This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uqb8VzwMEvs-PSX8AfDaGsGVyWc.roa File: uqb8VzwMEvs-PSX8AfDaGsGVyWc.roa (raw, json) Hash identifier: mko6dDv9MIw17Y+zQSC7KlvwbQHwsM5wp5xGqmh/TFc= Subject key identifier: BA:A6:FC:57:3C:0C:12:FB:3E:3D:25:FC:01:F0:DA:1A:C1:95:C9:67 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019A9D3E4F5C03092BAC8B879E86857AA6B5 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uqb8VzwMEvs-PSX8AfDaGsGVyWc.roa Signing time: Wed 19 Nov 2025 17:51:37 +0000 ROA not before: Wed 19 Nov 2025 17:51:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 62.76.229.0/24 maxlen: 24 192.124.177.0/24 maxlen: 24 194.58.36.0/24 maxlen: 24 194.87.122.0/24 maxlen: 24 212.193.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9d:3e:4f:5c:03:09:2b:ac:8b:87:9e:86:85:7a:a6:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Nov 19 17:51:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=baa6fc573c0c12fb3e3d25fc01f0da1ac195c967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a4:d5:cf:a8:49:41:1d:57:78:00:c0:17:6a: 92:cd:53:09:b3:00:c0:59:f6:91:33:68:2a:de:c6: 02:bb:87:e7:3c:a9:c5:96:d3:2b:8f:2b:16:e4:fe: b0:2f:f6:06:70:e3:50:86:57:56:91:b5:ec:1d:54: f3:af:a0:89:ee:0c:f1:8d:3f:a8:f7:74:34:2b:fb: 92:77:d7:fa:25:f8:a7:f1:dc:7d:10:62:7e:8c:2d: f0:be:b2:25:10:f2:ae:8b:df:0a:60:35:78:98:2f: 4c:60:3e:22:8b:89:47:94:ae:b0:bf:da:60:78:0c: 47:c4:98:52:53:9f:2e:cb:f3:eb:e8:6a:8b:c1:5d: e1:16:bd:00:d8:50:30:9f:2a:24:93:a4:07:a3:da: a0:80:fd:1a:71:c3:fb:45:6b:72:d8:18:56:d1:e0: 2e:b7:77:76:9e:57:d7:40:e9:3b:2e:8b:a1:c7:84: 66:91:a4:ed:a6:b2:e4:4a:52:16:c6:2e:dd:bb:a4: 97:d8:7c:17:cf:b3:ea:56:3f:16:c0:cc:25:25:b7: 06:38:7a:87:9a:86:a7:ac:01:53:17:8b:02:0e:3d: 57:00:8c:b7:35:1a:b1:a5:a8:b8:fa:ca:d5:ea:f8: 39:c1:8b:a7:69:bf:9c:5d:d1:98:b0:a7:0d:a5:78: fc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A6:FC:57:3C:0C:12:FB:3E:3D:25:FC:01:F0:DA:1A:C1:95:C9:67 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uqb8VzwMEvs-PSX8AfDaGsGVyWc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.76.229.0/24 192.124.177.0/24 194.58.36.0/24 194.87.122.0/24 212.193.9.0/24 Signature Algorithm: sha256WithRSAEncryption 72:db:db:ab:66:f1:a6:77:e9:ba:e1:a0:3d:f2:75:a1:9e:37: 80:f4:af:c2:9b:aa:d1:80:2d:74:ce:99:8d:a1:83:d0:69:d7: 54:e6:49:12:ed:14:84:4b:81:9f:89:d9:02:db:c4:a7:af:7b: cc:ba:11:0b:8b:a1:61:bd:cb:64:c6:1f:b9:f2:d7:5d:72:c8: 64:26:27:1d:80:11:1c:25:1e:6c:2d:3e:cf:b5:49:a9:2f:d6: 92:14:62:c1:08:71:74:be:6b:39:f1:f6:d3:d6:80:3c:61:fc: a0:34:fc:47:d0:f0:69:cd:87:9d:9b:8c:c0:b0:39:aa:8a:24: 18:0b:0d:9d:41:ec:e8:4c:11:a9:96:d3:98:25:71:1c:7a:8b: 9a:d4:a3:d5:46:99:a4:1b:aa:95:e2:ea:f7:93:44:21:c7:29: f8:fd:82:1a:3a:57:69:ee:a2:89:75:8d:d3:d6:0c:46:30:c3: bc:d4:40:e1:80:57:33:5f:8a:0c:71:ed:33:43:98:b6:ce:17: fe:01:a4:c6:cf:f6:00:2e:f2:cb:3e:7a:5c:e2:66:4c:53:66: 19:96:b1:20:20:bf:1b:00:c0:06:0e:ed:41:47:4f:7a:f2:92: c0:e3:90:20:73:6e:da:96:89:b2:59:a8:54:33:07:3e:a7:80: bc:9d:6f:51 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZqdPk9cAwkrrIuHnoaFeqa1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjUxMTE5MTc1MTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWE2ZmM1NzNjMGMxMmZiM2UzZDI1ZmMwMWYwZGExYWMxOTVjOTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaTVz6hJQR1XeADAF2qSzVMJswDA WfaRM2gq3sYCu4fnPKnFltMrjysW5P6wL/YGcONQhldWkbXsHVTzr6CJ7gzxjT+o 93Q0K/uSd9f6Jfin8dx9EGJ+jC3wvrIlEPKui98KYDV4mC9MYD4ii4lHlK6wv9pg eAxHxJhSU58uy/Pr6GqLwV3hFr0A2FAwnyokk6QHo9qggP0accP7RWty2BhW0eAu t3d2nlfXQOk7Louhx4RmkaTtprLkSlIWxi7du6SX2HwXz7PqVj8WwMwlJbcGOHqH moanrAFTF4sCDj1XAIy3NRqxpai4+srV6vg5wYunab+cXdGYsKcNpXj8DwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFLqm/Fc8DBL7Pj0l/AHw2hrBlclnMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvdXFiOFZ6d01FdnMtUFNYOEFmRGFHc0dWeVdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAPkzlAwQA wHyxAwQAwjokAwQAwld6AwQA1MEJMA0GCSqGSIb3DQEBCwUAA4IBAQBy29urZvGm d+m64aA98nWhnjeA9K/Cm6rRgC10zpmNoYPQaddU5kkS7RSES4GfidkC28Snr3vM uhELi6Fhvctkxh+58tddcshkJicdgBEcJR5sLT7PtUmpL9aSFGLBCHF0vms58fbT 1oA8YfygNPxH0PBpzYedm4zAsDmqiiQYCw2dQezoTBGpltOYJXEceoua1KPVRpmk G6qV4ur3k0Qhxyn4/YIaOldp7qKJdY3T1gxGMMO81EDhgFczX4oMce0zQ5i2zhf+ AaTGz/YALvLLPnpc4mZMU2YZlrEgIL8bAMAGDu1BR0968pLA45Agc27alomyWahU Mwc+p4C8nW9R -----END CERTIFICATE-----Generated at Fri Dec 5 09:26:44 2025 by rpki-client