This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/Uc3CdKcVAOMWOb5D1jZpL5FcqO4.roa File: Uc3CdKcVAOMWOb5D1jZpL5FcqO4.roa (raw, json) Hash identifier: a+cNO7NeGK0+Kekgy2ApSwORgdGKnbPR+XAAnpzOBb8= Subject key identifier: 51:CD:C2:74:A7:15:00:E3:16:39:BE:43:D6:36:69:2F:91:5C:A8:EE Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Certificate serial: 019AA59A795E97B3960BEB385E5CB8A7FA80 Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/Uc3CdKcVAOMWOb5D1jZpL5FcqO4.roa Signing time: Fri 21 Nov 2025 08:49:15 +0000 ROA not before: Fri 21 Nov 2025 08:49:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39855 IP address blocks: 45.11.53.0/24 maxlen: 24 45.11.54.0/23 maxlen: 24 45.11.177.0/24 maxlen: 24 45.11.178.0/23 maxlen: 24 45.13.108.0/24 maxlen: 24 45.13.109.0/24 maxlen: 24 45.13.110.0/23 maxlen: 24 45.14.216.0/24 maxlen: 24 45.14.217.0/24 maxlen: 24 45.14.218.0/23 maxlen: 24 45.91.117.0/24 maxlen: 24 45.133.140.0/24 maxlen: 24 45.133.142.0/24 maxlen: 24 91.212.20.0/24 maxlen: 24 91.212.27.0/24 maxlen: 24 193.39.246.0/24 maxlen: 24 195.80.230.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 05:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:9a:79:5e:97:b3:96:0b:eb:38:5e:5c:b8:a7:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Validity Not Before: Nov 21 08:49:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=51cdc274a71500e31639be43d636692f915ca8ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d1:13:7b:fb:d4:d8:13:45:3b:ad:fb:e8:02: 7c:e6:f2:29:1a:a2:4d:6b:ed:b3:4f:55:b9:6b:53: 57:81:d6:50:4b:44:06:38:cf:e6:48:d1:2a:4e:76: 9c:26:32:84:a0:f6:28:c9:8c:4c:6d:86:2d:82:da: 72:b5:fd:ae:b3:92:0f:2b:49:31:b9:c7:25:ed:03: a9:20:64:80:3f:d4:d7:d7:62:49:27:86:72:3b:f8: 2f:42:42:c1:50:1e:b6:73:a1:99:a0:23:18:1a:a4: 36:1b:cc:b1:41:8c:e3:ae:33:69:c3:4d:da:17:9a: e5:96:28:ea:bf:26:98:8f:79:35:98:44:97:fe:b7: 83:2a:f9:19:37:4b:2f:e4:eb:bb:ea:ca:e5:77:6f: c3:5f:de:aa:69:11:6a:21:e7:7b:e9:98:5e:c7:6b: 57:77:f8:d4:2c:c5:7f:16:b4:51:f8:2a:e3:53:be: 2c:87:05:34:59:3e:fc:26:ec:1b:9b:24:76:6c:d1: bd:5c:8c:a1:ca:5f:28:3e:88:07:6b:0b:37:0d:1a: 99:f9:c2:20:e1:ca:5e:20:75:6a:ef:9f:a5:da:6f: 3b:db:1f:ac:dc:8b:da:7d:73:c9:2f:d5:e3:c7:5c: 4f:1e:ff:36:77:06:0a:43:e2:0d:51:98:7b:92:a6: 23:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:CD:C2:74:A7:15:00:E3:16:39:BE:43:D6:36:69:2F:91:5C:A8:EE X509v3 Authority Key Identifier: keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/Uc3CdKcVAOMWOb5D1jZpL5FcqO4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.53.0-45.11.55.255 45.11.177.0-45.11.179.255 45.13.108.0/22 