This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/UpFmEVi9jbeSbJ9D14Si7UIPFiI.roa File: UpFmEVi9jbeSbJ9D14Si7UIPFiI.roa (raw, json) Hash identifier: ubP3B1UVs4jY0GUt9mbiH49JNGq+VoCuEFTx/SPGC6U= Subject key identifier: 52:91:66:11:58:BD:8D:B7:92:6C:9F:43:D7:84:A2:ED:42:0F:16:22 Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019A530834E6E52D91AFFA65707D9EB955C4 Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/UpFmEVi9jbeSbJ9D14Si7UIPFiI.roa Signing time: Wed 05 Nov 2025 08:00:38 +0000 ROA not before: Wed 05 Nov 2025 08:00:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 984 IP address blocks: 89.21.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 12:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:53:08:34:e6:e5:2d:91:af:fa:65:70:7d:9e:b9:55:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Nov 5 08:00:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5291661158bd8db7926c9f43d784a2ed420f1622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2b:2e:67:77:16:25:61:72:aa:1e:c4:61:25: a1:45:5a:46:8b:10:b8:2f:25:6b:7d:4b:f4:da:aa: d5:ca:4e:9c:1d:4a:03:34:86:a4:da:83:ce:13:23: 58:4d:54:56:91:99:8c:6d:ea:2b:0d:60:bf:d0:58: d1:52:6e:af:f6:60:a2:10:dc:28:eb:81:c1:1c:cb: 4f:4a:07:96:28:b0:ff:a4:8e:a2:d1:5f:09:44:40: 74:7e:89:ac:82:63:b8:b1:dd:26:44:c2:fb:8f:b1: b8:fb:e7:78:59:e0:d3:33:38:41:a9:c0:1c:1b:05: 58:c9:49:bf:31:74:bb:f2:c9:32:31:9d:b8:fa:98: ed:f5:48:bd:be:a8:cc:19:b9:f2:32:39:ca:e8:d7: 20:b7:ac:16:17:5e:a9:aa:c6:c0:ea:60:19:ca:68: 1a:07:f1:9a:48:37:eb:ed:75:d4:69:2c:e8:ca:77: c5:90:58:19:4f:be:12:06:6b:54:2f:38:88:5c:81: d7:72:00:e8:09:5b:33:cd:87:c9:c8:11:4e:ea:c2: 92:7c:4b:89:a5:3e:fd:fe:72:8f:c0:5a:4a:d0:07: c6:cd:1f:10:f9:7d:02:3d:7d:17:1a:c3:ac:02:66: fc:5a:c7:f6:74:b0:38:5f:34:96:67:41:e4:4a:04: 8c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:91:66:11:58:BD:8D:B7:92:6C:9F:43:D7:84:A2:ED:42:0F:16:22 X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/UpFmEVi9jbeSbJ9D14Si7UIPFiI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.21.87.0/24 Signature Algorithm: sha256WithRSAEncryption 08:d9:df:81:a7:7b:72:62:0a:1e:2c:3b:9e:11:ec:65:99:42: f8:87:e9:9d:0f:25:30:7d:9c:fe:3a:48:c7:19:ff:2b:b8:7f: 10:22:be:f4:f0:9e:b9:f3:c8:a5:64:2f:5f:b2:44:42:97:0c: 68:77:7b:42:e6:8d:09:4c:bb:d7:63:fe:53:d0:07:58:da:fb: 8b:8d:b5:23:5a:82:42:62:24:b6:5d:7a:91:37:3a:e4:d9:0e: a7:99:61:08:21:aa:9b:51:1e:63:4d:01:d7:e6:2b:fe:69:30: 59:de:5c:88:c5:11:da:70:0a:f2:aa:5c:07:b4:9a:69:39:11: a4:48:2c:6a:62:78:88:30:3b:81:a5:b6:e6:8a:08:28:32:b1: 9e:fb:9e:70:50:b4:02:c2:e6:45:82:85:5f:3e:3f:d2:b0:21: ef:aa:ff:23:7c:36:2a:83:00:db:37:d5:58:26:ab:4d:db:86: 02:67:d2:90:5a:b2:5e:88:81:8b:8a:b4:f1:d5:3c:b3:9d:0d: 49:62:c6:39:d9:64:14:e2:0a:bd:aa:75:bb:83:23:83:d8:19: b6:ec:84:82:40:76:a0:a8:4c:51:aa:f3:4d:b1:ba:bc:92:e8: 8b:73:3c:8c:a5:2b:bc:e8:14:23:cf:3b:7a:12:32:da:75:cb: 42:11:9f:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpTCDTm5S2Rr/plcH2euVXEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjUxMTA1MDgwMDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjkxNjYxMTU4YmQ4ZGI3OTI2YzlmNDNkNzg0YTJlZDQyMGYxNjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtysuZ3cWJWFyqh7EYSWhRVpGixC4 LyVrfUv02qrVyk6cHUoDNIak2oPOEyNYTVRWkZmMbeorDWC/0FjRUm6v9mCiENwo 64HBHMtPSgeWKLD/pI6i0V8JREB0fomsgmO4sd0mRML7j7G4++d4WeDTMzhBqcAc GwVYyUm/MXS78skyMZ24+pjt9Ui9vqjMGbnyMjnK6Ncgt6wWF16pqsbA6mAZymga B/GaSDfr7XXUaSzoynfFkFgZT74SBmtULziIXIHXcgDoCVszzYfJyBFO6sKSfEuJ pT79/nKPwFpK0AfGzR8Q+X0CPX0XGsOsAmb8Wsf2dLA4XzSWZ0HkSgSMLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFKRZhFYvY23kmyfQ9eEou1CDxYiMB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvVXBGbUVWaTlqYmVTYko5RDE0U2k3VUlQRmlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRVXMA0G CSqGSIb3DQEBCwUAA4IBAQAI2d+Bp3tyYgoeLDueEexlmUL4h+mdDyUwfZz+OkjH Gf8ruH8QIr708J6588ilZC9fskRClwxod3tC5o0JTLvXY/5T0AdY2vuLjbUjWoJC YiS2XXqRNzrk2Q6nmWEIIaqbUR5jTQHX5iv+aTBZ3lyIxRHacAryqlwHtJppORGk SCxqYniIMDuBpbbmiggoMrGe+55wULQCwuZFgoVfPj/SsCHvqv8jfDYqgwDbN9VY JqtN24YCZ9KQWrJeiIGLirTx1TyznQ1JYsY52WQU4gq9qnW7gyOD2Bm27ISCQHag qExRqvNNsbq8kuiLczyMpSu86BQjzzt6EjLadctCEZ/9 -----END CERTIFICATE-----Generated at Wed Dec 3 16:39:35 2025 by rpki-client