This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/UALiOMWOkb9Z57QodBFiQ1-R4DA.roa File: UALiOMWOkb9Z57QodBFiQ1-R4DA.roa (raw, json) Hash identifier: 41TkzTJEyTzuEMlfP6G5En69YAVdLuiviFAS2HH9qho= Subject key identifier: 50:02:E2:38:C5:8E:91:BF:59:E7:B4:28:74:11:62:43:5F:91:E0:30 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B315D81280BC4F5729A31379B83A84B58 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/UALiOMWOkb9Z57QodBFiQ1-R4DA.roa Signing time: Thu 18 Dec 2025 12:09:30 +0000 ROA not before: Thu 18 Dec 2025 12:09:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216472 IP address blocks: 212.68.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:5d:81:28:0b:c4:f5:72:9a:31:37:9b:83:a8:4b:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Dec 18 12:09:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5002e238c58e91bf59e7b428741162435f91e030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:21:db:22:a4:fc:da:96:a1:7c:09:7b:54:1e: 81:b3:42:a3:36:a2:27:37:c7:cb:1d:b3:4b:1c:2b: 91:94:20:19:b3:ef:07:bf:c5:ea:15:bc:e2:bc:cf: 8e:7f:58:3d:9d:1c:f2:48:57:5c:92:64:a7:2d:2b: 01:15:ba:9f:ef:46:62:a9:d7:55:85:1c:0e:ae:e5: d0:a9:09:a3:4d:25:12:9d:08:f2:c0:00:c5:56:21: 35:66:24:b5:d6:08:c5:2b:88:e6:de:93:8a:5c:a6: b5:69:f1:d0:f0:92:c5:50:fd:dd:7b:d3:e9:55:5e: 42:42:fb:47:22:60:ca:6f:f3:3f:f0:2b:be:ab:2f: a3:df:66:32:54:c1:8e:a2:b4:47:f8:dd:e1:dc:ef: 5d:c8:99:8e:8f:ed:21:11:d4:c4:96:dd:62:9c:a1: 7b:7a:aa:b2:35:55:44:51:40:02:f3:97:5c:09:48: 03:af:53:5e:74:6c:15:10:bc:5b:20:b0:c1:fc:a6: e6:67:e2:df:61:3b:36:32:60:fa:96:d1:74:d6:e0: 5d:63:ce:ed:de:4a:b7:7d:e1:c1:ea:29:d9:e2:8c: 41:e0:94:3e:79:b5:ef:2a:a4:cc:81:c7:c9:3e:30: 76:bc:f5:f1:e1:08:09:72:07:5b:cb:8d:63:d9:ed: 0a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:02:E2:38:C5:8E:91:BF:59:E7:B4:28:74:11:62:43:5F:91:E0:30 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/UALiOMWOkb9Z57QodBFiQ1-R4DA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.68.59.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:27:37:a0:d3:12:22:78:9a:b5:b4:6e:1c:9d:53:b9:53:88: 6d:93:a0:40:ec:c3:b8:e0:4a:9b:28:f6:d8:84:7b:e6:df:02: c9:63:84:63:29:0a:3d:08:7a:52:bf:c4:ff:9d:97:9c:ce:d5: be:d2:80:8f:70:5b:a5:2e:44:ed:aa:85:7d:12:2f:39:e6:71: 8e:80:f4:0f:13:fb:38:e1:dc:54:2d:2d:a7:8c:61:83:94:96: b9:bd:4e:01:a1:bf:d1:03:9f:af:6a:ca:fd:90:a4:25:25:0b: 82:46:83:40:32:04:3e:78:e2:e1:f5:af:c8:7e:3c:5b:6f:bc: 7c:4c:b0:5b:08:7f:42:e5:6b:ad:c4:73:31:ac:06:9c:92:c0: 3e:ce:4c:c6:1c:95:48:51:1c:c5:df:17:06:9e:2a:d8:20:7f: ac:6e:21:7d:d6:2a:cc:3a:e8:dc:2d:0b:65:ea:eb:a5:cb:3b: 82:c3:3b:eb:ec:ea:0a:14:d7:54:76:cf:86:04:eb:ff:c8:32: 22:2b:45:f3:38:70:10:f0:8d:6d:4b:80:71:0f:de:4d:a6:13: 7b:ff:66:34:7c:24:37:0e:f4:44:3e:64:2d:59:07:71:44:e1: a8:d9:0c:5e:a9:96:a0:cf:64:bf:3f:18:97:ed:45:13:4a:10: 75:71:b9:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsxXYEoC8T1cpoxN5uDqEtYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjUxMjE4MTIwOTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDAyZTIzOGM1OGU5MWJmNTllN2I0Mjg3NDExNjI0MzVmOTFlMDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCHbIqT82pahfAl7VB6Bs0KjNqIn N8fLHbNLHCuRlCAZs+8Hv8XqFbzivM+Of1g9nRzySFdckmSnLSsBFbqf70ZiqddV hRwOruXQqQmjTSUSnQjywADFViE1ZiS11gjFK4jm3pOKXKa1afHQ8JLFUP3de9Pp VV5CQvtHImDKb/M/8Cu+qy+j32YyVMGOorRH+N3h3O9dyJmOj+0hEdTElt1inKF7 eqqyNVVEUUAC85dcCUgDr1NedGwVELxbILDB/KbmZ+LfYTs2MmD6ltF01uBdY87t 3kq3feHB6inZ4oxB4JQ+ebXvKqTMgcfJPjB2vPXx4QgJcgdby41j2e0KRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFAC4jjFjpG/Wee0KHQRYkNfkeAwMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvVUFMaU9NV09rYjlaNTdRb2RCRmlRMS1SNERBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EQ7MA0G CSqGSIb3DQEBCwUAA4IBAQAqJzeg0xIieJq1tG4cnVO5U4htk6BA7MO44EqbKPbY hHvm3wLJY4RjKQo9CHpSv8T/nZecztW+0oCPcFulLkTtqoV9Ei855nGOgPQPE/s4 4dxULS2njGGDlJa5vU4Bob/RA5+vasr9kKQlJQuCRoNAMgQ+eOLh9a/Ifjxbb7x8 TLBbCH9C5WutxHMxrAacksA+zkzGHJVIURzF3xcGnirYIH+sbiF91irMOujcLQtl 6uulyzuCwzvr7OoKFNdUds+GBOv/yDIiK0XzOHAQ8I1tS4BxD95NphN7/2Y0fCQ3 DvREPmQtWQdxROGo2QxeqZagz2S/PxiX7UUTShB1cbmx -----END CERTIFICATE-----Generated at Fri Dec 19 14:22:59 2025 by rpki-client