This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/nUED803VQA3FQMxxixbYPvvT1fY.roa File: nUED803VQA3FQMxxixbYPvvT1fY.roa (raw, json) Hash identifier: 94UVai/ELIeCASHwbPKqhrh8AQ5arAyWotHfhfl12OU= Subject key identifier: 9D:41:03:F3:4D:D5:40:0D:C5:40:CC:71:8B:16:D8:3E:FB:D3:D5:F6 Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690 Certificate serial: 019AE02BA6343B064D074FE9F6C326F8F3CC Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/nUED803VQA3FQMxxixbYPvvT1fY.roa Signing time: Tue 02 Dec 2025 17:45:48 +0000 ROA not before: Tue 02 Dec 2025 17:45:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42375 IP address blocks: 2a09:f1c0::/29 maxlen: 29 2a09:f9c0::/32 maxlen: 32 2a09:f9c2::/32 maxlen: 32 2a09:f9c3::/32 maxlen: 32 2a0e:4780::/29 maxlen: 29 2a0e:4bc1::/32 maxlen: 32 2a0e:4bc2::/32 maxlen: 32 2a0e:5381::/32 maxlen: 32 2a0e:5643::/32 maxlen: 32 2a0e:5901::/32 maxlen: 32 2a0e:5902::/32 maxlen: 32 2a0e:5cc0::/32 maxlen: 32 2a0e:5cc1::/32 maxlen: 32 2a0e:5cc2::/32 maxlen: 32 2a0e:7340::/29 maxlen: 29 2a0e:8080::/32 maxlen: 32 2a0e:b1c0::/29 maxlen: 29 2a0e:ccc0::/32 maxlen: 32 2a0e:ccc1::/32 maxlen: 32 2a0e:ccc2::/32 maxlen: 32 2a0e:ffc0::/29 maxlen: 29 2a0f:4340::/29 maxlen: 29 2a0f:6fc1::/32 maxlen: 32 2a0f:6fc3::/32 maxlen: 32 2a0f:6fc4::/32 maxlen: 32 2a0f:b4c0::/32 maxlen: 32 2a0f:b4c1::/32 maxlen: 32 2a0f:b4c2::/32 maxlen: 32 2a0f:c080::/32 maxlen: 32 2a0f:c081::/32 maxlen: 32 2a14:e602::/32 maxlen: 32 2a14:e604::/32 maxlen: 32 2a14:e606::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e0:2b:a6:34:3b:06:4d:07:4f:e9:f6:c3:26:f8:f3:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690 Validity Not Before: Dec 2 17:45:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9d4103f34dd5400dc540cc718b16d83efbd3d5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ae:99:ee:52:89:a6:a4:84:d0:d6:bb:ab:7e: 06:55:61:f9:b3:23:96:ee:1b:af:16:8d:75:8d:29: 91:57:c8:ab:e9:65:a4:0d:f7:28:1e:2e:19:00:26: 35:5d:d3:a2:fa:6a:d8:6f:69:c7:d5:f1:6f:81:22: 7b:19:58:ae:51:9d:8f:cf:31:98:a9:4d:eb:c7:e9: f5:e9:92:3b:eb:14:68:10:4f:0b:9c:2c:18:81:12: 34:40:2e:a3:4e:11:b5:8d:5b:56:3c:0a:a3:2e:27: 56:f9:bf:d8:c7:9a:e5:8f:72:c9:4a:eb:52:29:f6: 57:f2:d1:8b:10:a7:a4:c5:1e:95:85:a0:1c:d6:8b: 9f:a2:a4:58:ec:54:d6:e8:b5:f6:8d:9f:a0:87:31: f2:73:89:b2:78:ba:e6:cc:d7:ed:ad:e2:03:d7:9b: 47:9b:7d:b3:c6:44:53:d0:48:61:5c:34:8b:e6:7f: 01:79:21:cc:9e:ac:f0:b5:a3:ae:43:11:a9:73:af: 10:6a:75:e1:2a:56:ce:30:2c:81:b7:88:b5:dc:ea: f8:61:11:b5:2a:50:b5:04:3d:92:d8:98:f5:92:39: 2c:ef:04:34:bb:f0:11:88:16:f3:37:10:01:74:a0: 7c:15:34:24:ad:77:67:0e:7f:bd:c7:60:ac:61:02: 7a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:41:03:F3:4D:D5:40:0D:C5:40:CC:71:8B:16:D8:3E:FB:D3:D5:F6 X509v3 Authority Key Identifier: keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/nUED803VQA3FQMxxixbYPvvT1fY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:f1c0::/29 2a09:f9c0::/32 2a09:f9c2::/31 2a0e:4780::/29 2a0e:4bc1::-2a0e:4bc2:ffff:ffff:ffff:ffff:ffff:ffff 2a0e:5381::/32 2a0e:5643::/32 2a0e:5901::-2a0e:5902:ffff:ffff:ffff:ffff:ffff:ffff 