This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/uWa9q8hhFLQBwtEdCY-J-HldeVI.roa File: uWa9q8hhFLQBwtEdCY-J-HldeVI.roa (raw, json) Hash identifier: qi164QlIJqIYcJzoI+w0sp/YonON5yVajdLiPkavSGU= Subject key identifier: B9:66:BD:AB:C8:61:14:B4:01:C2:D1:1D:09:8F:89:F8:79:5D:79:52 Certificate issuer: /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736 Certificate serial: 019AD507C7C8A444447450EE422DB7751344 Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/uWa9q8hhFLQBwtEdCY-J-HldeVI.roa Signing time: Sun 30 Nov 2025 13:50:48 +0000 ROA not before: Sun 30 Nov 2025 13:50:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48108 IP address blocks: 31.222.227.0/24 maxlen: 24 176.53.146.0/23 maxlen: 23 185.235.230.0/24 maxlen: 24 2001:678:e30::/48 maxlen: 48 2a0a:2e80::/32 maxlen: 32 2a0a:2e81::/32 maxlen: 32 2a0a:2e81::/36 maxlen: 36 2a0a:2e82::/32 maxlen: 32 2a11:7e40::/48 maxlen: 48 2a11:7e40:1::/48 maxlen: 48 2a11:7e40:2::/48 maxlen: 48 2a11:7e40:3::/48 maxlen: 48 2a11:7e40:4::/48 maxlen: 48 2a11:7e46::/32 maxlen: 32 2a11:7e47:1000::/48 maxlen: 48 2a11:7e47:2000::/48 maxlen: 48 2a11:7e47:3000::/48 maxlen: 48 2a11:7e47:4000::/48 maxlen: 48 2a11:7e47:5000::/48 maxlen: 48 2a11:7e47:6000::/48 maxlen: 48 2a11:7e47:7000::/48 maxlen: 48 2a11:7e47:8000::/48 maxlen: 48 2a11:7e47:9000::/48 maxlen: 48 2a11:7e47:a000::/48 maxlen: 48 2a11:7e47:b000::/48 maxlen: 48 2a11:8480::/32 maxlen: 32 2a11:8481::/32 maxlen: 32 2a11:8482::/32 maxlen: 32 2a11:8485::/32 maxlen: 32 2a12:6702::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d5:07:c7:c8:a4:44:44:74:50:ee:42:2d:b7:75:13:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736 Validity Not Before: Nov 30 13:50:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b966bdabc86114b401c2d11d098f89f8795d7952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bc:fe:ed:13:32:d4:a3:92:cc:2f:a0:22:13: 6e:9c:34:74:8e:1e:36:47:1a:a8:19:e4:16:42:f6: 7c:de:26:da:a2:19:a2:50:0e:7e:bf:52:1a:e5:e6: 94:3a:c6:8d:71:18:82:77:7f:32:ea:26:e8:9c:4d: 16:f8:62:b6:7d:97:d9:fe:84:ff:14:33:0f:8b:33: 26:86:7e:d5:13:c9:d8:76:ba:11:09:c4:4b:ff:6b: cd:fd:b2:c9:4e:7c:9f:d8:ba:e0:fc:ec:28:f7:53: a7:52:bf:01:dc:46:d9:53:04:b9:eb:04:a4:fb:3a: 04:ae:2f:53:4b:77:93:64:6b:57:56:0a:bc:ec:08: 83:b6:b9:21:93:ff:0c:20:31:5b:98:23:89:55:3b: 1d:0d:42:a2:93:24:f5:2f:c7:b0:68:79:f7:33:eb: 4b:77:f4:fc:77:7a:11:49:bb:b5:61:a0:2a:c1:e7: cb:31:d5:e1:1f:dd:67:e8:55:9e:78:b0:74:bc:8d: fe:b5:dc:f1:d9:0a:72:78:3f:e5:c6:8d:4a:a7:ea: 46:95:a5:0f:99:3c:0e:71:82:e3:86:0d:32:b0:87: 78:cc:c9:90:cc:8b:2f:19:9e:2c:b1:3f:ef:58:78: bf:bd:66:3c:58:eb:1f:2e:b7:89:9c:f5:23:49:b1: e9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:66:BD:AB:C8:61:14:B4:01:C2:D1:1D:09:8F:89:F8:79:5D:79:52 X509v3 Authority Key Identifier: keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/uWa9q8hhFLQBwtEdCY-J-HldeVI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.222.227.0/24 176.53.146.0/23 185.235.230.0/24 IPv6: 2001:678:e30::/48 2a0a:2e80::-2a0a:2e82:ffff:ffff:ffff:ffff:ffff:ffff 2a11:7e40::-2a11:7e40:4:ffff:ffff:ffff:ffff:ffff 2a11:7e46::/32 2a11:7e47:1000::/48 