This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/UOFRq0QjO6LafqX1sBCbk2kEM3A.roa File: UOFRq0QjO6LafqX1sBCbk2kEM3A.roa (raw, json) Hash identifier: QZheATXKq3EbyRelx+ry8csen44AxAPqz729UWJVvQY= Subject key identifier: 50:E1:51:AB:44:23:3B:A2:DA:7E:A5:F5:B0:10:9B:93:69:04:33:70 Certificate issuer: /CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6 Certificate serial: 019ABAC57A0C0980616A9B8A62A67D51584E Authority key identifier: 3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/UOFRq0QjO6LafqX1sBCbk2kEM3A.roa Signing time: Tue 25 Nov 2025 11:28:15 +0000 ROA not before: Tue 25 Nov 2025 11:28:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51559 IP address blocks: 80.253.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:c5:7a:0c:09:80:61:6a:9b:8a:62:a6:7d:51:58:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6 Validity Not Before: Nov 25 11:28:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=50e151ab44233ba2da7ea5f5b0109b9369043370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a4:dd:a1:45:2e:a4:84:35:5e:a9:46:d0:14: 06:64:51:fa:0f:5c:bb:0a:58:c0:a1:28:c8:a6:d1: 4a:fe:9b:ab:48:58:15:e8:02:b2:15:9c:fc:5b:b8: 57:d4:ec:d4:11:2c:4f:17:bd:ca:ac:61:ea:dd:ef: 0d:c5:42:ae:14:3b:d0:e4:1b:68:4c:83:9d:89:98: 6e:ea:f8:df:4a:67:d5:60:1d:f5:0f:af:37:e8:0c: bc:6c:16:98:fc:89:d7:67:32:12:d8:f1:f5:46:1a: ef:27:bf:b1:8e:2f:07:a4:a0:3e:d2:f0:a9:1c:5a: 4b:c5:a5:71:17:bc:55:e1:ab:97:6e:3c:d6:62:4b: b4:b7:7b:00:ff:68:a8:49:a8:62:75:d7:b8:fc:f9: 3d:02:5c:96:a0:95:4d:7d:49:b8:10:8c:a0:37:1a: cc:5f:73:63:d3:23:f7:8a:f5:17:35:d7:a0:19:77: c0:99:f0:2b:9f:6b:85:f8:17:06:e4:05:f7:8d:14: ce:d9:97:9e:92:f4:db:cf:4a:89:b9:a2:d7:c4:5d: 0b:b4:a0:8b:73:75:a9:aa:38:fc:be:a4:b3:86:cd: 2c:df:62:16:60:58:6e:79:41:97:c4:7f:7c:a5:e8: c5:81:9c:ff:bd:e4:27:25:aa:56:45:21:f0:38:42: f2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E1:51:AB:44:23:3B:A2:DA:7E:A5:F5:B0:10:9B:93:69:04:33:70 X509v3 Authority Key Identifier: keyid:3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/UOFRq0QjO6LafqX1sBCbk2kEM3A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.253.245.0/24 Signature Algorithm: sha256WithRSAEncryption 34:ca:21:b7:29:ba:73:1f:1b:3a:75:a7:77:e7:a7:ef:17:36: 98:98:75:c6:5d:49:b7:e8:10:a2:d1:a2:f9:3a:13:17:6c:36: ba:0f:ad:12:a6:9f:76:81:06:78:f3:03:d9:6f:cc:39:8b:7a: 49:b4:48:b6:ea:30:e8:ce:64:93:4b:36:90:99:2c:8c:64:1f: 75:56:47:c2:30:11:57:1c:b3:1f:c6:b3:7d:b6:07:63:b4:9c: c9:16:12:2e:21:f9:7d:78:59:a6:10:a5:14:16:50:1a:e3:fe: 74:b5:b3:c0:d9:bf:10:e8:2f:08:a8:c3:d7:10:fb:2f:ab:76: 73:60:df:d2:7c:f0:68:9f:ba:0a:f5:b7:bc:14:0b:65:53:c7: b6:41:42:b0:a9:48:52:81:eb:d8:65:77:85:a8:a4:72:2f:72: 26:a3:f7:9b:62:76:0f:f8:37:2c:e9:9c:ad:81:13:2d:f8:7c: c2:23:e3:74:20:ed:c1:09:49:1c:db:38:9e:d9:b2:e2:26:fa: 00:6f:b6:e7:c4:64:76:2b:72:8a:c2:5e:04:85:57:8b:dc:8f: 28:a0:3d:28:77:61:4c:e8:98:44:d9:65:34:c4:70:b9:b3:20: 2f:f7:de:42:82:02:1e:d7:32:6e:e8:f1:dd:4f:63:7d:a4:67: a9:b6:7a:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq6xXoMCYBhapuKYqZ9UVhOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlMjVhYjY5ODVmNzljYTlkZTA2ZTk4ZThiOWRhMjQ1ZDg1 NTlhYjYwHhcNMjUxMTI1MTEyODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGUxNTFhYjQ0MjMzYmEyZGE3ZWE1ZjViMDEwOWI5MzY5MDQzMzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6TdoUUupIQ1XqlG0BQGZFH6D1y7 CljAoSjIptFK/purSFgV6AKyFZz8W7hX1OzUESxPF73KrGHq3e8NxUKuFDvQ5Bto TIOdiZhu6vjfSmfVYB31D6836Ay8bBaY/InXZzIS2PH1RhrvJ7+xji8HpKA+0vCp HFpLxaVxF7xV4auXbjzWYku0t3sA/2ioSahidde4/Pk9AlyWoJVNfUm4EIygNxrM X3Nj0yP3ivUXNdegGXfAmfArn2uF+BcG5AX3jRTO2ZeekvTbz0qJuaLXxF0LtKCL c3Wpqjj8vqSzhs0s32IWYFhueUGXxH98pejFgZz/veQnJapWRSHwOELyOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFDhUatEIzui2n6l9bAQm5NpBDNwMB8GA1UdIwQY MBaAFD4lq2mF95yp3gbpjoudokXYVZq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGlXcmFZWDNuS25lQnVtT2k1MmlSZGhWbXJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8yMmQxNzUtYzcxZC00NjM3LWEwOTAt YjE5YWQ1NDU1YmZkLzEvVU9GUnEwUWpPNkxhZnFYMXNCQ2JrMmtFTTNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8yMmQxNzUtYzcxZC00NjM3LWEwOTAtYjE5YWQ1NDU1YmZk LzEvUGlXcmFZWDNuS25lQnVtT2k1MmlSZGhWbXJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUP31MA0G CSqGSIb3DQEBCwUAA4IBAQA0yiG3KbpzHxs6dad356fvFzaYmHXGXUm36BCi0aL5 OhMXbDa6D60Spp92gQZ48wPZb8w5i3pJtEi26jDozmSTSzaQmSyMZB91VkfCMBFX HLMfxrN9tgdjtJzJFhIuIfl9eFmmEKUUFlAa4/50tbPA2b8Q6C8IqMPXEPsvq3Zz YN/SfPBon7oK9be8FAtlU8e2QUKwqUhSgevYZXeFqKRyL3Imo/ebYnYP+Dcs6Zyt gRMt+HzCI+N0IO3BCUkc2zie2bLiJvoAb7bnxGR2K3KKwl4EhVeL3I8ooD0od2FM 6JhE2WU0xHC5syAv995CggIe1zJu6PHdT2N9pGeptno8 -----END CERTIFICATE-----Generated at Sat Dec 6 17:15:02 2025 by rpki-client