This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/uxv5-7Rkovcdr6oQ5HIcsyLXhFw.roa File: uxv5-7Rkovcdr6oQ5HIcsyLXhFw.roa (raw, json) Hash identifier: bmf7r/lnr8aPkEjOmBPWFHMJ7k6Z28feAqhka0AdSMM= Subject key identifier: BB:1B:F9:FB:B4:64:A2:F7:1D:AF:AA:10:E4:72:1C:B3:22:D7:84:5C Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 019AE81432358CB4C1AF993B4053DE7113D8 Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/uxv5-7Rkovcdr6oQ5HIcsyLXhFw.roa Signing time: Thu 04 Dec 2025 06:37:08 +0000 ROA not before: Thu 04 Dec 2025 06:37:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 31721 IP address blocks: 62.217.133.0/24 maxlen: 24 62.217.135.0/24 maxlen: 24 62.217.136.0/24 maxlen: 24 62.217.137.0/24 maxlen: 24 62.217.139.0/24 maxlen: 24 62.217.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:14:32:35:8c:b4:c1:af:99:3b:40:53:de:71:13:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Dec 4 06:37:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bb1bf9fbb464a2f71dafaa10e4721cb322d7845c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2f:de:eb:ab:7a:b0:2f:21:1b:9f:07:54:87: a9:60:69:70:88:77:7f:b3:06:41:d0:0f:83:4f:0a: e9:35:26:71:3e:70:8d:90:64:66:6a:99:9b:c3:99: 20:e5:13:d2:9a:a0:ea:f4:4d:3c:95:88:98:4f:54: 76:00:68:24:b7:80:ad:e5:e1:fc:c4:ae:ab:ed:88: 4e:49:ab:f6:1b:5f:56:e1:e0:24:02:17:57:39:34: e0:3f:e2:10:e8:9c:ca:35:94:8a:3e:98:bc:13:eb: e1:2c:3d:a9:b2:2d:2c:85:6b:33:f5:db:69:20:91: 3f:bf:f4:0d:ba:6f:14:1f:31:2d:6f:24:20:af:79: d3:eb:cb:ed:df:7d:eb:95:fa:2e:59:0c:d5:47:19: bd:54:1f:d1:be:01:27:0e:9e:de:0f:81:fc:b7:27: 3c:50:b0:61:3f:23:59:88:7c:51:be:53:4f:27:23: f4:8b:5b:ab:29:b9:be:34:f0:35:94:a4:04:0d:d2: 66:2a:75:77:fd:a4:19:89:f3:88:f6:3c:12:1c:c1: 3b:f1:6c:ce:78:d3:b2:f3:64:2f:19:49:60:2c:71: 85:a7:bf:d8:bd:e9:00:53:1c:d2:7c:60:76:a4:7e: f3:74:20:a6:49:6c:02:97:56:14:de:35:95:2e:89: 41:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1B:F9:FB:B4:64:A2:F7:1D:AF:AA:10:E4:72:1C:B3:22:D7:84:5C X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/uxv5-7Rkovcdr6oQ5HIcsyLXhFw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.217.133.0/24 62.217.135.0-62.217.137.255 62.217.139.0/24 62.217.143.0/24 Signature Algorithm: sha256WithRSAEncryption 48:50:5e:2f:74:a4:77:4d:b6:e1:5d:5b:ee:82:94:6d:4b:47: 9e:e1:6e:e6:b4:be:b9:67:ec:d2:d9:14:83:56:11:ef:f6:c0: 90:1b:48:67:bc:58:ee:f9:a8:62:e1:24:bd:75:ff:3f:ac:7c: 99:d0:0d:54:b6:ca:b0:d8:51:5a:25:fd:9e:38:46:55:20:1a: 34:4d:12:be:91:fe:8d:81:c7:4a:84:20:1f:8c:cc:23:cc:1a: 3b:50:01:23:bb:23:3f:da:e9:cf:fa:1a:0d:c9:a9:bc:0d:4f: 4d:fa:c2:45:bf:fd:8a:d3:9a:a7:3e:44:93:5c:40:a6:f7:c0: 2f:3e:74:81:2b:dd:5d:15:f3:1e:8f:ac:61:f3:03:be:c0:d5: 62:eb:1a:b3:57:42:59:1d:25:10:e8:ef:05:ac:98:4f:e7:1c: 0e:50:a2:e4:d6:33:f8:1f:93:8f:d6:66:4e:ea:59:cb:a0:26: 09:c8:77:e9:5c:1d:1e:89:3f:10:1d:a7:6f:48:5e:3d:44:8b: df:40:d5:5d:59:e6:58:89:e8:19:39:cd:ad:75:46:41:6e:d5: 82:00:35:69:a3:a7:a9:7f:c0:7e:a4:ea:11:89:05:b2:da:cd: dd:22:49:6e:28:2c:37:6b:23:a8:db:64:8a:4b:77:da:54:a9: 75:f2:d1:63 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZroFDI1jLTBr5k7QFPecRPYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjUxMjA0MDYzNzA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjFiZjlmYmI0NjRhMmY3MWRhZmFhMTBlNDcyMWNiMzIyZDc4NDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS/e66t6sC8hG58HVIepYGlwiHd/ swZB0A+DTwrpNSZxPnCNkGRmapmbw5kg5RPSmqDq9E08lYiYT1R2AGgkt4Ct5eH8 xK6r7YhOSav2G19W4eAkAhdXOTTgP+IQ6JzKNZSKPpi8E+vhLD2psi0shWsz9dtp IJE/v/QNum8UHzEtbyQgr3nT68vt333rlfouWQzVRxm9VB/RvgEnDp7eD4H8tyc8 ULBhPyNZiHxRvlNPJyP0i1urKbm+NPA1lKQEDdJmKnV3/aQZifOI9jwSHME78WzO eNOy82QvGUlgLHGFp7/YvekAUxzSfGB2pH7zdCCmSWwCl1YU3jWVLolBpwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFLsb+fu0ZKL3Ha+qEORyHLMi14RcMB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvdXh2NS03UmtvdmNkcjZvUTVISWNzeUxYaEZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAPtmFMAwD BAA+2YcDBAE+2YgDBAA+2YsDBAA+2Y8wDQYJKoZIhvcNAQELBQADggEBAEhQXi90 pHdNtuFdW+6ClG1LR57hbua0vrln7NLZFINWEe/2wJAbSGe8WO75qGLhJL11/z+s fJnQDVS2yrDYUVol/Z44RlUgGjRNEr6R/o2Bx0qEIB+MzCPMGjtQASO7Iz/a6c/6 Gg3JqbwNT036wkW//YrTmqc+RJNcQKb3wC8+dIEr3V0V8x6PrGHzA77A1WLrGrNX QlkdJRDo7wWsmE/nHA5QouTWM/gfk4/WZk7qWcugJgnId+lcHR6JPxAdp29IXj1E i99A1V1Z5liJ6Bk5za11RkFu1YIANWmjp6l/wH6k6hGJBbLazd0iSW4oLDdrI6jb ZIpLd9pUqXXy0WM= -----END CERTIFICATE-----Generated at Sat Dec 6 17:17:30 2025 by rpki-client