This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/rUKIXSNoku-s4H0elFpLk-iK8XY.roa File: rUKIXSNoku-s4H0elFpLk-iK8XY.roa (raw, json) Hash identifier: QK159DI2sWxdlIL1qi4EvXyGAxLNLVcLS1syEm3cec4= Subject key identifier: AD:42:88:5D:23:68:92:EF:AC:E0:7D:1E:94:5A:4B:93:E8:8A:F1:76 Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 019AD72D1B2297B7D41DEE41173C5FF99EDB Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/rUKIXSNoku-s4H0elFpLk-iK8XY.roa Signing time: Sun 30 Nov 2025 23:50:48 +0000 ROA not before: Sun 30 Nov 2025 23:50:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 401783 IP address blocks: 144.56.89.0/24 maxlen: 24 144.56.111.0/24 maxlen: 24 144.56.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 16:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d7:2d:1b:22:97:b7:d4:1d:ee:41:17:3c:5f:f9:9e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Nov 30 23:50:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ad42885d236892eface07d1e945a4b93e88af176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0e:39:98:5a:02:19:d1:d9:ce:f2:eb:82:fb: 3c:d4:0d:4e:8e:ee:7c:89:44:98:48:b3:5f:0e:2c: 9f:94:61:d0:c7:8a:b0:29:d6:63:f5:51:28:9b:a1: c1:3b:38:76:aa:80:9b:26:40:ad:a3:f8:a7:e7:c7: a2:16:3e:ea:e8:31:c8:f0:b9:7d:61:02:51:ba:dd: 84:0f:d7:ef:36:82:ae:bb:13:40:7d:88:80:cd:f2: fb:85:7d:05:53:49:27:13:49:88:f8:c3:ac:a1:94: 7b:15:72:31:0e:24:ec:51:e6:96:94:5c:88:50:e2: b7:15:9e:57:84:e2:b6:75:d8:7c:da:44:17:24:84: 75:9d:4f:04:0b:4c:a6:ea:33:c4:3b:20:cb:50:97: d3:54:50:71:44:1c:59:d6:5d:69:da:62:bf:6f:18: d3:2c:03:f1:9f:81:be:75:3d:81:76:6a:3f:f6:d3: b2:98:22:1e:0d:07:4c:78:57:3c:fd:94:5a:09:8a: 6c:09:22:91:bc:25:d3:95:99:64:a8:b8:7f:a2:a0: 65:f2:9c:58:7a:a2:63:41:f7:52:71:ac:42:0e:7f: 96:0b:6e:2e:71:d1:40:e3:52:70:a3:46:d5:71:57: f7:3b:07:62:b2:45:ea:b8:60:8e:bc:dc:c2:bd:64: ba:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:42:88:5D:23:68:92:EF:AC:E0:7D:1E:94:5A:4B:93:E8:8A:F1:76 X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/rUKIXSNoku-s4H0elFpLk-iK8XY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.56.89.0/24 144.56.111.0/24 144.56.113.0/24 Signature Algorithm: sha256WithRSAEncryption c7:1a:cc:81:b6:bd:ec:ae:34:a6:43:f5:45:62:ae:cb:8c:3c: 6a:89:24:f0:43:f5:a2:15:9d:a3:f5:32:f7:6d:88:17:7c:86: 86:fb:14:76:4a:45:e3:93:93:7b:9b:39:89:1c:6e:c9:f6:e8: 3d:0f:94:9d:27:ba:ca:43:65:2d:ba:b9:f2:f4:b4:30:8a:2b: 8c:6a:78:a6:6b:86:0a:04:80:c5:20:e8:53:d8:c0:0f:e2:9a: ca:39:19:c3:55:11:70:61:54:13:c7:7c:e3:bc:06:54:e7:9c: 13:51:cc:c4:91:80:7c:47:a9:7c:41:03:7a:4c:f8:ea:bd:74: 55:bc:39:2b:35:6f:22:3e:d8:ee:1b:43:96:e2:8f:c5:f9:45: 41:97:4c:68:88:b2:bc:7f:c2:f4:65:ef:38:66:bd:f6:5b:21: 09:a9:de:fe:4f:d4:18:ee:c9:56:b0:39:fb:a6:89:d5:11:18: 65:0c:66:40:14:dc:92:fb:04:a6:8a:1a:44:e8:57:91:66:70: e8:31:46:0a:59:46:6d:65:42:db:f1:20:d8:7d:1f:27:ce:a1: 04:ea:73:e3:b2:ab:ee:b8:c5:70:2c:87:7b:39:ac:5b:37:ec: 83:78:1f:1c:ec:aa:f6:2d:c3:51:97:7b:59:3c:81:67:e2:f8: fe:54:6b:6c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrXLRsil7fUHe5BFzxf+Z7bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjUxMTMwMjM1MDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDQyODg1ZDIzNjg5MmVmYWNlMDdkMWU5NDVhNGI5M2U4OGFmMTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA45mFoCGdHZzvLrgvs81A1Oju58 iUSYSLNfDiyflGHQx4qwKdZj9VEom6HBOzh2qoCbJkCto/in58eiFj7q6DHI8Ll9 YQJRut2ED9fvNoKuuxNAfYiAzfL7hX0FU0knE0mI+MOsoZR7FXIxDiTsUeaWlFyI UOK3FZ5XhOK2ddh82kQXJIR1nU8EC0ym6jPEOyDLUJfTVFBxRBxZ1l1p2mK/bxjT LAPxn4G+dT2Bdmo/9tOymCIeDQdMeFc8/ZRaCYpsCSKRvCXTlZlkqLh/oqBl8pxY eqJjQfdScaxCDn+WC24ucdFA41Jwo0bVcVf3OwdiskXquGCOvNzCvWS6/QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFK1CiF0jaJLvrOB9HpRaS5PoivF2MB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvclVLSVhTTm9rdS1zNEgwZWxGcExrLWlLOFhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAkDhZAwQA kDhvAwQAkDhxMA0GCSqGSIb3DQEBCwUAA4IBAQDHGsyBtr3srjSmQ/VFYq7LjDxq iSTwQ/WiFZ2j9TL3bYgXfIaG+xR2SkXjk5N7mzmJHG7J9ug9D5SdJ7rKQ2Uturny 9LQwiiuManima4YKBIDFIOhT2MAP4prKORnDVRFwYVQTx3zjvAZU55wTUczEkYB8 R6l8QQN6TPjqvXRVvDkrNW8iPtjuG0OW4o/F+UVBl0xoiLK8f8L0Ze84Zr32WyEJ qd7+T9QY7slWsDn7ponVERhlDGZAFNyS+wSmihpE6FeRZnDoMUYKWUZtZULb8SDY fR8nzqEE6nPjsqvuuMVwLId7OaxbN+yDeB8c7Kr2LcNRl3tZPIFn4vj+VGts -----END CERTIFICATE-----Generated at Thu Dec 4 21:27:57 2025 by rpki-client