This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/ubyCwlbzRZL2KOZ8mPfUrz1r_jE.roa File: ubyCwlbzRZL2KOZ8mPfUrz1r_jE.roa (raw, json) Hash identifier: N6l9QQBfT9lRXE69A3z5oJoeQofQ/m4QO9akh+rSPFY= Subject key identifier: B9:BC:82:C2:56:F3:45:92:F6:28:E6:7C:98:F7:D4:AF:3D:6B:FE:31 Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b Certificate serial: 019A91F5D1D517F4814AEE10DC998ACDAE4A Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/ubyCwlbzRZL2KOZ8mPfUrz1r_jE.roa Signing time: Mon 17 Nov 2025 13:16:37 +0000 ROA not before: Mon 17 Nov 2025 13:16:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 143.223.99.0/24 maxlen: 24 185.98.168.0/24 maxlen: 24 185.98.169.0/24 maxlen: 24 185.98.170.0/24 maxlen: 24 185.98.171.0/24 maxlen: 24 205.147.24.0/24 maxlen: 24 205.147.25.0/24 maxlen: 24 212.104.214.0/24 maxlen: 24 212.104.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:91:f5:d1:d5:17:f4:81:4a:ee:10:dc:99:8a:cd:ae:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b Validity Not Before: Nov 17 13:16:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b9bc82c256f34592f628e67c98f7d4af3d6bfe31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c0:60:42:17:9b:89:37:b3:c1:e3:09:b9:c1: da:39:49:0f:8b:9f:aa:82:85:98:9b:c0:19:e9:cd: da:44:2b:e4:91:00:e9:7f:0b:ce:5c:ad:c0:1a:a8: 97:a0:b5:14:30:de:1c:21:9a:7b:80:ce:c0:a5:62: 66:a1:bb:f4:91:4a:42:76:fa:81:30:d5:41:d2:b2: 9a:0e:71:4b:27:e3:d5:24:31:15:f3:45:aa:6c:53: 0a:b9:06:71:54:4f:cb:c8:fa:41:72:f3:6b:e4:a3: bc:6a:65:91:e8:d4:50:51:3d:b1:27:9c:0e:9a:7c: 0b:bd:4d:4b:20:87:75:bc:5d:82:cd:02:3d:4c:6b: 7d:c3:b5:bf:49:5a:db:6e:81:66:83:6d:e5:12:eb: 27:f6:6b:e2:08:9e:44:6b:24:80:3b:a9:b0:98:58: 65:59:f5:45:92:fb:b8:ac:f7:d2:db:f1:d6:25:42: 7b:f9:8e:0e:fc:ea:fc:92:44:a7:85:77:a4:50:c3: 49:84:a7:34:cc:1d:64:c8:9e:7b:85:90:13:e1:f6: 22:be:b8:07:02:f6:79:2f:1c:ff:4e:cd:36:4a:be: 28:25:89:89:97:2b:4c:6b:29:87:e3:63:9a:17:b0: e9:7b:9d:9f:42:8e:bb:b3:1e:ec:c5:9e:d6:52:be: 92:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:BC:82:C2:56:F3:45:92:F6:28:E6:7C:98:F7:D4:AF:3D:6B:FE:31 X509v3 Authority Key Identifier: keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/ubyCwlbzRZL2KOZ8mPfUrz1r_jE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.223.99.0/24 185.98.168.0/22 205.147.24.0/23 212.104.214.0/23 Signature Algorithm: sha256WithRSAEncryption 77:ed:8c:24:d8:99:14:f7:c9:76:d2:e3:e4:6d:3d:56:00:17: 4c:0e:2d:43:d8:ad:ea:29:26:09:2f:fa:75:f1:03:6b:02:7c: 