2a11:7e47:2000::/48 2a11:7e47:3000::/48 2a11:7e47:4000::/48 2a11:7e47:5000::/48 2a11:7e47:6000::/48 2a11:7e47:7000::/48 2a11:7e47:8000::/48 2a11:7e47:9000::/48 2a11:7e47:a000::/48 2a11:7e47:b000::/48 2a11:8480::-2a11:8482:ffff:ffff:ffff:ffff:ffff:ffff 2a11:8485::/32 2a12:6702::/32 Signature Algorithm: sha256WithRSAEncryption 6c:c4:c1:d2:08:3a:eb:d4:7f:43:6d:1f:06:ef:6d:9a:9d:ee: e4:68:ed:10:c0:75:d9:3d:5c:41:af:2d:df:ea:87:d1:9b:16: 83:c1:aa:3f:d5:3e:0d:6b:e3:1e:d2:c8:c8:b7:cf:ae:ad:39: 47:02:f1:29:3c:4e:4f:a9:b7:41:a9:3e:a5:c6:6b:0a:fc:bc: dc:68:96:60:1f:fc:18:e4:f7:a6:9b:f7:de:68:1f:93:df:12: 20:3e:99:cd:c9:ed:a9:7e:27:18:7c:58:cb:be:d8:42:5d:39: de:4e:7f:c5:92:80:11:cb:0c:ce:ab:18:d3:49:97:49:ab:be: 30:ac:15:3b:83:3b:f1:eb:6e:ba:d0:a9:3d:3c:f4:18:82:4f: 31:d9:96:1e:5b:0a:e7:bc:2d:04:4e:e7:da:10:0a:3d:9a:a5: 24:b9:15:1d:a9:b0:a9:c5:39:48:af:27:b4:27:35:f4:28:e9: 00:c5:0d:8c:53:b6:38:64:9e:de:75:8e:12:7d:3c:10:2c:c4: bf:2f:a8:18:77:50:40:76:70:96:8f:b0:8b:00:cb:a2:47:9f: 96:3c:b6:d8:57:d1:4d:87:44:de:45:9a:f3:83:3c:86:94:5a: cc:45:ca:b5:0c:93:fd:01:6f:ea:f8:cc:ec:3e:7c:8a:8e:d8: b8:ba:d3:f4 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgISAZrVB8fIpEREdFDuQi23dRNEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzNTAwMmJhMDg4ZDViZDA5YzE1NTNkY2VkNWIwYmYzOTA3 ZmY3MzYwHhcNMjUxMTMwMTM1MDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTY2YmRhYmM4NjExNGI0MDFjMmQxMWQwOThmODlmODc5NWQ3OTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7z+7RMy1KOSzC+gIhNunDR0jh42 RxqoGeQWQvZ83ibaohmiUA5+v1Ia5eaUOsaNcRiCd38y6ibonE0W+GK2fZfZ/oT/ FDMPizMmhn7VE8nYdroRCcRL/2vN/bLJTnyf2Lrg/Owo91OnUr8B3EbZUwS56wSk +zoEri9TS3eTZGtXVgq87AiDtrkhk/8MIDFbmCOJVTsdDUKikyT1L8ewaHn3M+tL d/T8d3oRSbu1YaAqwefLMdXhH91n6FWeeLB0vI3+tdzx2QpyeD/lxo1Kp+pGlaUP mTwOcYLjhg0ysId4zMmQzIsvGZ4ssT/vWHi/vWY8WOsfLreJnPUjSbHpNQIDAQAB o4IC1TCCAtEwHQYDVR0OBBYEFLlmvavIYRS0AcLRHQmPifh5XXlSMB8GA1UdIwQY MBaAFLNQAroIjVvQnBVT3O1bC/OQf/c2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczFBQ3VnaU5XOUNjRlZQYzdWc0w4NUJfOXpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mZTRiMDYtZmMyZS00YmNiLTg3N2Ut YWYxZWYxZDdhZmI4LzEvdVdhOXE4aGhGTFFCd3RFZENZLUotSGxkZVZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9mZTRiMDYtZmMyZS00YmNiLTg3N2UtYWYxZWYxZDdhZmI4 LzEvczFBQ3VnaU5XOUNjRlZQYzdWc0w4NUJfOXpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHqBggrBgEFBQcBBwEB/wSB2jCB1zAYBAIAATASAwQAH97j AwQBsDWSAwQAuevmMIG6BAIAAjCBswMHACABBngOMDAOAwUHKgougAMFACoKLoIw EAMFBioRfkADBwAqEX5AAAQDBQAqEX5GAwcAKhF+RxAAAwcAKhF+RyAAAwcAKhF+ RzAAAwcAKhF+R0AAAwcAKhF+R1AAAwcAKhF+R2AAAwcAKhF+R3AAAwcAKhF+R4AA AwcAKhF+R5AAAwcAKhF+R6AAAwcAKhF+R7AAMA4DBQcqEYSAAwUAKhGEggMFACoR hIUDBQAqEmcCMA0GCSqGSIb3DQEBCwUAA4IBAQBsxMHSCDrr1H9DbR8G722ane7k aO0QwHXZPVxBry3f6ofRmxaDwao/1T4Na+Me0sjIt8+urTlHAvEpPE5PqbdBqT6l xmsK/LzcaJZgH/wY5Pemm/feaB+T3xIgPpnNye2pficYfFjLvthCXTneTn/FkoAR ywzOqxjTSZdJq74wrBU7gzvx62660Kk9PPQYgk8x2ZYeWwrnvC0ETufaEAo9mqUk uRUdqbCpxTlIrye0JzX0KOkAxQ2MU7Y4ZJ7edY4SfTwQLMS/L6gYd1BAdnCWj7CL AMuiR5+WPLbYV9FNh0TeRZrzgzyGlFrMRcq1DJP9AW/q+MzsPnyKjti4utP0 -----END CERTIFICATE-----Generated at Sat Dec 6 15:38:50 2025 by rpki-client