This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/uDToIQY4-Ia1DoEWBMqIhRSppAY.roa File: uDToIQY4-Ia1DoEWBMqIhRSppAY.roa (raw, json) Hash identifier: 8rLm7jn+n961v0MD47zZwhdQrrJlW6Dq7fbTf1DUZKo= Subject key identifier: B8:34:E8:21:06:38:F8:86:B5:0E:81:16:04:CA:88:85:14:A9:A4:06 Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Certificate serial: 019B5A0D2B3F7E557C8AEE43841B63B96EFC Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/uDToIQY4-Ia1DoEWBMqIhRSppAY.roa Signing time: Fri 26 Dec 2025 09:46:11 +0000 ROA not before: Fri 26 Dec 2025 09:46:11 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 80.174.114.0/24 maxlen: 24 80.174.122.0/24 maxlen: 24 80.174.125.0/24 maxlen: 24 80.174.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 12:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:0d:2b:3f:7e:55:7c:8a:ee:43:84:1b:63:b9:6e:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Validity Not Before: Dec 26 09:46:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b834e8210638f886b50e811604ca888514a9a406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:93:90:be:4f:59:50:e0:1c:cc:31:c9:e5:3d: 38:fa:24:c8:fc:45:aa:61:e6:9d:24:97:ee:0a:39: f0:cd:be:e5:24:9b:aa:58:a1:dc:8c:70:be:fb:f9: 1d:2b:c7:91:ec:b4:80:1f:24:da:e4:cc:37:e6:fa: 07:2f:65:76:40:80:b8:6f:cd:cf:fc:a4:4b:9d:95: 4e:b9:ce:bd:96:af:55:77:87:9f:d2:9a:ab:dd:eb: 48:7a:2d:52:2d:7c:62:60:cb:11:ec:88:f0:fe:46: 64:8e:d3:bf:c9:cb:34:df:79:dc:13:0e:38:c4:5d: de:ca:54:3a:36:48:63:3f:93:ea:b3:34:a7:fd:3b: 61:cf:5b:f7:91:73:f1:42:60:c3:f8:21:8d:46:45: d0:4d:88:2a:00:90:cd:f1:7f:de:f0:ad:50:8e:bf: b1:a5:a7:90:f3:70:6a:85:3d:56:88:40:3c:23:ec: 9b:da:3f:66:9c:ad:5c:38:43:97:94:15:77:96:a0: 74:51:e4:ce:42:02:5f:dd:99:be:aa:b3:3d:89:da: d5:41:83:93:62:5d:e8:1a:65:57:cd:29:af:59:00: b6:14:c2:87:19:26:20:9e:89:e8:eb:1d:ed:ad:ba: bb:04:82:b4:f8:b2:98:9d:dd:74:47:0e:c0:01:7d: 6c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:34:E8:21:06:38:F8:86:B5:0E:81:16:04:CA:88:85:14:A9:A4:06 X509v3 Authority Key Identifier: keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/uDToIQY4-Ia1DoEWBMqIhRSppAY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.174.114.0/24 80.174.122.0/24 80.174.125.0-80.174.126.255 Signature Algorithm: sha256WithRSAEncryption 62:68:74:e6:14:89:c7:d0:2c:b3:19:0c:94:e7:1a:41:92:eb: f2:0a:aa:6e:8e:12:fb:a4:de:c9:a4:05:bb:34:40:bb:23:1f: a8:6d:04:e1:f1:18:f4:b3:9b:87:9d:dc:b1:56:05:89:79:f1: ec:56:b7:17:9e:49:96:bc:43:63:8f:a8:47:cf:06:64:65:ee: a0:3a:4a:a6:e2:aa:64:36:da:dd:bd:50:76:c0:77:65:b1:62: 21:11:f6:84:3a:d3:25:b1:97:2a:09:93:8d:fc:6d:f0:f9:78: e5:d4:da:72:15:9f:a5:1b:22:81:1f:81:c0:90:7a:4f:3b:80: ac:da:bf:06:d0:60:25:a5:cc:b8:32:1d:15:30:1f:81:61:cc: 22:d6:94:3e:d7:31:ca:f3:90:4f:ae:02:2c:8c:ee:a1:55:0a: 71:99:b7:6d:b5:67:16:2d:29:37:dc:22:19:bf:5a:fa:7b:19: 8e:c3:02:d9:f3:e4:05:91:71:37:ca:06:40:83:4c:06:8a:35: 71:27:c6:91:79:0b:e0:72:51:88:1d:86:6d:ef:2a:ad:55:9f: 6a:ee:1a:9f:cb:e1:1b:c9:81:3a:61:93:1c:fd:8c:1d:66:04: 89:c5:1f:c5:fd:88:f0:9c:0a:6b:f1:5b:63:32:29:e2:31:36: 68:36:1a:0a -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZtaDSs/flV8iu5DhBtjuW78MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj MDZiYmUwHhcNMjUxMjI2MDk0NjExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODM0ZTgyMTA2MzhmODg2YjUwZTgxMTYwNGNhODg4NTE0YTlhNDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pOQvk9ZUOAczDHJ5T04+iTI/EWq YeadJJfuCjnwzb7lJJuqWKHcjHC++/kdK8eR7LSAHyTa5Mw35voHL2V2QIC4b83P /KRLnZVOuc69lq9Vd4ef0pqr3etIei1SLXxiYMsR7Ijw/kZkjtO/ycs033ncEw44 xF3eylQ6NkhjP5PqszSn/Tthz1v3kXPxQmDD+CGNRkXQTYgqAJDN8X/e8K1Qjr+x paeQ83BqhT1WiEA8I+yb2j9mnK1cOEOXlBV3lqB0UeTOQgJf3Zm+qrM9idrVQYOT Yl3oGmVXzSmvWQC2FMKHGSYgnono6x3trbq7BIK0+LKYnd10Rw7AAX1stQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFLg06CEGOPiGtQ6BFgTKiIUUqaQGMB8GA1UdIwQY MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt NzM0MjhmOWM3YmZmLzEvdURUb0lRWTQtSWExRG9FV0JNcUloUlNwcEFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAUK5yAwQA UK56MAwDBABQrn0DBABQrn4wDQYJKoZIhvcNAQELBQADggEBAGJodOYUicfQLLMZ DJTnGkGS6/IKqm6OEvuk3smkBbs0QLsjH6htBOHxGPSzm4ed3LFWBYl58exWtxee SZa8Q2OPqEfPBmRl7qA6SqbiqmQ22t29UHbAd2WxYiER9oQ60yWxlyoJk438bfD5 eOXU2nIVn6UbIoEfgcCQek87gKzavwbQYCWlzLgyHRUwH4FhzCLWlD7XMcrzkE+u AiyM7qFVCnGZt221ZxYtKTfcIhm/Wvp7GY7DAtnz5AWRcTfKBkCDTAaKNXEnxpF5 C+ByUYgdhm3vKq1Vn2ruGp/L4RvJgTphkxz9jB1mBInFH8X9iPCcCmvxW2MyKeIx Nmg2Ggo= -----END CERTIFICATE-----Generated at Tue Dec 30 21:05:23 2025 by rpki-client