42:8d:66:d1:7a:88:e0:36:1c:cb:e8:28:7a:a3:34:f7:52:98: b3:d3:3c:a5:8f:86:2b:5d:6f:af:3b:cc:ad:64:71:95:78:16: 6c:48:a0:28:8e:7c:bd:08:2d:34:c5:75:dc:04:13:7d:2b:85: a8:3f:c9:75:a7:f6:b8:3d:ba:ca:76:1c:ef:c3:4c:aa:de:30: 2f:6c:40:17:6e:a1:a3:64:65:c5:c7:b9:a2:88:93:30:af:c5: 18:d0:64:1f:68:fa:fc:fc:c6:b1:10:db:d5:c2:ac:7e:4b:c9: 3c:5e:f0:dd:6f:b8:cf:01:87:01:80:fe:22:97:5b:d3:8d:69: 2b:ec:64:6c:8c:71:3a:32:2d:4b:13:9f:dd:31:c6:2e:cb:01: 3d:89:4f:25:0d:a1:e0:a9:f1:e1:ab:5f:b8:07:c7:43:94:b6: a8:0b:7b:ce:6e:a1:52:33:a0:d1:db:d0:d7:6c:23:dd:0c:87: 69:63:27:f6:3b:03:c2:03:7a:ae:69:48:df:66:75:37:e9:4d: da:70:87:8e:84:87:d0:37:54:fd:40:f0:de:4b:dd:89:05:86: 8b:09:f4:6b -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZqR9dHVF/SBSu4Q3JmKza5KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNTc2ZDg3NmUxN2U2N2FhM2IxZjFjMTBkYWIzOWRiMjkz NWUyMmIwHhcNMjUxMTE3MTMxNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWJjODJjMjU2ZjM0NTkyZjYyOGU2N2M5OGY3ZDRhZjNkNmJmZTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMBgQhebiTezweMJucHaOUkPi5+q goWYm8AZ6c3aRCvkkQDpfwvOXK3AGqiXoLUUMN4cIZp7gM7ApWJmobv0kUpCdvqB MNVB0rKaDnFLJ+PVJDEV80WqbFMKuQZxVE/LyPpBcvNr5KO8amWR6NRQUT2xJ5wO mnwLvU1LIId1vF2CzQI9TGt9w7W/SVrbboFmg23lEusn9mviCJ5EaySAO6mwmFhl WfVFkvu4rPfS2/HWJUJ7+Y4O/Or8kkSnhXekUMNJhKc0zB1kyJ57hZAT4fYivrgH AvZ5Lxz/Ts02Sr4oJYmJlytMaymH42OaF7Dpe52fQo67sx7sxZ7WUr6S/wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLm8gsJW80WS9ijmfJj31K89a/4xMB8GA1UdIwQY MBaAFM1XbYduF+Z6o7HxwQ2rOdspNeIrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelZkdGgyNFg1bnFqc2ZIQkRhczUyeWsxNGlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS80MmYwMTQtY2Q5Mi00MjA1LWFhNTMt MWE4MGEyZjdkN2VhLzEvdWJ5Q3dsYnpSWkwyS09aOG1QZlVyejFyX2pFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS80MmYwMTQtY2Q5Mi00MjA1LWFhNTMtMWE4MGEyZjdkN2Vh LzEvelZkdGgyNFg1bnFqc2ZIQkRhczUyeWsxNGlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAj99jAwQC uWKoAwQBzZMYAwQB1GjWMA0GCSqGSIb3DQEBCwUAA4IBAQB37Ywk2JkU98l20uPk bT1WABdMDi1D2K3qKSYJL/p18QNrAnxCjWbReojgNhzL6Ch6ozT3Upiz0zylj4Yr XW+vO8ytZHGVeBZsSKAojny9CC00xXXcBBN9K4WoP8l1p/a4PbrKdhzvw0yq3jAv bEAXbqGjZGXFx7miiJMwr8UY0GQfaPr8/MaxENvVwqx+S8k8XvDdb7jPAYcBgP4i l1vTjWkr7GRsjHE6Mi1LE5/dMcYuywE9iU8lDaHgqfHhq1+4B8dDlLaoC3vObqFS M6DR29DXbCPdDIdpYyf2OwPCA3quaUjfZnU36U3acIeOhIfQN1T9QPDeS92JBYaL CfRr -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:10 2025 by rpki-client