This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/Uadqw5OnKFpo3aB8FElCsZffdFI.roa File: Uadqw5OnKFpo3aB8FElCsZffdFI.roa (raw, json) Hash identifier: 7lT76djrZcV40yqJ0LasX3UZ0heDZid+Ns+o7xS5REo= Subject key identifier: 51:A7:6A:C3:93:A7:28:5A:68:DD:A0:7C:14:49:42:B1:97:DF:74:52 Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Certificate serial: 019A7364CECEB615300965B58EC3067C69C7 Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/Uadqw5OnKFpo3aB8FElCsZffdFI.roa Signing time: Tue 11 Nov 2025 14:49:37 +0000 ROA not before: Tue 11 Nov 2025 14:49:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214783 IP address blocks: 45.154.33.0/24 maxlen: 32 86.105.224.0/24 maxlen: 24 146.19.172.0/24 maxlen: 24 185.234.13.0/24 maxlen: 24 2a11:1400:5000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:64:ce:ce:b6:15:30:09:65:b5:8e:c3:06:7c:69:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68 Validity Not Before: Nov 11 14:49:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=51a76ac393a7285a68dda07c144942b197df7452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ca:22:ce:68:02:90:14:82:82:76:34:31:cd: 34:24:40:55:24:11:fb:48:7d:9e:8a:23:b7:71:74: 3b:68:28:e0:ca:b7:bc:d0:9f:e0:2e:38:da:c4:6b: a2:ec:be:2b:da:f2:eb:95:c7:0b:88:b6:59:50:f8: 1c:7b:b7:c8:39:33:98:59:38:12:5e:48:b7:b2:d7: d1:5c:83:99:17:ce:19:e4:b7:68:ec:33:58:84:2b: 1e:3b:73:23:cd:c9:a9:f1:33:4d:d0:89:40:5e:24: 71:bf:98:c3:5a:13:15:19:e3:c7:1f:7b:eb:af:e5: a7:67:2c:5a:cc:76:19:52:ca:9b:bd:40:36:fa:b2: 09:3f:ea:57:e3:f7:9a:ad:38:78:46:b2:df:93:3e: 9b:4e:16:df:60:15:d3:b4:2a:b6:68:ce:f6:2a:7d: 1c:66:cc:ee:b5:42:42:13:78:1d:ad:e8:af:22:08: 2b:95:aa:ab:6b:dc:fc:0e:0e:5e:f3:53:2d:df:1a: e8:80:72:a0:29:d1:80:17:06:53:fa:23:2f:8b:44: d3:b8:d0:14:ec:19:46:bb:cc:b6:a3:9d:5e:81:0e: 5f:bc:93:0e:15:db:d6:5c:b6:75:e2:ad:ac:da:05: 1f:55:53:34:d1:cf:96:f9:23:27:09:6c:72:c8:b7: c8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A7:6A:C3:93:A7:28:5A:68:DD:A0:7C:14:49:42:B1:97:DF:74:52 X509v3 Authority Key Identifier: keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/Uadqw5OnKFpo3aB8FElCsZffdFI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.33.0/24 86.105.224.0/24 146.19.172.0/24 185.234.13.0/24 IPv6: 2a11:1400:5000::/44 Signature Algorithm: sha256WithRSAEncryption 7a:e2:42:10:57:21:78:30:87:2c:f1:59:8c:66:59:1b:ec:09: 