This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/a-UKyjPVbfvB5nGnW_sM9iqHV-0.roa File: a-UKyjPVbfvB5nGnW_sM9iqHV-0.roa (raw, json) Hash identifier: /Bwt55jk116q+lxQ7IGg3arCYNFTOLtnT0qJFoL9z44= Subject key identifier: 6B:E5:0A:CA:33:D5:6D:FB:C1:E6:71:A7:5B:FB:0C:F6:2A:87:57:ED Certificate issuer: /CN=4eaf14b67e051cfbd5e1b1d51693d44682392792 Certificate serial: 019A8D484FA4170BDF7CBAC6AEDC8B0C6576 Authority key identifier: 4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/a-UKyjPVbfvB5nGnW_sM9iqHV-0.roa Signing time: Sun 16 Nov 2025 15:28:37 +0000 ROA not before: Sun 16 Nov 2025 15:28:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215332 IP address blocks: 167.150.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.mft rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:8d:48:4f:a4:17:0b:df:7c:ba:c6:ae:dc:8b:0c:65:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eaf14b67e051cfbd5e1b1d51693d44682392792 Validity Not Before: Nov 16 15:28:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6be50aca33d56dfbc1e671a75bfb0cf62a8757ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:db:ba:65:b7:9b:28:f4:84:d6:f8:cd:e4:65: fc:9e:2c:cf:88:64:c6:d3:84:ca:a8:7f:84:25:b5: 10:53:a4:75:09:be:c2:5f:c8:a7:68:06:11:fc:cf: 5b:be:85:a4:94:9e:12:5c:72:e2:2c:bb:ca:a6:0a: dd:ce:35:c0:8a:85:b3:1c:a9:cb:54:5d:3e:15:05: 93:05:bd:ad:bb:30:94:92:50:79:dd:a2:3b:c6:1f: 61:65:22:e2:61:b5:9d:88:01:45:81:36:e7:6b:d4: 4e:6f:90:3e:a2:0e:da:df:2a:03:df:8f:a2:0c:b3: 62:18:3c:be:1c:be:ef:01:e6:bf:0d:31:8a:70:41: 39:d0:57:d7:69:01:29:74:41:b9:c3:fb:7d:3b:00: d2:ad:42:82:f5:51:b1:7f:a1:6f:7b:b2:18:18:a6: b9:a8:92:36:53:eb:4f:f2:4f:bc:40:a5:e9:42:ad: cf:73:45:51:cf:00:aa:c9:e3:31:37:af:f5:49:f3: 85:0d:91:5e:2f:50:9d:6d:c7:94:5b:49:1e:34:c5: da:ba:b8:14:fb:22:69:9e:9a:30:61:8a:50:16:33: 6f:60:20:cc:51:e7:b4:cc:fa:42:34:5b:a7:86:2e: c8:1d:21:fe:42:4c:66:b5:a9:b0:b2:42:84:f6:94: f7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E5:0A:CA:33:D5:6D:FB:C1:E6:71:A7:5B:FB:0C:F6:2A:87:57:ED X509v3 Authority Key Identifier: keyid:4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/a-UKyjPVbfvB5nGnW_sM9iqHV-0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.150.91.0/24 Signature Algorithm: sha256WithRSAEncryption 71:2a:a4:53:0c:23:22:3d:f8:42:d5:ef:a3:68:ad:9f:92:51: d9:4a:1f:d1:92:3e:43:3a:d0:f4:8c:aa:ad:ec:ff:9f:30:a6: 