This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/UO9TaO19ybgcY7hx6pW9FDl8DF4.roa File: UO9TaO19ybgcY7hx6pW9FDl8DF4.roa (raw, json) Hash identifier: 9pKoyjHL9v6NlFIbCN3v/07Kyewqc92AGEOlNK+yN6M= Subject key identifier: 50:EF:53:68:ED:7D:C9:B8:1C:63:B8:71:EA:95:BD:14:39:7C:0C:5E Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019ABA4D8CA6548EFBC9E1A810EE7141685C Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/UO9TaO19ybgcY7hx6pW9FDl8DF4.roa Signing time: Tue 25 Nov 2025 09:17:15 +0000 ROA not before: Tue 25 Nov 2025 09:17:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 19211 IP address blocks: 213.169.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 23:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:4d:8c:a6:54:8e:fb:c9:e1:a8:10:ee:71:41:68:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Nov 25 09:17:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=50ef5368ed7dc9b81c63b871ea95bd14397c0c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:34:33:0d:6e:3f:37:f6:47:93:0b:e8:02:51: a4:5d:de:21:8a:d8:b1:f6:39:c6:b5:9a:7d:e0:f2: 05:75:6c:77:53:01:91:c4:28:87:a2:3c:f4:fe:2d: ab:1c:9f:ed:ba:40:08:34:dd:dc:78:7d:11:f4:3f: e2:a0:ea:71:e4:d8:f9:59:69:f0:82:40:43:de:a5: 9c:59:50:ec:ce:00:83:62:99:c7:40:3e:9a:1e:67: e9:d8:cd:6f:46:86:cc:c2:9e:07:61:8a:ce:71:53: 0f:d4:f1:29:54:c1:83:26:ec:ca:ce:13:2e:f1:73: 72:c8:16:e7:4a:fd:92:13:d7:d6:0c:8b:dd:78:7d: 00:a3:c4:af:cb:c3:bc:c2:da:d6:fe:1d:83:19:7a: d8:d9:59:22:ef:59:45:03:78:4c:44:a4:0f:07:a7: 8c:ed:9d:e7:d8:6b:4c:23:bf:1d:9b:35:ce:4e:5f: c9:73:6a:b2:08:2c:27:f5:15:01:d3:35:16:e7:62: 93:1d:86:de:b4:6a:73:db:ce:8c:58:a8:88:91:f6: 0d:a9:92:51:29:27:c1:33:29:50:11:29:e4:c7:a8: c2:08:65:73:04:64:14:cd:3b:b0:98:ab:75:18:0b: cd:08:76:30:11:a0:42:73:67:21:ca:e2:48:5e:6f: 36:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:EF:53:68:ED:7D:C9:B8:1C:63:B8:71:EA:95:BD:14:39:7C:0C:5E X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/UO9TaO19ybgcY7hx6pW9FDl8DF4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.169.220.0/22 Signature Algorithm: sha256WithRSAEncryption 84:9d:53:c9:f9:72:cb:30:00:03:17:9d:47:2d:ac:d7:de:fb: 2b:c2:42:9c:f3:c3:d8:c0:76:bf:31:6b:59:93:7d:ef:f1:65: 68:74:b0:5a:0e:81:d3:53:e5:9a:c6:14:43:bc:44:1d:e1:df: da:ff:c2:a6:d0:6d:9c:b8:aa:c6:16:85:39:c8:72:82:de:76: 00:bd:40:33:92:44:1c:11:5a:6b:59:56:6c:1c:f9:ba:b2:3e: e1:18:02:5e:e4:90:94:cb:33:47:4a:1f:5d:c1:79:1b:e6:08: 3d:fe:c6:ce:2b:d9:c3:be:29:1c:8e:6f:8c:fd:cf:d6:db:ee: eb:83:76:2c:58:75:00:28:18:5b:8d:97:97:ea:ff:5a:ef:ab: f4:f8:c9:20:e1:e1:fb:dc:23:07:22:bd:ea:13:c8:a9:8c:d9: e5:51:59:00:1f:e8:7e:92:94:d1:d7:0a:8d:6b:8b:a5:fe:1c: 40:fb:ed:0c:ac:d6:21:8c:e2:49:3d:53:93:c5:16:c5:3e:97: 26:ba:67:cd:c7:45:a4:e7:cf:fb:34:e0:28:e1:34:36:fc:66: d2:fc:6c:4c:55:9b:67:a1:4c:2f:c7:89:2e:f5:aa:98:a9:ba: 68:89:ea:19:89:4c:e7:c5:7a:a9:3c:fc:16:21:a9:4b:b4:1a: f3:27:50:be -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq6TYymVI77yeGoEO5xQWhcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjUxMTI1MDkxNzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGVmNTM2OGVkN2RjOWI4MWM2M2I4NzFlYTk1YmQxNDM5N2MwYzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTQzDW4/N/ZHkwvoAlGkXd4hitix 9jnGtZp94PIFdWx3UwGRxCiHojz0/i2rHJ/tukAINN3ceH0R9D/ioOpx5Nj5WWnw gkBD3qWcWVDszgCDYpnHQD6aHmfp2M1vRobMwp4HYYrOcVMP1PEpVMGDJuzKzhMu 8XNyyBbnSv2SE9fWDIvdeH0Ao8Svy8O8wtrW/h2DGXrY2Vki71lFA3hMRKQPB6eM 7Z3n2GtMI78dmzXOTl/Jc2qyCCwn9RUB0zUW52KTHYbetGpz286MWKiIkfYNqZJR KSfBMylQESnkx6jCCGVzBGQUzTuwmKt1GAvNCHYwEaBCc2chyuJIXm82JQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFDvU2jtfcm4HGO4ceqVvRQ5fAxeMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvVU85VGFPMTl5YmdjWTdoeDZwVzlGRGw4REY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1ancMA0G CSqGSIb3DQEBCwUAA4IBAQCEnVPJ+XLLMAADF51HLazX3vsrwkKc88PYwHa/MWtZ k33v8WVodLBaDoHTU+WaxhRDvEQd4d/a/8Km0G2cuKrGFoU5yHKC3nYAvUAzkkQc EVprWVZsHPm6sj7hGAJe5JCUyzNHSh9dwXkb5gg9/sbOK9nDvikcjm+M/c/W2+7r g3YsWHUAKBhbjZeX6v9a76v0+Mkg4eH73CMHIr3qE8ipjNnlUVkAH+h+kpTR1wqN a4ul/hxA++0MrNYhjOJJPVOTxRbFPpcmumfNx0Wk58/7NOAo4TQ2/GbS/GxMVZtn oUwvx4ku9aqYqbpoieoZiUznxXqpPPwWIalLtBrzJ1C+ -----END CERTIFICATE-----Generated at Fri Nov 28 08:30:16 2025 by rpki-client