This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/ua8XWSbeMMORBPDlN5yvWXznAO8.roa File: ua8XWSbeMMORBPDlN5yvWXznAO8.roa (raw, json) Hash identifier: Ww6mseo2xo3aRE3fY6q4wp3UNyik6YnKFf9vxFtf61A= Subject key identifier: B9:AF:17:59:26:DE:30:C3:91:04:F0:E5:37:9C:AF:59:7C:E7:00:EF Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c Certificate serial: 019AE488E820346A19AECF4E5C4F79D4F972 Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/ua8XWSbeMMORBPDlN5yvWXznAO8.roa Signing time: Wed 03 Dec 2025 14:06:08 +0000 ROA not before: Wed 03 Dec 2025 14:06:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 781 IP address blocks: 77.72.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:88:e8:20:34:6a:19:ae:cf:4e:5c:4f:79:d4:f9:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c Validity Not Before: Dec 3 14:06:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b9af175926de30c39104f0e5379caf597ce700ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f2:13:a4:d7:48:40:7b:cf:5c:23:93:cc:02: 74:cd:19:a1:23:9a:e3:d7:c0:b5:22:d6:16:71:a4: 0a:7a:d8:dc:e1:50:30:d1:42:80:fb:4a:50:90:67: 66:5a:9b:31:4e:2c:35:a8:c5:79:bc:7c:95:c7:54: 84:75:d2:26:6b:6e:61:b4:38:45:6c:86:f1:63:df: 44:7e:72:ad:de:3f:90:5d:35:a1:68:f9:e6:5d:d8: 36:97:8a:99:40:f6:45:08:a5:1b:fb:7e:f2:03:34: 57:22:2f:e9:2c:39:24:6a:4a:90:da:19:e3:69:9d: 35:66:a2:be:38:21:60:d1:f3:0c:47:4a:e4:fa:90: 0a:da:86:fd:73:62:27:2c:7c:28:1c:58:1b:6b:d1: 8f:a9:e2:cd:36:f0:64:89:47:0f:e2:da:59:ea:c9: 2d:dd:5e:6f:21:8a:6c:7f:a0:e1:de:03:01:98:70: 77:ae:ef:32:14:be:f2:52:5f:29:5f:25:3b:5d:44: ee:b7:97:b7:43:61:25:1b:02:76:0f:97:4b:c6:c0: d5:9d:58:42:d2:dd:f6:a5:e8:02:c6:cc:f3:68:25: 4a:1b:48:36:dc:e4:70:df:e1:5b:9b:eb:06:1c:c9: d8:4a:0d:97:f2:ae:c6:fe:b4:4e:65:6b:10:c8:04: 74:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:AF:17:59:26:DE:30:C3:91:04:F0:E5:37:9C:AF:59:7C:E7:00:EF X509v3 Authority Key Identifier: keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/ua8XWSbeMMORBPDlN5yvWXznAO8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.72.40.0/24 Signature Algorithm: sha256WithRSAEncryption 70:d7:f0:9a:58:e0:bf:f0:df:f1:98:7e:85:81:5d:b0:6b:e4: 22:57:99:ca:9b:47:67:0e:2c:d4:00:56:41:d8:7e:c3:4a:d3: 3a:99:cd:71:04:a4:d0:af:dd:25:2e:c7:c1:28:cc:a9:8e:f1: 1c:28:3b:c8:2a:a8:28:38:c4:aa:4b:88:03:0d:f7:1d:6d:09: fc:ba:25:e9:6f:6b:d1:9a:2d:9d:08:07:f0:81:bc:ef:43:4b: 35:ac:68:ae:49:1d:63:7e:8c:08:eb:c3:58:67:94:ef:12:d4: 1e:88:80:a3:8e:2b:09:37:60:7d:28:09:33:3b:84:2d:d2:ea: b3:e5:02:6b:d1:f6:a1:60:05:39:9e:bd:a5:8e:24:7c:18:93: 02:27:71:f5:17:21:37:b0:7d:23:2c:5d:27:78:b6:e5:be:59: 74:7f:63:c0:54:6b:55:ef:7a:f1:fc:49:29:61:5e:65:ae:1b: da:d5:56:02:59:bd:93:24:47:61:49:05:6e:fc:f4:6d:bf:24: 62:71:ec:61:1d:b3:51:2b:22:5d:99:69:9b:d5:7f:09:5d:0b: ff:e6:3f:dc:5d:e2:7b:ef:ed:fe:bc:68:d4:6e:da:7d:58:57: c3:52:e6:5a:cd:9b:6c:6a:c4:80:b5:09:5f:ac:ab:88:96:22: 39:1e:81:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrkiOggNGoZrs9OXE951PlyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NGFhY2FiOWE0OWUxNDNkZTY4OTc5YWQxNTZiNDJkYWJk ZGRlOGMwHhcNMjUxMjAzMTQwNjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWFmMTc1OTI2ZGUzMGMzOTEwNGYwZTUzNzljYWY1OTdjZTcwMGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPITpNdIQHvPXCOTzAJ0zRmhI5rj 18C1ItYWcaQKetjc4VAw0UKA+0pQkGdmWpsxTiw1qMV5vHyVx1SEddIma25htDhF bIbxY99EfnKt3j+QXTWhaPnmXdg2l4qZQPZFCKUb+37yAzRXIi/pLDkkakqQ2hnj aZ01ZqK+OCFg0fMMR0rk+pAK2ob9c2InLHwoHFgba9GPqeLNNvBkiUcP4tpZ6skt 3V5vIYpsf6Dh3gMBmHB3ru8yFL7yUl8pXyU7XUTut5e3Q2ElGwJ2D5dLxsDVnVhC 0t32pegCxszzaCVKG0g23ORw3+Fbm+sGHMnYSg2X8q7G/rROZWsQyAR0ewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLmvF1km3jDDkQTw5Tecr1l85wDvMB8GA1UdIwQY MBaAFARKrKuaSeFD3miXmtFWtC2r3d6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDIt M2JiOTI2ODc2MDJjLzEvdWE4WFdTYmVNTU9SQlBEbE41eXZXWHpuQU84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDItM2JiOTI2ODc2MDJj LzEvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUgoMA0G CSqGSIb3DQEBCwUAA4IBAQBw1/CaWOC/8N/xmH6FgV2wa+QiV5nKm0dnDizUAFZB 2H7DStM6mc1xBKTQr90lLsfBKMypjvEcKDvIKqgoOMSqS4gDDfcdbQn8uiXpb2vR mi2dCAfwgbzvQ0s1rGiuSR1jfowI68NYZ5TvEtQeiICjjisJN2B9KAkzO4Qt0uqz 5QJr0fahYAU5nr2ljiR8GJMCJ3H1FyE3sH0jLF0neLblvll0f2PAVGtV73rx/Ekp YV5lrhva1VYCWb2TJEdhSQVu/PRtvyRicexhHbNRKyJdmWmb1X8JXQv/5j/cXeJ7 7+3+vGjUbtp9WFfDUuZazZtsasSAtQlfrKuIliI5HoFA -----END CERTIFICATE-----Generated at Sat Dec 6 12:03:32 2025 by rpki-client