2a0e:5cc0::-2a0e:5cc2:ffff:ffff:ffff:ffff:ffff:ffff 2a0e:7340::/29 2a0e:8080::/32 2a0e:b1c0::/29 2a0e:ccc0::-2a0e:ccc2:ffff:ffff:ffff:ffff:ffff:ffff 2a0e:ffc0::/29 2a0f:4340::/29 2a0f:6fc1::/32 2a0f:6fc3::-2a0f:6fc4:ffff:ffff:ffff:ffff:ffff:ffff 2a0f:b4c0::-2a0f:b4c2:ffff:ffff:ffff:ffff:ffff:ffff 2a0f:c080::/31 2a14:e602::/32 2a14:e604::/32 2a14:e606::/32 Signature Algorithm: sha256WithRSAEncryption 02:fd:6d:4e:42:a7:63:34:6e:eb:23:4e:2e:b0:c2:1e:d9:bf: ca:cd:ff:31:44:2b:5a:19:05:28:82:23:b8:d2:82:77:81:08: 7f:82:99:1c:7a:e6:3a:08:aa:73:4e:e4:1f:49:e8:3e:7b:55: 93:5b:f3:1d:b6:c9:8e:ea:8c:74:f6:b5:fe:67:cb:79:73:f5: c8:05:4f:73:a8:85:0a:3f:47:1b:c4:5a:e7:7d:90:f4:91:c4: d7:e3:c9:81:95:d3:d0:dc:6e:0d:7f:8d:b1:6d:21:65:1b:df: f4:8e:0e:1c:bd:d7:5d:fb:c0:35:72:e8:5d:0b:64:36:c2:74: f6:7b:8a:30:7c:98:16:9f:ae:7b:ff:32:1b:74:76:9d:65:aa: 97:5e:d8:6a:77:b1:20:da:a3:87:fa:5c:5c:71:39:6d:3a:8f: 0b:51:83:bc:d7:22:3a:ce:8d:36:72:ee:57:ba:71:03:2b:cd: 3b:2d:17:ee:1a:1b:8a:66:37:6f:aa:c1:39:bf:9d:85:c9:03: a4:94:13:74:ef:69:ff:52:79:1f:e3:17:36:87:58:97:80:d3: 98:8b:99:1b:e9:b7:1d:be:ae:1e:8d:ae:49:6b:f6:3c:38:4b: 2a:62:7c:7c:73:ea:84:9f:11:7e:e3:21:14:e1:6e:b7:51:5b: 30:d3:c9:1f -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgISAZrgK6Y0OwZNB0/p9sMm+PPMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZDRkNDlkYTNlMTQ4NTVhN2I4ODM2MDNmZjE0OGMxYmIy MWY2OTAwHhcNMjUxMjAyMTc0NTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDQxMDNmMzRkZDU0MDBkYzU0MGNjNzE4YjE2ZDgzZWZiZDNkNWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK6Z7lKJpqSE0Na7q34GVWH5syOW 7huvFo11jSmRV8ir6WWkDfcoHi4ZACY1XdOi+mrYb2nH1fFvgSJ7GViuUZ2PzzGY qU3rx+n16ZI76xRoEE8LnCwYgRI0QC6jThG1jVtWPAqjLidW+b/Yx5rlj3LJSutS KfZX8tGLEKekxR6VhaAc1oufoqRY7FTW6LX2jZ+ghzHyc4myeLrmzNftreID15tH m32zxkRT0EhhXDSL5n8BeSHMnqzwtaOuQxGpc68QanXhKlbOMCyBt4i13Or4YRG1 KlC1BD2S2Jj1kjks7wQ0u/ARiBbzNxABdKB8FTQkrXdnDn+9x2CsYQJ6LQIDAQAB o4IC2DCCAtQwHQYDVR0OBBYEFJ1BA/NN1UANxUDMcYsW2D7709X2MB8GA1UdIwQY MBaAFAXU1J2j4UhVp7iDYD/xSMG7IfaQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8xYTNmOTEtMTViYy00ZWI4LTk3ZGQt NThmMWNiZjNjYWMzLzEvblVFRDgwM1ZRQTNGUU14eGl4YllQdnZUMWZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8xYTNmOTEtMTViYy00ZWI4LTk3ZGQtNThmMWNiZjNjYWMz LzEvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHtBggrBgEFBQcBBwEB/wSB3TCB2jCB1wQCAAIwgdADBQMq CfHAAwUAKgn5wAMFASoJ+cIDBQMqDkeAMA4DBQAqDkvBAwUAKg5LwgMFACoOU4ED BQAqDlZDMA4DBQAqDlkBAwUAKg5ZAjAOAwUGKg5cwAMFACoOXMIDBQMqDnNAAwUA Kg6AgAMFAyoOscAwDgMFBioOzMADBQAqDszCAwUDKg7/wAMFAyoPQ0ADBQAqD2/B MA4DBQAqD2/DAwUAKg9vxDAOAwUGKg+0wAMFACoPtMIDBQEqD8CAAwUAKhTmAgMF ACoU5gQDBQAqFOYGMA0GCSqGSIb3DQEBCwUAA4IBAQAC/W1OQqdjNG7rI04usMIe 2b/Kzf8xRCtaGQUogiO40oJ3gQh/gpkceuY6CKpzTuQfSeg+e1WTW/MdtsmO6ox0 9rX+Z8t5c/XIBU9zqIUKP0cbxFrnfZD0kcTX48mBldPQ3G4Nf42xbSFlG9/0jg4c vddd+8A1cuhdC2Q2wnT2e4owfJgWn657/zIbdHadZaqXXthqd7Eg2qOH+lxccTlt Oo8LUYO81yI6zo02cu5XunEDK807LRfuGhuKZjdvqsE5v52FyQOklBN072n/Unkf 4xc2h1iXgNOYi5kb6bcdvq4eja5Ja/Y8OEsqYnx8c+qEnxF+4yEU4W63UVsw08kf -----END CERTIFICATE-----Generated at Sat Dec 6 16:52:08 2025 by rpki-client