This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/uboHM6lisV5i3ZQuXAH4NeJJCeo.roa File: uboHM6lisV5i3ZQuXAH4NeJJCeo.roa (raw, json) Hash identifier: C9ApE0qpdkI/aZgY/NA5XsaQxuuVC+AqahXffhXQ+30= Subject key identifier: B9:BA:07:33:A9:62:B1:5E:62:DD:94:2E:5C:01:F8:35:E2:49:09:EA Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Certificate serial: 019B03FB7527E583CC060E21B68D1C5C96C7 Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/uboHM6lisV5i3ZQuXAH4NeJJCeo.roa Signing time: Tue 09 Dec 2025 16:39:29 +0000 ROA not before: Tue 09 Dec 2025 16:39:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 217.119.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:fb:75:27:e5:83:cc:06:0e:21:b6:8d:1c:5c:96:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Validity Not Before: Dec 9 16:39:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b9ba0733a962b15e62dd942e5c01f835e24909ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d1:fa:d4:ac:6e:f5:8b:bc:af:d4:cb:b5:c5: c8:63:0a:f8:d8:1c:45:94:4c:7d:da:43:03:f1:3b: f2:a6:f9:a1:e9:34:45:a2:77:f7:ce:00:3b:81:cc: d1:fa:d2:b4:28:c2:41:28:1d:4c:19:d1:c9:b5:7e: 01:79:c1:14:8e:4a:b9:77:f5:04:4d:96:33:78:ca: d2:57:61:b1:c6:28:3a:9b:b8:26:4c:95:a6:49:d2: b1:6b:ba:e7:e9:05:2d:cb:0f:93:11:37:7c:fe:04: 98:1a:44:dd:a0:ee:f2:17:36:15:57:7d:79:5e:cb: a1:39:23:d1:12:7f:3e:32:b3:04:5b:99:12:86:8f: 6b:f6:a9:7f:8e:2d:8a:f3:9b:44:25:d8:c2:5f:59: 0e:ac:2f:cf:1e:d1:0d:c4:0e:f6:02:0a:43:df:6a: ae:3f:ba:26:c5:02:55:90:f7:23:ff:ee:4b:84:a5: f7:4e:24:e1:68:f0:f0:5a:26:8a:da:cf:ea:09:67: a3:56:7e:d0:c5:63:27:a1:01:8d:19:7c:08:68:b9: f4:04:b4:26:72:35:ab:bc:9c:53:bb:39:51:88:c5: 86:20:8a:83:41:94:06:68:9a:ae:d5:6d:9a:99:9c: 8b:fc:9a:c4:e6:bd:07:a3:4d:6a:30:cd:00:dd:8e: d4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:BA:07:33:A9:62:B1:5E:62:DD:94:2E:5C:01:F8:35:E2:49:09:EA X509v3 Authority Key Identifier: keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/uboHM6lisV5i3ZQuXAH4NeJJCeo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.119.143.0/24 Signature Algorithm: sha256WithRSAEncryption 61:71:c1:99:f7:38:25:83:4b:3d:ab:cb:0c:85:31:0d:81:06: 0d:54:11:76:fc:da:98:fd:75:9b:5b:4c:93:f7:ed:57:ee:8a: 16:fa:57:ea:b1:ff:8a:38:f0:79:fd:50:0b:b2:ea:bf:3b:0a: 2b:49:87:bf:40:73:b3:0b:b1:6d:f5:eb:d8:a1:4f:ae:12:01: 57:b7:1f:37:50:2d:1a:8a:ef:f2:56:e2:54:d9:c3:45:d0:e1: bd:ad:5d:b7:28:96:f6:d8:ae:d7:81:34:a3:00:45:40:e0:67: df:25:b1:b1:f9:4c:07:b6:a6:c7:56:5f:4a:2f:80:03:f7:40: a4:69:b5:61:28:28:82:2d:a3:2d:a0:42:32:2c:0b:f7:38:23: 86:71:e9:45:e1:da:ed:c5:db:07:52:7f:ec:ab:5d:88:bf:39: e0:99:12:3b:16:e6:b5:6f:38:d7:be:94:11:37:c8:30:47:31: 75:ab:9c:da:a5:f2:6a:75:60:22:f8:f0:d1:c4:c2:6b:ba:39: 89:bd:88:49:d0:e5:2b:0e:bb:b4:df:58:15:51:d5:c9:41:c7: ac:c4:04:d9:4e:fd:03:5c:9d:9f:13:da:75:f8:d7:e7:e3:be: ff:b8:54:4a:8d:de:dc:9a:4a:37:bf:79:06:d0:fe:04:36:49: 76:96:ae:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsD+3Un5YPMBg4hto0cXJbHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh ZGFlNzUwHhcNMjUxMjA5MTYzOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWJhMDczM2E5NjJiMTVlNjJkZDk0MmU1YzAxZjgzNWUyNDkwOWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdH61Kxu9Yu8r9TLtcXIYwr42BxF lEx92kMD8Tvypvmh6TRFonf3zgA7gczR+tK0KMJBKB1MGdHJtX4BecEUjkq5d/UE TZYzeMrSV2Gxxig6m7gmTJWmSdKxa7rn6QUtyw+TETd8/gSYGkTdoO7yFzYVV315 XsuhOSPREn8+MrMEW5kSho9r9ql/ji2K85tEJdjCX1kOrC/PHtENxA72AgpD32qu P7omxQJVkPcj/+5LhKX3TiThaPDwWiaK2s/qCWejVn7QxWMnoQGNGXwIaLn0BLQm cjWrvJxTuzlRiMWGIIqDQZQGaJqu1W2amZyL/JrE5r0Ho01qMM0A3Y7U8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLm6BzOpYrFeYt2ULlwB+DXiSQnqMB8GA1UdIwQY MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt YmM2Nzk0ZTk1ZTVhLzEvdWJvSE02bGlzVjVpM1pRdVhBSDROZUpKQ2VvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XePMA0G CSqGSIb3DQEBCwUAA4IBAQBhccGZ9zglg0s9q8sMhTENgQYNVBF2/NqY/XWbW0yT 9+1X7ooW+lfqsf+KOPB5/VALsuq/OworSYe/QHOzC7Ft9evYoU+uEgFXtx83UC0a iu/yVuJU2cNF0OG9rV23KJb22K7XgTSjAEVA4GffJbGx+UwHtqbHVl9KL4AD90Ck abVhKCiCLaMtoEIyLAv3OCOGcelF4drtxdsHUn/sq12IvzngmRI7Fua1bzjXvpQR N8gwRzF1q5zapfJqdWAi+PDRxMJrujmJvYhJ0OUrDru031gVUdXJQcesxATZTv0D XJ2fE9p1+Nfn477/uFRKjd7cmko3v3kG0P4ENkl2lq4k -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:26 2025 by rpki-client