This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/ux64x-iG-RIiMC28cG1MXnvTlG8.roa File: ux64x-iG-RIiMC28cG1MXnvTlG8.roa (raw, json) Hash identifier: BYFtMvhjulHNkOE6Oci/AgVAG/FMD/15DLpBK0+ttvQ= Subject key identifier: BB:1E:B8:C7:E8:86:F9:12:22:30:2D:BC:70:6D:4C:5E:7B:D3:94:6F Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Certificate serial: 019AE42B85E4758BF5699A393C452DFDA03B Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/ux64x-iG-RIiMC28cG1MXnvTlG8.roa Signing time: Wed 03 Dec 2025 12:24:08 +0000 ROA not before: Wed 03 Dec 2025 12:24:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 87.254.2.0/24 maxlen: 24 87.254.10.0/24 maxlen: 24 87.254.11.0/24 maxlen: 24 87.254.18.0/23 maxlen: 24 87.254.22.0/24 maxlen: 24 87.254.29.0/24 maxlen: 24 217.25.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:2b:85:e4:75:8b:f5:69:9a:39:3c:45:2d:fd:a0:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4 Validity Not Before: Dec 3 12:24:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bb1eb8c7e886f91222302dbc706d4c5e7bd3946f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ba:86:32:27:10:02:8d:2c:e4:07:39:6a:8d: df:fe:f2:b5:83:1b:32:68:19:70:c7:19:21:03:ad: be:1f:15:8c:7e:96:a0:5f:0f:cd:c2:88:a4:70:bf: 79:da:6e:b6:67:dc:29:ef:09:99:ff:f2:75:3d:67: cf:0c:ae:0c:ae:14:9f:a7:d6:18:88:79:84:cd:6d: 3a:15:77:9b:94:b9:af:59:dc:84:f1:fc:3b:76:19: ca:fe:3a:33:44:fd:e9:14:f7:e0:e6:3c:1a:ea:bd: 8a:e7:35:a4:7e:3e:f8:7b:27:99:ec:5f:99:23:5a: 2c:35:03:a2:6a:ac:e0:41:fd:80:70:21:02:5c:71: 68:d4:98:43:b6:88:2f:50:a7:12:30:fd:52:ed:58: 9b:a6:41:ef:aa:51:03:c6:f6:d7:44:ac:18:ea:e9: 04:fa:ab:11:3e:03:61:68:e8:14:6f:4c:43:5c:89: a8:04:52:73:32:e2:f7:7d:31:97:e6:d8:7e:05:28: d1:db:c6:8f:3e:44:8b:a0:9c:48:f5:71:99:b6:2b: bf:76:21:87:72:f3:8e:f9:30:4e:25:05:43:b6:b9: cf:d3:20:2e:b3:6a:d8:6b:bf:25:64:55:20:4c:57: 13:c2:ec:d1:ba:ef:49:f2:c9:0d:67:0b:7d:67:54: 98:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1E:B8:C7:E8:86:F9:12:22:30:2D:BC:70:6D:4C:5E:7B:D3:94:6F X509v3 Authority Key Identifier: keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/ux64x-iG-RIiMC28cG1MXnvTlG8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.254.2.0/24 87.254.10.0/23 87.254.18.0/23 87.254.22.0/24 87.254.29.0/24 217.25.3.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:54:c1:0b:b6:eb:93:35:3a:1a:6f:42:bd:ff:b7:8b:90:57: eb:4b:71:e6:24:8d:50:bf:4b:5a:1a:fd:f5:d3:eb:2a:76:df: a6:a1:b4:c9:36:44:70:1d:6c:f3:70:2a:7a:ec:a7:1b:cd:cd: 38:b9:78:90:19:c2:4c:a9:b0:13:6e:c5:21:df:ad:95:1f:a7: 58:73:23:16:fd:9e:11:a5:85:51:e1:3d:a0:81:31:a0:9c:89: e7:d4:46:56:7b:39:e4:c8:a9:9e:90:dc:27:53:8c:9d:d3:94: 58:a0:4c:db:b9:b7:b6:0b:bf:16:a8:0c:13:54:aa:a5:61:2d: 33:a1:67:a6:70:d9:21:b4:4c:d5:0f:0d:d9:95:ed:26:29:67: 6b:7f:bc:e6:72:d1:5e:9a:07:89:ac:78:0e:9a:16:3a:c7:bf: 3d:e2:8f:2d:26:13:9f:81:7c:22:10:3b:7c:c4:76:66:44:61: 3f:83:ed:71:78:0b:06:f9:11:18:67:5d:e0:b0:13:a9:7f:0d: 8e:af:69:c8:2c:12:10:86:ea:6c:8c:fd:2d:5c:37:7b:8f:4e: e1:f0:b6:74:be:d5:88:b0:00:e1:81:c6:ac:4a:ba:46:75:86: ca:55:c8:27:8b:39:9f:b2:c2:4a:6f:31:54:80:01:ad:99:d4: 41:2d:2e:20 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZrkK4XkdYv1aZo5PEUt/aA7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1 OGRjZDQwHhcNMjUxMjAzMTIyNDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjFlYjhjN2U4ODZmOTEyMjIzMDJkYmM3MDZkNGM1ZTdiZDM5NDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbqGMicQAo0s5Ac5ao3f/vK1gxsy aBlwxxkhA62+HxWMfpagXw/NwoikcL952m62Z9wp7wmZ//J1PWfPDK4MrhSfp9YY iHmEzW06FXeblLmvWdyE8fw7dhnK/jozRP3pFPfg5jwa6r2K5zWkfj74eyeZ7F+Z I1osNQOiaqzgQf2AcCECXHFo1JhDtogvUKcSMP1S7VibpkHvqlEDxvbXRKwY6ukE +qsRPgNhaOgUb0xDXImoBFJzMuL3fTGX5th+BSjR28aPPkSLoJxI9XGZtiu/diGH cvOO+TBOJQVDtrnP0yAus2rYa78lZFUgTFcTwuzRuu9J8skNZwt9Z1SY6wIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFLseuMfohvkSIjAtvHBtTF5705RvMB8GA1UdIwQY MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt NmZjZGNkNWFiNjYwLzEvdXg2NHgtaUctUklpTUMyOGNHMU1YbnZUbEc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAV/4CAwQB V/4KAwQBV/4SAwQAV/4WAwQAV/4dAwQA2RkDMA0GCSqGSIb3DQEBCwUAA4IBAQCO VMELtuuTNToab0K9/7eLkFfrS3HmJI1Qv0taGv310+sqdt+mobTJNkRwHWzzcCp6 7Kcbzc04uXiQGcJMqbATbsUh362VH6dYcyMW/Z4RpYVR4T2ggTGgnInn1EZWeznk yKmekNwnU4yd05RYoEzbube2C78WqAwTVKqlYS0zoWemcNkhtEzVDw3Zle0mKWdr f7zmctFemgeJrHgOmhY6x7894o8tJhOfgXwiEDt8xHZmRGE/g+1xeAsG+REYZ13g sBOpfw2Or2nILBIQhupsjP0tXDd7j07h8LZ0vtWIsADhgcasSrpGdYbKVcgnizmf ssJKbzFUgAGtmdRBLS4g -----END CERTIFICATE-----Generated at Sat Dec 6 09:48:17 2025 by rpki-client