This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/JUVcVjdBtjPI8y-f9rnNibK8zkY.roa File: JUVcVjdBtjPI8y-f9rnNibK8zkY.roa (raw, json) Hash identifier: 6oXfkYV491tM7NL0VRDyyRr5CGy7QuBKlofPdnTMl/U= Subject key identifier: 25:45:5C:56:37:41:B6:33:C8:F3:2F:9F:F6:B9:CD:89:B2:BC:CE:46 Certificate issuer: /CN=7d415bee222585f2d1aafbffba795031a45129c7 Certificate serial: 019A9BC34821F5CECF7ECAF20DB3AF39A834 Authority key identifier: 7D:41:5B:EE:22:25:85:F2:D1:AA:FB:FF:BA:79:50:31:A4:51:29:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/JUVcVjdBtjPI8y-f9rnNibK8zkY.roa Signing time: Wed 19 Nov 2025 10:57:37 +0000 ROA not before: Wed 19 Nov 2025 10:57:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204653 IP address blocks: 194.102.215.0/24 maxlen: 24 2001:678:110c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.crl rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:c3:48:21:f5:ce:cf:7e:ca:f2:0d:b3:af:39:a8:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d415bee222585f2d1aafbffba795031a45129c7 Validity Not Before: Nov 19 10:57:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=25455c563741b633c8f32f9ff6b9cd89b2bcce46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bc:c0:96:bb:aa:00:74:75:7a:76:45:7a:44: a0:14:bd:98:70:aa:17:c3:a2:e4:d0:27:b9:ea:30: 53:d2:03:98:60:bf:a5:7c:7e:d0:4d:1d:b6:1b:87: 53:ce:9d:db:fd:6e:26:28:55:ef:ea:0e:79:43:2c: cc:9d:f1:f6:7a:56:96:eb:7a:f9:8c:92:86:8b:39: a7:43:35:18:3f:d5:5d:af:6b:c6:2e:6c:2f:0e:ea: 55:77:af:60:4f:80:39:8f:ea:d3:81:57:47:db:a7: 8a:f7:48:a2:8e:b0:62:99:22:04:58:6c:f2:13:8c: 52:8a:86:02:f3:35:69:95:6d:1c:f9:ca:85:77:52: ef:46:51:05:92:4b:79:a3:f4:8f:0c:56:67:09:63: 16:83:ff:68:89:7e:29:08:40:97:af:2c:a5:67:f2: 5c:5c:94:9d:62:8d:a1:ef:9c:e0:93:35:2a:8e:e2: 30:46:53:71:86:7b:de:56:cb:ee:13:bf:88:ed:74: 7e:17:9d:ab:9d:bc:b8:d4:e5:26:22:3b:49:22:d2: b0:64:4b:00:1a:b9:37:18:4d:32:51:51:56:e1:b6: 96:67:b3:9f:c6:c2:d2:5b:79:f5:29:12:09:ba:ab: 02:a6:92:9f:b4:2e:e8:7f:91:a2:9d:40:3a:14:7a: ce:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:45:5C:56:37:41:B6:33:C8:F3:2F:9F:F6:B9:CD:89:B2:BC:CE:46 X509v3 Authority Key Identifier: keyid:7D:41:5B:EE:22:25:85:F2:D1:AA:FB:FF:BA:79:50:31:A4:51:29:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/JUVcVjdBtjPI8y-f9rnNibK8zkY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.102.215.0/24 IPv6: 2001:678:110c::/48 Signature Algorithm: sha256WithRSAEncryption 83:1d:af:ae:87:b1:2b:8c:d0:5e:d2:86:b6:92:97:46:16:93: 