This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/UOQHKJxMF7C_9axA2ZXFxeIGRa4.roa File: UOQHKJxMF7C_9axA2ZXFxeIGRa4.roa (raw, json) Hash identifier: 1HCLCUjxNGGDZURuVB2yTjspaXZmBODEBg4gNoMhB8Q= Subject key identifier: 50:E4:07:28:9C:4C:17:B0:BF:F5:AC:40:D9:95:C5:C5:E2:06:45:AE Certificate issuer: /CN=940ff880330af762ae6cc050de5f34b5f57b0b09 Certificate serial: 019B3118D5833C48C8181FF62A4E6A768533 Authority key identifier: 94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/UOQHKJxMF7C_9axA2ZXFxeIGRa4.roa Signing time: Thu 18 Dec 2025 10:54:29 +0000 ROA not before: Thu 18 Dec 2025 10:54:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47868 IP address blocks: 31.177.24.0/21 maxlen: 21 94.125.216.0/21 maxlen: 21 2a00:db00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.mft rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:18:d5:83:3c:48:c8:18:1f:f6:2a:4e:6a:76:85:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940ff880330af762ae6cc050de5f34b5f57b0b09 Validity Not Before: Dec 18 10:54:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=50e407289c4c17b0bff5ac40d995c5c5e20645ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ed:b4:77:94:17:68:69:70:b9:11:68:e4:1a: f3:00:39:97:38:a9:07:47:94:ec:89:aa:ba:a4:2b: 2c:07:e6:0b:50:a4:a6:7b:17:b9:05:33:40:eb:ae: cc:d7:8c:06:a4:bf:ce:4b:d0:72:45:35:b2:17:28: bc:7b:8b:57:5b:a9:5b:a3:df:a7:6e:57:0f:66:ed: 2b:ba:c6:13:7c:f9:79:90:00:3b:7d:b0:d4:74:92: 4c:45:77:4c:6f:91:af:8f:35:c3:a0:51:93:ea:bf: 8e:d1:76:93:89:fd:d4:1b:b8:11:14:91:3a:58:53: 53:e0:3d:26:cb:ff:bd:7c:77:30:68:fa:38:05:47: 96:e6:7a:a9:9c:1d:a9:b4:f3:b3:2c:68:07:3f:79: c9:f3:23:31:18:f4:73:08:5f:12:c3:9f:08:ac:b4: d0:33:bd:cf:fb:c1:7f:83:78:36:b4:b3:59:7e:e3: 47:0c:03:d9:33:b0:90:05:dc:a2:b7:cd:17:3e:e8: 15:96:f4:a3:f2:27:e3:d6:34:fe:78:89:d4:96:7c: e1:0f:f2:39:a3:75:5e:40:78:4c:e6:69:a6:ad:bd: fc:ea:7a:d6:08:5d:dc:00:ba:11:28:0d:ca:d5:90: 80:7c:36:17:80:c6:f7:13:d4:fe:59:23:63:20:0f: 93:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E4:07:28:9C:4C:17:B0:BF:F5:AC:40:D9:95:C5:C5:E2:06:45:AE X509v3 Authority Key Identifier: keyid:94:0F:F8:80:33:0A:F7:62:AE:6C:C0:50:DE:5F:34:B5:F5:7B:0B:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lA_4gDMK92KubMBQ3l80tfV7Cwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/UOQHKJxMF7C_9axA2ZXFxeIGRa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/23e16e-943e-4595-9530-a82f658a2aa1/1/lA_4gDMK92KubMBQ3l80tfV7Cwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.177.24.0/21 94.125.216.0/21 IPv6: 2a00:db00::/32 Signature