This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/UlU02LC4n2pDDDLWDfGKbBexvUQ.roa File: UlU02LC4n2pDDDLWDfGKbBexvUQ.roa (raw, json) Hash identifier: 1DEZfsrrVxXltp/RRFJK80hKK2fgGVXeXhVVxwfDsss= Subject key identifier: 52:55:34:D8:B0:B8:9F:6A:43:0C:32:D6:0D:F1:8A:6C:17:B1:BD:44 Certificate issuer: /CN=b5ac699b54a02872a42f0c09926c4706e71e3203 Certificate serial: 019B7EA575F3E7868DA8238C3418543AF267 Authority key identifier: B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/UlU02LC4n2pDDDLWDfGKbBexvUQ.roa Signing time: Fri 02 Jan 2026 12:18:51 +0000 ROA not before: Fri 02 Jan 2026 12:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197129 IP address blocks: 178.219.192.0/20 maxlen: 20 178.219.192.0/24 maxlen: 24 178.219.193.0/24 maxlen: 24 178.219.194.0/24 maxlen: 24 178.219.195.0/24 maxlen: 24 178.219.196.0/24 maxlen: 24 178.219.197.0/24 maxlen: 24 178.219.198.0/24 maxlen: 24 178.219.199.0/24 maxlen: 24 178.219.200.0/24 maxlen: 24 178.219.201.0/24 maxlen: 24 178.219.202.0/24 maxlen: 24 178.219.203.0/24 maxlen: 24 178.219.204.0/24 maxlen: 24 178.219.205.0/24 maxlen: 24 178.219.206.0/24 maxlen: 24 178.219.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:75:f3:e7:86:8d:a8:23:8c:34:18:54:3a:f2:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5ac699b54a02872a42f0c09926c4706e71e3203 Validity Not Before: Jan 2 12:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=525534d8b0b89f6a430c32d60df18a6c17b1bd44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:61:e5:87:8b:e1:57:19:83:84:55:e3:1b:7e: f1:cf:52:46:05:a5:63:00:d3:d7:42:c2:4d:da:85: b9:ce:de:17:b5:87:c9:5d:c4:b9:eb:f2:46:83:63: 54:24:db:81:5a:05:6b:fe:3c:91:2d:de:1c:bd:d1: f5:ea:d9:77:9c:54:f0:19:8c:2a:55:e3:3d:91:ee: 38:00:00:0b:51:6e:bc:11:c5:b6:06:ca:ff:44:d2: 9b:9d:75:d0:a7:58:69:97:1c:d3:e1:c8:f3:ff:ea: ab:0b:bd:06:9b:f9:91:2f:12:16:dd:57:60:22:5c: 15:ce:0b:e6:02:f1:99:b7:b1:80:da:33:4c:15:2c: 74:9b:e2:c1:0d:4a:56:72:4d:ea:b8:9c:f4:bc:60: f2:89:8f:cb:44:a4:3c:42:f0:d4:7c:82:5a:79:81: a1:83:1f:71:02:f9:dc:81:cf:e7:80:2b:97:11:b6: 61:66:1a:94:73:6c:d7:83:0d:48:80:25:95:2b:13: c1:20:bd:11:38:d2:f0:8f:bf:dd:13:e1:5a:44:04: c7:c0:0a:e7:25:c9:82:08:36:f6:74:f6:55:88:8b: 0c:7c:85:29:48:b0:cf:da:3f:af:93:ca:94:9e:5e: c7:af:70:6d:50:96:eb:e9:96:67:83:d8:58:dd:3f: eb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:55:34:D8:B0:B8:9F:6A:43:0C:32:D6:0D:F1:8A:6C:17:B1:BD:44 X509v3 Authority Key Identifier: keyid:B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/UlU02LC4n2pDDDLWDfGKbBexvUQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.219.192.0/20 