This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UNnIL3lg_h7YOTNMwvu3-uG-HyU.roa File: UNnIL3lg_h7YOTNMwvu3-uG-HyU.roa (raw, json) Hash identifier: FyY/9gK9PqH59ReQD8epKAydx8YBwhZN/gHOo/Ky1B4= Subject key identifier: 50:D9:C8:2F:79:60:FE:1E:D8:39:33:4C:C2:FB:B7:FA:E1:BE:1F:25 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A95B9E10124C0196E632A968B8135416E Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UNnIL3lg_h7YOTNMwvu3-uG-HyU.roa Signing time: Tue 18 Nov 2025 06:49:38 +0000 ROA not before: Tue 18 Nov 2025 06:49:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214083 IP address blocks: 151.244.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:95:b9:e1:01:24:c0:19:6e:63:2a:96:8b:81:35:41:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 18 06:49:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=50d9c82f7960fe1ed839334cc2fbb7fae1be1f25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:44:4d:2b:e4:d2:1e:cc:39:ea:0d:d7:03:ae: cd:82:9e:5f:37:72:6e:7b:36:ef:1a:b0:d1:c3:1d: 46:bd:b6:d9:4f:64:a9:48:a3:2c:77:94:cb:5b:ed: ba:0d:0d:28:b4:7e:d7:88:bd:9b:09:44:ac:41:ec: 87:e4:56:55:71:b5:5c:20:ac:25:53:a7:64:a8:3b: 2e:5c:88:8d:14:d1:03:11:7c:7d:73:3f:3a:c0:d4: 66:62:2d:82:a2:cf:3c:42:71:f1:ed:0f:5d:ab:f7: fe:9d:1e:33:95:14:52:96:6e:48:a8:1a:5e:32:9e: a5:d6:d2:ee:58:6c:a7:e6:0c:e8:78:af:a5:5e:2c: c3:00:c6:6e:f3:2d:42:b8:b9:b2:1a:c4:a1:29:63: 75:ef:3f:73:de:ae:cb:7f:fe:c6:b6:02:7c:ba:c3: 0a:a5:63:d5:23:72:cc:bd:43:bb:78:bd:b8:3a:22: 0e:7d:d9:9a:15:38:e6:20:aa:12:08:fa:6f:5c:d4: 28:3e:5c:e8:16:07:8a:d0:98:6a:88:0b:b8:d5:d9: 31:73:ae:a1:b0:9a:4e:49:12:a3:30:0a:41:70:90: aa:4a:58:92:f4:0c:66:d6:b1:8b:4f:4b:9e:7b:23: e6:69:ff:a9:fd:4b:f9:c8:ff:b6:f4:82:7e:2e:da: 07:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D9:C8:2F:79:60:FE:1E:D8:39:33:4C:C2:FB:B7:FA:E1:BE:1F:25 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UNnIL3lg_h7YOTNMwvu3-uG-HyU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.244.85.0/24 Signature Algorithm: sha256WithRSAEncryption 29:c2:5e:b2:6d:c0:f8:1e:2f:0a:1d:13:d7:13:57:82:e9:8c: be:17:09:58:e9:d6:5b:c9:57:32:97:6f:40:6b:70:b6:6f:ca: ae:0b:bc:69:49:46:ee:28:bd:77:06:67:45:7e:06:46:53:39: 9e:9d:39:2d:6f:58:25:79:2a:9a:1c:21:74:f2:19:77:be:de: 69:8f:66:a0:9d:5e:91:07:c6:62:7a:bf:55:9a:98:85:22:74: 09:0e:bf:82:bf:39:f9:6d:e5:64:1e:eb:9e:40:6b:e6:4f:b8: 14:a9:aa:a8:37:8a:ba:7b:4f:6c:78:cb:fb:9c:99:c9:d5:fc: 8a:6f:e2:4a:90:8b:c6:b1:ec:00:1e:72:95:04:a9:f5:0b:28: 9a:0a:4e:8f:dc:fd:34:2a:1a:67:25:f6:35:35:03:7d:3b:d4: 14:28:99:d1:81:c8:0e:85:8c:3d:4a:4c:5b:02:d6:5e:7d:64: 70:36:f0:a6:37:1c:aa:37:69:f3:23:02:e2:20:ed:3b:86:35: 24:fe:10:5c:68:4b:0d:54:91:33:f5:ec:0a:e6:be:f3:49:90: 95:ba:9d:19:13:84:b5:63:4f:d9:9a:d5:10:b9:06:60:41:41: 5f:a5:a8:ac:0b:a0:ff:c9:03:1a:ff:f6:42:28:e7:de:8f:69: 60:7f:a0:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqVueEBJMAZbmMqlouBNUFuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTE4MDY0OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGQ5YzgyZjc5NjBmZTFlZDgzOTMzNGNjMmZiYjdmYWUxYmUxZjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0RNK+TSHsw56g3XA67Ngp5fN3Ju ezbvGrDRwx1GvbbZT2SpSKMsd5TLW+26DQ0otH7XiL2bCUSsQeyH5FZVcbVcIKwl U6dkqDsuXIiNFNEDEXx9cz86wNRmYi2Cos88QnHx7Q9dq/f+nR4zlRRSlm5IqBpe Mp6l1tLuWGyn5gzoeK+lXizDAMZu8y1CuLmyGsShKWN17z9z3q7Lf/7GtgJ8usMK pWPVI3LMvUO7eL24OiIOfdmaFTjmIKoSCPpvXNQoPlzoFgeK0JhqiAu41dkxc66h sJpOSRKjMApBcJCqSliS9Axm1rGLT0ueeyPmaf+p/Uv5yP+29IJ+LtoH6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFDZyC95YP4e2DkzTML7t/rhvh8lMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvVU5uSUwzbGdfaDdZT1ROTXd2dTMtdUctSHlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/RVMA0G CSqGSIb3DQEBCwUAA4IBAQApwl6ybcD4Hi8KHRPXE1eC6Yy+FwlY6dZbyVcyl29A a3C2b8quC7xpSUbuKL13BmdFfgZGUzmenTktb1gleSqaHCF08hl3vt5pj2agnV6R B8Zier9VmpiFInQJDr+Cvzn5beVkHuueQGvmT7gUqaqoN4q6e09seMv7nJnJ1fyK b+JKkIvGsewAHnKVBKn1CyiaCk6P3P00KhpnJfY1NQN9O9QUKJnRgcgOhYw9Skxb AtZefWRwNvCmNxyqN2nzIwLiIO07hjUk/hBcaEsNVJEz9ewK5r7zSZCVup0ZE4S1 Y0/ZmtUQuQZgQUFfpaisC6D/yQMa//ZCKOfej2lgf6Dx -----END CERTIFICATE-----Generated at Wed Dec 3 09:42:31 2025 by rpki-client