32:59:50:ff:34:cb:d9:a5:5f:1b:58:a6:0c:a7:be:83:02:f9: 31:91:e7:b3:75:06:30:75:20:a2:46:c1:59:f1:be:a3:dc:c8: 70:4b:54:05:2d:8a:bb:14:e0:47:80:61:0d:b2:c1:8a:3e:85: 69:61:87:25:94:ba:92:84:24:0e:e0:6d:7d:6c:75:a0:97:77: 28:39:f1:8a:53:63:d3:a2:44:ac:69:49:a4:7b:ca:96:fe:b3: d0:24:5e:fd:71:da:ee:2b:bb:6f:b3:e7:80:25:57:e5:2d:0b: 58:71:3c:b6:77:b3:41:95:ab:4d:ca:1c:14:1a:cc:88:cb:e5: 51:88:37:d4:75:e6:46:35:ad:c8:34:55:c7:94:69:19:ec:a1: 11:00:60:98:7f:75:70:f8:dc:ad:4f:ce:78:be:68:72:39:37: 30:b9:68:81:9c:cf:86:04:54:58:df:f9:ae:31:f9:7c:1b:f1: 57:01:d1:4f:8c:2f:45:34:01:87:5a:1d:8e:3c:a1:b0:77:11: 40:f0:67:9a:09:12:ae:94:df:c9:87:4e:20:61:0f:8c:2c:88: f5:12:f2:b0:fe:8a:02:77:fd:cb:00:cf:0a:6a:fe:40:94:5f: 1e:2c:6d:18 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZqbw0gh9c7PfsryDbOvOag0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNDE1YmVlMjIyNTg1ZjJkMWFhZmJmZmJhNzk1MDMxYTQ1 MTI5YzcwHhcNMjUxMTE5MTA1NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTQ1NWM1NjM3NDFiNjMzYzhmMzJmOWZmNmI5Y2Q4OWIyYmNjZTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrzAlruqAHR1enZFekSgFL2YcKoX w6Lk0Ce56jBT0gOYYL+lfH7QTR22G4dTzp3b/W4mKFXv6g55QyzMnfH2elaW63r5 jJKGizmnQzUYP9Vdr2vGLmwvDupVd69gT4A5j+rTgVdH26eK90iijrBimSIEWGzy E4xSioYC8zVplW0c+cqFd1LvRlEFkkt5o/SPDFZnCWMWg/9oiX4pCECXryylZ/Jc XJSdYo2h75zgkzUqjuIwRlNxhnveVsvuE7+I7XR+F52rnby41OUmIjtJItKwZEsA Grk3GE0yUVFW4baWZ7OfxsLSW3n1KRIJuqsCppKftC7of5GinUA6FHrOWQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCVFXFY3QbYzyPMvn/a5zYmyvM5GMB8GA1UdIwQY MBaAFH1BW+4iJYXy0ar7/7p5UDGkUSnHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlVGYjdpSWxoZkxScXZ2X3VubFFNYVJSS2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8yZDQ0MTktMmViNi00YTczLTk5ZjQt MmNkNGJmMjdiNjdkLzEvSlVWY1ZqZEJ0alBJOHktZjlybk5pYks4emtZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni8yZDQ0MTktMmViNi00YTczLTk5ZjQtMmNkNGJmMjdiNjdk LzEvZlVGYjdpSWxoZkxScXZ2X3VubFFNYVJSS2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwmbXMA8E AgACMAkDBwAgAQZ4EQwwDQYJKoZIhvcNAQELBQADggEBAIMdr66HsSuM0F7ShraS l0YWkzJZUP80y9mlXxtYpgynvoMC+TGR57N1BjB1IKJGwVnxvqPcyHBLVAUtirsU 4EeAYQ2ywYo+hWlhhyWUupKEJA7gbX1sdaCXdyg58YpTY9OiRKxpSaR7ypb+s9Ak Xv1x2u4ru2+z54AlV+UtC1hxPLZ3s0GVq03KHBQazIjL5VGIN9R15kY1rcg0VceU aRnsoREAYJh/dXD43K1Pzni+aHI5NzC5aIGcz4YEVFjf+a4x+Xwb8VcB0U+ML0U0 AYdaHY48obB3EUDwZ5oJEq6U38mHTiBhD4wsiPUS8rD+igJ3/csAzwpq/kCUXx4s bRg= -----END CERTIFICATE-----Generated at Sat Dec 6 05:42:10 2025 by rpki-client