This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/uisSBr6ghjQ7pqtBk6RxTr0jU4M.roa File: uisSBr6ghjQ7pqtBk6RxTr0jU4M.roa (raw, json) Hash identifier: tKpEQyO7QtsNWedY5Awj4bLBL8ot/Tw/yYR9I0s7bqM= Subject key identifier: BA:2B:12:06:BE:A0:86:34:3B:A6:AB:41:93:A4:71:4E:BD:23:53:83 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019B26BBA38AD7E206C5258959DDDAC5FA2B Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/uisSBr6ghjQ7pqtBk6RxTr0jU4M.roa Signing time: Tue 16 Dec 2025 10:36:29 +0000 ROA not before: Tue 16 Dec 2025 10:36:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 64267 IP address blocks: 79.98.245.0/24 maxlen: 24 185.221.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:bb:a3:8a:d7:e2:06:c5:25:89:59:dd:da:c5:fa:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Dec 16 10:36:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ba2b1206bea086343ba6ab4193a4714ebd235383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0e:fe:19:b5:e7:03:87:a2:b6:f7:9f:8c:cb: bf:4f:ca:d4:4c:b0:ec:4b:32:59:75:f3:ee:10:99: 30:1f:a8:cb:33:a7:8d:17:29:60:5f:7d:be:0b:61: 7b:61:91:78:95:25:55:8b:3b:2c:3a:17:b6:82:48: ed:d9:54:44:de:55:06:76:5d:ba:94:14:f5:7e:19: cc:5f:84:0c:0d:31:9c:ce:dd:d7:3c:96:82:80:92: be:54:57:0b:0c:c9:e9:34:a8:ff:95:96:65:08:eb: 32:6e:4b:4f:bc:2a:a7:07:c3:73:bd:f6:62:54:a6: e8:a0:9d:3a:53:38:f4:fc:04:72:3a:36:c9:55:b2: d9:45:e0:c6:19:2d:7e:2b:be:48:50:c7:11:3d:b5: d8:02:d6:ad:a7:d2:f6:20:b2:a5:3b:61:3b:9f:6a: 73:b5:7a:7f:e3:f0:a6:ed:99:8e:18:33:ca:3f:c1: e9:8f:e7:b0:e6:a7:fb:4a:f0:c1:75:d2:41:87:f3: 3e:73:83:8c:eb:0c:98:60:24:b3:3a:6e:70:4a:05: f9:6c:07:c8:b0:3e:92:61:2e:cd:b3:be:3b:7a:44: f2:61:6a:33:56:51:46:8d:f7:5b:23:31:27:0b:1e: c8:6c:cc:13:1f:a0:3e:1d:c5:fa:56:99:f4:f9:bc: 1e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:2B:12:06:BE:A0:86:34:3B:A6:AB:41:93:A4:71:4E:BD:23:53:83 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/uisSBr6ghjQ7pqtBk6RxTr0jU4M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.98.245.0/24 185.221.24.0/24 Signature Algorithm: sha256WithRSAEncryption 49:21:42:0d:e1:c2:c1:ce:ed:5a:7b:33:2e:43:66:78:ce:81: 43:1c:c8:11:0d:60:a7:a9:ca:ff:30:51:6f:5e:99:5c:50:3f: c6:96:5f:1f:2a:65:a9:4d:34:89:6d:e4:ae:dd:c8:ae:c1:17: 16:fb:0d:98:fe:2a:52:de:88:de:7b:e8:0b:77:50:4c:05:11: 9b:72:4e:1e:6c:bc:cf:2f:22:cc:d3:65:cd:be:ea:b1:ef:cf: 50:8f:3e:60:06:33:7a:88:ec:82:11:0e:29:81:48:9e:04:fd: bd:81:7c:54:83:65:c0:c7:a6:96:0d:36:dc:b2:6e:04:4c:81: 4d:59:3b:b7:2d:9e:8f:3c:e7:26:96:d0:94:a4:cf:10:f0:9e: 63:84:ae:fa:4f:e5:7b:33:67:83:b5:ea:a6:33:a4:c6:ba:97: 6e:a6:e5:69:89:e8:53:a0:cc:67:7c:28:3e:28:54:bb:b2:c9: e8:5d:52:0b:10:61:61:9c:8d:cb:4e:0e:d9:b7:8c:eb:4a:c2: 80:89:72:ac:59:d8:f6:2b:68:9e:9b:68:5f:59:37:3f:7f:65: 34:dc:fa:40:38:2b:44:a3:89:bf:91:01:d9:2b:00:ac:8a:e6: c6:27:20:ab:95:ca:53:c4:39:54:4b:6a:48:85:42:97:15:56: 56:0f:63:62 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsmu6OK1+IGxSWJWd3axforMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjUxMjE2MTAzNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTJiMTIwNmJlYTA4NjM0M2JhNmFiNDE5M2E0NzE0ZWJkMjM1MzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Q7+GbXnA4eitvefjMu/T8rUTLDs SzJZdfPuEJkwH6jLM6eNFylgX32+C2F7YZF4lSVVizssOhe2gkjt2VRE3lUGdl26 lBT1fhnMX4QMDTGczt3XPJaCgJK+VFcLDMnpNKj/lZZlCOsybktPvCqnB8NzvfZi VKbooJ06Uzj0/ARyOjbJVbLZReDGGS1+K75IUMcRPbXYAtatp9L2ILKlO2E7n2pz tXp/4/Cm7ZmOGDPKP8Hpj+ew5qf7SvDBddJBh/M+c4OM6wyYYCSzOm5wSgX5bAfI sD6SYS7Ns747ekTyYWozVlFGjfdbIzEnCx7IbMwTH6A+HcX6Vpn0+bwerQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLorEga+oIY0O6arQZOkcU69I1ODMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvdWlzU0JyNmdoalE3cHF0Qms2UnhUcjBqVTRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT2L1AwQA ud0YMA0GCSqGSIb3DQEBCwUAA4IBAQBJIUIN4cLBzu1aezMuQ2Z4zoFDHMgRDWCn qcr/MFFvXplcUD/Gll8fKmWpTTSJbeSu3ciuwRcW+w2Y/ipS3ojee+gLd1BMBRGb ck4ebLzPLyLM02XNvuqx789Qjz5gBjN6iOyCEQ4pgUieBP29gXxUg2XAx6aWDTbc sm4ETIFNWTu3LZ6PPOcmltCUpM8Q8J5jhK76T+V7M2eDteqmM6TGupdupuVpiehT oMxnfCg+KFS7ssnoXVILEGFhnI3LTg7Zt4zrSsKAiXKsWdj2K2iem2hfWTc/f2U0 3PpAOCtEo4m/kQHZKwCsiubGJyCrlcpTxDlUS2pIhUKXFVZWD2Ni -----END CERTIFICATE-----Generated at Wed Dec 17 18:07:02 2025 by rpki-client