This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/UVLQdEVzCyzWr8gmAnIR5L8bZ8M.roa File: UVLQdEVzCyzWr8gmAnIR5L8bZ8M.roa (raw, json) Hash identifier: 80ZjgkuBuYFoOUtM2kR8I72/dY5e9DfrnOiXbP10Nbg= Subject key identifier: 51:52:D0:74:45:73:0B:2C:D6:AF:C8:26:02:72:11:E4:BF:1B:67:C3 Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 019AD72E0458A634BD191504DE2A367B0F9A Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/UVLQdEVzCyzWr8gmAnIR5L8bZ8M.roa Signing time: Sun 30 Nov 2025 23:51:48 +0000 ROA not before: Sun 30 Nov 2025 23:51:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 144.56.7.0/24 maxlen: 24 144.56.13.0/24 maxlen: 24 144.56.17.0/24 maxlen: 24 144.56.24.0/24 maxlen: 24 144.56.27.0/24 maxlen: 24 144.56.29.0/24 maxlen: 24 144.56.33.0/24 maxlen: 24 144.56.34.0/24 maxlen: 24 144.56.40.0/24 maxlen: 24 144.56.41.0/24 maxlen: 24 144.56.71.0/24 maxlen: 24 144.56.85.0/24 maxlen: 24 144.56.94.0/24 maxlen: 24 144.56.95.0/24 maxlen: 24 144.56.97.0/24 maxlen: 24 144.56.102.0/24 maxlen: 24 144.56.125.0/24 maxlen: 24 144.56.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d7:2e:04:58:a6:34:bd:19:15:04:de:2a:36:7b:0f:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Nov 30 23:51:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5152d07445730b2cd6afc826027211e4bf1b67c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bb:bf:74:d6:85:8e:d5:51:16:4b:18:8f:81: c6:aa:63:dd:63:da:67:79:fe:06:85:21:2f:5f:60: 05:3a:7f:77:df:49:34:c9:75:b4:e4:a6:f1:e0:be: 81:70:b4:96:c4:45:f1:d0:7f:21:53:9c:c1:ac:31: 62:ea:9f:87:3a:9e:9f:42:c3:35:7c:2f:a0:e2:f3: 4a:cf:15:a6:2c:f5:bf:6d:28:6e:41:7e:7f:3d:c4: 70:7d:4b:8e:4c:08:b4:dd:cb:2d:a3:b4:7b:e7:54: ac:ed:43:8d:a5:cb:21:d6:61:4f:55:c8:39:7e:b3: 75:38:f3:bb:88:bd:d2:4a:46:4e:5b:4f:24:01:2b: 35:70:3e:2c:d3:a6:bb:c4:ea:44:24:c2:97:2b:96: a4:8a:74:37:64:00:fb:fe:7d:ff:da:a3:86:f7:28: 2a:58:4e:57:6a:7d:45:6a:98:18:7c:25:26:65:da: 39:42:ae:51:b1:e1:05:ac:89:b6:3e:78:32:ef:3c: 51:ac:d8:36:28:b1:c0:d3:61:e4:6c:9c:84:fb:c5: f0:c9:15:0b:84:c9:a0:f3:56:2d:9f:e7:06:9b:39: 25:5b:52:e7:bd:b8:4b:6c:eb:25:74:27:03:7d:30: 77:b3:a0:42:e6:34:ec:8a:32:7e:e0:08:23:98:ba: a5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:52:D0:74:45:73:0B:2C:D6:AF:C8:26:02:72:11:E4:BF:1B:67:C3 X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/UVLQdEVzCyzWr8gmAnIR5L8bZ8M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.56.7.0/24 144.56.13.0/24 144.56.17.0/24 144.56.24.0/24 