55:b0:7d:0d:5d:87:61:e3:ce:b2:79:eb:61:31:ce:47:7c:a9: 5d:ac:d0:91:6c:2e:bd:69:cf:3d:ad:e9:56:ca:b0:05:8d:68: f1:ef:12:d9:c6:f9:b3:2b:7b:07:9e:f7:47:58:a4:7c:35:26: f7:a3:98:28:57:af:27:df:f9:e8:8e:e8:2f:52:bd:22:66:16: 55:be:94:24:ec:5b:0f:47:78:82:5f:93:68:bf:ad:2b:20:9b: 04:98:25:55:9e:6a:ad:1e:5a:12:48:ab:fb:39:62:99:d4:53: db:72:90:45:59:de:be:a8:32:e7:28:63:f4:5c:1d:c5:02:e3: b6:ad:0e:6d:8c:2a:2e:7d:86:d4:85:b5:69:3a:65:4b:47:b2: 54:ad:8f:7d:b0:8f:5d:19:ec:d7:bc:ad:ab:30:06:22:b2:bf: 88:24:ba:d5:09:e9:13:a7:18:20:ba:ec:22:9f:c2:85:5f:fd: ed:78:11:6f:7d:9f:a8:14:0a:6b:49:b3:2e:03:7e:97:3a:86: b7:c2:8f:d8:c8:b1:60:77:7b:49:85:06:ec:c8:79:63:47:03: 3f:52:9b:15:a0:44:9e:f2:74:30:07:73:e1:6e:dd:ea:db:26: 77:4a:a6:0c -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZpzZM7OthUwCWW1jsMGfGnHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMzU1ODU0NmEyYzU0YmJkODEyYTE5MjI4YWE5OGUwNzhk M2FhNjgwHhcNMjUxMTExMTQ0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWE3NmFjMzkzYTcyODVhNjhkZGEwN2MxNDQ5NDJiMTk3ZGY3NDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMoizmgCkBSCgnY0Mc00JEBVJBH7 SH2eiiO3cXQ7aCjgyre80J/gLjjaxGui7L4r2vLrlccLiLZZUPgce7fIOTOYWTgS Xki3stfRXIOZF84Z5Ldo7DNYhCseO3Mjzcmp8TNN0IlAXiRxv5jDWhMVGePHH3vr r+WnZyxazHYZUsqbvUA2+rIJP+pX4/earTh4RrLfkz6bThbfYBXTtCq2aM72Kn0c ZszutUJCE3gdreivIggrlaqra9z8Dg5e81Mt3xrogHKgKdGAFwZT+iMvi0TTuNAU 7BlGu8y2o51egQ5fvJMOFdvWXLZ14q2s2gUfVVM00c+W+SMnCWxyyLfIMwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFFGnasOTpyhaaN2gfBRJQrGX33RSMB8GA1UdIwQY MBaAFA01WFRqLFS72BKhkiiqmOB406poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUt MTMyZmZjOGJkZTQ2LzEvVWFkcXc1T25LRnBvM2FCOEZFbENzWmZmZEZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi80NzRmMjctYjI4Ni00NmYwLWFlNDUtMTMyZmZjOGJkZTQ2 LzEvRFRWWVZHb3NWTHZZRXFHU0tLcVk0SGpUcW1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQALZohAwQA VmngAwQAkhOsAwQAueoNMA8EAgACMAkDBwQqERQAUAAwDQYJKoZIhvcNAQELBQAD ggEBAHriQhBXIXgwhyzxWYxmWRvsCVWwfQ1dh2HjzrJ562Exzkd8qV2s0JFsLr1p zz2t6VbKsAWNaPHvEtnG+bMrewee90dYpHw1JvejmChXryff+eiO6C9SvSJmFlW+ lCTsWw9HeIJfk2i/rSsgmwSYJVWeaq0eWhJIq/s5YpnUU9tykEVZ3r6oMucoY/Rc HcUC47atDm2MKi59htSFtWk6ZUtHslStj32wj10Z7Ne8raswBiKyv4gkutUJ6ROn GCC67CKfwoVf/e14EW99n6gUCmtJsy4Dfpc6hrfCj9jIsWB3e0mFBuzIeWNHAz9S mxWgRJ7ydDAHc+Fu3erbJndKpgw= -----END CERTIFICATE-----Generated at Sun Dec 7 00:10:23 2025 by rpki-client