This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ur03x0erp7zUY8wr2I-1-5X6H0g.roa File: ur03x0erp7zUY8wr2I-1-5X6H0g.roa (raw, json) Hash identifier: xgYffu8YmL5FNYS0+ojYnVTXLpKNAW2HiAx6xbz5DIk= Subject key identifier: BA:BD:37:C7:47:AB:A7:BC:D4:63:CC:2B:D8:8F:B5:FB:95:FA:1F:48 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B11E6B4303DB32F47DC11E668AC61B98F Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ur03x0erp7zUY8wr2I-1-5X6H0g.roa Signing time: Fri 12 Dec 2025 09:31:30 +0000 ROA not before: Fri 12 Dec 2025 09:31:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215590 IP address blocks: 83.143.113.0/24 maxlen: 24 85.209.135.0/24 maxlen: 24 87.120.88.0/24 maxlen: 24 87.121.218.0/24 maxlen: 24 185.246.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:e6:b4:30:3d:b3:2f:47:dc:11:e6:68:ac:61:b9:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Dec 12 09:31:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=babd37c747aba7bcd463cc2bd88fb5fb95fa1f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5b:ac:3b:07:c3:e6:21:8e:f6:dc:8c:73:2a: 67:75:47:8f:6c:ed:c0:a1:77:db:4b:86:05:65:94: 50:ec:1e:59:34:0a:bf:cd:d3:57:85:0f:9e:10:2b: 8e:77:a5:d0:70:28:d6:02:18:18:24:8d:35:cf:ac: 81:63:f8:6b:0a:2c:e1:b9:37:6b:1f:cc:e1:25:21: 00:0a:dd:86:55:9c:54:89:7a:d8:7c:88:95:4e:49: b0:9c:77:e0:86:c5:4d:d8:b7:25:4f:a5:e0:d7:68: e9:35:dc:9f:73:9b:8e:b3:c6:fa:98:b7:98:d8:85: 2e:90:30:2c:97:f3:56:0d:9e:43:b1:d5:b7:1b:45: 3d:5d:4a:5f:88:24:fe:85:c1:2a:47:b7:03:c3:92: 2d:4f:5a:62:5e:91:32:fc:7e:41:3e:f4:16:7c:36: 1f:f5:ee:44:7b:27:e5:3e:82:f4:a3:03:4e:6b:19: e5:1a:9b:a4:0e:b4:f2:9f:25:8c:84:e4:d2:f4:e6: 1b:14:32:a0:20:9e:73:19:56:b2:89:90:2c:c3:6a: 77:e1:aa:6b:b6:b9:02:61:db:84:fa:1e:57:6a:74: e1:41:78:e6:be:1e:a7:6e:ce:9e:a0:2d:95:95:16: 72:e3:48:54:d8:7c:9f:7e:77:20:de:de:8d:4c:43: 11:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:BD:37:C7:47:AB:A7:BC:D4:63:CC:2B:D8:8F:B5:FB:95:FA:1F:48 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ur03x0erp7zUY8wr2I-1-5X6H0g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.143.113.0/24 85.209.135.0/24 87.120.88.0/24 87.121.218.0/24 185.246.222.0/24 Signature Algorithm: sha256WithRSAEncryption 37:f8:26:68:84:dd:b0:45:bf:46:d2:cd:cb:9f:e5:3b:26:c6: b4:06:6c:51:bc:db:10:78:24:5c:e4:a2:35:04:24:25:90:aa: 92:59:43:75:6c:2e:a4:1c:27:31:13:66:29:37:26:81:ea:6e: dc:c0:ef:d4:c0:8a:4d:87:36:43:f8:21:4e:9d:ef:69:fb:15: f9:08:ce:c6:c2:5d:bc:cb:8c:3b:66:16:c0:96:ed:75:3a:6a: 20:b4:a2:03:32:cf:90:a2:ae:c2:76:4a:f7:55:62:6d:9b:cd: 64:c6:4b:81:8e:d8:6b:ef:59:dd:88:af:88:52:13:23:74:a1: ce:bb:41:3b:be:05:e9:06:ef:3e:e5:2a:1b:13:04:b2:f7:68: f9:0e:1d:60:76:67:43:60:d7:f2:f1:b7:e2:f0:05:aa:a3:7e: d6:e3:53:7b:47:6c:a9:eb:ab:45:a1:dd:d7:ed:36:c7:4c:61: a1:5f:fe:16:43:cc:7f:4b:aa:5c:68:9a:18:ea:44:ab:69:b1: 47:3e:0d:9b:91:21:ec:d2:00:e1:39:f0:be:d3:0a:26:40:a4: be:8e:bb:29:b9:79:ba:80:2e:3d:23:ca:1e:4e:29:f1:82:71: 4a:2b:f1:6b:d1:ca:51:21:fa:0e:65:8f:98:6b:52:91:d4:d7: 14:be:ff:73 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZsR5rQwPbMvR9wR5misYbmPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjUxMjEyMDkzMTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWJkMzdjNzQ3YWJhN2JjZDQ2M2NjMmJkODhmYjVmYjk1ZmExZjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlusOwfD5iGO9tyMcypndUePbO3A oXfbS4YFZZRQ7B5ZNAq/zdNXhQ+eECuOd6XQcCjWAhgYJI01z6yBY/hrCizhuTdr H8zhJSEACt2GVZxUiXrYfIiVTkmwnHfghsVN2LclT6Xg12jpNdyfc5uOs8b6mLeY 2IUukDAsl/NWDZ5DsdW3G0U9XUpfiCT+hcEqR7cDw5ItT1piXpEy/H5BPvQWfDYf 9e5EeyflPoL0owNOaxnlGpukDrTynyWMhOTS9OYbFDKgIJ5zGVayiZAsw2p34apr trkCYduE+h5XanThQXjmvh6nbs6eoC2VlRZy40hU2Hyffncg3t6NTEMRJQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFLq9N8dHq6e81GPMK9iPtfuV+h9IMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvdXIwM3gwZXJwN3pVWTh3cjJJLTEtNVg2SDBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAU49xAwQA VdGHAwQAV3hYAwQAV3naAwQAufbeMA0GCSqGSIb3DQEBCwUAA4IBAQA3+CZohN2w Rb9G0s3Ln+U7Jsa0BmxRvNsQeCRc5KI1BCQlkKqSWUN1bC6kHCcxE2YpNyaB6m7c wO/UwIpNhzZD+CFOne9p+xX5CM7Gwl28y4w7ZhbAlu11OmogtKIDMs+Qoq7Cdkr3 VWJtm81kxkuBjthr71ndiK+IUhMjdKHOu0E7vgXpBu8+5SobEwSy92j5Dh1gdmdD YNfy8bfi8AWqo37W41N7R2yp66tFod3X7TbHTGGhX/4WQ8x/S6pcaJoY6kSrabFH Pg2bkSHs0gDhOfC+0womQKS+jrspuXm6gC49I8oeTinxgnFKK/Fr0cpRIfoOZY+Y a1KR1NcUvv9z -----END CERTIFICATE-----Generated at Sun Dec 14 17:01:10 2025 by rpki-client