This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/uoKdGZ3YS7TWQpMC2xYrIq-o0as.roa File: uoKdGZ3YS7TWQpMC2xYrIq-o0as.roa (raw, json) Hash identifier: 3gtStavqLDcBab3noOeg2k00lQeq+Aw5q77E/VYgQoQ= Subject key identifier: BA:82:9D:19:9D:D8:4B:B4:D6:42:93:02:DB:16:2B:22:AF:A8:D1:AB Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B212FA06804AD356D0CEFC4689D78B463 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/uoKdGZ3YS7TWQpMC2xYrIq-o0as.roa Signing time: Mon 15 Dec 2025 08:45:27 +0000 ROA not before: Mon 15 Dec 2025 08:45:27 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202828 IP address blocks: 104.238.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 05:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:2f:a0:68:04:ad:35:6d:0c:ef:c4:68:9d:78:b4:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Dec 15 08:45:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ba829d199dd84bb4d6429302db162b22afa8d1ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:46:97:24:06:48:6d:19:ea:6f:20:40:0c:b0: a8:7e:d9:66:78:88:16:5a:50:b4:d8:3d:9d:cb:4a: 5e:9e:90:ef:16:53:fe:3c:51:78:09:f1:8c:7b:99: 73:c3:cf:b5:b3:8b:e7:a9:c8:72:2d:5b:bc:fb:6f: 07:8f:9f:e6:4a:ec:cb:e8:21:8a:78:3f:07:c5:3f: 6f:2a:6a:e7:97:ab:a7:e9:57:b8:16:6a:0e:d0:26: 99:ba:24:09:66:4f:60:74:b4:c7:bf:99:86:25:3d: ab:d9:91:bd:64:78:5b:f8:ab:61:ea:60:8f:94:12: 0f:4b:d2:ee:bb:33:4e:e5:c7:7b:c0:88:a6:ba:b3: 37:3f:73:9d:e6:b3:bd:5a:92:9b:e3:a8:99:84:e4: cd:db:70:91:63:73:5b:0f:19:b7:d1:9e:62:3f:d4: 0a:6d:24:d8:9c:9c:1b:0c:eb:c6:9c:9c:93:a9:cc: 54:01:84:85:68:25:e5:91:bb:d4:eb:2e:b0:c3:f7: d7:88:af:a2:95:69:fa:4f:f6:54:50:69:0b:45:95: 5f:40:9a:24:67:60:e4:ec:69:e6:65:37:ae:d5:02: f4:97:63:1d:07:ca:eb:1d:3f:5c:c6:b6:a1:54:36: 34:1b:6c:be:4a:91:b6:93:97:ee:de:38:1b:6b:47: 26:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:82:9D:19:9D:D8:4B:B4:D6:42:93:02:DB:16:2B:22:AF:A8:D1:AB X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/uoKdGZ3YS7TWQpMC2xYrIq-o0as.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.238.11.0/24 Signature Algorithm: sha256WithRSAEncryption 56:71:5f:37:ba:4c:10:a1:00:db:fe:f9:41:28:1c:cc:ff:07: 4b:8f:86:db:e1:9c:0b:e9:6d:ef:e2:76:b2:99:97:11:82:47: c7:13:94:74:32:3a:c5:27:d8:46:4f:14:0c:4e:3e:92:df:44: 7c:45:69:77:3c:be:43:c5:3c:2f:8d:f7:13:fa:76:57:f3:e4: 24:a6:05:6a:33:54:29:a3:81:1c:45:86:c6:31:d2:3f:23:11: 73:6f:4a:e3:f4:59:51:d6:9e:bb:df:e5:94:fe:f6:0e:ab:89: 41:c4:d3:dd:4c:3a:2f:3e:74:20:6b:1f:7f:85:41:f2:5d:e3: 38:67:19:56:63:21:2e:a1:3f:6d:74:08:d2:ed:4d:e3:02:fb: 01:31:74:c2:ef:9e:a9:81:be:94:ae:41:48:39:70:c2:d0:fb: 55:ca:3b:3e:56:56:75:cd:4e:37:e2:30:e7:5b:3a:76:c0:87: fb:18:be:45:84:a1:4e:eb:39:cd:ab:31:8e:b5:98:5f:5d:be: ba:c6:7d:7c:a3:29:07:23:5e:a0:98:54:27:11:70:91:88:e2: 90:83:4b:3a:b3:75:3c:e7:4f:99:29:cf:0c:ee:72:45:e8:ff: a2:16:54:75:d0:2a:56:f0:a7:e0:3a:4e:3d:ce:10:15:37:d0: 8f:63:7f:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZshL6BoBK01bQzvxGideLRjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjUxMjE1MDg0NTI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTgyOWQxOTlkZDg0YmI0ZDY0MjkzMDJkYjE2MmIyMmFmYThkMWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEaXJAZIbRnqbyBADLCoftlmeIgW WlC02D2dy0penpDvFlP+PFF4CfGMe5lzw8+1s4vnqchyLVu8+28Hj5/mSuzL6CGK eD8HxT9vKmrnl6un6Ve4FmoO0CaZuiQJZk9gdLTHv5mGJT2r2ZG9ZHhb+Kth6mCP lBIPS9LuuzNO5cd7wIimurM3P3Od5rO9WpKb46iZhOTN23CRY3NbDxm30Z5iP9QK bSTYnJwbDOvGnJyTqcxUAYSFaCXlkbvU6y6ww/fXiK+ilWn6T/ZUUGkLRZVfQJok Z2Dk7GnmZTeu1QL0l2MdB8rrHT9cxrahVDY0G2y+SpG2k5fu3jgba0cmOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLqCnRmd2Eu01kKTAtsWKyKvqNGrMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvdW9LZEdaM1lTN1RXUXBNQzJ4WXJJcS1vMGFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO4LMA0G CSqGSIb3DQEBCwUAA4IBAQBWcV83ukwQoQDb/vlBKBzM/wdLj4bb4ZwL6W3v4nay mZcRgkfHE5R0MjrFJ9hGTxQMTj6S30R8RWl3PL5DxTwvjfcT+nZX8+QkpgVqM1Qp o4EcRYbGMdI/IxFzb0rj9FlR1p673+WU/vYOq4lBxNPdTDovPnQgax9/hUHyXeM4 ZxlWYyEuoT9tdAjS7U3jAvsBMXTC756pgb6UrkFIOXDC0PtVyjs+VlZ1zU434jDn Wzp2wIf7GL5FhKFO6znNqzGOtZhfXb66xn18oykHI16gmFQnEXCRiOKQg0s6s3U8 50+ZKc8M7nJF6P+iFlR10CpW8KfgOk49zhAVN9CPY3+U -----END CERTIFICATE-----Generated at Wed Dec 17 12:16:11 2025 by rpki-client