This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/uWpNCPTv1fX6SmxhkKVSdngegu4.roa File: uWpNCPTv1fX6SmxhkKVSdngegu4.roa (raw, json) Hash identifier: kLvGX1zZO1OaTg+o6DjuOwMKQv+Bs3Dx3ldycWfaKag= Subject key identifier: B9:6A:4D:08:F4:EF:D5:F5:FA:4A:6C:61:90:A5:52:76:78:1E:82:EE Certificate issuer: /CN=ef55459645979c413d0bc6f7454f0d36e40e99f9 Certificate serial: 019AB47A26C609E6EBA624AC595D85E4ABA7 Authority key identifier: EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/uWpNCPTv1fX6SmxhkKVSdngegu4.roa Signing time: Mon 24 Nov 2025 06:08:15 +0000 ROA not before: Mon 24 Nov 2025 06:08:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213527 IP address blocks: 213.177.162.0/24 maxlen: 24 2a14:47c0::/32 maxlen: 32 2a14:47c0::/40 maxlen: 40 2a14:47c0::/48 maxlen: 48 2a14:47c0:1::/48 maxlen: 48 2a14:47c0:2::/48 maxlen: 48 2a14:47c0:3::/48 maxlen: 48 2a14:47c0:4::/48 maxlen: 48 2a14:47c0:5::/48 maxlen: 48 2a14:47c0:6::/48 maxlen: 48 2a14:47c0:7::/48 maxlen: 48 2a14:47c0:8::/48 maxlen: 48 2a14:47c0:9::/48 maxlen: 48 2a14:47c0:a::/48 maxlen: 48 2a14:47c0:b::/48 maxlen: 48 2a14:47c0:c::/48 maxlen: 48 2a14:47c0:d::/48 maxlen: 48 2a14:47c0:e::/48 maxlen: 48 2a14:47c0:f::/48 maxlen: 48 2a14:47c0:100::/40 maxlen: 40 2a14:47c0:100::/48 maxlen: 48 2a14:47c0:fffe::/48 maxlen: 48 2a14:47c0:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b4:7a:26:c6:09:e6:eb:a6:24:ac:59:5d:85:e4:ab:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef55459645979c413d0bc6f7454f0d36e40e99f9 Validity Not Before: Nov 24 06:08:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b96a4d08f4efd5f5fa4a6c6190a55276781e82ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:07:04:6c:e8:03:00:0c:06:9e:d4:26:b0:8d: 22:1d:2f:01:fd:e8:e9:4f:a0:00:91:99:ba:11:9d: 9d:d0:09:56:0f:55:ac:8f:59:48:ed:09:83:16:36: 5e:0e:e3:3e:00:42:95:46:8d:49:22:ae:e0:cd:a9: d8:b7:c2:e9:3b:ee:2d:35:f8:4b:3a:35:16:ec:f3: 9a:b7:f0:dc:79:83:2f:9d:9c:0e:82:ac:0d:6d:c8: f3:94:d1:4a:30:5c:d9:84:47:6f:29:20:ab:e5:52: 27:23:00:69:fe:75:4f:1f:c9:7d:9d:cd:8d:67:f9: ba:f8:b7:aa:ee:ed:a6:fa:ab:f4:05:6e:b5:9d:97: 7b:4a:48:68:59:0b:3a:30:ae:4f:97:31:5d:45:9b: 06:a7:b7:29:f9:a7:fe:03:02:a4:0c:83:53:9d:f1: 2f:a0:e9:26:05:db:f3:b4:eb:17:c0:62:1a:5e:f4: fd:64:c2:9c:24:bd:8c:88:70:a6:e0:14:77:fd:9d: 6f:b2:fa:e3:e9:4a:d9:e6:d2:da:be:64:2d:a7:f8: 8c:2c:02:79:23:15:da:4d:76:99:7e:c3:62:07:8c: 8c:6b:01:36:16:84:1f:b9:3c:2a:8b:37:fc:56:7f: 0c:2d:bd:ee:53:49:8f:85:2a:56:d8:60:8e:ad:03: 8a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:6A:4D:08:F4:EF:D5:F5:FA:4A:6C:61:90:A5:52:76:78:1E:82:EE X509v3 Authority Key Identifier: