This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/UyMuRFmaCk5x7XKTvKAf7rXw_p4.roa File: UyMuRFmaCk5x7XKTvKAf7rXw_p4.roa (raw, json) Hash identifier: L73FGhBPgjleo1+zJ19RP4Fe/K9eboVk+DpjFaSLBeY= Subject key identifier: 53:23:2E:44:59:9A:0A:4E:71:ED:72:93:BC:A0:1F:EE:B5:F0:FE:9E Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16 Certificate serial: 019B21F9FBF5EF4F089DF053FFEB1CF326A4 Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/UyMuRFmaCk5x7XKTvKAf7rXw_p4.roa Signing time: Mon 15 Dec 2025 12:26:29 +0000 ROA not before: Mon 15 Dec 2025 12:26:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48955 IP address blocks: 89.35.80.0/23 maxlen: 23 89.40.222.0/23 maxlen: 23 89.45.124.0/23 maxlen: 23 91.193.24.0/24 maxlen: 24 91.235.207.0/24 maxlen: 24 92.42.0.0/24 maxlen: 24 185.98.158.0/24 maxlen: 24 193.33.105.0/24 maxlen: 24 193.176.99.0/24 maxlen: 24 193.239.176.0/24 maxlen: 24 194.106.206.0/24 maxlen: 24 194.169.202.0/24 maxlen: 24 195.35.100.0/24 maxlen: 24 195.189.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:f9:fb:f5:ef:4f:08:9d:f0:53:ff:eb:1c:f3:26:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16 Validity Not Before: Dec 15 12:26:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=53232e44599a0a4e71ed7293bca01feeb5f0fe9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e7:b4:ed:ba:30:d8:57:24:b3:ca:2f:cc:69: 9b:bb:25:0b:75:d8:a8:d0:68:e5:8f:4e:bb:15:a0: 79:d3:87:00:4d:2e:af:91:e0:64:74:f6:ad:4c:c9: f8:b4:19:10:1f:a3:0e:99:6e:d8:3b:74:35:91:2e: 90:8c:9a:d6:e8:62:a6:96:ab:7a:2d:a7:55:07:c0: 14:37:38:28:b0:88:55:4d:c4:54:73:28:9b:b1:0c: f5:3d:64:02:11:79:b4:ab:96:82:cc:07:ee:5d:35: d8:ba:65:b5:4d:cf:94:37:75:f7:bb:80:a4:2c:b5: 2f:9b:14:bc:b0:ef:61:3c:2f:fb:d0:45:d3:35:0a: 76:a8:a2:d1:40:8a:f2:1d:ea:8e:7f:1b:69:97:01: e5:27:7f:e4:49:5c:83:35:86:c4:62:7c:d6:ae:52: 26:33:07:9c:60:b2:cb:55:f2:88:71:d1:bc:42:d4: f3:9e:18:37:03:c7:93:7a:f9:57:ac:d4:af:93:c7: d4:67:11:17:af:16:b9:b6:c2:ec:45:93:1c:0d:c7: 40:87:49:02:0a:67:5f:18:b1:04:ff:70:65:1a:af: e0:32:20:16:bd:fd:35:ec:ac:d0:d9:4b:e8:32:71: 0c:df:2a:ef:e4:fe:b8:56:11:80:51:91:05:57:b6: d8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:23:2E:44:59:9A:0A:4E:71:ED:72:93:BC:A0:1F:EE:B5:F0:FE:9E X509v3 Authority Key Identifier: keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/UyMuRFmaCk5x7XKTvKAf7rXw_p4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.35.80.0/23 89.40.222.0/23 89.45.124.0/23 91.193.24.0/24 91.235.207.0/24 92.42.0.0/24 185.98.158.0/24 193.33.105.0/24 193.176.99.0/24 193.239.176.0/24 194.106.206.0/24 194.169.202.0/24 195.35.100.0/24 195.189.156.