This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/U__HExLHGpl-RdMelOlBo1OYAp8.roa File: U__HExLHGpl-RdMelOlBo1OYAp8.roa (raw, json) Hash identifier: CCkW8XHynhFzt+WHZQ5Bq4ZudALYHpSG5/wuTKQxrjE= Subject key identifier: 53:FF:C7:13:12:C7:1A:99:7E:45:D3:1E:94:E9:41:A3:53:98:02:9F Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Certificate serial: 019AC4E64282B9FD34909481305E82298862 Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/U__HExLHGpl-RdMelOlBo1OYAp8.roa Signing time: Thu 27 Nov 2025 10:40:15 +0000 ROA not before: Thu 27 Nov 2025 10:40:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62206 IP address blocks: 91.228.13.0/24 maxlen: 24 91.228.15.0/24 maxlen: 24 94.154.32.0/24 maxlen: 24 94.154.33.0/24 maxlen: 24 94.154.35.0/24 maxlen: 24 94.154.36.0/24 maxlen: 24 94.154.37.0/24 maxlen: 24 94.154.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c4:e6:42:82:b9:fd:34:90:94:81:30:5e:82:29:88:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Validity Not Before: Nov 27 10:40:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=53ffc71312c71a997e45d31e94e941a35398029f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:16:4d:94:84:e1:e9:fd:2e:f5:5b:f5:43:ea: bd:6c:b4:e7:5b:38:78:2d:2c:86:60:af:14:0a:6c: f2:dc:34:f8:06:b0:8c:aa:19:82:98:03:5a:c8:49: 1c:57:ae:d1:c0:1b:8a:ca:ce:aa:49:9f:4f:b7:61: ac:c2:b7:80:a5:21:09:00:8a:0b:a4:a9:0e:1e:55: b8:22:9c:6a:1b:d0:04:ba:6f:4a:c2:a4:d2:72:f4: 91:6b:48:65:24:01:8e:12:1f:44:98:23:25:e4:21: 19:71:27:19:10:bf:10:bd:f9:a8:5f:91:2b:c8:27: 6b:4c:ee:60:48:90:fa:ed:8a:aa:7c:86:00:4e:75: dc:98:83:d8:20:34:b8:a9:df:19:ac:b5:93:b8:52: 37:44:5e:fc:10:8f:a3:1a:46:d5:9b:ab:84:6e:95: 3c:54:5f:3a:a2:cd:25:ac:d5:c9:54:b0:7a:10:27: 14:fd:b9:3a:c0:9c:4d:2e:93:bb:0c:e9:d9:f1:69: 62:27:c5:36:9c:5e:69:de:75:e9:1b:27:38:23:1c: 65:74:cc:8a:cf:fc:1e:6a:71:9e:f3:10:1c:e1:25: 35:6d:0a:b4:61:92:11:81:fe:03:00:99:69:6b:64: 92:93:e8:0a:0a:1d:a6:ec:83:a2:dc:cd:17:cc:44: aa:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:FF:C7:13:12:C7:1A:99:7E:45:D3:1E:94:E9:41:A3:53:98:02:9F X509v3 Authority Key Identifier: keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/U__HExLHGpl-RdMelOlBo1OYAp8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.228.13.0/24 91.228.15.0/24 94.154.32.0/23 94.154.35.0-94.154.38.255 Signature Algorithm: sha256WithRSAEncryption 3b:4b:57:b2:50:40:ed:91:3f:fc:90:63:4b:4f:7d:03:88:ec: 8b:a6:dd:d4:02:0d:ae:c5:e3:8c:76:6b:62:c6:7e:40:8d:2b: 34:7f:a3:7d:d6:4f:0c:48:9e:ab:27:1e:d2:0e:d2:d7:ac:91: 36:50:9a:fb:7b:38:d6:c1:76:7d:6b:3e:89:cd:4d:b6:16:bc: 72:0f:6f:9f:29:90:49:7c:bf:05:18:a0:4a:02:93:56:dc:9a: 34:51:6c:ad:ef:9b:7a:1c:dd:6c:bf:a0:8d:ed:ff:21:79:19: 78:b4:28:f9:58:79:6e:cd:42:cc:1a:d7:b8:bd:1e:b6:73:a5: 5b:f9:d4:02:1a:4a:b6:15:88:87:03:f0:be:7e:b0:ed:13:f0: 45:f3:b0:b4:9f:12:76:d1:20:a2:7e:c6:cb:0d:1b:8c:0e:be: 36:2d:39:67:f2:b1:f0:40:09:8c:dc:33:31:f5:00:73:4e:4b: 1f:cb:68:af:bd:62:67:44:9c:10:f3:b1:ef:9c:7e:eb:b6:15: bc:85:dd:e9:87:c2:9f:7c:3f:ab:32:25:05:98:5c:05:5b:c4: 99:18:f1:a6:a9:10:4a:b6:db:cf:c8:22:af:cb:f7:f1:b3:1f: 72:52:9c:c0:07:77:31:ca:e8:51:f2:0d:d2:8f:2c:c7:d3:6b: 16:f8:83:7e -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZrE5kKCuf00kJSBMF6CKYhiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5 MjFmODgwHhcNMjUxMTI3MTA0MDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2ZmYzcxMzEyYzcxYTk5N2U0NWQzMWU5NGU5NDFhMzUzOTgwMjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxZNlITh6f0u9Vv1Q+q9bLTnWzh4 LSyGYK8UCmzy3DT4BrCMqhmCmANayEkcV67RwBuKys6qSZ9Pt2GswreApSEJAIoL pKkOHlW4IpxqG9AEum9KwqTScvSRa0hlJAGOEh9EmCMl5CEZcScZEL8QvfmoX5Er yCdrTO5gSJD67YqqfIYATnXcmIPYIDS4qd8ZrLWTuFI3RF78EI+jGkbVm6uEbpU8 VF86os0lrNXJVLB6ECcU/bk6wJxNLpO7DOnZ8WliJ8U2nF5p3nXpGyc4IxxldMyK z/weanGe8xAc4SU1bQq0YZIRgf4DAJlpa2SSk+gKCh2m7IOi3M0XzESquQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFFP/xxMSxxqZfkXTHpTpQaNTmAKfMB8GA1UdIwQY MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt YTE4NGYzNTU2ZTQzLzEvVV9fSEV4TEhHcGwtUmRNZWxPbEJvMU9ZQXA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAW+QNAwQA W+QPAwQBXpogMAwDBABemiMDBABemiYwDQYJKoZIhvcNAQELBQADggEBADtLV7JQ QO2RP/yQY0tPfQOI7Ium3dQCDa7F44x2a2LGfkCNKzR/o33WTwxInqsnHtIO0tes kTZQmvt7ONbBdn1rPonNTbYWvHIPb58pkEl8vwUYoEoCk1bcmjRRbK3vm3oc3Wy/ oI3t/yF5GXi0KPlYeW7NQswa17i9HrZzpVv51AIaSrYViIcD8L5+sO0T8EXzsLSf EnbRIKJ+xssNG4wOvjYtOWfysfBACYzcMzH1AHNOSx/LaK+9YmdEnBDzse+cfuu2 FbyF3emHwp98P6syJQWYXAVbxJkY8aapEEq228/IIq/L9/GzH3JSnMAHdzHK6FHy DdKPLMfTaxb4g34= -----END CERTIFICATE-----Generated at Sun Dec 7 00:10:19 2025 by rpki-client