7f:be:b2:67:10:3c:4b:e6:8e:42:80:b7:00:80:90:37:e5:53: 1a:0d:90:1a:a1:26:36:3f:83:05:14:f8:15:25:96:36:6a:dd: 03:f3:9f:50:8e:cc:7e:06:e3:8d:d8:6a:31:0f:68:6f:ba:28: c9:fa:2f:37:98:4e:6b:6d:55:6d:f4:6e:ca:55:ec:de:20:f5: c4:37:82:1b:83:61:11:58:b3:c4:eb:ef:c7:11:ad:c8:b5:dd: e7:1b:2e:a4:62:70:50:ac:dd:37:cd:d8:af:84:65:1a:37:83: 5e:2b:6c:4a:d7:8a:f1:44:8c:cd:ca:a5:e1:60:4b:40:f0:a3: f3:38:5d:2d:79:26:d4:06:c1:a6:7d:4b:2b:a0:a7:2e:90:8c: 02:3a:93:a1:10:3d:6c:a6:ec:0f:69:89:d0:ee:99:80:84:41: b4:d6:9b:f5:3f:a4:f3:cf:9e:74:65:36:3c:19:4a:d2:c8:f4: e0:52:f1:34:c2:21:be:99:de:83:93:0c:35:0c:f9:98:ac:78: 68:f0:aa:4c:af:5e:98:40:7e:d6:e5:b3:96:27:a9:69:19:18: 32:73:1f:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqNSE+kFwvffLrGrtyLDGV2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlYWYxNGI2N2UwNTFjZmJkNWUxYjFkNTE2OTNkNDQ2ODIz OTI3OTIwHhcNMjUxMTE2MTUyODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmU1MGFjYTMzZDU2ZGZiYzFlNjcxYTc1YmZiMGNmNjJhODc1N2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tu6ZbebKPSE1vjN5GX8nizPiGTG 04TKqH+EJbUQU6R1Cb7CX8inaAYR/M9bvoWklJ4SXHLiLLvKpgrdzjXAioWzHKnL VF0+FQWTBb2tuzCUklB53aI7xh9hZSLiYbWdiAFFgTbna9ROb5A+og7a3yoD34+i DLNiGDy+HL7vAea/DTGKcEE50FfXaQEpdEG5w/t9OwDSrUKC9VGxf6Fve7IYGKa5 qJI2U+tP8k+8QKXpQq3Pc0VRzwCqyeMxN6/1SfOFDZFeL1CdbceUW0keNMXaurgU +yJpnpowYYpQFjNvYCDMUee0zPpCNFunhi7IHSH+QkxmtamwskKE9pT32QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGvlCsoz1W37weZxp1v7DPYqh1ftMB8GA1UdIwQY MBaAFE6vFLZ+BRz71eGx1RaT1EaCOSeSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHE4VXRuNEZIUHZWNGJIVkZwUFVSb0k1SjVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS84Y2Y1MWMtNTRkNy00YzNhLTkwYzQt YmQ1MTJlZDU4Zjc4LzEvYS1VS3lqUFZiZnZCNW5Hbldfc005aXFIVi0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS84Y2Y1MWMtNTRkNy00YzNhLTkwYzQtYmQ1MTJlZDU4Zjc4 LzEvVHE4VXRuNEZIUHZWNGJIVkZwUFVSb0k1SjVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp5ZbMA0G CSqGSIb3DQEBCwUAA4IBAQBxKqRTDCMiPfhC1e+jaK2fklHZSh/Rkj5DOtD0jKqt 7P+fMKZ/vrJnEDxL5o5CgLcAgJA35VMaDZAaoSY2P4MFFPgVJZY2at0D859Qjsx+ BuON2GoxD2hvuijJ+i83mE5rbVVt9G7KVezeIPXEN4Ibg2ERWLPE6+/HEa3Itd3n Gy6kYnBQrN03zdivhGUaN4NeK2xK14rxRIzNyqXhYEtA8KPzOF0teSbUBsGmfUsr oKcukIwCOpOhED1spuwPaYnQ7pmAhEG01pv1P6Tzz550ZTY8GUrSyPTgUvE0wiG+ md6Dkww1DPmYrHho8KpMr16YQH7W5bOWJ6lpGRgycx+P -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:37 2025 by rpki-client