This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/uNIkw6t3uZZfjC7mwfO-RlvNdzs.roa File: uNIkw6t3uZZfjC7mwfO-RlvNdzs.roa (raw, json) Hash identifier: gNASkgszeaveacGmk4j2FCwMOxhgqDVQXhG0Sb6l+bU= Subject key identifier: B8:D2:24:C3:AB:77:B9:96:5F:8C:2E:E6:C1:F3:BE:46:5B:CD:77:3B Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 019AE98F3A2F9DCF67E96002F2F508D979BF Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/uNIkw6t3uZZfjC7mwfO-RlvNdzs.roa Signing time: Thu 04 Dec 2025 13:31:09 +0000 ROA not before: Thu 04 Dec 2025 13:31:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213945 IP address blocks: 193.35.153.0/24 maxlen: 24 193.35.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:8f:3a:2f:9d:cf:67:e9:60:02:f2:f5:08:d9:79:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Dec 4 13:31:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b8d224c3ab77b9965f8c2ee6c1f3be465bcd773b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a5:58:d1:66:d5:e8:1f:61:a9:84:03:ba:6b: aa:eb:d7:ba:ce:f4:96:ba:07:a1:8d:cb:43:e6:8c: b5:29:25:f6:88:80:3c:9d:fa:3f:ae:bb:0d:eb:65: e0:91:3a:66:81:72:c6:44:64:1c:c0:58:25:6c:26: 6b:5c:b5:4e:c8:2f:ce:f6:df:5b:d9:de:f8:1a:e1: e4:ea:a7:dd:24:cc:8a:40:4f:d2:41:2f:61:e7:fa: 2c:e2:f6:48:b2:2d:c3:01:23:aa:0b:d0:38:d0:8f: fb:fd:39:e2:60:84:c2:8c:d3:02:f8:f3:35:6b:33: 6b:57:e6:2f:5b:ff:fe:8c:cb:28:20:93:af:cd:17: 87:1c:1b:f5:e4:84:0c:53:6e:0e:c6:2a:e8:07:78: 5c:97:5d:4d:ee:32:d9:80:17:95:5f:c9:a8:c0:65: 07:79:6e:16:f6:f5:5f:f7:a7:77:cd:88:dd:20:38: bb:5c:77:c8:32:98:90:39:54:41:45:ea:64:88:41: 24:7c:a9:59:81:a0:5c:42:be:1c:2d:3d:ba:c7:e9: ac:76:82:78:a6:7d:98:5e:06:06:03:e3:b1:3d:b4: 4f:0c:17:2d:bd:9a:2b:c2:a3:39:20:35:ff:52:4e: d3:7b:fd:bf:8c:0a:c9:9e:d8:5d:9a:1d:09:ac:97: fb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D2:24:C3:AB:77:B9:96:5F:8C:2E:E6:C1:F3:BE:46:5B:CD:77:3B X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/uNIkw6t3uZZfjC7mwfO-RlvNdzs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.35.153.0/24 193.35.155.0/24 Signature Algorithm: sha256WithRSAEncryption 44:9c:87:b9:f5:63:bc:ae:d9:41:a8:b9:a7:57:79:7c:9a:50: 84:c0:3b:45:e8:9e:e5:d3:2a:f9:4d:80:65:a8:6f:2c:c2:1a: a1:de:ad:9f:c9:36:4b:a7:9e:80:64:7a:8b:0c:ac:61:16:1c: 63:0e:a1:44:8e:13:17:ae:f4:67:b5:49:b4:a9:f9:cb:b7:5f: 71:da:16:43:fb:af:3c:f2:ae:e6:bd:e1:3d:3a:16:d2:19:9d: 78:6e:86:5c:a9:c8:de:28:a6:13:58:13:46:29:6b:4f:39:19: 13:c7:91:ca:e6:72:2e:03:a7:52:d8:97:32:00:4d:cf:10:48: 07:c2:65:81:e3:8f:f1:e9:73:69:89:8f:c5:a2:23:67:84:a6: 4f:cf:08:62:4c:60:4b:a9:ee:61:fd:5b:4a:5a:5d:49:59:a2: 78:db:8d:3b:36:b1:6d:34:b8:63:eb:ab:4c:f2:03:0f:89:e9: 2e:13:94:0d:9e:39:13:4e:c3:b7:20:09:d3:ac:af:1b:b3:41: 59:9e:09:dd:d3:d7:35:74:08:82:50:2d:1d:26:9c:6e:13:8a: 75:08:81:20:de:5a:84:48:41:6b:a4:8b:9e:5f:f4:e9:53:6d: 35:46:e6:43:59:fa:69:49:58:ac:a6:eb:af:62:2d:5b:cf:fa: ad:88:a9:b3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrpjzovnc9n6WAC8vUI2Xm/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjUxMjA0MTMzMTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGQyMjRjM2FiNzdiOTk2NWY4YzJlZTZjMWYzYmU0NjViY2Q3NzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qVY0WbV6B9hqYQDumuq69e6zvSW ugehjctD5oy1KSX2iIA8nfo/rrsN62XgkTpmgXLGRGQcwFglbCZrXLVOyC/O9t9b 2d74GuHk6qfdJMyKQE/SQS9h5/os4vZIsi3DASOqC9A40I/7/TniYITCjNMC+PM1 azNrV+YvW//+jMsoIJOvzReHHBv15IQMU24OxiroB3hcl11N7jLZgBeVX8mowGUH eW4W9vVf96d3zYjdIDi7XHfIMpiQOVRBRepkiEEkfKlZgaBcQr4cLT26x+msdoJ4 pn2YXgYGA+OxPbRPDBctvZorwqM5IDX/Uk7Te/2/jArJnthdmh0JrJf7sQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLjSJMOrd7mWX4wu5sHzvkZbzXc7MB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEvdU5Ja3c2dDN1WlpmakM3bXdmTy1SbHZOZHpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwSOZAwQA wSObMA0GCSqGSIb3DQEBCwUAA4IBAQBEnIe59WO8rtlBqLmnV3l8mlCEwDtF6J7l 0yr5TYBlqG8swhqh3q2fyTZLp56AZHqLDKxhFhxjDqFEjhMXrvRntUm0qfnLt19x 2hZD+6888q7mveE9OhbSGZ14boZcqcjeKKYTWBNGKWtPORkTx5HK5nIuA6dS2Jcy AE3PEEgHwmWB44/x6XNpiY/FoiNnhKZPzwhiTGBLqe5h/VtKWl1JWaJ42407NrFt NLhj66tM8gMPiekuE5QNnjkTTsO3IAnTrK8bs0FZngnd09c1dAiCUC0dJpxuE4p1 CIEg3lqESEFrpIueX/TpU201RuZDWfppSVispuuvYi1bz/qtiKmz -----END CERTIFICATE-----Generated at Sat Dec 6 14:40:37 2025 by rpki-client