This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/UQob5uF8Hsa2xw_VpoCvAU--Oss.roa File: UQob5uF8Hsa2xw_VpoCvAU--Oss.roa (raw, json) Hash identifier: M6QmTf8n/Ml2gcxbX34iDmCYeKVGIFIsSSagQppCato= Subject key identifier: 51:0A:1B:E6:E1:7C:1E:C6:B6:C7:0F:D5:A6:80:AF:01:4F:BE:3A:CB Certificate issuer: /CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7 Certificate serial: 019AFED2592106A6688EF51B267E3ED2060E Authority key identifier: 7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/UQob5uF8Hsa2xw_VpoCvAU--Oss.roa Signing time: Mon 08 Dec 2025 16:36:29 +0000 ROA not before: Mon 08 Dec 2025 16:36:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6461 IP address blocks: 5.133.172.0/22 maxlen: 24 46.231.8.0/21 maxlen: 24 85.95.32.0/19 maxlen: 24 91.209.142.0/24 maxlen: 24 91.214.228.0/22 maxlen: 24 151.249.64.0/20 maxlen: 24 185.44.248.0/22 maxlen: 24 185.113.0.0/22 maxlen: 24 185.168.144.0/22 maxlen: 24 209.35.128.0/20 maxlen: 24 2a01:5640::/32 maxlen: 32 2a0d:ea00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:d2:59:21:06:a6:68:8e:f5:1b:26:7e:3e:d2:06:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7 Validity Not Before: Dec 8 16:36:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=510a1be6e17c1ec6b6c70fd5a680af014fbe3acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4e:5b:c0:ef:ae:a3:62:d4:9f:60:2e:1e:3a: 80:6d:7e:0e:3a:c1:f4:c1:3a:ab:18:d3:c7:c0:05: d4:37:04:a3:88:de:04:28:32:6d:f3:a3:11:12:da: b9:a1:65:63:6b:d5:92:a2:1a:5a:cc:44:55:7f:3c: 71:ce:66:f7:2f:f5:94:1e:ee:02:f8:16:10:54:91: 4e:3b:cb:1f:04:ec:52:45:68:28:48:1e:07:61:c6: bc:a8:f6:64:36:27:f7:c7:74:a9:35:66:cc:c0:33: 31:73:c6:26:a3:69:10:76:c3:db:15:f6:02:0e:af: 53:68:41:9c:da:6c:98:db:0a:82:55:0b:b1:4a:f4: 70:65:d3:a9:2f:25:e4:d6:9a:c5:eb:e1:69:ad:af: db:88:58:b6:23:f3:86:fd:78:f9:78:74:20:14:ac: bb:06:cc:dc:96:48:cb:0f:43:fa:8f:fd:11:db:e1: 96:67:02:2f:fb:03:4f:42:b5:3e:6f:eb:7e:42:41: c2:8a:c1:7a:40:14:b4:01:18:5a:00:79:37:93:c8: 13:1e:2b:93:1d:2f:58:86:2c:6b:92:12:d4:27:be: 13:2b:cd:64:7d:fa:3b:3c:20:6f:7c:c9:71:39:1d: 17:61:45:d0:e8:27:d1:19:f8:ad:64:56:8f:84:f9: 94:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0A:1B:E6:E1:7C:1E:C6:B6:C7:0F:D5:A6:80:AF:01:4F:BE:3A:CB X509v3 Authority Key Identifier: keyid:7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/UQob5uF8Hsa2xw_VpoCvAU--Oss.