This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/upaHuTNxbV8mQ-zLRwrgVtkGsmY.roa File: upaHuTNxbV8mQ-zLRwrgVtkGsmY.roa (raw, json) Hash identifier: sKbR8/VdnyYU5WVgCkow2npUXtpJF6ZJXDD7UHW/B2o= Subject key identifier: BA:96:87:B9:33:71:6D:5F:26:43:EC:CB:47:0A:E0:56:D9:06:B2:66 Certificate issuer: /CN=4367547d851e3cd776cd33290b2454acc0e851bb Certificate serial: 019A8CE2AF2075552438A597DBB2BE73D867 Authority key identifier: 43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/upaHuTNxbV8mQ-zLRwrgVtkGsmY.roa Signing time: Sun 16 Nov 2025 13:37:37 +0000 ROA not before: Sun 16 Nov 2025 13:37:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214844 IP address blocks: 193.186.160.0/24 maxlen: 24 2a14:56c0:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:8c:e2:af:20:75:55:24:38:a5:97:db:b2:be:73:d8:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4367547d851e3cd776cd33290b2454acc0e851bb Validity Not Before: Nov 16 13:37:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ba9687b933716d5f2643eccb470ae056d906b266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e9:0a:c4:af:28:4e:c1:64:40:03:fa:ac:cc: e9:7b:a9:8e:1b:8c:2f:36:d8:a6:80:e3:04:1d:aa: e4:55:0f:5d:4e:bc:b1:be:70:dc:57:e3:29:e3:1b: 94:ef:45:64:90:7d:ff:eb:21:5f:ba:15:16:29:94: 6f:2e:d0:2e:77:03:d1:a3:90:ae:89:62:db:3c:4e: f1:3d:2a:7f:7a:9b:83:82:40:c4:ab:b4:19:6a:c7: c5:1e:cd:48:c3:8f:14:7e:88:af:3d:c0:7d:8b:33: 0f:e8:5b:4c:2e:7c:f3:e6:22:e9:00:5c:10:1c:cb: 20:9a:e2:2e:d5:aa:69:7f:7d:44:25:3a:2e:05:21: 65:54:3b:6e:a3:48:5a:9b:35:67:91:93:42:e0:ea: 6d:b9:c4:fd:b6:96:cf:0f:8a:f1:2c:35:27:e3:59: 82:bd:93:be:66:64:6c:58:0a:91:71:ad:17:ed:3b: 69:42:0e:80:d1:67:7d:70:21:ce:ba:5c:36:59:96: f8:bc:fc:fa:38:80:6e:e8:2e:24:f0:2d:df:86:6b: 1a:16:1f:29:1c:32:7c:89:5d:ff:d1:62:be:5f:6a: cb:16:0f:ff:a4:e8:49:18:ba:cf:df:ce:0b:e7:4b: 36:49:e1:47:e5:5c:0a:cf:89:9f:a1:8d:82:13:17: 3b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:96:87:B9:33:71:6D:5F:26:43:EC:CB:47:0A:E0:56:D9:06:B2:66 X509v3 Authority Key Identifier: keyid:43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/upaHuTNxbV8mQ-zLRwrgVtkGsmY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.186.160.0/24 IPv6: 2a14:56c0:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 3a:f0:a1:a7:06:22:c4:93:40:91:59:9e:3f:63:d4:3b:07:2a: d8:1c:a1:f3:d0:76:8a:fb:80:7c:79:ca:b7:07:7f:8a:fa:de: