This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/UIsDYXv4jaCGUHj3SDBKGrn-TJM.roa File: UIsDYXv4jaCGUHj3SDBKGrn-TJM.roa (raw, json) Hash identifier: cfx5VG/AEqP8NMaOBqVctXkelvdIOqGDstY0ytuNLZE= Subject key identifier: 50:8B:03:61:7B:F8:8D:A0:86:50:78:F7:48:30:4A:1A:B9:FE:4C:93 Certificate issuer: /CN=208b221700b281f823e322a32221a867e5b079a6 Certificate serial: 019B0DEE73E54511CD8D93EAA019DC512B54 Authority key identifier: 20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/UIsDYXv4jaCGUHj3SDBKGrn-TJM.roa Signing time: Thu 11 Dec 2025 15:01:29 +0000 ROA not before: Thu 11 Dec 2025 15:01:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 3320 IP address blocks: 194.76.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.mft rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:ee:73:e5:45:11:cd:8d:93:ea:a0:19:dc:51:2b:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208b221700b281f823e322a32221a867e5b079a6 Validity Not Before: Dec 11 15:01:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=508b03617bf88da0865078f748304a1ab9fe4c93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7f:be:b3:af:0f:10:a8:25:6f:14:cd:f7:7f: f2:29:f7:af:f6:bf:a4:ee:4b:1a:79:5b:d0:71:8a: 9d:45:ba:11:4f:e4:cb:1f:ad:01:4f:1f:8a:d0:5e: 63:f2:11:da:69:94:70:12:f2:c4:c7:39:c0:fa:9b: 4a:bd:e4:7e:be:03:bb:9a:fb:7d:24:83:1b:bb:b2: 8d:b3:d8:64:62:5b:0f:0b:6d:66:a1:24:1b:db:03: 4b:a5:f9:86:69:90:43:1e:be:c5:84:f4:8c:cd:28: d7:86:87:df:ac:6b:c9:d7:49:b3:85:ac:cf:61:ce: 88:09:4e:d7:6f:d5:af:8c:98:c9:db:34:06:2f:57: a4:93:c5:46:24:5e:7b:a5:6e:9a:ed:c2:7b:24:18: ae:d4:bc:c3:01:c5:05:46:65:de:08:9e:2d:af:1d: dd:4d:c2:75:73:51:be:17:67:23:c3:27:2c:71:45: 6b:e9:b8:8e:c4:52:64:40:36:b9:63:0d:66:45:8c: 5c:94:5a:1c:4e:06:cc:e7:73:1b:37:38:0b:d3:34: d0:ea:5a:96:2e:92:34:00:94:cb:e8:12:3a:4d:33: 34:86:5c:06:17:97:60:dc:1a:fa:45:d3:7f:33:e8: c5:c1:8b:75:65:f3:b0:b0:81:89:f6:80:84:7d:77: f8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:8B:03:61:7B:F8:8D:A0:86:50:78:F7:48:30:4A:1A:B9:FE:4C:93 X509v3 Authority Key Identifier: keyid:20:8B:22:17:00:B2:81:F8:23:E3:22:A3:22:21:A8:67:E5:B0:79:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIsiFwCygfgj4yKjIiGoZ-WweaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/UIsDYXv4jaCGUHj3SDBKGrn-TJM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480355-dd6e-40ec-bcf6-9b2a9f46a483/1/IIsiFwCygfgj4yKjIiGoZ-WweaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.76.209.0/24 Signature Algorithm: sha256WithRSAEncryption 