Signature Algorithm: sha256WithRSAEncryption 60:01:1b:d0:82:82:7d:94:4d:cf:ac:74:d5:51:8d:11:6f:85: 74:5d:84:be:8f:ed:55:32:7e:d8:49:a5:9a:b1:54:4c:fe:95: 59:14:5e:6f:ca:48:b4:4c:03:09:17:ee:dc:d5:8e:ee:12:51: 22:f1:ca:08:5b:69:d5:ef:1e:cf:c3:a6:f5:c0:a0:0f:bd:f7: 37:d4:a9:54:7d:a6:59:16:d8:17:a3:46:19:7b:35:45:26:6f: a9:a6:fc:74:28:f6:8e:47:62:ec:7d:20:95:45:36:73:4f:e6: 88:47:68:15:83:54:b3:01:57:cb:66:1e:a9:1d:88:f1:38:00: a0:90:af:e7:1f:08:f1:e4:b5:74:39:c4:1e:69:e9:fa:74:2b: a9:5b:5b:0a:88:61:be:12:78:c9:78:f8:03:1a:e0:60:90:dc: 42:34:af:34:5d:7a:37:a2:6b:d0:01:65:d6:6f:1a:35:fb:c8: 8a:32:0e:b9:39:c5:ed:1d:c2:a1:59:26:b9:6b:87:75:5b:dc: 2c:e8:a1:01:10:4f:ec:e7:57:ba:ba:05:69:55:21:bc:d6:ee: e8:23:37:7e:0d:f8:24:49:22:4c:2b:09:15:5b:b1:bf:e4:24: b6:f6:73:6b:0c:8e:72:49:22:4b:61:12:2a:f0:02:11:6f:0a: f2:39:01:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pXXz54aNqCOMNBhUOvJnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YWM2OTliNTRhMDI4NzJhNDJmMGMwOTkyNmM0NzA2ZTcx ZTMyMDMwHhcNMjYwMTAyMTIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjU1MzRkOGIwYjg5ZjZhNDMwYzMyZDYwZGYxOGE2YzE3YjFiZDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmHlh4vhVxmDhFXjG37xz1JGBaVj ANPXQsJN2oW5zt4XtYfJXcS56/JGg2NUJNuBWgVr/jyRLd4cvdH16tl3nFTwGYwq VeM9ke44AAALUW68EcW2Bsr/RNKbnXXQp1hplxzT4cjz/+qrC70Gm/mRLxIW3Vdg IlwVzgvmAvGZt7GA2jNMFSx0m+LBDUpWck3quJz0vGDyiY/LRKQ8QvDUfIJaeYGh gx9xAvncgc/ngCuXEbZhZhqUc2zXgw1IgCWVKxPBIL0RONLwj7/dE+FaRATHwArn JcmCCDb2dPZViIsMfIUpSLDP2j+vk8qUnl7Hr3BtUJbr6ZZng9hY3T/rzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFJVNNiwuJ9qQwwy1g3ximwXsb1EMB8GA1UdIwQY MBaAFLWsaZtUoChypC8MCZJsRwbnHjIDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGF4cG0xU2dLSEtrTHd3SmtteEhCdWNlTWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi85YjFmODYtMGYzMC00YmI5LTgzMDkt OTgzN2JjMjJjNzA1LzEvVWxVMDJMQzRuMnBERERMV0RmR0tiQmV4dlVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi85YjFmODYtMGYzMC00YmI5LTgzMDktOTgzN2JjMjJjNzA1 LzEvdGF4cG0xU2dLSEtrTHd3SmtteEhCdWNlTWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEstvAMA0G CSqGSIb3DQEBCwUAA4IBAQBgARvQgoJ9lE3PrHTVUY0Rb4V0XYS+j+1VMn7YSaWa sVRM/pVZFF5vyki0TAMJF+7c1Y7uElEi8coIW2nV7x7Pw6b1wKAPvfc31KlUfaZZ FtgXo0YZezVFJm+ppvx0KPaOR2LsfSCVRTZzT+aIR2gVg1SzAVfLZh6pHYjxOACg kK/nHwjx5LV0OcQeaen6dCupW1sKiGG+EnjJePgDGuBgkNxCNK80XXo3omvQAWXW bxo1+8iKMg65OcXtHcKhWSa5a4d1W9ws6KEBEE/s51e6ugVpVSG81u7oIzd+Dfgk SSJMKwkVW7G/5CS29nNrDI5ySSJLYRIq8AIRbwryOQG6 -----END CERTIFICATE-----Generated at Sun Jan 11 23:32:01 2026 by rpki-client