144.56.27.0/24 144.56.29.0/24 144.56.33.0-144.56.34.255 144.56.40.0/23 144.56.71.0/24 144.56.85.0/24 144.56.94.0/23 144.56.97.0/24 144.56.102.0/24 144.56.125.0/24 144.56.129.0/24 Signature Algorithm: sha256WithRSAEncryption 28:1a:30:f5:4e:cb:89:07:72:bf:20:fb:b4:bb:2d:1a:3b:51: 7a:18:d1:03:c9:14:c4:e1:83:a6:cc:3b:31:c3:f2:75:bf:a8: d1:7c:87:c3:96:1a:5c:2f:a1:39:ac:3c:a1:d0:24:e6:0f:e2: 26:9a:e1:fb:c7:57:d5:1a:25:58:bb:c6:58:33:c8:2f:aa:21: 15:0c:16:bd:7b:ac:91:61:bb:71:26:56:3a:c1:33:b7:ec:5a: bc:32:3b:d3:8e:26:2b:bf:67:61:57:5f:a6:fd:3a:6b:8c:cf: 1d:60:c6:4f:29:14:08:99:b8:b5:6d:72:9b:ac:7d:07:79:a9: 2f:a3:4e:18:07:7c:86:0c:b4:0a:aa:33:e5:a5:49:eb:2d:ad: 16:0d:c3:43:b9:f5:48:9a:66:5d:ca:dd:52:4f:ac:1f:11:7d: 67:dd:fc:74:c3:43:3d:70:9a:2f:88:26:f4:90:b4:e9:9b:dc: 2e:82:f7:35:eb:ad:0b:c7:59:f4:05:9b:ba:e5:88:e4:6a:55: 50:14:2f:f4:98:f4:63:88:0e:0b:a3:a6:7d:9f:c1:43:fe:d2: 8e:52:7e:03:60:63:db:a4:1d:eb:da:45:95:88:e7:ff:ff:50: 87:56:ca:b4:6a:c5:5b:b3:69:d2:b5:62:0c:69:57:6a:9d:ad: be:e1:b1:f6 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgISAZrXLgRYpjS9GRUE3io2ew+aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjUxMTMwMjM1MTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTUyZDA3NDQ1NzMwYjJjZDZhZmM4MjYwMjcyMTFlNGJmMWI2N2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbu/dNaFjtVRFksYj4HGqmPdY9pn ef4GhSEvX2AFOn9330k0yXW05Kbx4L6BcLSWxEXx0H8hU5zBrDFi6p+HOp6fQsM1 fC+g4vNKzxWmLPW/bShuQX5/PcRwfUuOTAi03csto7R751Ss7UONpcsh1mFPVcg5 frN1OPO7iL3SSkZOW08kASs1cD4s06a7xOpEJMKXK5akinQ3ZAD7/n3/2qOG9ygq WE5Xan1FapgYfCUmZdo5Qq5RseEFrIm2Pngy7zxRrNg2KLHA02HkbJyE+8XwyRUL hMmg81Ytn+cGmzklW1LnvbhLbOsldCcDfTB3s6BC5jTsijJ+4AgjmLqlWQIDAQAB o4ICZTCCAmEwHQYDVR0OBBYEFFFS0HRFcwss1q/IJgJyEeS/G2fDMB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvVVZMUWRFVnpDeXpXcjhnbUFuSVI1TDhiWjhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajBoBAIAATBiAwQAkDgHAwQA kDgNAwQAkDgRAwQAkDgYAwQAkDgbAwQAkDgdMAwDBACQOCEDBACQOCIDBAGQOCgD BACQOEcDBACQOFUDBAGQOF4DBACQOGEDBACQOGYDBACQOH0DBACQOIEwDQYJKoZI hvcNAQELBQADggEBACgaMPVOy4kHcr8g+7S7LRo7UXoY0QPJFMThg6bMOzHD8nW/ qNF8h8OWGlwvoTmsPKHQJOYP4iaa4fvHV9UaJVi7xlgzyC+qIRUMFr17rJFhu3Em VjrBM7fsWrwyO9OOJiu/Z2FXX6b9OmuMzx1gxk8pFAiZuLVtcpusfQd5qS+jThgH fIYMtAqqM+WlSestrRYNw0O59UiaZl3K3VJPrB8RfWfd/HTDQz1wmi+IJvSQtOmb 3C6C9zXrrQvHWfQFm7rliORqVVAUL/SY9GOIDgujpn2fwUP+0o5SfgNgY9ukHeva RZWI5///UIdWyrRqxVuzadK1YgxpV2qdrb7hsfY= -----END CERTIFICATE-----Generated at Sat Dec 6 11:04:12 2025 by rpki-client