This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/uva8pvFsOaTvHljAENnO0OApJyQ.roa File: uva8pvFsOaTvHljAENnO0OApJyQ.roa (raw, json) Hash identifier: s96p0dtNvUkcuw1I6udx4TABhuaIs/uj+2jYRluRdrs= Subject key identifier: BA:F6:BC:A6:F1:6C:39:A4:EF:1E:58:C0:10:D9:CE:D0:E0:29:27:24 Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Certificate serial: 019B621126EB02276148908DA65F53315EE7 Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/uva8pvFsOaTvHljAENnO0OApJyQ.roa Signing time: Sat 27 Dec 2025 23:07:29 +0000 ROA not before: Sat 27 Dec 2025 23:07:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 212.116.228.0/23 maxlen: 23 212.116.237.0/24 maxlen: 24 212.116.238.0/23 maxlen: 24 212.116.240.0/24 maxlen: 24 212.116.243.0/24 maxlen: 24 212.116.244.0/24 maxlen: 24 212.116.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 14:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:11:26:eb:02:27:61:48:90:8d:a6:5f:53:31:5e:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Validity Not Before: Dec 27 23:07:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=baf6bca6f16c39a4ef1e58c010d9ced0e0292724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:37:bf:7b:85:c0:ce:12:3d:2e:7d:ed:56:6a: a7:98:c0:f8:87:05:d5:28:80:c1:0b:f0:ac:af:46: e1:b6:1f:5f:bd:c2:1e:cb:96:00:55:8b:ae:81:fb: ae:20:84:c6:47:de:53:e1:4e:ee:da:2d:ab:8a:72: 07:75:76:99:8c:4a:ca:62:7d:2b:bf:4d:8d:43:94: 5c:a2:dc:ed:12:b9:3e:10:e6:76:fc:50:95:6c:af: 26:66:99:a5:9a:6b:b9:75:a5:54:50:37:f6:fc:f9: 7d:62:45:ce:17:d2:fd:51:be:6b:50:e1:7f:1d:50: 02:87:2d:8f:20:76:8f:2a:05:62:d9:e6:19:ef:fb: b2:28:9d:92:32:13:ba:1d:aa:2f:a1:52:5d:2b:fa: 04:db:90:1c:73:13:0d:4c:a9:9a:98:a8:e4:aa:b8: 7b:80:20:20:ab:db:ab:bf:77:61:5a:8a:93:df:18: 4c:43:14:86:43:aa:b4:b3:48:1b:18:e1:fd:83:8b: 75:9d:28:3e:65:56:a0:cf:1b:a6:c0:70:de:bc:47: ec:0a:0e:e1:ac:23:59:71:f5:56:f7:36:82:57:b9: 85:0b:32:0e:5a:20:15:10:55:00:8c:23:2d:67:48: 5c:ce:83:be:fa:d3:a1:98:11:3f:35:af:54:76:28: 25:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F6:BC:A6:F1:6C:39:A4:EF:1E:58:C0:10:D9:CE:D0:E0:29:27:24 X509v3 Authority Key Identifier: keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/uva8pvFsOaTvHljAENnO0OApJyQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.116.228.0/23 212.116.237.0-212.116.240.255 212.116.243.0-212.116.245.255 Signature Algorithm: sha256WithRSAEncryption 5e:99:02:8f:50:38:8c:1d:0b:66:79:15:af:bf:ef:da:47:44: 2d:3e:ed:1e:34:80:47:ee:3b:1b:b2:f5:be:a4:99:97:14:c4: f3:d8:41:57:6a:5e:40:18:c0:cd:e5:07:9d:6d:40:8a:6d:c9: 3d:85:38:8f:a5:58:29:83:38:59:65:b9:7e:f1:03:d6:67:1a: db:89:23:6e:c5:d3:8c:98:30:1a:98:78:9b:05:f3:70:e2:56: 6b:4a:63:03:ff:d1:f8:9f:34:ae:bf:43:f7:4a:81:e1:79:86: b7:6b:71:01:1d:b3:d7:50:fe:5e:30:27:c1:23:af:43:7b:3e: ff:75:42:1e:22:c7:8b:0a:24:20:8e:a8:be:42:13:d7:66:82: 8b:80:da:20:3e:0a:36:37:89:59:63:04:6d:55:38:e1:33:f9: 3a:cc:16:9a:22:fe:8e:aa:b0:d2:b9:ff:4a:7a:e2:03:44:a5: ab:d5:fb:4d:92:72:6f:7f:b5:44:d2:32:15:91:ec:d6:b5:78: 43:58:b8:67:d6:f8:bb:34:1d:b2:bf:ad:05:df:88:7a:8d:f5: 4d:7d:69:14:24:a0:41:27:36:a8:d8:07:e3:af:72:f4:47:44: fd:db:d4:da:86:0f:44:6d:f9:1e:42:6a:2b:c4:e0:28:30:05: 72:b0:d7:29 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtiESbrAidhSJCNpl9TMV7nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi ZTAwNWQwHhcNMjUxMjI3MjMwNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWY2YmNhNmYxNmMzOWE0ZWYxZTU4YzAxMGQ5Y2VkMGUwMjkyNzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuje/e4XAzhI9Ln3tVmqnmMD4hwXV KIDBC/Csr0bhth9fvcIey5YAVYuugfuuIITGR95T4U7u2i2rinIHdXaZjErKYn0r v02NQ5RcotztErk+EOZ2/FCVbK8mZpmlmmu5daVUUDf2/Pl9YkXOF9L9Ub5rUOF/ HVAChy2PIHaPKgVi2eYZ7/uyKJ2SMhO6HaovoVJdK/oE25AccxMNTKmamKjkqrh7 gCAgq9urv3dhWoqT3xhMQxSGQ6q0s0gbGOH9g4t1nSg+ZVagzxumwHDevEfsCg7h rCNZcfVW9zaCV7mFCzIOWiAVEFUAjCMtZ0hczoO++tOhmBE/Na9UdiglrwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLr2vKbxbDmk7x5YwBDZztDgKSckMB8GA1UdIwQY MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt ZTEyYjE2NDIxNWI5LzEvdXZhOHB2RnNPYVR2SGxqQUVObk8wT0FwSnlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5 LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQB1HTkMAwD BADUdO0DBADUdPAwDAMEANR08wMEAdR09DANBgkqhkiG9w0BAQsFAAOCAQEAXpkC j1A4jB0LZnkVr7/v2kdELT7tHjSAR+47G7L1vqSZlxTE89hBV2peQBjAzeUHnW1A im3JPYU4j6VYKYM4WWW5fvED1mca24kjbsXTjJgwGph4mwXzcOJWa0pjA//R+J80 rr9D90qB4XmGt2txAR2z11D+XjAnwSOvQ3s+/3VCHiLHiwokII6ovkIT12aCi4Da ID4KNjeJWWMEbVU44TP5OswWmiL+jqqw0rn/SnriA0Slq9X7TZJyb3+1RNIyFZHs 1rV4Q1i4Z9b4uzQdsr+tBd+Ieo31TX1pFCSgQSc2qNgH469y9EdE/dvU2oYPRG35 HkJqK8TgKDAFcrDXKQ== -----END CERTIFICATE-----Generated at Tue Dec 30 21:09:40 2025 by rpki-client