This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/UxqeGKvf_5IOUayHwKK6bhDMVKU.roa
File: UxqeGKvf_5IOUayHwKK6bhDMVKU.roa (raw, json)
Hash identifier: 8jvuDhbQmKed8NMsiNxBI2LamoVt90xWV+0TTH/OPZ4=
Subject key identifier: 53:1A:9E:18:AB:DF:FF:92:0E:51:AC:87:C0:A2:BA:6E:10:CC:54:A5
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019AEE1DECFBCA512943D8E47CFCA25DA4E2
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/UxqeGKvf_5IOUayHwKK6bhDMVKU.roa
Signing time: Fri 05 Dec 2025 10:45:29 +0000
ROA not before: Fri 05 Dec 2025 10:45:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 62.192.110.0/24 maxlen: 24
194.231.132.0/24 maxlen: 24
194.231.135.0/24 maxlen: 24
194.231.137.0/24 maxlen: 24
194.231.138.0/24 maxlen: 24
194.231.140.0/24 maxlen: 24
194.231.142.0/24 maxlen: 24
194.231.148.0/24 maxlen: 24
194.231.151.0/24 maxlen: 24
194.231.152.0/24 maxlen: 24
194.231.153.0/24 maxlen: 24
194.231.154.0/24 maxlen: 24
194.231.198.0/24 maxlen: 24
194.231.199.0/24 maxlen: 24
194.231.200.0/24 maxlen: 24
194.231.201.0/24 maxlen: 24
194.231.202.0/23 maxlen: 24
194.231.212.0/24 maxlen: 24
194.231.213.0/24 maxlen: 24
194.231.214.0/24 maxlen: 24
194.231.222.0/24 maxlen: 24
194.231.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:ee:1d:ec:fb:ca:51:29:43:d8:e4:7c:fc:a2:5d:a4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Dec 5 10:45:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=531a9e18abdfff920e51ac87c0a2ba6e10cc54a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:08:5c:eb:9d:49:fb:35:0e:35:8b:ec:15:24:
73:fe:67:ad:7c:be:61:c1:8f:61:5a:32:ab:b7:7b:
82:ad:3b:8d:47:4a:10:c1:b0:5f:88:72:59:81:2b:
eb:a2:c1:4e:f2:fe:ba:89:03:0b:52:77:ba:8d:48:
45:f7:d6:d3:75:6a:6a:4f:d7:4e:12:78:40:ed:0f:
8b:b9:17:a7:54:12:13:41:de:87:88:4a:53:39:3e:
ba:01:b1:91:e9:64:8c:4b:e9:a4:b7:07:be:c2:14:
69:ff:e9:9f:65:27:6b:48:e5:f3:ee:98:ee:25:38:
bc:46:a8:24:44:43:19:32:0c:6d:19:70:b8:1a:37:
c7:67:88:3a:c9:a3:69:05:19:cf:d9:c0:09:31:7f:
ba:d3:87:70:b4:42:7f:27:16:06:5f:51:b5:34:a9:
51:e2:7e:63:d1:75:2e:25:d3:7d:13:58:a1:75:e9:
20:9c:13:a8:47:a2:ee:ee:79:bc:f9:d8:c0:d2:56:
ca:32:3f:bf:58:6e:c1:79:d1:79:6f:40:e9:b6:b7:
7e:24:2c:e1:0b:6d:24:8b:21:78:3c:ec:28:f6:9d:
bc:66:35:d0:f0:56:26:01:fd:6c:8c:ae:81:3e:f4:
a7:43:f5:20:85:61:73:7e:26:c7:a1:b6:2a:7c:bc:
0b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1A:9E:18:AB:DF:FF:92:0E:51:AC:87:C0:A2:BA:6E:10:CC:54:A5
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/UxqeGKvf_5IOUayHwKK6bhDMVKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.110.0/24