keyid:EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/uWpNCPTv1fX6SmxhkKVSdngegu4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.177.162.0/24 IPv6: 2a14:47c0::/32 Signature Algorithm: sha256WithRSAEncryption 4e:7e:c9:94:24:8a:ca:31:1b:10:45:ef:76:f8:d7:d8:3a:16: b9:a2:cc:9a:53:e0:b1:cb:fd:70:19:bb:85:e5:c5:c3:87:24: b9:9c:88:2a:07:26:f3:4d:97:d8:92:d7:e0:85:be:25:a7:0e: 50:d6:8f:f5:9c:69:13:cd:0d:83:5d:b4:93:a1:9d:13:ea:19: 0b:e3:95:0a:ef:1d:31:ca:62:f2:26:50:6f:c6:25:09:82:e5: 45:d7:65:c1:e6:02:c2:a9:12:f6:68:27:1c:71:88:21:f6:5e: cb:51:e3:b5:46:49:2d:5d:7a:23:ea:4d:df:e9:cd:d4:33:7c: 74:31:2a:6f:c2:26:6f:96:88:d7:b5:d7:38:6e:14:3d:d7:51: b1:a4:cd:ac:59:89:4b:a9:5c:d5:db:7d:f4:46:1d:39:3c:8d: cf:60:c7:d6:81:07:f4:cb:66:5f:f1:d3:c5:88:76:e2:8b:c5: 0f:49:5e:01:df:a0:f2:ec:8a:29:47:2c:25:b7:1e:2b:6d:3c: 0b:70:c9:c3:0c:a8:5c:cc:08:e0:38:aa:48:b0:26:8a:fd:0c: e3:b0:52:70:63:12:ef:00:cf:68:aa:3e:5a:0a:c9:7d:7d:8b: 7c:a0:db:b8:6d:03:8b:4e:d7:e7:ed:94:55:9b:1d:a7:c9:7c: 94:a7:a5:20 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZq0eibGCebrpiSsWV2F5KunMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTU0NTk2NDU5NzljNDEzZDBiYzZmNzQ1NGYwZDM2ZTQw ZTk5ZjkwHhcNMjUxMTI0MDYwODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTZhNGQwOGY0ZWZkNWY1ZmE0YTZjNjE5MGE1NTI3Njc4MWU4MmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8QcEbOgDAAwGntQmsI0iHS8B/ejp T6AAkZm6EZ2d0AlWD1Wsj1lI7QmDFjZeDuM+AEKVRo1JIq7gzanYt8LpO+4tNfhL OjUW7POat/DceYMvnZwOgqwNbcjzlNFKMFzZhEdvKSCr5VInIwBp/nVPH8l9nc2N Z/m6+Leq7u2m+qv0BW61nZd7SkhoWQs6MK5PlzFdRZsGp7cp+af+AwKkDINTnfEv oOkmBdvztOsXwGIaXvT9ZMKcJL2MiHCm4BR3/Z1vsvrj6UrZ5tLavmQtp/iMLAJ5 IxXaTXaZfsNiB4yMawE2FoQfuTwqizf8Vn8MLb3uU0mPhSpW2GCOrQOKdQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFLlqTQj079X1+kpsYZClUnZ4HoLuMB8GA1UdIwQY MBaAFO9VRZZFl5xBPQvG90VPDTbkDpn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFWRmxrV1huRUU5QzhiM1JVOE5OdVFPbWZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wNTEyZGYtN2QwYy00NjNiLTg3MjQt ODI1MzFlOWM3ODA0LzEvdVdwTkNQVHYxZlg2U214aGtLVlNkbmdlZ3U0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8wNTEyZGYtN2QwYy00NjNiLTg3MjQtODI1MzFlOWM3ODA0 LzEvNzFWRmxrV1huRUU5QzhiM1JVOE5OdVFPbWZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA1bGiMA0E AgACMAcDBQAqFEfAMA0GCSqGSIb3DQEBCwUAA4IBAQBOfsmUJIrKMRsQRe92+NfY Oha5osyaU+Cxy/1wGbuF5cXDhyS5nIgqBybzTZfYktfghb4lpw5Q1o/1nGkTzQ2D XbSToZ0T6hkL45UK7x0xymLyJlBvxiUJguVF12XB5gLCqRL2aCcccYgh9l7LUeO1 RkktXXoj6k3f6c3UM3x0MSpvwiZvlojXtdc4bhQ911GxpM2sWYlLqVzV2330Rh05 PI3PYMfWgQf0y2Zf8dPFiHbii8UPSV4B36Dy7IopRywltx4rbTwLcMnDDKhczAjg OKpIsCaK/QzjsFJwYxLvAM9oqj5aCsl9fYt8oNu4bQOLTtfn7ZRVmx2nyXyUp6Ug -----END CERTIFICATE-----Generated at Sat Dec 6 22:02:04 2025 by rpki-client