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:d4:ff:26:9d:8d:ef:c8:16:27:46:10:13:86:c5:e3:09:bc: a1:0f:83:48:1c:a8:79:af:c5:49:1c:54:8d:23:70:4e:50:dd: 8a:d8:7d:f8:15:70:43:41:18:11:d2:a1:c7:4f:14:3c:6e:f3: 1e:14:e3:ed:0d:2c:34:fb:45:2f:92:c6:35:41:e2:90:69:d6: 10:78:4d:a8:45:9f:99:c9:07:3d:d2:2f:1a:e6:54:90:3a:96: 90:6c:85:6b:9c:7c:82:2b:cd:8d:12:2a:1f:bb:b5:e8:f8:a6: 26:ad:bd:c0:9b:ff:da:8d:86:45:c0:f2:f7:6d:dc:bf:ed:bc: d0:8d:56:6c:5a:5a:49:0b:90:a6:59:d8:15:d1:1f:c3:b0:ef: f1:9c:84:e1:a8:72:c9:a4:89:99:78:fd:14:0c:4d:b5:9e:e5: d5:d6:7f:2a:af:52:0b:b5:8c:48:4e:d6:36:02:cd:39:80:10: 78:6c:12:5b:97:27:f4:83:65:c7:06:16:c7:03:fb:c4:74:e5: 3a:7f:f6:6d:d2:81:e2:72:2c:59:f9:eb:af:81:59:fc:87:ec: 99:54:34:56:a5:30:a1:83:e7:4f:74:f7:ff:e2:de:56:f0:78: 0b:20:c1:4e:09:a3:84:3d:e1:4d:3c:8a:61:b0:de:18:a1:38: 50:a5:3a:ff -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZsh+fv1708InfBT/+sc8yakMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZTg4OGE3NmU5OTg1MWIwMWZiODZjZWM1MzdkNGQ4ZTYx MGRlMTYwHhcNMjUxMjE1MTIyNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzIzMmU0NDU5OWEwYTRlNzFlZDcyOTNiY2EwMWZlZWI1ZjBmZTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ee07bow2Fcks8ovzGmbuyULddio 0Gjlj067FaB504cATS6vkeBkdPatTMn4tBkQH6MOmW7YO3Q1kS6QjJrW6GKmlqt6 LadVB8AUNzgosIhVTcRUcyibsQz1PWQCEXm0q5aCzAfuXTXYumW1Tc+UN3X3u4Ck LLUvmxS8sO9hPC/70EXTNQp2qKLRQIryHeqOfxtplwHlJ3/kSVyDNYbEYnzWrlIm MwecYLLLVfKIcdG8QtTznhg3A8eTevlXrNSvk8fUZxEXrxa5tsLsRZMcDcdAh0kC CmdfGLEE/3BlGq/gMiAWvf017KzQ2UvoMnEM3yrv5P64VhGAUZEFV7bYxwIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFFMjLkRZmgpOce1yk7ygH+618P6eMB8GA1UdIwQY MBaAFEToiKdumYUbAfuGzsU31NjmEN4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84MmUyYmEtNDQyYy00MmIwLTkzMTUt YmMwZGJhOTMyYjM1LzEvVXlNdVJGbWFDazV4N1hLVHZLQWY3clh3X3A0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS84MmUyYmEtNDQyYy00MmIwLTkzMTUtYmMwZGJhOTMyYjM1 LzEvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQBWSNQAwQB WSjeAwQBWS18AwQAW8EYAwQAW+vPAwQAXCoAAwQAuWKeAwQAwSFpAwQAwbBjAwQA we+wAwQAwmrOAwQAwqnKAwQAwyNkAwQAw72cMA0GCSqGSIb3DQEBCwUAA4IBAQBO 1P8mnY3vyBYnRhAThsXjCbyhD4NIHKh5r8VJHFSNI3BOUN2K2H34FXBDQRgR0qHH TxQ8bvMeFOPtDSw0+0UvksY1QeKQadYQeE2oRZ+ZyQc90i8a5lSQOpaQbIVrnHyC K82NEiofu7Xo+KYmrb3Am//ajYZFwPL3bdy/7bzQjVZsWlpJC5CmWdgV0R/DsO/x nIThqHLJpImZeP0UDE21nuXV1n8qr1ILtYxITtY2As05gBB4bBJblyf0g2XHBhbH A/vEdOU6f/Zt0oHicixZ+euvgVn8h+yZVDRWpTChg+dPdPf/4t5W8HgLIMFOCaOE PeFNPIphsN4YoThQpTr/ -----END CERTIFICATE-----Generated at Tue Dec 16 09:21:00 2025 by rpki-client