29:de:90:ea:dd:74:d8:b1:8f:b4:11:a7:18:79:15:f7:22:8a: 7d:f0:4f:88:2c:f3:e5:3f:81:39:3e:9d:77:f1:1e:d2:a7:ea: 66:4a:55:9e:cf:f6:82:ab:e4:5b:9b:63:37:e7:87:62:10:da: b5:f4:bf:af:35:d6:19:de:c3:81:69:74:c7:de:89:1c:7f:59: c0:b8:9b:d7:90:e7:38:0a:5c:b9:15:d1:6e:ac:42:01:25:72: 3d:c3:5d:ce:c2:b1:c8:f6:dd:4c:b3:13:c6:dd:db:92:81:3a: 5a:46:5e:8c:53:41:40:e6:f6:58:1c:b9:4d:44:01:65:2c:e0: 56:bd:b2:29:03:58:90:d2:34:be:3d:27:6d:46:cf:c6:28:ca: 8e:3c:b3:d9:6b:99:56:e4:82:de:a3:32:4a:14:92:72:a5:30: 9b:1f:06:62:3c:75:2a:c3:54:72:42:b3:64:c3:cf:df:3c:87: be:f1:77:ab:42:b4:e0:d3:7a:75:96:aa:4e:df:0f:54:3a:f9: 83:cb:a1:6a:8d:fd:9a:4c:81:36:8d:22:7e:c3:61:86:3c:24: 0b:79:eb:b1:cf:0b:ce:c1:fc:3c:af:2a:71:aa:10:1d:2f:10: ef:21:2b:65:dc:2e:d8:bf:76:47:b4:39:9a:35:3d:91:c7:67: 66:2c:97:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsN7nPlRRHNjZPqoBncUStUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOGIyMjE3MDBiMjgxZjgyM2UzMjJhMzIyMjFhODY3ZTVi MDc5YTYwHhcNMjUxMjExMTUwMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDhiMDM2MTdiZjg4ZGEwODY1MDc4Zjc0ODMwNGExYWI5ZmU0YzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH++s68PEKglbxTN93/yKfev9r+k 7ksaeVvQcYqdRboRT+TLH60BTx+K0F5j8hHaaZRwEvLExznA+ptKveR+vgO7mvt9 JIMbu7KNs9hkYlsPC21moSQb2wNLpfmGaZBDHr7FhPSMzSjXhoffrGvJ10mzhazP Yc6ICU7Xb9WvjJjJ2zQGL1ekk8VGJF57pW6a7cJ7JBiu1LzDAcUFRmXeCJ4trx3d TcJ1c1G+F2cjwycscUVr6biOxFJkQDa5Yw1mRYxclFocTgbM53MbNzgL0zTQ6lqW LpI0AJTL6BI6TTM0hlwGF5dg3Br6RdN/M+jFwYt1ZfOwsIGJ9oCEfXf4YwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFCLA2F7+I2ghlB490gwShq5/kyTMB8GA1UdIwQY MBaAFCCLIhcAsoH4I+MioyIhqGflsHmmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUlzaUZ3Q3lnZmdqNHlLaklpR29aLVd3ZWFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80ODAzNTUtZGQ2ZS00MGVjLWJjZjYt OWIyYTlmNDZhNDgzLzEvVUlzRFlYdjRqYUNHVUhqM1NEQktHcm4tVEpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi80ODAzNTUtZGQ2ZS00MGVjLWJjZjYtOWIyYTlmNDZhNDgz LzEvSUlzaUZ3Q3lnZmdqNHlLaklpR29aLVd3ZWFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwkzRMA0G CSqGSIb3DQEBCwUAA4IBAQAp3pDq3XTYsY+0EacYeRX3Iop98E+ILPPlP4E5Pp13 8R7Sp+pmSlWez/aCq+Rbm2M354diENq19L+vNdYZ3sOBaXTH3okcf1nAuJvXkOc4 Cly5FdFurEIBJXI9w13OwrHI9t1MsxPG3duSgTpaRl6MU0FA5vZYHLlNRAFlLOBW vbIpA1iQ0jS+PSdtRs/GKMqOPLPZa5lW5ILeozJKFJJypTCbHwZiPHUqw1RyQrNk w8/fPIe+8XerQrTg03p1lqpO3w9UOvmDy6Fqjf2aTIE2jSJ+w2GGPCQLeeuxzwvO wfw8rypxqhAdLxDvIStl3C7Yv3ZHtDmaNT2Rx2dmLJd8 -----END CERTIFICATE-----Generated at Tue Dec 16 06:18:38 2025 by rpki-client