45.14.216.0/22 45.91.117.0/24 45.133.140.0/24 45.133.142.0/24 91.212.20.0/24 91.212.27.0/24 193.39.246.0/24 195.80.230.0/23 Signature Algorithm: sha256WithRSAEncryption 21:87:44:26:14:07:30:fd:e8:51:d3:48:7a:7d:f9:95:58:b1: 17:c7:fa:59:93:89:0f:bf:95:cf:c2:09:71:1d:09:7e:5e:28: bd:1e:b1:ff:41:ff:54:5e:ac:70:7a:00:e5:44:9e:47:e3:33: ba:63:73:7b:93:b1:04:fe:50:a2:d1:4a:27:5f:5b:2a:4b:39: 7a:8e:19:48:1e:c4:14:be:eb:d3:81:b0:36:c4:17:c9:de:a1: 4f:c6:1f:c3:5f:82:53:e9:97:59:59:18:ce:3e:10:92:f4:33: 4d:48:11:24:b8:8b:4a:21:9b:e0:b3:80:c0:1c:82:9d:bc:f2: 1a:4f:6c:ed:69:eb:72:37:99:07:4b:73:50:3d:ce:c1:6b:b5: 4d:3f:0a:a6:57:52:02:d3:7a:b6:76:32:02:03:97:f6:4f:17: 12:2a:0d:59:1e:44:07:81:93:c0:8e:d2:90:6d:71:5f:5b:17: 7a:40:3a:32:84:4a:83:8e:67:7d:e7:72:83:67:c7:1f:72:60: 17:94:36:cb:71:a8:67:90:61:57:78:c8:41:1e:58:a9:b0:65: 33:67:ac:82:d2:e7:c4:46:63:f6:b7:28:87:be:3b:f6:df:27: 05:5a:0d:39:58:87:2b:4a:f9:4e:e2:64:95:46:a8:6e:5c:9d: 90:db:a7:74 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgISAZqlmnlel7OWC+s4Xly4p/qAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMWMxMTY1OGQyMDQxZWFmMjUwMmZlNTQwOGVkNDkzYmJk NGYzMTgwHhcNMjUxMTIxMDg0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWNkYzI3NGE3MTUwMGUzMTYzOWJlNDNkNjM2NjkyZjkxNWNhOGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NETe/vU2BNFO6376AJ85vIpGqJN a+2zT1W5a1NXgdZQS0QGOM/mSNEqTnacJjKEoPYoyYxMbYYtgtpytf2us5IPK0kx uccl7QOpIGSAP9TX12JJJ4ZyO/gvQkLBUB62c6GZoCMYGqQ2G8yxQYzjrjNpw03a F5rllijqvyaYj3k1mESX/reDKvkZN0sv5Ou76srld2/DX96qaRFqIed76Zhex2tX d/jULMV/FrRR+CrjU74shwU0WT78JuwbmyR2bNG9XIyhyl8oPogHaws3DRqZ+cIg 4cpeIHVq75+l2m872x+s3IvafXPJL9Xjx1xPHv82dwYKQ+INUZh7kqYjsQIDAQAB o4ICVTCCAlEwHQYDVR0OBBYEFFHNwnSnFQDjFjm+Q9Y2aS+RXKjuMB8GA1UdIwQY MBaAFI4cEWWNIEHq8lAv5UCO1JO71PMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjIt NjMzNDhjZGJmMDI0LzEvVWMzQ2RLY1ZBT01XT2I1RDFqWnBMNUZjcU80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjItNjMzNDhjZGJmMDI0 LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBYBAIAATBSMAwDBAAtCzUD BAMtCzAwDAMEAC0LsQMEAi0LsAMEAi0NbAMEAi0O2AMEAC1bdQMEAC2FjAMEAC2F jgMEAFvUFAMEAFvUGwMEAMEn9gMEAcNQ5jANBgkqhkiG9w0BAQsFAAOCAQEAIYdE JhQHMP3oUdNIen35lVixF8f6WZOJD7+Vz8IJcR0Jfl4ovR6x/0H/VF6scHoA5USe R+MzumNze5OxBP5QotFKJ19bKks5eo4ZSB7EFL7r04GwNsQXyd6hT8Yfw1+CU+mX WVkYzj4QkvQzTUgRJLiLSiGb4LOAwByCnbzyGk9s7WnrcjeZB0tzUD3OwWu1TT8K pldSAtN6tnYyAgOX9k8XEioNWR5EB4GTwI7SkG1xX1sXekA6MoRKg45nfedyg2fH H3JgF5Q2y3GoZ5BhV3jIQR5YqbBlM2esgtLnxEZj9rcoh7479t8nBVoNOViHK0r5 TuJklUaoblydkNundA== -----END CERTIFICATE-----Generated at Fri Dec 5 15:20:26 2025 by rpki-client