Algorithm: sha256WithRSAEncryption 24:86:16:35:ba:d5:75:9b:8a:79:5b:54:3f:14:cd:c7:b7:a7: fc:39:30:7b:02:73:ff:30:a7:4e:74:1b:d4:8e:b3:d2:7c:71: 16:c9:d6:46:c1:2a:60:86:0e:44:69:e6:13:9f:f1:57:34:1a: 89:0d:94:43:26:f4:8e:40:be:ac:c1:8c:00:b1:2e:72:8d:dc: c5:d1:ab:01:f1:45:04:64:7f:1c:21:25:a1:e4:82:af:23:ef: e1:b1:09:85:f0:83:1b:c0:8c:95:c3:9d:aa:4a:20:7f:ab:53: 3f:2b:1c:97:bb:13:f5:03:ad:3d:c8:d9:62:ee:8a:a5:f3:ad: cd:fb:5a:90:fe:8b:c3:7d:9c:36:c5:d0:e8:91:9a:de:7b:14: ec:a9:b8:6f:87:4d:65:ae:bb:95:5c:9c:49:82:60:ab:3c:ed: 84:87:c7:3d:66:10:1e:75:47:96:e8:7d:da:52:bf:76:4a:92: 70:24:ef:3d:8a:20:25:d1:0b:2e:ea:7a:82:7e:2d:a3:c0:f8: 48:5a:40:6b:25:db:25:28:20:6a:fe:95:70:bf:c7:18:d7:e0: 26:1f:a2:d1:96:06:5d:c6:60:ff:6a:bc:be:14:28:9c:d6:1f: 87:a1:ee:88:39:56:5c:21:d5:3c:ba:cc:19:4c:36:06:6f:1a: e4:25:4b:38 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZsxGNWDPEjIGB/2Kk5qdoUzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MGZmODgwMzMwYWY3NjJhZTZjYzA1MGRlNWYzNGI1ZjU3 YjBiMDkwHhcNMjUxMjE4MTA1NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGU0MDcyODljNGMxN2IwYmZmNWFjNDBkOTk1YzVjNWUyMDY0NWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO20d5QXaGlwuRFo5BrzADmXOKkH R5Tsiaq6pCssB+YLUKSmexe5BTNA667M14wGpL/OS9ByRTWyFyi8e4tXW6lbo9+n blcPZu0rusYTfPl5kAA7fbDUdJJMRXdMb5GvjzXDoFGT6r+O0XaTif3UG7gRFJE6 WFNT4D0my/+9fHcwaPo4BUeW5nqpnB2ptPOzLGgHP3nJ8yMxGPRzCF8Sw58IrLTQ M73P+8F/g3g2tLNZfuNHDAPZM7CQBdyit80XPugVlvSj8ifj1jT+eInUlnzhD/I5 o3VeQHhM5mmmrb386nrWCF3cALoRKA3K1ZCAfDYXgMb3E9T+WSNjIA+TDQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFDkByicTBewv/WsQNmVxcXiBkWuMB8GA1UdIwQY MBaAFJQP+IAzCvdirmzAUN5fNLX1ewsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEFfNGdETUs5Mkt1Yk1CUTNsODB0ZlY3Q3drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yM2UxNmUtOTQzZS00NTk1LTk1MzAt YTgyZjY1OGEyYWExLzEvVU9RSEtKeE1GN0NfOWF4QTJaWEZ4ZUlHUmE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8yM2UxNmUtOTQzZS00NTk1LTk1MzAtYTgyZjY1OGEyYWEx LzEvbEFfNGdETUs5Mkt1Yk1CUTNsODB0ZlY3Q3drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDH7EYAwQD Xn3YMA0EAgACMAcDBQAqANsAMA0GCSqGSIb3DQEBCwUAA4IBAQAkhhY1utV1m4p5 W1Q/FM3Ht6f8OTB7AnP/MKdOdBvUjrPSfHEWydZGwSpghg5EaeYTn/FXNBqJDZRD JvSOQL6swYwAsS5yjdzF0asB8UUEZH8cISWh5IKvI+/hsQmF8IMbwIyVw52qSiB/ q1M/KxyXuxP1A609yNli7oql863N+1qQ/ovDfZw2xdDokZreexTsqbhvh01lrruV XJxJgmCrPO2Eh8c9ZhAedUeW6H3aUr92SpJwJO89iiAl0Qsu6nqCfi2jwPhIWkBr JdslKCBq/pVwv8cY1+AmH6LRlgZdxmD/ary+FCic1h+Hoe6IOVZcIdU8uswZTDYG bxrkJUs4 -----END CERTIFICATE-----Generated at Fri Dec 19 07:42:48 2025 by rpki-client