This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/Ue0VoaxzQbp5pWcmIQqTNf88acI.roa File: Ue0VoaxzQbp5pWcmIQqTNf88acI.roa (raw, json) Hash identifier: nMwMYaWE3GJUsoaF+nLk3RKN8uQwCY4CtiS6vpcsyvU= Subject key identifier: 51:ED:15:A1:AC:73:41:BA:79:A5:67:26:21:0A:93:35:FF:3C:69:C2 Certificate issuer: /CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0 Certificate serial: 019A9D57F0F6DF2C2916ABBBF477E9147637 Authority key identifier: 80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/Ue0VoaxzQbp5pWcmIQqTNf88acI.roa Signing time: Wed 19 Nov 2025 18:19:37 +0000 ROA not before: Wed 19 Nov 2025 18:19:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60345 IP address blocks: 46.18.110.0/24 maxlen: 24 82.115.211.0/24 maxlen: 24 91.228.135.0/24 maxlen: 24 2a11:8f00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9d:57:f0:f6:df:2c:29:16:ab:bb:f4:77:e9:14:76:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0 Validity Not Before: Nov 19 18:19:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=51ed15a1ac7341ba79a56726210a9335ff3c69c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2d:0d:48:6c:1e:5e:fa:9b:35:9e:e8:c6:37: 98:67:06:83:99:95:2d:3e:41:bb:77:59:fd:5c:6f: 98:53:bc:ad:a2:60:e4:62:74:24:26:5c:d5:bd:85: 0a:c9:8e:32:25:f9:54:f4:9a:bf:10:a0:a8:d6:8b: 5c:d3:59:d9:02:53:e7:29:a7:ca:00:90:2e:9c:04: 82:ae:85:c3:32:76:9c:a2:65:89:ee:2e:93:b0:95: 17:17:14:cf:93:4e:b0:3c:ca:ba:fc:ad:64:ce:2d: 0b:63:7c:2f:e1:1c:e8:51:18:be:5e:21:69:59:84: 08:89:17:8f:88:ec:e6:8b:1c:db:06:12:e2:1f:66: 18:2a:f1:31:b8:ee:34:cd:58:61:19:9c:ba:a3:a0: 30:a8:cf:57:72:8e:82:fb:f8:97:6d:6b:f5:f4:e1: f0:78:b2:23:b1:19:6a:93:c1:93:af:78:4b:9d:b2: 95:0a:4c:c0:f3:74:e7:55:00:30:2c:78:41:e2:e5: e2:f3:82:85:61:31:e1:a0:87:78:1c:50:61:75:2f: fc:04:d1:e6:5e:94:66:7d:e4:83:eb:33:32:f7:53: bd:85:c8:45:ef:4e:a8:92:34:27:7e:e9:6e:25:f1: bb:31:43:a3:55:c5:ef:5b:8a:b2:75:28:d4:e9:3e: 95:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:ED:15:A1:AC:73:41:BA:79:A5:67:26:21:0A:93:35:FF:3C:69:C2 X509v3 Authority Key Identifier: keyid:80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/Ue0VoaxzQbp5pWcmIQqTNf88acI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.18.110.0/24 82.115.211.0/24 91.228.135.0/24 IPv6: 2a11:8f00::/29 Signature Algorithm: sha256WithRSAEncryption 02:65:ec:83:2e:cb:fc:d0:66:1f:2d:61:ae:c1:c2:7a:9d:12: 69:a8:5e:7e:1e:f5:de:fe:6c:ea:1e:77:09:aa:35:cc:ca:66: bc:0a:57:0b:08:df:11:6a:3e:4a:df:c8:37:d9:62:2e:d1:28: a0:d4:ea:d9:81:1b:06:33:cc:c6:b6:ab:0f:ab:93:b7:3d:c2: ce:4f:10:0a:78:ad:db:01:4b:9c:df:77:6f:48:08:31:4a:42: 9a:28:b6:49:13:59:a0:89:f1:c8:94:2c:23:f3:17:42:18:c5: aa:86:bc:c8:11:93:38:37:cf:74:27:67:11:32:0c:64:c3:ab: 71:7c:a2:31:1d:25:42:30:b2:cf:7c:7b:bd:f9:eb:8c:07:a5: 96:e2:97:ec:8b:43:b8:60:f7:f3:e3:98:b2:1f:31:70:8e:cb: 99:36:b6:12:15:f6:65:7f:0c:3e:66:08:44:54:a1:19:d7:15: d9:89:64:8a:14:fe:c1:84:ec:ad:62:a5:23:87:a6:70:1c:45: 62:9a:9d:cc:d3:31:77:0a:6a:5e:1f:29:81:81:b5:31:5b:55: ba:29:cd:2f:ff:88:61:07:d0:67:8b:f9:d9:e0:77:46:0e:a7: 42:5e:86:75:16:12:75:70:bd:a6:4b:cf:1c:a6:bf:10:39:da: bd:17:3e:67 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZqdV/D23ywpFqu79HfpFHY3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwMDdhOTU4ZTZiM2RmZDc4ZGEzNTBiMTAzZDNiOTAyN2Uw ZmUzZjAwHhcNMjUxMTE5MTgxOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWVkMTVhMWFjNzM0MWJhNzlhNTY3MjYyMTBhOTMzNWZmM2M2OWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty0NSGweXvqbNZ7oxjeYZwaDmZUt PkG7d1n9XG+YU7ytomDkYnQkJlzVvYUKyY4yJflU9Jq/EKCo1otc01nZAlPnKafK AJAunASCroXDMnacomWJ7i6TsJUXFxTPk06wPMq6/K1kzi0LY3wv4RzoURi+XiFp WYQIiRePiOzmixzbBhLiH2YYKvExuO40zVhhGZy6o6AwqM9Xco6C+/iXbWv19OHw eLIjsRlqk8GTr3hLnbKVCkzA83TnVQAwLHhB4uXi84KFYTHhoId4HFBhdS/8BNHm XpRmfeSD6zMy91O9hchF706okjQnfuluJfG7MUOjVcXvW4qydSjU6T6V9wIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFFHtFaGsc0G6eaVnJiEKkzX/PGnCMB8GA1UdIwQY MBaAFIAHqVjms9/XjaNQsQPTuQJ+D+PwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0FlcFdPYXozOWVObzFDeEE5TzVBbjRQNF9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZTFiNWQtNzdiNS00M2I2LTlmMGEt M2UxNzFiZDVlZmMzLzEvVWUwVm9heHpRYnA1cFdjbUlRcVROZjg4YWNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZTFiNWQtNzdiNS00M2I2LTlmMGEtM2UxNzFiZDVlZmMz LzEvZ0FlcFdPYXozOWVObzFDeEE5TzVBbjRQNF9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQALhJuAwQA UnPTAwQAW+SHMA0EAgACMAcDBQMqEY8AMA0GCSqGSIb3DQEBCwUAA4IBAQACZeyD Lsv80GYfLWGuwcJ6nRJpqF5+HvXe/mzqHncJqjXMyma8ClcLCN8Raj5K38g32WIu 0Sig1OrZgRsGM8zGtqsPq5O3PcLOTxAKeK3bAUuc33dvSAgxSkKaKLZJE1mgifHI lCwj8xdCGMWqhrzIEZM4N890J2cRMgxkw6txfKIxHSVCMLLPfHu9+euMB6WW4pfs i0O4YPfz45iyHzFwjsuZNrYSFfZlfww+ZghEVKEZ1xXZiWSKFP7BhOytYqUjh6Zw HEVimp3M0zF3CmpeHymBgbUxW1W6Kc0v/4hhB9Bni/nZ4HdGDqdCXoZ1FhJ1cL2m S88cpr8QOdq9Fz5n -----END CERTIFICATE-----Generated at Sat Dec 6 14:54:24 2025 by rpki-client