f6:64:e1:33:c5:91:97:f4:a0:65:61:31:4a:b5:11:18:a8:6f: 80:f6:a0:cc:d9:4c:d3:3a:b6:16:45:d2:4f:c3:ab:d8:b1:01: e6:d1:fa:dc:bb:7f:55:3c:1c:8b:4f:f8:c5:41:08:bb:f8:62: 11:d0:96:f0:aa:24:53:65:59:f1:c4:23:02:6f:11:ee:49:37: a2:c5:70:c2:e2:6c:29:9a:df:27:a3:af:b0:a8:8e:76:5a:31: d5:33:f7:00:30:a7:99:fb:c3:b3:b6:a4:04:0f:ff:a2:a0:85: ae:da:88:4b:19:22:41:11:5a:db:d3:ed:2b:f7:19:b9:10:a3: f2:97:98:e1:77:98:b5:c0:dd:12:43:ab:5b:1d:c7:ff:de:66: 02:72:fe:75:f1:de:fa:e0:2c:e4:4f:cd:16:4f:60:0f:70:32: 45:c4:86:78:8e:bc:6f:9d:d4:a7:43:30:26:c2:72:7d:ae:e6: 2d:8c:4d:f0:b4:c1:3d:b8:b1:47:cb:dd:44:d6:e5:f4:9f:05: 2d:49:e0:c9:86:f6:74:8e:6f:23:50:d5:dd:cb:a5:1b:0c:a4: 1a:51:47:a9 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZqM4q8gdVUkOKWX27K+c9hnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNjc1NDdkODUxZTNjZDc3NmNkMzMyOTBiMjQ1NGFjYzBl ODUxYmIwHhcNMjUxMTE2MTMzNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTk2ODdiOTMzNzE2ZDVmMjY0M2VjY2I0NzBhZTA1NmQ5MDZiMjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsukKxK8oTsFkQAP6rMzpe6mOG4wv NtimgOMEHarkVQ9dTryxvnDcV+Mp4xuU70VkkH3/6yFfuhUWKZRvLtAudwPRo5Cu iWLbPE7xPSp/epuDgkDEq7QZasfFHs1Iw48UfoivPcB9izMP6FtMLnzz5iLpAFwQ HMsgmuIu1appf31EJTouBSFlVDtuo0hamzVnkZNC4OptucT9tpbPD4rxLDUn41mC vZO+ZmRsWAqRca0X7TtpQg6A0Wd9cCHOulw2WZb4vPz6OIBu6C4k8C3fhmsaFh8p HDJ8iV3/0WK+X2rLFg//pOhJGLrP384L50s2SeFH5VwKz4mfoY2CExc7cwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLqWh7kzcW1fJkPsy0cK4FbZBrJmMB8GA1UdIwQY MBaAFENnVH2FHjzXds0zKQskVKzA6FG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTJkVWZZVWVQTmQyelRNcEN5UlVyTURvVWJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84NzRjODUtOWU3ZC00YWNlLTk1OGYt ZGFiN2YwYzhkMjQwLzEvdXBhSHVUTnhiVjhtUS16TFJ3cmdWdGtHc21ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi84NzRjODUtOWU3ZC00YWNlLTk1OGYtZGFiN2YwYzhkMjQw LzEvUTJkVWZZVWVQTmQyelRNcEN5UlVyTURvVWJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwbqgMA8E AgACMAkDBwAqFFbA//8wDQYJKoZIhvcNAQELBQADggEBADrwoacGIsSTQJFZnj9j 1DsHKtgcofPQdor7gHx5yrcHf4r63vZk4TPFkZf0oGVhMUq1ERiob4D2oMzZTNM6 thZF0k/Dq9ixAebR+ty7f1U8HItP+MVBCLv4YhHQlvCqJFNlWfHEIwJvEe5JN6LF cMLibCma3yejr7CojnZaMdUz9wAwp5n7w7O2pAQP/6Kgha7aiEsZIkERWtvT7Sv3 GbkQo/KXmOF3mLXA3RJDq1sdx//eZgJy/nXx3vrgLORPzRZPYA9wMkXEhniOvG+d 1KdDMCbCcn2u5i2MTfC0wT24sUfL3UTW5fSfBS1J4MmG9nSObyNQ1d3LpRsMpBpR R6k= -----END CERTIFICATE-----Generated at Sat Dec 6 11:53:31 2025 by rpki-client