194.231.132.0/24
194.231.135.0/24
194.231.137.0-194.231.138.255
194.231.140.0/24
194.231.142.0/24
194.231.148.0/24
194.231.151.0-194.231.154.255
194.231.198.0-194.231.203.255
194.231.212.0-194.231.214.255
194.231.222.0/23
Signature Algorithm: sha256WithRSAEncryption
85:fa:68:66:f8:e3:73:94:48:9f:c2:76:5b:a8:3d:ce:b1:20:
ef:c3:c0:46:2d:3f:87:64:21:9a:af:9c:b0:c6:c0:90:c7:72:
d6:73:d6:96:68:56:b3:9b:9d:ba:00:c4:72:b4:6b:87:88:20:
57:15:9a:6f:31:5b:90:69:55:91:3b:8f:dc:cf:b2:6c:ba:1a:
2e:ea:b3:f4:1f:58:05:35:b4:88:04:4e:4b:0b:4d:73:fa:cf:
0b:d7:70:5c:8c:79:88:a7:2e:51:97:50:2d:19:cb:fe:90:1c:
65:a1:5b:6c:e8:03:f6:0b:36:42:f8:77:eb:76:a2:8c:3a:75:
17:47:21:bc:02:78:b5:d8:fb:5b:f0:d9:6e:87:02:11:f4:83:
99:03:7d:9b:69:c7:66:e9:55:d8:87:7f:3d:24:ad:4a:8c:8f:
45:c5:72:5a:a9:ad:8b:53:ea:08:4e:43:e2:4d:a3:7d:a1:98:
68:6e:95:de:53:5b:c9:29:9d:e2:76:51:99:84:c3:03:1f:ee:
d7:ef:5d:e9:9a:d6:10:9a:e2:05:44:fd:ac:c3:49:9a:03:63:
7c:e0:e1:12:3f:08:83:17:90:31:26:16:5d:69:41:f6:08:f9:
97:a8:85:f4:28:cc:37:ba:e9:72:e3:c7:e4:68:43:c6:a2:bf:
92:3d:ec:cc
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgISAZruHez7ylEpQ9jkfPyiXaTiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjUxMjA1MTA0NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzFhOWUxOGFiZGZmZjkyMGU1MWFjODdjMGEyYmE2ZTEwY2M1NGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowhc651J+zUONYvsFSRz/metfL5h
wY9hWjKrt3uCrTuNR0oQwbBfiHJZgSvrosFO8v66iQMLUne6jUhF99bTdWpqT9dO
EnhA7Q+LuRenVBITQd6HiEpTOT66AbGR6WSMS+mktwe+whRp/+mfZSdrSOXz7pju
JTi8RqgkREMZMgxtGXC4GjfHZ4g6yaNpBRnP2cAJMX+604dwtEJ/JxYGX1G1NKlR
4n5j0XUuJdN9E1ihdekgnBOoR6Lu7nm8+djA0lbKMj+/WG7BedF5b0Dptrd+JCzh
C20kiyF4POwo9p28ZjXQ8FYmAf1sjK6BPvSnQ/UghWFzfibHobYqfLwLFQIDAQAB
o4ICZTCCAmEwHQYDVR0OBBYEFFManhir3/+SDlGsh8Cium4QzFSlMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvVXhxZUdLdmZfNUlPVWF5SHdLSzZiaERNVktVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajBoBAIAATBiAwQAPsBuAwQA
wueEAwQAwueHMAwDBADC54kDBADC54oDBADC54wDBADC544DBADC55QwDAMEAMLn
lwMEAMLnmjAMAwQBwufGAwQCwufIMAwDBALC59QDBADC59YDBAHC594wDQYJKoZI
hvcNAQELBQADggEBAIX6aGb443OUSJ/CdluoPc6xIO/DwEYtP4dkIZqvnLDGwJDH
ctZz1pZoVrObnboAxHK0a4eIIFcVmm8xW5BpVZE7j9zPsmy6Gi7qs/QfWAU1tIgE
TksLTXP6zwvXcFyMeYinLlGXUC0Zy/6QHGWhW2zoA/YLNkL4d+t2oow6dRdHIbwC
eLXY+1vw2W6HAhH0g5kDfZtpx2bpVdiHfz0krUqMj0XFclqprYtT6ghOQ+JNo32h
mGhuld5TW8kpneJ2UZmEwwMf7tfvXema1hCa4gVE/azDSZoDY3zg4RI/CIMXkDEm
Fl1pQfYI+ZeohfQozDe66XLjx+RoQ8aiv5I97Mw=
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:06:03 2025 by rpki-client