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.172.0/22 46.231.8.0/21 85.95.32.0/19 91.209.142.0/24 91.214.228.0/22 151.249.64.0/20 185.44.248.0/22 185.113.0.0/22 185.168.144.0/22 209.35.128.0/20 IPv6: 2a01:5640::/32 2a0d:ea00::/29 Signature Algorithm: sha256WithRSAEncryption 47:76:31:f5:0c:6a:1f:13:c4:7a:ba:80:21:fc:9a:a4:dc:ad: a2:23:77:ab:a3:b8:af:14:40:94:ee:a7:ae:0a:49:35:e0:c4: cd:ac:a3:c4:46:98:dc:66:3d:5a:96:ed:a5:68:f4:85:6a:86: 64:13:f5:eb:fc:37:af:13:02:99:9b:ca:be:2c:1f:e8:96:5f: 87:7e:54:09:44:ec:ac:bd:37:c3:51:0a:6e:cd:32:e0:6d:54: 6e:be:3e:84:10:b8:63:cf:8d:2f:36:8d:2c:5b:75:aa:89:22: e6:f4:56:bb:49:b6:ba:d7:36:ad:04:9b:04:a3:9d:5b:4d:d6: 13:40:ad:7e:0c:be:af:39:c2:b0:6f:18:02:c0:2b:a2:85:b9: db:93:86:f7:21:03:ce:26:82:5d:77:85:08:df:a0:90:5e:eb: 17:3c:6e:d4:a9:c4:4a:9a:10:1b:fc:f0:77:e3:26:41:16:4f: 01:a9:b4:16:69:5a:e5:0a:80:28:69:d1:11:43:1c:3e:21:29: 35:4f:dc:54:3f:dc:a1:f3:31:d2:be:f0:68:ec:64:43:7a:06: 3c:48:5f:8b:c3:f6:a5:b3:37:1b:00:72:a3:f7:68:dc:b5:48: 0b:da:a7:03:4f:c7:7f:b5:21:79:da:7f:02:29:73:15:bb:f4: d2:77:e5:ff -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgISAZr+0lkhBqZojvUbJn4+0gYOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNDVhOWEwMzUzYTMzYzZhNGY5MzYwOGY5ZDI1ZjI3Yzg1 OTQ4YjcwHhcNMjUxMjA4MTYzNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTBhMWJlNmUxN2MxZWM2YjZjNzBmZDVhNjgwYWYwMTRmYmUzYWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3k5bwO+uo2LUn2AuHjqAbX4OOsH0 wTqrGNPHwAXUNwSjiN4EKDJt86MREtq5oWVja9WSohpazERVfzxxzmb3L/WUHu4C +BYQVJFOO8sfBOxSRWgoSB4HYca8qPZkNif3x3SpNWbMwDMxc8Ymo2kQdsPbFfYC Dq9TaEGc2myY2wqCVQuxSvRwZdOpLyXk1prF6+Fpra/biFi2I/OG/Xj5eHQgFKy7 BszclkjLD0P6j/0R2+GWZwIv+wNPQrU+b+t+QkHCisF6QBS0ARhaAHk3k8gTHiuT HS9YhixrkhLUJ74TK81kffo7PCBvfMlxOR0XYUXQ6CfRGfitZFaPhPmUWwIDAQAB o4ICVTCCAlEwHQYDVR0OBBYEFFEKG+bhfB7GtscP1aaArwFPvjrLMB8GA1UdIwQY MBaAFH5FqaA1OjPGpPk2CPnSXyfIWUi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmtXcG9EVTZNOGFrLVRZSS1kSmZKOGhaU0xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9kZDdiZWItNmY3OC00MTliLTk1N2Qt MzdhNjBjMzM1YTVkLzEvVVFvYjV1RjhIc2EyeHdfVnBvQ3ZBVS0tT3NzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9kZDdiZWItNmY3OC00MTliLTk1N2QtMzdhNjBjMzM1YTVk LzEvZmtXcG9EVTZNOGFrLVRZSS1kSmZKOGhaU0xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBCBAIAATA8AwQCBYWsAwQD LucIAwQFVV8gAwQAW9GOAwQCW9bkAwQEl/lAAwQCuSz4AwQCuXEAAwQCuaiQAwQE 0SOAMBQEAgACMA4DBQAqAVZAAwUDKg3qADANBgkqhkiG9w0BAQsFAAOCAQEAR3Yx 9QxqHxPEerqAIfyapNytoiN3q6O4rxRAlO6nrgpJNeDEzayjxEaY3GY9WpbtpWj0 hWqGZBP16/w3rxMCmZvKviwf6JZfh35UCUTsrL03w1EKbs0y4G1Ubr4+hBC4Y8+N LzaNLFt1qoki5vRWu0m2utc2rQSbBKOdW03WE0Ctfgy+rznCsG8YAsArooW525OG 9yEDziaCXXeFCN+gkF7rFzxu1KnESpoQG/zwd+MmQRZPAam0Fmla5QqAKGnREUMc PiEpNU/cVD/cofMx0r7waOxkQ3oGPEhfi8P2pbM3GwByo/do3LVIC9qnA0/Hf7Uh edp/AilzFbv00nfl/w== -----END CERTIFICATE-----Generated at Mon Dec 15 00:28:58 2025 by rpki-client