This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/fUUIXA0ZKD1YHnW2YsU9M7iCDvI.roa File: fUUIXA0ZKD1YHnW2YsU9M7iCDvI.roa (raw, json) Hash identifier: J0yQMY/JfSW+KKrhTqXg5zk5rDbjEWVMRlOIFmrPtkk= Subject key identifier: 7D:45:08:5C:0D:19:28:3D:58:1E:75:B6:62:C5:3D:33:B8:82:0E:F2 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019A9B18149587853C4DF9555CFB3B23E97D Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/fUUIXA0ZKD1YHnW2YsU9M7iCDvI.roa Signing time: Wed 19 Nov 2025 07:50:37 +0000 ROA not before: Wed 19 Nov 2025 07:50:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205125 IP address blocks: 45.95.201.0/24 maxlen: 24 2a03:e2c0::/32 maxlen: 32 2a0b:7780::/29 maxlen: 29 2a0d:3880::/29 maxlen: 29 2a0d:8340::/32 maxlen: 32 2a0d:8343::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:18:14:95:87:85:3c:4d:f9:55:5c:fb:3b:23:e9:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Nov 19 07:50:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7d45085c0d19283d581e75b662c53d33b8820ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:80:c1:92:40:86:41:a8:b5:4e:1e:ed:93:e5: 45:1a:9f:31:f9:65:50:71:18:fe:fe:70:c1:2b:6a: 52:93:e5:65:9d:e4:d1:64:b0:c0:f7:56:1e:dd:be: cc:b4:dc:2b:14:6d:02:bf:09:c2:83:76:7f:77:2c: 78:93:9f:9e:53:5a:19:91:22:15:2d:b6:10:6d:18: 24:04:be:9b:70:57:5e:1d:4d:50:96:a3:4a:96:12: 46:6a:00:d2:a5:56:ff:f6:91:8d:6e:b6:83:e7:45: de:36:e8:51:66:85:71:f8:60:c3:ef:91:08:23:bd: 5f:15:62:99:82:06:35:39:87:c9:41:5c:17:ec:16: b7:c4:24:a3:43:c1:10:7d:d3:77:78:b2:e7:03:87: 31:e0:40:fd:0c:5c:86:61:9e:35:79:a2:a7:0b:a3: d1:8c:bc:44:a7:5e:34:3a:6d:45:06:0a:69:42:2e: 7c:ca:93:6b:4f:66:20:09:b3:b6:58:90:a4:91:60: 18:3b:2f:79:f7:18:22:81:43:a9:6d:36:e4:68:71: 46:d4:b5:70:63:0e:64:83:14:b2:16:ab:a6:f5:b4: e6:34:20:76:7d:d2:7d:79:23:4b:8f:32:e7:87:3d: 54:54:1d:cc:05:a5:5f:98:b2:a0:19:7b:34:a1:bb: 65:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:45:08:5C:0D:19:28:3D:58:1E:75:B6:62:C5:3D:33:B8:82:0E:F2 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/fUUIXA0ZKD1YHnW2YsU9M7iCDvI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.201.0/24 IPv6: 2a03:e2c0::/32 2a0b:7780::/29 2a0d:3880::/29 2a0d:8340::/32 2a0d:8343::/32 Signature Algorithm: sha256WithRSAEncryption 8c:58:df:42:33:7d:d4:d5:e8:16:61:bc:28:fd:7b:5b:aa:ed: 8a:42:18:b3:a4:8d:cd:bc:cd:5d:5c:ef:77:81:94:f3:3a:17: 74:ba:70:39:86:36:25:e7:bd:0f:60:63:5c:b5:65:27:2a:67: 76:c1:bb:c2:47:ad:01:8e:2a:71:17:d4:3c:16:4d:56:98:2a: dd:ed:7b:7d:b6:f1:53:ef:40:c8:98:83:ad:9e:38:cf:a1:c8: cb:42:fb:06:08:04:cd:08:69:eb:17:45:0e:48:49:44:c2:f6: 5e:b5:e2:66:28:7f:7d:e9:0b:64:cd:72:7f:8e:75:bf:85:92: fb:81:95:c2:6e:d8:53:d2:91:dc:8e:e3:af:00:f2:23:06:f4: 82:8d:17:ff:be:a4:b7:ac:d4:fb:17:af:b8:58:4c:a7:83:6e: 45:ba:b7:5f:82:3d:83:54:bb:8b:e9:4d:8a:f3:2b:70:66:51: 16:84:41:dc:f2:a9:96:ab:9d:2d:c4:67:6a:d4:0c:74:3a:90: fb:ca:67:6c:6f:ac:f6:58:5a:12:28:2c:56:3f:01:f6:da:e7: a5:c5:e2:aa:f2:91:56:f6:94:00:f0:90:7b:a4:fe:8e:53:29: ee:af:73:b4:a2:3c:92:f8:c8:7e:5f:59:2c:e3:73:bc:6a:25: 1a:cf:a9:fc -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgISAZqbGBSVh4U8TflVXPs7I+l9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjUxMTE5MDc1MDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDQ1MDg1YzBkMTkyODNkNTgxZTc1YjY2MmM1M2QzM2I4ODIwZWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIDBkkCGQai1Th7tk+VFGp8x+WVQ cRj+/nDBK2pSk+VlneTRZLDA91Ye3b7MtNwrFG0CvwnCg3Z/dyx4k5+eU1oZkSIV LbYQbRgkBL6bcFdeHU1QlqNKlhJGagDSpVb/9pGNbraD50XeNuhRZoVx+GDD75EI I71fFWKZggY1OYfJQVwX7Ba3xCSjQ8EQfdN3eLLnA4cx4ED9DFyGYZ41eaKnC6PR jLxEp140Om1FBgppQi58ypNrT2YgCbO2WJCkkWAYOy959xgigUOpbTbkaHFG1LVw Yw5kgxSyFqum9bTmNCB2fdJ9eSNLjzLnhz1UVB3MBaVfmLKgGXs0obtlaQIDAQAB o4ICNDCCAjAwHQYDVR0OBBYEFH1FCFwNGSg9WB51tmLFPTO4gg7yMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvZlVVSVhBMFpLRDFZSG5XMllzVTlNN2lDRHZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAMBAIAATAGAwQALV/JMCkE AgACMCMDBQAqA+LAAwUDKgt3gAMFAyoNOIADBQAqDYNAAwUAKg2DQzANBgkqhkiG 9w0BAQsFAAOCAQEAjFjfQjN91NXoFmG8KP17W6rtikIYs6SNzbzNXVzvd4GU8zoX dLpwOYY2Jee9D2BjXLVlJypndsG7wketAY4qcRfUPBZNVpgq3e17fbbxU+9AyJiD rZ44z6HIy0L7BggEzQhp6xdFDkhJRML2XrXiZih/fekLZM1yf451v4WS+4GVwm7Y U9KR3I7jrwDyIwb0go0X/76kt6zU+xevuFhMp4NuRbq3X4I9g1S7i+lNivMrcGZR FoRB3PKplqudLcRnatQMdDqQ+8pnbG+s9lhaEigsVj8B9trnpcXiqvKRVvaUAPCQ e6T+jlMp7q9ztKI8kvjIfl9ZLONzvGolGs+p/A== -----END CERTIFICATE-----Generated at Fri Dec 5 21:27:05 2025 by rpki-client