:15:80:24:44:07:84:7e:c9: 87:4a:12:e1:58:d2:f0:b2:cf:28:c0:22:e9:0b:a1:8d:12:aa: f7:a0:2c:b9 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgISAZt8f94op+lpQ++XdkYDQx+0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxYjUzNDQzNzUwMzY2ODgxNWFkZDkzY2QxN2QwYWQzZTFi MWE4NzcwHhcNMjYwMTAyMDIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmMyNmI1MzJkOTRiYjMxODYwZTc0MWFmOWU5ZmZiZGViN2NlMDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzhzsAYQqPTuwk3Cti8XLWzvFfPI t49yfXaKW9DnaPvHzd1NX70fuNMYJfFGEKsdM4ZM49mfCSCoYUb/cOkYybWdUHrv BgkzhdmMyrRkGetg4AzSDS0/jLwZ4LgUA4/iGYG3tjOPPGmowHi68cnQChFDkT+C eh+Z67LCyA2Fm5NOeib6fDvZZJuL+hiL8RlPbG32f0E86s+J2k7BCwOHbRbXnzhO r9VSHMHqVpUe684yciLQPYWzgTKkhIwwHgldW/RYicLLolvBsd97Ct7y4kyZI4v0 Ht5GPcWQ1E8gEPerh26+J0zrReLLKofYUuumXm49B33vjVngoMrjYHb2oQIDAQAB o4ICTTCCAkkwHQYDVR0OBBYEFFLCa1MtlLsxhg50Gvnp/73rfOCFMB8GA1UdIwQY MBaAFGG1NEN1A2aIFa3ZPNF9CtPhsah3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jMWFjZDYtMjMwYS00ZTM2LWE1OGYt ZjU1NWUyZTY4YTEwLzEvVXNKclV5MlV1ekdHRG5RYS1lbl92ZXQ4NElVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9jMWFjZDYtMjMwYS00ZTM2LWE1OGYtZjU1NWUyZTY4YTEw LzEvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBBBAIAATA7AwMBPjoDBAc+ pgADAwFROgMDAVKsAwMAUq8DAwBX0zAKAwMAV9UDAwNX0AMDAI+wAwMAj7MDBADZ ldgwDQQCAAIwBwMFACoBA4AwDQYJKoZIhvcNAQELBQADggEBABYmfYWkdD1K8jQr YJ7I+98Ytk0N0GnIBqlqSdxYtOnhaLA2zdQ3eriBuqp1rCW/T/DugwI6rdLn/6jY RUV4GRWed8dTOpKPLhXBpVzunTJcqmLVzgx3ch1E9Ba8C7q1QUWadF33ogbun9zY /d/TTQ86ds0omi+haeNEjO4H5RxaqgSWSdrpvs/QK7M6MbpMyhYNRVZDPrecH4/P LaaebDsgRvhNfmuFWTmwYb/aA0Kqs1eGtYxB490PrbBVxWJsrEUcF8+76CuIB4GZ dxZIlWKD6NDe2v7ffbv8MqXWTVl5WC8VgCREB4R+yYdKEuFY0vCyzyjAIukLoY0S qvegLLk= -----END CERTIFICATE-----Generated at Tue Jan 20 07:47:28 2026 by rpki-client